$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ad240be-05c6-37f6-8873-be547fec4c7d.roa File: 1ad240be-05c6-37f6-8873-be547fec4c7d.roa (raw, json) Hash identifier: YC/K4nz1un9Q/3enAlGlz8XFrf8ymQt5HZHzxOFk6iE= Subject key identifier: D7:3B:5C:97:F7:5E:C7:C9:75:D1:85:0C:AC:41:D4:D6:7E:78:B6:07 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9E092CB68FA8E5FBC3680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ad240be-05c6-37f6-8873-be547fec4c7d.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 63949 IP address blocks: 172.237.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:e0:92:cb:68:fa:8e:5f:bc:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=3c68bc1d-8c62-48a2-94f4-00beb50c2c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:a1:8b:f0:0c:76:63:99:3a:5e:a3:92:63: 16:36:8d:a9:aa:54:0d:69:38:7e:c9:90:eb:a8:bc: 4b:86:ce:69:55:62:1d:12:3c:11:09:4e:32:47:ef: bb:1f:9a:94:a0:6b:6c:52:88:c7:bf:d2:6f:7f:19: 2c:43:b5:e2:f0:58:c1:aa:f4:01:90:86:29:b9:9d: cb:5d:6d:24:4b:f1:c8:53:47:fa:87:27:13:41:f5: cb:b6:bf:c6:e6:c2:1d:a8:b1:f2:40:f8:e2:a6:82: 44:e2:81:e8:f8:a4:ef:d7:b3:94:40:e9:6c:12:3d: 5d:7a:ce:1e:25:8e:9f:2e:ab:26:51:85:48:2e:eb: f5:e8:42:35:27:ea:25:04:0f:9a:97:e0:7d:fd:a4: e3:d9:0d:4b:e4:42:54:45:1a:a8:5c:7c:fc:ea:ed: fd:10:23:0a:08:b6:3b:37:49:e3:e5:da:3a:7e:b6: 00:ff:37:6c:22:e5:80:fa:3b:40:3e:b5:d1:61:3b: a5:af:b2:38:c2:cd:20:08:93:dd:b6:40:8e:ab:23: d0:12:7d:a3:2a:0d:85:8e:e4:d9:eb:11:f1:ed:3e: c6:69:e0:94:9e:f2:97:6e:2c:37:ff:f9:39:ac:63: 76:46:df:14:75:6c:26:6b:49:18:b9:8f:13:97:22: 08:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3B:5C:97:F7:5E:C7:C9:75:D1:85:0C:AC:41:D4:D6:7E:78:B6:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ad240be-05c6-37f6-8873-be547fec4c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.237.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f6:d8:54:d9:61:60:f9:68:97:77:34:a8:b3:ac:50:12:eb: 5f:b9:88:2f:70:5a:97:fb:f8:c2:cf:07:79:89:76:5e:af:55: cf:41:8e:24:c6:f0:e5:bc:1c:c9:95:d2:a2:a0:55:93:cd:a0: 5d:56:35:c7:0d:97:f5:01:7c:12:06:9c:86:60:2c:b0:67:e8: 8b:c7:b3:96:e2:ce:c4:0a:81:b8:e0:25:b4:4c:3d:b9:d0:1e: 65:fe:0e:6f:b1:51:72:00:29:43:6d:19:b5:7f:5f:11:2c:46: 82:2d:10:45:d2:31:02:85:c7:e1:ee:5f:f8:1b:5e:fb:4d:29: 2a:0a:ec:36:66:4a:1b:81:1e:35:f9:c8:e6:6d:b4:72:1e:36: 71:37:36:5c:7d:3e:e3:e7:8d:f1:40:1c:6c:c8:db:52:17:41: 60:dd:e8:4a:61:c5:bd:71:71:0a:64:62:3b:5b:74:4d:c4:c9: 7f:ce:14:bb:2e:35:54:a6:e4:ef:68:d7:09:20:57:38:db:0d: ed:e6:0c:fe:87:79:0b:76:e1:af:50:57:95:bc:c4:83:bf:c4: d7:52:4c:05:5b:db:3d:e8:da:f2:27:6f:54:94:73:f3:8f:5e: 8e:14:6f:be:a9:a9:12:7f:85:c2:9d:45:85:4e:a8:9c:84:28: 18:00:5f:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6eCSy2j6jl+8NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk M2M2OGJjMWQtOGM2Mi00OGEyLTk0ZjQtMDBiZWI1MGMyYzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcmhi/AMdmOZOl6jkmMWNo2pqlQNaTh+yZDr qLxLhs5pVWIdEjwRCU4yR++7H5qUoGtsUojHv9JvfxksQ7Xi8FjBqvQBkIYpuZ3L XW0kS/HIU0f6hycTQfXLtr/G5sIdqLHyQPjipoJE4oHo+KTv17OUQOlsEj1des4e JY6fLqsmUYVILuv16EI1J+olBA+al+B9/aTj2Q1L5EJURRqoXHz86u39ECMKCLY7 N0nj5do6frYA/zdsIuWA+jtAPrXRYTulr7I4ws0gCJPdtkCOqyPQEn2jKg2FjuTZ 6xHx7T7GaeCUnvKXbiw3//k5rGN2Rt8UdWwma0kYuY8TlyIIUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc7XJf3XsfJddGFDKxB1NZ+eLYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWFkMjQwYmUtMDVjNi0z N2Y2LTg4NzMtYmU1NDdmZWM0YzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErO0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIP22FTZYWD5aJd3NKizrFAS61+5iC9wWpf7+MLPB3mJdl6vVc9BjiTG 8OW8HMmV0qKgVZPNoF1WNccNl/UBfBIGnIZgLLBn6IvHs5bizsQKgbjgJbRMPbnQ HmX+Dm+xUXIAKUNtGbV/XxEsRoItEEXSMQKFx+HuX/gbXvtNKSoK7DZmShuBHjX5 yOZttHIeNnE3Nlx9PuPnjfFAHGzI21IXQWDd6Ephxb1xcQpkYjtbdE3EyX/OFLsu NVSm5O9o1wkgVzjbDe3mDP6HeQt24a9QV5W8xIO/xNdSTAVb2z3o2vInb1SUc/OP Xo4Ub76pqRJ/hcKdRYVOqJyEKBgAX6Y= -----END CERTIFICATE-----Generated at Mon May 5 09:42:19 2025 by rpki-client