$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5c15b499-1a9a-301b-a8aa-5594396371a4.roa File: 5c15b499-1a9a-301b-a8aa-5594396371a4.roa (raw, json) Hash identifier: 9UAkfWB3RXJlV/Dnaz8TrVXAPeJE6aTo8E2TaIaPek0= Subject key identifier: D8:93:40:79:1A:5B:FF:F8:8F:66:99:B6:17:9D:8B:C4:08:62:39:E6 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F43285849FE0FF852AD51080D03414100 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5c15b499-1a9a-301b-a8aa-5594396371a4.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 395633 IP address blocks: 173.229.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:f8:52:ad:51:08:0d:03:41:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=afc7d878-f25a-48e4-b5f3-a829f36d8e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a4:1c:42:23:15:02:5d:95:d6:59:cf:69:78: 89:bf:1e:38:d9:57:2e:16:4f:91:af:b8:18:e1:62: 7a:4c:e2:da:3f:c2:cd:12:29:95:b2:5f:83:a9:5e: 0c:f6:14:ae:02:0a:f5:a1:0a:6d:37:35:3a:d7:1b: 71:bd:07:40:0e:d9:18:ff:91:ce:ba:7a:16:37:bd: 14:bb:6c:3e:1d:76:a4:5c:54:6b:ab:12:15:c8:7e: d7:4c:de:0c:ff:3d:91:e3:10:b1:56:d7:6d:db:d8: 5e:59:67:de:71:7c:c1:9a:70:8e:af:ce:d9:2a:e0: b0:a8:59:27:56:b1:99:bd:c9:56:cc:ae:34:ce:95: 9a:13:2a:a5:7a:82:c3:41:2c:34:d2:f4:60:2c:98: e3:3b:6f:79:9c:8a:1b:65:d2:c4:75:75:2e:d3:a0: 67:2c:97:78:6e:25:16:63:9b:b7:4e:aa:44:39:29: 9c:9b:cc:38:49:34:dd:24:4f:74:99:67:3f:83:b5: 68:46:8e:48:d2:09:a4:10:e5:e3:b0:9b:31:a9:55: 0a:d9:92:05:e4:e5:3a:06:1d:15:ed:8a:8a:f2:ce: fb:78:3f:6d:88:57:4f:45:e8:e3:9f:d4:de:28:11: 26:0b:2a:93:35:b2:46:e9:82:6a:f1:7f:84:f2:20: e0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:93:40:79:1A:5B:FF:F8:8F:66:99:B6:17:9D:8B:C4:08:62:39:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5c15b499-1a9a-301b-a8aa-5594396371a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 173.229.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e2:7e:f4:9b:b1:1e:c3:b9:35:7e:2a:a9:d1:7b:88:db:1c: 7e:6a:fe:04:2d:f5:70:c9:8c:fa:c8:c5:f9:0d:b1:43:25:28: ba:a9:7b:ce:da:79:47:d5:e1:0e:7c:58:44:b5:15:9d:f5:43: dd:59:cf:29:0c:68:a3:62:91:10:c9:cc:bd:0c:23:b8:3e:12: 9a:c6:fa:b4:03:1f:d9:9d:48:e6:28:22:0e:94:7d:ba:e7:6c: 95:2c:2b:1a:1f:fe:f0:d0:06:8a:d7:20:0d:33:75:d1:24:f3: 83:30:35:39:bd:7b:c1:44:5e:f2:41:51:2c:6c:36:f2:19:e9: 4c:52:dc:87:49:cc:48:8e:ef:b4:83:a0:3e:c2:d9:17:c4:c6: 28:5b:e4:ab:77:f6:ae:b9:7c:13:2d:7a:f9:7c:cd:99:8f:6a: cd:9a:5d:ec:9d:cd:de:bb:5b:aa:c7:70:b0:b7:80:54:46:60: 8a:67:c2:10:57:a3:58:86:c3:17:df:82:f3:75:b3:58:7b:18: 95:f8:76:20:4d:d2:24:e7:83:b4:58:83:1e:11:28:dc:49:f3: a9:9f:4d:56:09:69:82:8e:13:f9:49:13:0b:02:ba:46:b1:5c: 6c:94:53:e3:fd:9a:a8:75:f1:e8:be:35:a0:9a:f0:8a:75:8d: 44:1c:ff:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/hSrVEIDQNBQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk YWZjN2Q4NzgtZjI1YS00OGU0LWI1ZjMtYTgyOWYzNmQ4ZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6QcQiMVAl2V1lnPaXiJvx442VcuFk+Rr7gY 4WJ6TOLaP8LNEimVsl+DqV4M9hSuAgr1oQptNzU61xtxvQdADtkY/5HOunoWN70U u2w+HXakXFRrqxIVyH7XTN4M/z2R4xCxVtdt29heWWfecXzBmnCOr87ZKuCwqFkn VrGZvclWzK40zpWaEyqleoLDQSw00vRgLJjjO295nIobZdLEdXUu06BnLJd4biUW Y5u3TqpEOSmcm8w4STTdJE90mWc/g7VoRo5I0gmkEOXjsJsxqVUK2ZIF5OU6Bh0V 7YqK8s77eD9tiFdPRejjn9TeKBEmCyqTNbJG6YJq8X+E8iDgJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiTQHkaW//4j2aZthedi8QIYjnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNWMxNWI0OTktMWE5YS0z MDFiLWE4YWEtNTU5NDM5NjM3MWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCreU8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETifvSbsR7DuTV+KqnRe4jbHH5q/gQt9XDJjPrIxfkNsUMlKLqpe87a eUfV4Q58WES1FZ31Q91ZzykMaKNikRDJzL0MI7g+EprG+rQDH9mdSOYoIg6Ufbrn bJUsKxof/vDQBorXIA0zddEk84MwNTm9e8FEXvJBUSxsNvIZ6UxS3IdJzEiO77SD oD7C2RfExihb5Kt39q65fBMtevl8zZmPas2aXeydzd67W6rHcLC3gFRGYIpnwhBX o1iGwxffgvN1s1h7GJX4diBN0iTng7RYgx4RKNxJ86mfTVYJaYKOE/lJEwsCukax XGyUU+P9mqh18ei+NaCa8Ip1jUQc/2w= -----END CERTIFICATE-----Generated at Mon Jun 16 12:56:14 2025 by rpki-client