$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5829486-fe0d-303c-a36d-fd0d32e7f5a1.roa File: f5829486-fe0d-303c-a36d-fd0d32e7f5a1.roa (raw, json) Hash identifier: qxVX33u0ZC5i+WLzpR4UdZPdPpHM224eudlHG3Og4ww= Subject key identifier: EE:46:DA:5A:36:61:48:BA:01:6E:37:12:0A:94:C2:65:E0:DF:D5:E0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D594F61C13BE21CEF9252950 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5829486-fe0d-303c-a36d-fd0d32e7f5a1.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 36183 IP address blocks: 172.224.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f6:1c:13:be:21:ce:f9:25:29:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=e9babce8-93c6-4bfb-a91a-b91c44dc41d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6d:19:df:6d:62:71:1c:9f:0b:97:e5:fb:f3: 29:fc:16:13:28:fb:be:ff:56:6e:b9:de:bf:ef:69: 54:06:8b:af:90:f2:72:b2:9f:8d:96:e4:2c:52:65: 46:fe:b9:fd:b0:b7:ea:60:31:c6:40:bc:2b:3c:47: 90:9d:ce:91:3c:b3:72:7e:6a:f6:99:95:c3:07:0c: 6f:56:98:7c:1e:f7:6e:96:04:1e:0b:fa:35:b0:3c: 54:c1:a8:ef:45:ae:bc:09:fd:bf:23:5b:0b:84:cd: fc:48:c6:1f:48:44:c3:dd:bd:f2:22:d1:b4:b8:25: 18:1d:49:f1:76:2c:6f:78:41:61:0a:6c:f0:86:39: d5:a7:fa:cb:cd:82:25:6a:20:12:b2:4b:87:ae:3d: ff:6a:17:c5:41:4d:63:60:b5:35:65:a8:6b:37:e6: 3d:27:d2:31:06:0b:67:94:6b:67:c5:32:b7:92:1c: 8d:81:b0:52:3b:3f:36:c1:34:4d:c5:e1:b1:02:b0: d2:78:0c:90:d7:9f:ac:35:c1:db:67:27:1f:d7:1c: d0:e3:21:2c:e1:9d:0a:3b:86:72:c4:36:a6:0a:cb: e6:6e:ce:fb:ea:96:ad:e8:cc:f8:ed:1e:9c:78:5c: 4d:ad:e2:c2:b6:b2:17:58:b2:3b:f3:0b:8d:ae:7b: a0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:46:DA:5A:36:61:48:BA:01:6E:37:12:0A:94:C2:65:E0:DF:D5:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5829486-fe0d-303c-a36d-fd0d32e7f5a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:06:8d:13:89:89:57:79:3b:6a:ce:60:8a:92:d2:c1:3c:0b: ea:8b:f6:ab:a4:f0:97:8b:07:cf:57:d4:8b:6f:a4:02:12:cc: 1d:75:ec:c4:b1:64:55:90:3f:c1:15:24:5a:53:45:9a:63:08: 25:d9:18:f4:41:e3:97:49:75:09:6e:fb:7b:93:85:08:49:07: 8c:fd:0d:17:40:50:0e:e4:b0:29:96:c0:32:d3:36:f6:21:58: 37:1e:f0:7e:aa:cc:ff:d8:e5:ed:e6:2f:66:83:e9:13:b5:ca: d0:fa:00:40:c7:10:ef:53:10:8b:13:ea:a0:bd:1a:61:c5:ff: cf:5e:47:5d:03:b3:b2:09:a1:ee:a4:0f:3a:b8:75:1f:67:54: 29:30:ac:2d:26:9c:af:10:d9:4b:30:ff:18:62:5a:dd:e7:50: dd:96:b4:d4:7b:87:d8:83:7f:2f:79:77:0c:e3:c5:8a:41:dd: 41:a2:6c:eb:36:3e:df:4c:ab:be:44:91:a3:a3:a0:a8:fd:b8: 4d:41:5e:68:73:13:78:7a:e5:c2:26:b5:3e:46:e7:3c:69:68: 2d:f1:0a:47:58:b0:aa:95:41:98:0b:2e:83:02:0f:e1:2d:0c: 23:b9:1c:15:1f:75:8b:7c:f6:0c:81:f1:b3:81:93:e4:39:49: b2:a2:b7:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlPYcE74hzvklKVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk ZTliYWJjZTgtOTNjNi00YmZiLWE5MWEtYjkxYzQ0ZGM0MWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG0Z321icRyfC5fl+/Mp/BYTKPu+/1Zuud6/ 72lUBouvkPJysp+NluQsUmVG/rn9sLfqYDHGQLwrPEeQnc6RPLNyfmr2mZXDBwxv Vph8HvdulgQeC/o1sDxUwajvRa68Cf2/I1sLhM38SMYfSETD3b3yItG0uCUYHUnx dixveEFhCmzwhjnVp/rLzYIlaiASskuHrj3/ahfFQU1jYLU1ZahrN+Y9J9IxBgtn lGtnxTK3khyNgbBSOz82wTRNxeGxArDSeAyQ15+sNcHbZycf1xzQ4yEs4Z0KO4Zy xDamCsvmbs776pat6Mz47R6ceFxNreLCtrIXWLI78wuNrnugUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5G2lo2YUi6AW43EgqUwmXg39XgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjU4Mjk0ODYtZmUwZC0z MDNjLWEzNmQtZmQwZDMyZTdmNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkGjROJiVd5O2rOYIqS0sE8C+qL9quk8JeLB89X1ItvpAISzB117MSx ZFWQP8EVJFpTRZpjCCXZGPRB45dJdQlu+3uThQhJB4z9DRdAUA7ksCmWwDLTNvYh WDce8H6qzP/Y5e3mL2aD6RO1ytD6AEDHEO9TEIsT6qC9GmHF/89eR10Ds7IJoe6k Dzq4dR9nVCkwrC0mnK8Q2Usw/xhiWt3nUN2WtNR7h9iDfy95dwzjxYpB3UGibOs2 Pt9Mq75EkaOjoKj9uE1BXmhzE3h65cImtT5G5zxpaC3xCkdYsKqVQZgLLoMCD+Et DCO5HBUfdYt89gyB8bOBk+Q5SbKit+Q= -----END CERTIFICATE-----Generated at Sat Jun 7 13:57:22 2025 by rpki-client