$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a4f15f6-620d-363c-8255-f201008a3630.roa File: 1a4f15f6-620d-363c-8255-f201008a3630.roa (raw, json) Hash identifier: cpx37TOLj/xAW9anNkGejZeqsZ4htTlek/I/LX/jkbg= Subject key identifier: 90:A7:3D:AA:B5:FD:10:37:43:64:92:FB:D3:42:87:42:39:2C:68:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A427582BC43F562671F4F1E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a4f15f6-620d-363c-8255-f201008a3630.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 63949 IP address blocks: 172.235.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:82:bc:43:f5:62:67:1f:4f:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=0dac606a-4aa5-4381-a006-d0def105002b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:6f:a1:aa:6c:7b:48:00:f6:ac:a0:67:9c: 15:ab:eb:d2:89:cc:ec:92:9f:80:36:67:fa:42:bd: 66:a9:80:4c:c5:21:3d:9e:48:b9:e5:cd:69:76:8e: c3:e2:3f:3a:44:66:fb:77:f7:ae:05:cd:86:cd:93: d7:fe:2a:d1:d0:e1:e6:ff:dc:dc:d0:1f:ba:9e:ae: 78:34:67:e2:42:77:f2:47:c8:1a:a5:46:20:dd:82: 7c:7a:76:ba:3a:76:42:b7:d1:dc:60:91:69:4f:ed: b7:ec:01:da:98:31:c8:e2:ee:30:69:8e:90:c7:74: ff:0d:7d:19:31:67:8b:8c:97:68:f5:c8:2c:2f:97: 3d:30:15:8f:10:2f:18:52:ac:01:55:9a:fb:d1:e7: b3:14:9a:8d:b1:6a:dd:27:78:3b:85:e1:78:bf:3f: 86:e2:e8:b5:c6:ae:77:fc:82:fb:86:07:1d:ff:bc: ac:f6:d7:a2:98:93:34:3d:1f:d1:dc:f3:38:c1:77: e6:af:4c:42:9d:c9:d4:f1:d8:6e:09:4d:82:7e:2c: c6:3d:0b:00:8e:7a:c4:a7:90:ba:30:6f:be:0c:4e: 6d:10:06:7b:cb:36:bd:20:56:1f:8f:e3:c1:0c:40: 38:c4:3b:af:6d:cd:ec:cd:60:30:a5:7c:ff:76:8c: d8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A7:3D:AA:B5:FD:10:37:43:64:92:FB:D3:42:87:42:39:2C:68:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a4f15f6-620d-363c-8255-f201008a3630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:bc:fe:32:ab:0e:d9:e6:6e:4f:79:40:30:7c:35:1d:88:4a: 7d:a9:e5:8d:7a:3b:fa:64:f0:4f:4d:b7:a1:0d:6a:0b:c3:27: 79:7f:6b:43:b3:52:3a:97:7c:69:79:d8:c2:b5:47:73:42:8f: ef:5f:bc:6e:18:d5:14:31:f2:4e:47:89:df:6b:86:e3:40:22: 6e:8a:e0:50:b3:f4:d9:2b:34:8e:fb:f1:3b:0a:89:58:af:ec: ce:e3:e5:f3:64:7c:aa:a2:fc:ac:27:c6:92:7f:88:32:ac:f1: 92:85:f1:4f:13:ea:a8:6d:01:d0:ac:57:ed:18:ba:06:ee:de: 91:46:f2:69:87:a7:1b:6b:ee:45:0d:31:3a:9d:3d:90:ff:c9: 39:d7:0d:e3:4d:45:56:07:d4:14:0c:1e:45:04:6f:0a:ab:fe: 5b:5c:3e:91:42:0a:d2:76:49:28:f3:38:d6:6f:1d:25:a8:0d: 6b:f6:c0:99:9c:01:d8:45:30:ac:99:76:0e:b8:a2:c2:b1:a9: 00:b3:09:24:d8:90:77:ed:e5:c4:1e:94:95:9d:ca:cc:5c:d0: 4a:91:46:8e:c5:f9:3d:d0:61:73:87:e0:9d:0f:e9:2b:df:b8: 55:b6:68:c4:cf:8d:97:83:c9:dc:9a:e5:7e:95:9a:d6:32:53: 66:30:2e:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYK8Q/ViZx9PHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk MGRhYzYwNmEtNGFhNS00MzgxLWEwMDYtZDBkZWYxMDUwMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvVvoapse0gA9qygZ5wVq+vSiczskp+ANmf6 Qr1mqYBMxSE9nki55c1pdo7D4j86RGb7d/euBc2GzZPX/irR0OHm/9zc0B+6nq54 NGfiQnfyR8gapUYg3YJ8ena6OnZCt9HcYJFpT+237AHamDHI4u4waY6Qx3T/DX0Z MWeLjJdo9cgsL5c9MBWPEC8YUqwBVZr70eezFJqNsWrdJ3g7heF4vz+G4ui1xq53 /IL7hgcd/7ys9teimJM0PR/R3PM4wXfmr0xCncnU8dhuCU2CfizGPQsAjnrEp5C6 MG++DE5tEAZ7yza9IFYfj+PBDEA4xDuvbc3szWAwpXz/dozYdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCnPaq1/RA3Q2SS+9NCh0I5LGg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWE0ZjE1ZjYtNjIwZC0z NjNjLTgyNTUtZjIwMTAwOGEzNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE68/jKrDtnmbk95QDB8NR2ISn2p5Y16O/pk8E9Nt6ENagvDJ3l/a0Oz UjqXfGl52MK1R3NCj+9fvG4Y1RQx8k5Hid9rhuNAIm6K4FCz9NkrNI778TsKiViv 7M7j5fNkfKqi/KwnxpJ/iDKs8ZKF8U8T6qhtAdCsV+0Yugbu3pFG8mmHpxtr7kUN MTqdPZD/yTnXDeNNRVYH1BQMHkUEbwqr/ltcPpFCCtJ2SSjzONZvHSWoDWv2wJmc AdhFMKyZdg64osKxqQCzCSTYkHft5cQelJWdysxc0EqRRo7F+T3QYXOH4J0P6Svf uFW2aMTPjZeDydya5X6VmtYyU2YwLlg= -----END CERTIFICATE-----Generated at Sun Jun 29 13:23:55 2025 by rpki-client