$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa File: f47e22f4-6e3a-3537-a1be-97f2fa802042.roa (raw, json) Hash identifier: q5FDAcl21aC/OdQTFXa/Ie2Z21wOuGdCc7R6x9HaOaI= Subject key identifier: 2A:06:81:AB:B3:04:98:DD:99:4F:0B:4D:76:19:44:CA:B0:49:13:2F Certificate issuer: /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Certificate serial: 010D0C9F4328584A43DAFFE32001CC4559453D80 Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 14618 IP address blocks: 172.86.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:da:ff:e3:20:01:cc:45:59:45:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=0ab237e7-2417-41e4-90f3-cf1aaabbf307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:3e:a4:0b:30:ed:63:5f:71:77:2e:5c:e8: 03:09:cd:0b:46:bb:de:c6:2f:7e:6d:12:41:bd:75: 29:d1:16:9e:75:fe:0e:4b:75:0e:7b:ab:7e:a9:a9: 10:bf:66:1e:f8:91:b6:1c:48:57:4e:d4:fd:17:8c: cb:68:0b:01:96:f6:ac:13:42:b9:09:d2:be:68:73: 00:ee:e4:da:02:57:a5:6a:b0:df:5a:22:db:91:f0: 6b:7a:db:58:87:d2:55:cf:d2:cc:4d:ae:d9:5a:70: 78:e8:35:71:a1:2f:aa:98:3d:f1:d2:55:9d:46:d9: 37:6d:3a:59:15:35:c1:0d:38:14:94:8f:6f:f6:ec: 34:36:18:39:8a:dd:2f:7b:09:13:03:7f:7c:2b:eb: 4a:85:bd:f1:85:14:41:84:45:17:da:30:25:94:e1: 2f:10:5c:8d:c9:c1:83:7a:e8:cf:c5:df:b9:2a:c5: a1:36:2c:74:99:9c:a6:c6:4b:cd:ae:3e:d6:8a:1c: c3:25:05:a7:b3:68:d5:8a:2a:6b:6b:25:e4:d2:15: c8:92:74:b1:f7:99:75:2e:31:0c:85:3a:ae:50:2e: cb:e0:34:49:1b:14:3d:92:fe:04:6b:d7:ac:46:1d: 1e:38:bd:0f:40:e8:b5:4b:3e:19:01:00:2d:01:fe: 95:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:06:81:AB:B3:04:98:DD:99:4F:0B:4D:76:19:44:CA:B0:49:13:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl X509v3 Authority Key Identifier: keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer sbgp-ipAddrBlock: critical IPv4: 172.86.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:8f:a3:a7:cf:6e:da:ea:55:98:1b:4a:29:9a:33:5f:5d:84: 70:a4:d8:dd:73:43:c6:d2:57:61:ac:f6:bf:66:eb:36:94:d2: aa:70:d4:26:29:14:5a:c3:bf:ba:85:bd:12:85:5b:8b:80:bd: 91:5a:54:4c:37:51:0f:e8:ca:13:32:67:fd:93:05:40:c4:a5: eb:29:8d:35:63:b1:09:5b:42:30:f8:a3:2e:db:ce:1e:79:ef: 70:e0:46:0a:a3:50:fc:2d:bb:d0:9f:98:fd:39:1f:c5:04:f3: 6e:1c:75:63:92:5c:3b:7e:7b:57:b9:54:8b:e6:d3:99:72:c3: 39:5a:62:c0:6e:b4:6b:55:3a:09:90:e7:cc:61:01:6d:11:a5: b8:a3:0d:3e:c1:6b:74:e1:b7:54:d4:31:ff:dc:f5:f9:42:3f: b2:e1:9c:d0:4e:6d:1b:d6:c9:ec:6c:50:87:f6:a9:e0:e0:3d: 85:b2:a0:93:a1:8b:77:d9:4c:fa:00:2e:bd:48:d3:b9:6c:28: 7b:20:27:f8:25:92:cc:da:65:73:d1:56:d0:a6:47:90:df:19: 40:3f:fc:52:7f:af:fd:94:a7:d3:76:02:e3:ab:66:d7:c1:72: 35:46:42:b5:f0:e4:e9:84:97:05:ce:1c:1b:4e:55:74:9b:fb: 33:9b:e9:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2v/jIAHMRVlFPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRjMzJjZGUtNzY5My00ZDEwLWFlMWUtOGI4ZTlkMzYz MDc0MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk MGFiMjM3ZTctMjQxNy00MWU0LTkwZjMtY2YxYWFhYmJmMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucA+pAsw7WNfcXcuXOgDCc0LRrvexi9+bRJB vXUp0Raedf4OS3UOe6t+qakQv2Ye+JG2HEhXTtT9F4zLaAsBlvasE0K5CdK+aHMA 7uTaAlelarDfWiLbkfBrettYh9JVz9LMTa7ZWnB46DVxoS+qmD3x0lWdRtk3bTpZ FTXBDTgUlI9v9uw0Nhg5it0vewkTA398K+tKhb3xhRRBhEUX2jAllOEvEFyNycGD eujPxd+5KsWhNix0mZymxkvNrj7WihzDJQWns2jViiprayXk0hXIknSx95l1LjEM hTquUC7L4DRJGxQ9kv4Ea9esRh0eOL0PQOi1Sz4ZAQAtAf6VcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoGgauzBJjdmU8LTXYZRMqwSRMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMz MmNkZS03NjkzLTRkMTAtYWUxZS04YjhlOWQzNjMwNzQvZjQ3ZTIyZjQtNmUzYS0z NTM3LWExYmUtOTdmMmZhODAyMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTRjMzJjZGUtNzY5My00ZDEwLWFl MWUtOGI4ZTlkMzYzMDc0L2U0YzMyY2RlLTc2OTMtNGQxMC1hZTFlLThiOGU5ZDM2 MzA3NC5jcmwwHwYDVR0jBBgwFoAUkjFMWL/PeT5XBCYBM6ApayuFfnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMzMmNkZS03NjkzLTRkMTAtYWUxZS04Yjhl OWQzNjMwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6Po6fPbtrqVZgbSimaM19dhHCk2N1zQ8bSV2Gs9r9m6zaU0qpw1CYp FFrDv7qFvRKFW4uAvZFaVEw3UQ/oyhMyZ/2TBUDEpespjTVjsQlbQjD4oy7bzh55 73DgRgqjUPwtu9CfmP05H8UE824cdWOSXDt+e1e5VIvm05lywzlaYsButGtVOgmQ 58xhAW0RpbijDT7Ba3Tht1TUMf/c9flCP7LhnNBObRvWyexsUIf2qeDgPYWyoJOh i3fZTPoALr1I07lsKHsgJ/glkszaZXPRVtCmR5DfGUA//FJ/r/2Up9N2AuOrZtfB cjVGQrXw5OmElwXOHBtOVXSb+zOb6Qo= -----END CERTIFICATE-----Generated at Sun Jun 29 01:29:45 2025 by rpki-client