$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f23579f7-40df-33a8-a759-5728208dc52a.roa File: f23579f7-40df-33a8-a759-5728208dc52a.roa (raw, json) Hash identifier: sH/3aqg8ozFJLQTHF709qEpSHOoy5yO3vbCj5cM5yx0= Subject key identifier: B3:7B:11:85:C0:B2:D0:7C:AE:88:C6:31:B0:1C:14:93:24:FA:50:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849EA852D5084D01FC7DCE3A180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f23579f7-40df-33a8-a759-5728208dc52a.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 35994 IP address blocks: 72.246.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:2d:50:84:d0:1f:c7:dc:e3:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=84fdc80e-02ab-4fd4-a596-3d8e37ec0605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:d4:4f:df:f8:5c:1d:02:25:af:3f:a0:00: 92:f3:d3:c4:03:1b:74:22:93:3c:a5:c0:d9:8c:f0: fb:50:ad:f0:99:30:11:9c:07:c1:bd:e9:c6:1a:aa: 30:c4:bd:93:82:c9:84:2e:ce:fc:22:96:42:c2:ac: 31:7b:56:ef:83:41:4e:8d:2c:9d:b7:8c:a1:9f:37: 5c:4e:d4:68:bc:2d:6d:74:72:79:c9:31:34:fb:75: 63:bf:82:55:2b:23:37:ca:3e:f0:05:82:e1:13:02: c4:6c:f6:04:c7:1f:1a:2a:7f:31:04:09:72:12:30: ae:53:46:3f:17:a2:ba:fa:94:fc:39:e8:2e:b1:d7: fb:24:9f:20:47:c6:e7:89:71:27:c2:59:ce:47:90: 7e:b6:71:0f:0e:be:57:f0:e6:19:27:42:88:e8:fa: 1f:7f:2f:d9:d1:5e:3b:18:3c:6f:39:dd:42:d2:73: c5:39:4b:5e:df:c9:f1:37:ca:90:4c:72:7e:17:d9: f5:dc:f9:98:d4:01:14:18:ca:64:13:7e:41:d5:33: f8:86:a8:43:f1:7c:44:5a:df:6a:36:f6:0a:d4:22: c5:5e:12:c9:72:21:c7:41:4d:55:f4:7f:40:70:00: bb:3b:64:86:9a:d9:57:ca:d9:fa:44:82:3d:c7:a4: 9e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7B:11:85:C0:B2:D0:7C:AE:88:C6:31:B0:1C:14:93:24:FA:50:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f23579f7-40df-33a8-a759-5728208dc52a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1d:8f:40:a8:2d:e4:61:ed:92:40:50:f1:eb:f0:fd:9b:46: 9f:f7:9a:64:b1:58:3c:27:60:59:48:53:49:ac:cf:54:6f:67: d0:ae:52:b6:67:0b:58:3a:13:d4:4f:ac:ef:9b:12:5c:61:f6: 1f:af:9e:57:70:d1:4a:ae:bf:c8:aa:58:7d:72:28:13:5f:c1: 98:12:bb:8b:97:4f:f5:d1:cc:6f:70:90:b1:42:b8:5f:ae:b6: ab:2b:29:e1:59:09:30:c8:3c:d1:f0:59:91:ce:8f:0e:b5:9e: 79:06:43:79:4c:9d:d7:44:66:d2:6e:64:7e:27:a5:ba:ef:60: 56:ae:ec:cc:2b:be:72:cb:f8:49:7f:6f:9c:b9:27:e7:3a:90: 25:13:74:eb:d7:0f:6a:4e:60:22:84:b0:c7:8b:5a:eb:af:8a: 39:95:fd:24:08:e0:3a:71:cd:cc:57:21:53:28:29:7e:8e:ee: 2f:99:a1:61:13:46:7e:eb:e8:0b:a8:6a:07:42:c4:f0:d1:38: 95:cd:5a:51:e3:56:50:2d:89:61:ca:84:ab:82:2d:6d:8d:fa: db:2f:28:1c:17:d6:17:f0:85:c5:80:7e:1c:a8:c3:f8:81:55: df:1f:c3:06:3d:96:76:cb:04:90:29:62:6c:e9:81:37:67:81: c6:71:9c:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhS1QhNAfx9zjoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ODRmZGM4MGUtMDJhYi00ZmQ0LWE1OTYtM2Q4ZTM3ZWMwNjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuifUT9/4XB0CJa8/oACS89PEAxt0IpM8pcDZ jPD7UK3wmTARnAfBvenGGqowxL2TgsmELs78IpZCwqwxe1bvg0FOjSydt4yhnzdc TtRovC1tdHJ5yTE0+3Vjv4JVKyM3yj7wBYLhEwLEbPYExx8aKn8xBAlyEjCuU0Y/ F6K6+pT8Oegusdf7JJ8gR8bniXEnwlnOR5B+tnEPDr5X8OYZJ0KI6Poffy/Z0V47 GDxvOd1C0nPFOUte38nxN8qQTHJ+F9n13PmY1AEUGMpkE35B1TP4hqhD8XxEWt9q NvYK1CLFXhLJciHHQU1V9H9AcAC7O2SGmtlXytn6RII9x6Se4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLN7EYXAstB8rojGMbAcFJMk+lC2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjIzNTc5ZjctNDBkZi0z M2E4LWE3NTktNTcyODIwOGRjNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPYRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwdj0CoLeRh7ZJAUPHr8P2bRp/3mmSxWDwnYFlIU0msz1RvZ9CuUrZn C1g6E9RPrO+bElxh9h+vnldw0Uquv8iqWH1yKBNfwZgSu4uXT/XRzG9wkLFCuF+u tqsrKeFZCTDIPNHwWZHOjw61nnkGQ3lMnddEZtJuZH4npbrvYFau7MwrvnLL+El/ b5y5J+c6kCUTdOvXD2pOYCKEsMeLWuuvijmV/SQI4DpxzcxXIVMoKX6O7i+ZoWET Rn7r6AuoagdCxPDROJXNWlHjVlAtiWHKhKuCLW2N+tsvKBwX1hfwhcWAfhyow/iB Vd8fwwY9lnbLBJApYmzpgTdngcZxnGc= -----END CERTIFICATE-----Generated at Sat Jun 7 14:07:18 2025 by rpki-client