$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f703b6fa-d347-3d69-99ef-19d2f4364307.roa File: f703b6fa-d347-3d69-99ef-19d2f4364307.roa (raw, json) Hash identifier: 5fJTaiMKHG/LwMY+A4s6T3ThQT6XhS8yFkZbFa2a2mg= Subject key identifier: 37:45:51:85:E7:C7:9B:6E:D1:3C:40:8B:CD:E6:25:FD:16:F9:9D:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ED4FDB1C1B011AE5D1EB7D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f703b6fa-d347-3d69-99ef-19d2f4364307.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 16625 IP address blocks: 173.222.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:db:1c:1b:01:1a:e5:d1:eb:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=8749b417-d53c-4356-b84f-f8f727d9d6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:34:16:fa:41:5a:1f:8e:ca:db:a1:aa:c5:02: 21:31:08:5b:a4:84:e8:ab:d9:45:74:eb:da:b3:5d: 8d:5f:4a:2a:b2:a5:74:48:de:48:13:aa:e6:61:00: 6c:e6:bf:34:2f:65:b5:7a:44:51:f3:28:b6:3e:74: 2c:36:36:74:46:95:da:18:7e:d3:be:ba:91:41:07: 18:c5:f5:d6:40:b3:4c:ef:ac:bb:91:26:21:d5:2e: 88:ad:69:78:76:ba:26:88:ea:12:e5:d2:9e:2b:c0: c5:1f:02:ab:70:4b:a4:18:b6:91:e9:26:be:e4:a1: ad:48:a9:9f:6d:35:28:d2:b1:08:0d:5b:df:98:27: 9b:4d:dc:53:c1:fb:56:5b:33:40:12:d2:33:b0:1f: d9:48:63:e3:f8:5a:31:fb:64:11:45:6a:94:25:78: f2:dd:16:ce:d0:49:8f:5c:78:d2:3d:61:df:a9:f0: ac:36:4f:bc:3b:59:ad:a3:e0:6e:6e:14:69:35:f8: 6d:f4:34:b7:cf:17:64:a6:99:0e:2f:d2:6f:c9:03: d9:4a:42:5c:39:c6:5c:9b:f4:c4:ee:7a:31:75:c4: e9:e0:4f:9c:24:16:6d:de:48:94:2d:fe:cf:1a:3a: 90:a5:42:9b:a6:b3:ec:1f:16:14:6b:f2:4d:ee:0b: 39:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:45:51:85:E7:C7:9B:6E:D1:3C:40:8B:CD:E6:25:FD:16:F9:9D:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f703b6fa-d347-3d69-99ef-19d2f4364307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:8b:85:7a:75:9e:3c:22:91:7f:27:b6:5c:02:7e:23:6e:40: 86:9c:6b:87:86:7b:85:29:47:84:be:5c:fe:16:92:a2:02:81: 0d:7d:c4:68:f6:34:1f:7e:0e:f9:43:dd:8e:05:db:5e:21:88: 42:b7:88:36:9d:28:06:56:e1:6b:91:84:62:c0:f6:3e:75:dc: 07:4b:bc:03:78:8c:a0:83:b0:6b:47:f9:81:65:97:fd:81:b4: 4a:44:8b:71:5b:e1:c4:11:55:39:35:cb:40:6f:6c:f8:88:42: 31:46:f4:9e:f2:81:94:86:14:f3:9e:34:f6:64:0d:b2:d8:54: bb:81:35:18:ab:17:61:20:06:29:71:a4:c3:0d:33:25:ef:71: 1b:01:3d:af:d2:40:fa:3f:79:fa:23:0e:c7:7d:3b:ef:0f:32: 48:b3:39:e5:5c:46:ae:13:f6:ec:79:95:f3:b7:39:2e:50:55: 51:56:10:fc:5a:50:b3:23:10:13:99:05:88:6a:a6:b1:04:f6: 93:ba:ff:e2:29:ed:2b:a7:78:c7:d1:98:ac:f6:5c:67:40:00: fc:28:c3:5b:82:3c:a6:57:6c:c6:ba:5a:64:e5:e3:d7:a0:79: 78:09:ff:f0:57:73:46:54:0f:f6:72:34:17:a6:d0:ce:9d:70: dc:8b:c1:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT9scGwEa5dHrfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk ODc0OWI0MTctZDUzYy00MzU2LWI4NGYtZjhmNzI3ZDlkNmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDQW+kFaH47K26GqxQIhMQhbpIToq9lFdOva s12NX0oqsqV0SN5IE6rmYQBs5r80L2W1ekRR8yi2PnQsNjZ0RpXaGH7TvrqRQQcY xfXWQLNM76y7kSYh1S6IrWl4dromiOoS5dKeK8DFHwKrcEukGLaR6Sa+5KGtSKmf bTUo0rEIDVvfmCebTdxTwftWWzNAEtIzsB/ZSGPj+Fox+2QRRWqUJXjy3RbO0EmP XHjSPWHfqfCsNk+8O1mto+BubhRpNfht9DS3zxdkppkOL9JvyQPZSkJcOcZcm/TE 7noxdcTp4E+cJBZt3kiULf7PGjqQpUKbprPsHxYUa/JN7gs5twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdFUYXnx5tu0TxAi83mJf0W+Z0kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjcwM2I2ZmEtZDM0Ny0z ZDY5LTk5ZWYtMTlkMmY0MzY0MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaLhXp1njwikX8ntlwCfiNuQIaca4eGe4UpR4S+XP4WkqICgQ19xGj2 NB9+DvlD3Y4F214hiEK3iDadKAZW4WuRhGLA9j513AdLvAN4jKCDsGtH+YFll/2B tEpEi3Fb4cQRVTk1y0BvbPiIQjFG9J7ygZSGFPOeNPZkDbLYVLuBNRirF2EgBilx pMMNMyXvcRsBPa/SQPo/efojDsd9O+8PMkizOeVcRq4T9ux5lfO3OS5QVVFWEPxa ULMjEBOZBYhqprEE9pO6/+Ip7SuneMfRmKz2XGdAAPwow1uCPKZXbMa6WmTl49eg eXgJ//BXc0ZUD/ZyNBem0M6dcNyLweg= -----END CERTIFICATE-----Generated at Sat Jun 7 13:57:25 2025 by rpki-client