$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa File: 4df6fcae-809c-334c-948c-a1db49d80779.roa (raw, json) Hash identifier: hRFBPJ14+Jy4nOx90YSx7qeO/cCouUVXfLkTEawXi+s= Subject key identifier: CD:60:76:FE:5C:26:4D:C1:D5:69:D4:C2:5C:F4:C7:56:7A:88:BD:51 Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e Certificate serial: 010D0C9F4328584A374ADEE3591FFB56FDBCD380 Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 62952 IP address blocks: 172.82.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:de:e3:59:1f:fb:56:fd:bc:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=f69bef0e-d4b4-4603-a276-59c6de729d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:55:b9:d2:81:23:6d:8d:24:7b:1c:76:3e:c1: 41:de:a9:b6:21:4a:40:bd:35:9b:e9:99:62:6b:09: 67:26:fd:08:6c:cd:57:83:62:e7:52:57:99:14:43: f5:f0:92:f4:b5:c3:fe:07:de:e0:85:01:ff:d5:f6: 60:8f:35:0c:96:db:1a:0a:59:7b:e6:56:1d:12:3f: d5:7c:96:17:8a:af:94:ab:a2:16:a0:83:45:8e:e5: a5:7b:b5:37:c5:93:da:57:4a:69:be:79:5f:d5:9f: 73:56:13:36:89:14:6c:50:69:69:57:50:66:ac:ee: 4e:10:ac:a7:d5:a9:79:ed:32:49:ff:0c:81:a4:32: 2f:2c:fb:6a:57:ed:e2:f7:2c:34:86:c2:68:a1:49: a6:17:a3:f0:c1:b2:5e:8b:a3:84:a4:56:ed:a6:fd: 37:d7:46:6d:aa:e1:b7:91:0f:79:87:92:12:89:e1: 20:f6:79:dd:a2:7c:ae:80:19:fe:56:db:43:d4:ff: 5c:ba:65:bf:c9:ad:6a:d7:80:b2:fb:be:02:a2:72: df:24:e5:a8:67:fe:39:0f:1e:00:90:08:8d:70:de: 38:41:ae:98:31:2d:e0:d4:4e:74:0f:6c:9f:3b:d2: 6d:0e:75:0b:19:aa:50:49:cf:9f:d7:cc:0d:3e:e0: 32:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:60:76:FE:5C:26:4D:C1:D5:69:D4:C2:5C:F4:C7:56:7A:88:BD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl X509v3 Authority Key Identifier: keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer sbgp-ipAddrBlock: critical IPv4: 172.82.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:20:db:43:41:9b:7a:4d:c4:a1:ea:d5:67:d2:7c:26:a9:e9: 0a:00:18:7b:13:1d:1a:cf:1c:14:a3:f7:5e:41:03:2b:e6:c0: fd:ad:aa:e6:16:ab:67:f2:2b:fb:4e:0d:35:49:5c:7f:d1:30: 09:f8:85:79:67:e5:b7:9a:61:bc:f5:73:75:4c:b1:39:62:98: 17:af:d9:7a:9a:7a:83:65:a9:d9:22:3e:6f:d2:42:2a:9a:a5: 49:24:c0:83:e5:4d:e7:7d:96:26:cc:72:55:f4:4a:c3:b9:9b: 35:22:49:64:12:68:06:f8:1b:11:08:1f:c8:9e:71:c8:b2:64: 01:a3:e2:83:26:62:45:e4:af:2e:24:18:74:55:dc:2b:f2:3e: a4:e0:c1:f9:5e:76:b3:33:d9:26:bb:02:fb:6d:a8:c1:1c:6a: 4d:68:eb:f6:44:07:1a:1e:0d:27:13:fa:33:e0:bb:74:c2:41: ba:75:48:45:d3:db:f7:3d:0f:d9:ee:52:f6:ca:39:15:43:a9: 97:95:8c:24:5e:93:ee:e2:d4:f9:a8:e7:c1:bc:c1:b8:15:11: 6a:b9:f1:bd:38:e9:e1:8e:c5:b6:0e:92:1a:19:f8:21:61:34: 99:6b:9c:70:b1:a8:ac:d6:6e:2a:60:8e:35:a5:89:cd:4e:62: ad:1f:d8:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3St7jWR/7Vv2804AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3 OTFlMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZjY5YmVmMGUtZDRiNC00NjAzLWEyNzYtNTljNmRlNzI5ZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFW50oEjbY0kexx2PsFB3qm2IUpAvTWb6Zli awlnJv0IbM1Xg2LnUleZFEP18JL0tcP+B97ghQH/1fZgjzUMltsaCll75lYdEj/V fJYXiq+Uq6IWoINFjuWle7U3xZPaV0ppvnlf1Z9zVhM2iRRsUGlpV1BmrO5OEKyn 1al57TJJ/wyBpDIvLPtqV+3i9yw0hsJooUmmF6PwwbJei6OEpFbtpv0310ZtquG3 kQ95h5ISieEg9nndonyugBn+VttD1P9cumW/ya1q14Cy+74ConLfJOWoZ/45Dx4A kAiNcN44Qa6YMS3g1E50D2yfO9JtDnULGapQSc+f18wNPuAyuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1gdv5cJk3B1WnUwlz0x1Z6iL1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvNGRmNmZjYWUtODA5Yy0z MzRjLTk0OGMtYTFkYjQ5ZDgwNzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5 M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1 NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1 MWM0NTc5MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUg20NBm3pNxKHq1WfSfCap6QoAGHsTHRrPHBSj915BAyvmwP2tquYW q2fyK/tODTVJXH/RMAn4hXln5beaYbz1c3VMsTlimBev2XqaeoNlqdkiPm/SQiqa pUkkwIPlTed9libMclX0SsO5mzUiSWQSaAb4GxEIH8iecciyZAGj4oMmYkXkry4k GHRV3CvyPqTgwfledrMz2Sa7AvttqMEcak1o6/ZEBxoeDScT+jPgu3TCQbp1SEXT 2/c9D9nuUvbKORVDqZeVjCRek+7i1Pmo58G8wbgVEWq58b046eGOxbYOkhoZ+CFh NJlrnHCxqKzWbipgjjWlic1OYq0f2Lw= -----END CERTIFICATE-----Generated at Mon Jun 30 01:01:09 2025 by rpki-client