$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb35adda-9360-30fd-9a85-f978560c58b9.roa File: bb35adda-9360-30fd-9a85-f978560c58b9.roa (raw, json) Hash identifier: qCyceu1d5FMG/BvZmabQ9R52w5jmZoF3xuvbAk8Vbyo= Subject key identifier: 87:A6:C2:F9:52:F8:7C:61:4F:FA:B7:F9:BC:C0:91:19:03:94:41:35 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A51D07193CCF70F9A073D3D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb35adda-9360-30fd-9a85-f978560c58b9.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 63949 IP address blocks: 172.234.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:71:93:cc:f7:0f:9a:07:3d:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=8584db91-1518-4b0c-aec4-e4c789086fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:88:77:5b:a9:b9:c8:f8:87:0b:8a:76:19:52: 85:24:42:b7:fd:ab:aa:79:97:66:b0:3f:13:8f:29: f4:6d:1c:3d:2e:fc:2e:c3:ac:ea:13:cf:bb:94:32: 7a:cb:16:bb:b5:7a:0e:70:b8:29:44:43:89:ab:f3: 81:b3:9d:f9:34:46:0a:4c:6a:09:9e:59:bd:43:94: 61:cc:a1:24:ff:21:90:47:99:b7:cb:6a:79:a9:3e: 46:78:b9:f4:8b:23:02:5f:d7:0e:40:ef:f0:89:a3: cb:2a:fb:e9:d4:6f:ef:9a:5c:21:b9:36:85:8b:99: 1f:2a:1b:39:58:bc:66:b5:71:cb:a3:d6:49:36:f6: 08:56:34:bc:67:3d:92:49:39:1f:48:87:cd:9c:0c: 00:74:a8:42:a2:c2:27:5f:71:29:46:79:51:15:7e: c5:61:42:1d:1c:0c:83:2d:06:ee:00:50:3f:71:fe: c5:57:06:68:a7:fd:b0:20:80:35:0d:5f:91:34:72: 55:92:9f:f3:2f:04:8a:a4:ab:49:96:f4:4b:31:43: 48:82:8d:87:fe:5c:3c:05:c8:6d:21:0d:f7:1b:81: cd:fd:62:f0:34:df:90:dd:08:39:0f:42:5c:f3:cd: 09:b4:41:9c:88:40:08:11:a7:cc:02:88:d9:1e:10: 84:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A6:C2:F9:52:F8:7C:61:4F:FA:B7:F9:BC:C0:91:19:03:94:41:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb35adda-9360-30fd-9a85-f978560c58b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.234.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:7c:cd:09:58:1c:19:cf:0d:c0:71:34:f2:71:c5:8e:cf:3c: 73:90:cf:d4:1a:48:5e:e6:b3:30:a1:df:5b:95:f0:8f:15:59: c8:37:bc:ba:eb:ec:4e:ab:d6:4c:5c:f9:6a:22:ac:50:ca:2e: b5:01:ef:fa:4c:4e:a6:60:75:54:69:45:33:0a:c7:21:a1:86: 06:c3:cf:eb:5e:11:11:c5:e4:1b:d1:c9:37:7e:96:ad:50:74: c4:3b:dc:31:29:34:7b:8f:3b:b0:2c:4a:8b:c9:ec:12:ba:28: 4f:e5:d6:c8:c7:b7:ac:a8:15:60:40:51:40:ad:ed:82:5c:f5: 35:07:99:e7:eb:4b:fe:e0:fc:06:f7:34:c3:6a:db:a2:51:64: d9:ca:3d:52:d8:c9:78:53:54:7c:ef:ef:16:78:e8:7e:e2:3b: fc:ee:f1:c7:9c:3f:0a:80:0f:83:cb:89:8d:c6:98:cb:df:5b: 8f:a1:65:5f:fa:7e:d2:c9:2d:8a:e3:7d:94:31:46:c2:a7:be: 56:5a:54:29:31:ec:b0:0b:97:49:54:7e:5c:ba:1d:ed:17:4c: 01:45:c7:75:3a:da:5b:a5:58:56:eb:e7:47:9c:e3:04:12:f1: fb:d6:11:cc:e9:38:34:3a:e9:36:78:f8:6c:82:4f:10:d2:d3: bc:34:ef:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HGTzPcPmgc9PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk ODU4NGRiOTEtMTUxOC00YjBjLWFlYzQtZTRjNzg5MDg2ZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIh3W6m5yPiHC4p2GVKFJEK3/auqeZdmsD8T jyn0bRw9Lvwuw6zqE8+7lDJ6yxa7tXoOcLgpREOJq/OBs535NEYKTGoJnlm9Q5Rh zKEk/yGQR5m3y2p5qT5GeLn0iyMCX9cOQO/wiaPLKvvp1G/vmlwhuTaFi5kfKhs5 WLxmtXHLo9ZJNvYIVjS8Zz2SSTkfSIfNnAwAdKhCosInX3EpRnlRFX7FYUIdHAyD LQbuAFA/cf7FVwZop/2wIIA1DV+RNHJVkp/zLwSKpKtJlvRLMUNIgo2H/lw8Bcht IQ33G4HN/WLwNN+Q3Qg5D0Jc880JtEGciEAIEafMAojZHhCEpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIemwvlS+HxhT/q3+bzAkRkDlEE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmIzNWFkZGEtOTM2MC0z MGZkLTlhODUtZjk3ODU2MGM1OGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR8zQlYHBnPDcBxNPJxxY7PPHOQz9QaSF7mszCh31uV8I8VWcg3vLrr 7E6r1kxc+WoirFDKLrUB7/pMTqZgdVRpRTMKxyGhhgbDz+teERHF5BvRyTd+lq1Q dMQ73DEpNHuPO7AsSovJ7BK6KE/l1sjHt6yoFWBAUUCt7YJc9TUHmefrS/7g/Ab3 NMNq26JRZNnKPVLYyXhTVHzv7xZ46H7iO/zu8cecPwqAD4PLiY3GmMvfW4+hZV/6 ftLJLYrjfZQxRsKnvlZaVCkx7LALl0lUfly6He0XTAFFx3U62lulWFbr50ec4wQS 8fvWEczpODQ66TZ4+GyCTxDS07w07ys= -----END CERTIFICATE-----Generated at Tue Jul 1 02:34:44 2025 by rpki-client