$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01d529d6-49c8-3e32-a9db-bbdccc8fb798.roa File: 01d529d6-49c8-3e32-a9db-bbdccc8fb798.roa (raw, json) Hash identifier: 1fmCinSzKruUc5AeIWx4KIUbIbvoL3N5pxzqRjap6Hg= Subject key identifier: 6E:B4:B3:4F:49:D0:4B:96:70:20:2D:F0:51:7B:5F:40:56:AA:11:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7AFB3C8141946897554F40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01d529d6-49c8-3e32-a9db-bbdccc8fb798.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 63949 IP address blocks: 172.235.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:fb:3c:81:41:94:68:97:55:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=aa64954e-9dca-4ec6-a630-9af76e365c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:ed:4a:58:e1:3c:8c:fa:c6:7a:0f:86:4f: ba:ef:e0:0d:a8:b8:af:ce:6b:3a:ca:4d:b6:9f:97: fd:90:23:d9:c7:3a:9f:ab:5a:35:95:9b:10:cd:64: 57:00:87:cf:83:6b:a4:05:f8:63:f4:dd:f1:77:85: 0e:ce:7e:37:dc:e7:05:b4:c2:47:b6:43:e1:dc:15: 19:de:e5:5c:d4:c9:19:2d:6e:4a:60:cb:0b:ea:45: 7c:d4:9b:e0:fb:f2:48:a5:21:84:05:ec:2a:da:4c: 1c:23:21:09:a7:b0:c8:65:34:82:29:07:0d:89:e9: 38:75:db:c2:12:32:b6:b2:02:85:b2:66:78:99:fc: b4:31:03:40:a6:e5:8b:d0:dc:2e:e3:57:d1:45:11: 91:43:52:3d:51:eb:61:49:b2:ca:2c:99:eb:af:a4: 7e:dd:86:e8:b0:f0:29:db:88:90:e3:b6:fe:a7:c0: af:04:bb:6e:11:55:ca:8a:58:91:28:ff:71:77:7c: 8d:3a:2a:85:ce:5a:87:17:69:db:b7:84:8e:9c:fa: 62:5a:fb:56:eb:c9:84:12:a5:1f:78:b9:e6:20:56: 1d:7c:2b:7a:f5:74:e4:47:09:bb:6a:63:88:7e:fb: 1b:43:65:e7:ae:2d:09:6a:1c:97:01:40:2f:e9:7e: c4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B4:B3:4F:49:D0:4B:96:70:20:2D:F0:51:7B:5F:40:56:AA:11:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01d529d6-49c8-3e32-a9db-bbdccc8fb798.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:04:d4:f8:65:1d:29:10:95:51:b6:89:86:01:13:92:95:27: dd:11:ab:3c:c2:8a:b1:2b:bf:aa:b8:6b:a1:85:e7:d1:49:20: bd:8d:81:4a:de:8d:d0:bf:89:e3:e9:96:be:7f:5e:63:c3:ed: 0b:63:c6:a1:61:4e:7c:da:dc:64:de:30:b2:a4:19:ba:3b:ea: 45:57:ef:50:3d:47:e2:5d:6c:59:91:13:90:4e:d8:df:15:cb: 77:37:9d:5d:80:e5:16:2f:5f:d6:e1:a4:dc:d5:6d:df:36:09: e8:38:0e:22:48:25:40:f2:11:58:29:13:37:69:57:a5:46:5b: a1:0a:b9:01:86:1b:fc:e6:d8:54:6e:d1:05:73:35:bd:40:98: 67:dd:9c:74:4a:49:04:bc:28:ff:df:91:7a:0e:cd:b5:a7:81: fb:c0:aa:20:02:e0:ec:56:13:88:d6:37:44:49:9d:f9:d1:7d: f2:ab:b9:8e:e1:d4:ce:bf:81:3a:b8:43:3d:69:ff:53:fd:27: 80:f3:9c:fe:f6:42:02:fc:d2:75:ea:e3:01:94:0c:03:5a:cc: 50:e4:d9:b1:e5:ba:a9:24:f1:42:ec:3e:62:2d:2b:b3:18:7b: 52:7c:e8:64:a5:cf:50:db:a8:c1:79:83:ad:74:94:e1:bf:3d: 9e:52:84:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evs8gUGUaJdVT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YWE2NDk1NGUtOWRjYS00ZWM2LWE2MzAtOWFmNzZlMzY1YzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGDtSljhPIz6xnoPhk+67+ANqLivzms6yk22 n5f9kCPZxzqfq1o1lZsQzWRXAIfPg2ukBfhj9N3xd4UOzn433OcFtMJHtkPh3BUZ 3uVc1MkZLW5KYMsL6kV81Jvg+/JIpSGEBewq2kwcIyEJp7DIZTSCKQcNiek4ddvC EjK2sgKFsmZ4mfy0MQNApuWL0Nwu41fRRRGRQ1I9UethSbLKLJnrr6R+3YbosPAp 24iQ47b+p8CvBLtuEVXKiliRKP9xd3yNOiqFzlqHF2nbt4SOnPpiWvtW68mEEqUf eLnmIFYdfCt69XTkRwm7amOIfvsbQ2Xnri0JahyXAUAv6X7EwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG60s09J0EuWcCAt8FF7X0BWqhEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDFkNTI5ZDYtNDljOC0z ZTMyLWE5ZGItYmJkY2NjOGZiNzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACME1PhlHSkQlVG2iYYBE5KVJ90RqzzCirErv6q4a6GF59FJIL2NgUre jdC/iePplr5/XmPD7QtjxqFhTnza3GTeMLKkGbo76kVX71A9R+JdbFmRE5BO2N8V y3c3nV2A5RYvX9bhpNzVbd82Ceg4DiJIJUDyEVgpEzdpV6VGW6EKuQGGG/zm2FRu 0QVzNb1AmGfdnHRKSQS8KP/fkXoOzbWngfvAqiAC4OxWE4jWN0RJnfnRffKruY7h 1M6/gTq4Qz1p/1P9J4DznP72QgL80nXq4wGUDANazFDk2bHluqkk8ULsPmItK7MY e1J86GSlz1DbqMF5g610lOG/PZ5ShMc= -----END CERTIFICATE-----Generated at Sun Jun 29 12:26:35 2025 by rpki-client