$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/5ff7147d-8e91-310d-9be6-0d3247e2703c.roa File: 5ff7147d-8e91-310d-9be6-0d3247e2703c.roa (raw, json) Hash identifier: KRuDbcPCCuxVQqQuyDAqPGVM+fhzuOtsfJqVy2YhXVg= Subject key identifier: AD:54:F7:23:35:92:C7:CB:F2:1E:1A:55:2D:A2:98:F1:BE:A6:ED:A9 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F43285849B6DF5BF1F72A71140EB59B00 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/5ff7147d-8e91-310d-9be6-0d3247e2703c.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 174 IP address blocks: 65.169.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:5b:f1:f7:2a:71:14:0e:b5:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=3bf9d4ed-606c-4bbf-b412-30e6ea7caaba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4f:03:26:81:15:2e:8d:5b:e1:a3:aa:82:2a: d1:a3:d8:13:8d:06:89:60:42:05:d2:6c:4a:6a:dc: 9b:13:bf:df:99:67:16:c3:2c:af:12:e8:22:9c:d2: fd:ae:af:00:84:6c:da:2a:9b:5f:94:b7:e9:c0:93: 25:92:7f:43:2e:6d:ea:0e:07:78:70:89:4b:40:15: 1f:02:56:9c:9a:18:f1:04:c5:e3:8f:33:ac:f0:4c: 85:d6:94:5d:84:29:56:08:f3:8e:25:b5:0d:11:8e: 8c:12:75:35:5a:c5:8a:22:16:88:4b:fd:d5:ed:98: ae:c7:02:67:73:11:ba:f9:8d:d4:92:67:f6:71:6d: f4:82:8e:60:49:bd:1c:42:1c:45:cb:93:ac:c0:c8: 49:cd:e0:0c:03:87:dc:a0:96:9f:a4:9c:63:6f:7c: 44:10:9c:2b:f0:12:62:e0:cb:cf:ae:91:89:54:54: ac:9f:b9:32:70:7e:bb:f2:97:fa:00:99:e4:53:7f: 14:8a:7f:30:69:a4:2e:ee:d1:12:48:04:03:d0:d3: 78:9d:75:13:b7:84:fb:12:eb:06:b3:2b:db:42:c8: bb:8c:06:65:aa:4a:a9:10:d5:e8:22:d8:f6:c4:a2: ba:b8:8d:6a:38:d5:35:76:b7:76:62:71:4e:3b:d2: 86:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:54:F7:23:35:92:C7:CB:F2:1E:1A:55:2D:A2:98:F1:BE:A6:ED:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/5ff7147d-8e91-310d-9be6-0d3247e2703c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 65.169.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:64:09:08:4b:45:20:7f:59:c6:3e:d6:9d:2b:2c:05:b7:4a: f0:25:57:8c:fe:d1:45:0b:0d:52:05:03:d8:5a:d3:45:df:b1: 34:b3:51:da:6f:cf:bb:f6:9e:f8:b9:98:98:67:86:0e:3b:73: 9a:b9:21:83:f7:6f:d3:6d:15:b0:c0:31:a4:40:39:01:d6:04: 50:00:18:96:ee:a8:5a:f5:5b:d7:a2:38:cf:f3:f4:1c:42:0a: 74:c5:69:d6:4f:01:9c:aa:7f:7b:a6:fc:e1:6d:91:88:60:ed: a9:1a:55:17:56:ae:b1:f8:06:a2:e4:d9:21:ec:fc:9a:47:c5: 34:d1:f5:0a:1d:f8:66:ff:23:f8:b1:9d:b1:8c:a7:c9:89:6d: 05:a3:99:7f:9e:4e:74:1a:2f:b2:05:b2:85:cf:f2:76:05:79: 45:94:e7:7d:32:df:9d:00:6f:13:56:8e:9e:af:fc:a4:ca:96: c7:75:96:30:bf:bf:1c:ec:a8:bb:c8:a3:a4:3e:6e:39:51:6f: 8c:a8:48:91:de:35:6f:75:ec:40:ae:56:4f:82:34:4c:1e:0d: 37:5e:23:8d:2c:fa:54:64:8d:35:64:e6:05:6e:dc:81:4a:58: f9:44:05:b7:c9:f1:3e:3f:c4:3a:0d:2c:58:82:68:16:c0:ec: da:be:a1:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm231vx9ypxFA61mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk M2JmOWQ0ZWQtNjA2Yy00YmJmLWI0MTItMzBlNmVhN2NhYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE8DJoEVLo1b4aOqgirRo9gTjQaJYEIF0mxK atybE7/fmWcWwyyvEuginNL9rq8AhGzaKptflLfpwJMlkn9DLm3qDgd4cIlLQBUf AlacmhjxBMXjjzOs8EyF1pRdhClWCPOOJbUNEY6MEnU1WsWKIhaIS/3V7ZiuxwJn cxG6+Y3Ukmf2cW30go5gSb0cQhxFy5OswMhJzeAMA4fcoJafpJxjb3xEEJwr8BJi 4MvPrpGJVFSsn7kycH678pf6AJnkU38Uin8waaQu7tESSAQD0NN4nXUTt4T7EusG syvbQsi7jAZlqkqpENXoItj2xKK6uI1qONU1drd2YnFOO9KGzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1U9yM1ksfL8h4aVS2imPG+pu2pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvNWZmNzE0N2QtOGU5MS0z MTBkLTliZTYtMGQzMjQ3ZTI3MDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQakmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZkCQhLRSB/WcY+1p0rLAW3SvAlV4z+0UULDVIFA9ha00XfsTSzUdpv z7v2nvi5mJhnhg47c5q5IYP3b9NtFbDAMaRAOQHWBFAAGJbuqFr1W9eiOM/z9BxC CnTFadZPAZyqf3um/OFtkYhg7akaVRdWrrH4BqLk2SHs/JpHxTTR9Qod+Gb/I/ix nbGMp8mJbQWjmX+eTnQaL7IFsoXP8nYFeUWU530y350AbxNWjp6v/KTKlsd1ljC/ vxzsqLvIo6Q+bjlRb4yoSJHeNW917ECuVk+CNEweDTdeI40s+lRkjTVk5gVu3IFK WPlEBbfJ8T4/xDoNLFiCaBbA7Nq+ocQ= -----END CERTIFICATE-----Generated at Sun Jun 15 17:36:32 2025 by rpki-client