$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20c9bcff-954c-3d54-8ad3-ef0ede456e8f.roa File: 20c9bcff-954c-3d54-8ad3-ef0ede456e8f.roa (raw, json) Hash identifier: /H0PAx4nFT2B5ZO+12h8nt92EEcMbXl4XSIqwEVG1tU= Subject key identifier: 55:2E:CD:BE:D4:FA:2B:B0:F5:28:A6:4F:34:A1:E2:8B:B5:01:51:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849B57A07E17A986CF9E838F160 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20c9bcff-954c-3d54-8ad3-ef0ede456e8f.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 63949 IP address blocks: 172.237.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:07:e1:7a:98:6c:f9:e8:38:f1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=16d3ef38-a11d-4ee5-a373-d6f24fad1cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:0a:74:f6:02:62:c9:d9:80:36:ee:14:c4: 5a:8f:34:9f:55:eb:89:05:fa:83:ce:53:8d:a0:2c: e0:5e:d1:5e:53:28:4b:c9:dc:58:d6:24:f7:ef:b3: 97:cb:fa:77:f6:0c:74:85:30:98:11:a7:d1:8a:d2: 7b:98:cd:7f:23:00:4c:e6:a6:35:f1:cb:10:69:a5: 78:d7:38:64:40:37:db:84:ed:ef:49:40:6c:a6:5e: d9:55:27:2b:8a:b2:b6:58:e8:f8:3c:6f:52:29:7d: ee:1c:27:73:94:32:31:46:29:37:46:d8:14:9b:4a: 61:b7:72:17:e8:c0:8d:91:2e:89:e5:54:e4:95:20: 4d:79:f3:1a:55:a1:96:a8:f3:98:5b:bc:86:e3:b8: 75:74:1e:8d:11:71:98:a1:33:c0:a6:ac:b0:0e:47: 83:6c:e8:39:ce:9a:a3:fb:f5:1b:dc:05:a5:18:41: 49:55:57:03:9b:6b:2a:48:25:68:cd:33:9e:18:f8: 50:e9:f5:94:b6:a6:dc:b2:3e:40:ec:f7:04:57:48: d1:9e:9d:47:ea:60:d9:ae:cb:60:7f:95:81:38:54: 0c:bb:ee:f8:ac:a3:8d:a8:3b:3c:d7:43:65:bb:d9: 35:0f:05:6a:39:de:65:54:e7:1a:be:aa:3a:54:8e: 6e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2E:CD:BE:D4:FA:2B:B0:F5:28:A6:4F:34:A1:E2:8B:B5:01:51:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20c9bcff-954c-3d54-8ad3-ef0ede456e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.237.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:01:40:1f:29:64:c1:fb:43:96:e8:5a:c6:af:39:2b:c4:e7: 2c:43:be:25:c0:c2:4f:94:5b:67:27:66:f3:e3:3f:73:56:93: 36:83:f8:bd:cd:9c:72:3f:b5:93:6a:74:db:a4:2c:49:fc:57: c7:b9:c7:a9:4c:cb:38:54:b5:ba:da:80:ec:5f:a5:d1:e9:60: 0c:4b:67:e2:ae:a5:3c:c7:ca:f8:15:3e:3b:82:6e:94:76:76: cf:e1:0c:04:d1:3d:b0:80:d6:51:35:13:44:8e:f6:c5:9d:30: 16:bc:c7:2b:1b:ad:9f:f1:ed:9c:07:5c:ce:fd:0c:1f:53:d8: 3b:08:44:c7:f3:15:a1:89:e5:fb:26:79:73:15:43:64:09:e7: ed:34:ad:64:1b:55:15:8d:4c:8f:b7:3e:b5:3f:95:44:9c:54: 9a:0f:73:15:3b:8b:21:27:c3:7b:4a:a9:96:ce:b7:8c:a1:b3: c7:94:4c:53:df:59:1b:12:65:44:ab:39:9f:df:97:58:8d:bd: c1:c6:f6:79:8f:a5:a5:e1:11:f7:ef:27:17:71:70:f2:8b:84: 20:75:e8:70:d5:21:8c:e3:e3:1d:97:3a:4d:08:4b:1c:29:1d: d9:de:ed:08:f8:8f:a0:6a:b2:bb:39:7a:4c:b6:ee:fc:16:0e: f0:31:ed:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1egfhephs+eg48WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk MTZkM2VmMzgtYTExZC00ZWU1LWEzNzMtZDZmMjRmYWQxY2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVYKdPYCYsnZgDbuFMRajzSfVeuJBfqDzlON oCzgXtFeUyhLydxY1iT377OXy/p39gx0hTCYEafRitJ7mM1/IwBM5qY18csQaaV4 1zhkQDfbhO3vSUBspl7ZVScrirK2WOj4PG9SKX3uHCdzlDIxRik3RtgUm0pht3IX 6MCNkS6J5VTklSBNefMaVaGWqPOYW7yG47h1dB6NEXGYoTPApqywDkeDbOg5zpqj +/Ub3AWlGEFJVVcDm2sqSCVozTOeGPhQ6fWUtqbcsj5A7PcEV0jRnp1H6mDZrstg f5WBOFQMu+74rKONqDs810Nlu9k1DwVqOd5lVOcavqo6VI5uCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUuzb7U+iuw9SimTzSh4ou1AVGqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjBjOWJjZmYtOTU0Yy0z ZDU0LThhZDMtZWYwZWRlNDU2ZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrO2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQBQB8pZMH7Q5boWsavOSvE5yxDviXAwk+UW2cnZvPjP3NWkzaD+L3N nHI/tZNqdNukLEn8V8e5x6lMyzhUtbragOxfpdHpYAxLZ+KupTzHyvgVPjuCbpR2 ds/hDATRPbCA1lE1E0SO9sWdMBa8xysbrZ/x7ZwHXM79DB9T2DsIRMfzFaGJ5fsm eXMVQ2QJ5+00rWQbVRWNTI+3PrU/lUScVJoPcxU7iyEnw3tKqZbOt4yhs8eUTFPf WRsSZUSrOZ/fl1iNvcHG9nmPpaXhEffvJxdxcPKLhCB16HDVIYzj4x2XOk0ISxwp Hdne7Qj4j6Bqsrs5eky27vwWDvAx7as= -----END CERTIFICATE-----Generated at Mon May 5 09:45:50 2025 by rpki-client