$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20788088-a23e-345a-b68d-a28ca6bcb9c5.roa File: 20788088-a23e-345a-b68d-a28ca6bcb9c5.roa (raw, json) Hash identifier: YTNG0tQ2Pmud1Qyk5uRgmgnNVisN9i4CGkmmLv4CIGI= Subject key identifier: 5C:74:C0:8F:7A:5A:F4:CB:57:F5:B8:37:6D:4D:00:84:C8:B9:C9:EC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF2ADEFFE0C97838EBC988 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20788088-a23e-345a-b68d-a28ca6bcb9c5.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 63949 IP address blocks: 172.235.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:2a:de:ff:e0:c9:78:38:eb:c9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=901c43a4-45e7-42d0-86b0-1b20d0d98cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:17:bb:e9:db:a2:b1:86:8a:18:d6:05:c8:9a: 5f:b2:1d:e5:94:62:20:cd:c6:89:8b:e3:1b:11:22: 25:a9:42:98:8b:c4:32:2f:28:6e:27:bf:9e:22:61: 9b:e2:c2:98:81:ba:de:7c:fb:73:d5:be:33:b6:91: ee:31:5a:15:5c:22:7f:30:48:55:8f:25:37:2e:b3: 81:13:ef:73:0d:c0:51:0a:36:d0:0a:73:f2:f9:e3: 87:b5:ec:05:7f:fb:33:b4:4a:8c:85:c6:85:72:bb: 44:81:fb:2c:e0:c5:44:7b:61:a9:c6:79:fc:31:74: 83:d5:b3:a0:63:d4:98:76:29:1a:96:fe:8d:64:71: 7d:0c:02:71:09:ac:bb:a4:52:ad:2b:fa:a2:b6:79: 09:7f:5c:8f:64:42:34:79:46:1f:c4:8c:36:28:c2: e6:33:17:31:e9:10:50:2c:65:90:3e:b4:f6:30:d0: 63:17:54:2b:55:2c:3a:2d:eb:62:fc:db:68:4c:49: 6c:38:fb:20:2e:25:ee:e2:bc:22:b9:f4:7a:2b:86: 45:4f:2d:6b:d9:80:e1:a7:3d:7c:1e:3b:5e:7d:b0: 5d:29:73:57:b9:be:fe:f1:e9:ab:8a:1d:0f:9e:bb: 82:7b:80:b2:f9:09:2c:e1:e4:29:71:62:bd:f2:6b: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:74:C0:8F:7A:5A:F4:CB:57:F5:B8:37:6D:4D:00:84:C8:B9:C9:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20788088-a23e-345a-b68d-a28ca6bcb9c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:be:3c:ee:4a:3e:ea:26:14:8c:dd:07:81:7d:84:80:63:cc: aa:8f:90:38:76:b7:21:9e:30:88:53:16:7d:01:2f:a0:8d:68: b7:44:84:44:c3:7c:24:72:57:ce:2c:d2:5e:17:0f:8d:b3:0e: 73:ee:cb:0f:2e:1f:9b:5b:16:dd:ac:33:aa:ad:1e:40:7e:2c: 8a:08:2e:86:92:85:48:c5:a0:4f:05:60:1c:aa:62:b6:88:b2: a4:44:8f:04:77:f1:36:e8:35:2d:10:7c:b2:90:95:dd:03:33: 5a:19:63:2b:65:30:e3:9e:4a:0f:6a:72:d8:d8:d0:ab:30:ae: 84:f3:45:69:32:f9:a6:c5:44:56:bc:18:ad:e5:b1:76:4d:3b: 16:05:82:a3:85:a4:f8:72:53:21:38:4e:b5:30:17:f8:6f:91: ca:27:b0:e5:7e:e8:9d:1e:7a:f7:da:36:37:24:b9:44:f4:2b: 9e:30:1a:ea:86:a2:74:2e:a6:d3:c4:58:cc:26:b4:f3:62:bc: 23:84:1c:13:d4:0e:d5:43:52:ee:fc:9b:30:35:15:93:bd:76: b5:ac:5b:1b:51:86:97:91:72:4d:ad:d1:d9:89:45:5b:8d:97: 82:10:8e:41:e2:8c:f5:1e:74:72:23:45:ae:2d:5e:54:5a:52: ba:c0:04:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyre/+DJeDjryYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk OTAxYzQzYTQtNDVlNy00MmQwLTg2YjAtMWIyMGQwZDk4Y2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBe76duisYaKGNYFyJpfsh3llGIgzcaJi+Mb ESIlqUKYi8QyLyhuJ7+eImGb4sKYgbrefPtz1b4ztpHuMVoVXCJ/MEhVjyU3LrOB E+9zDcBRCjbQCnPy+eOHtewFf/sztEqMhcaFcrtEgfss4MVEe2Gpxnn8MXSD1bOg Y9SYdikalv6NZHF9DAJxCay7pFKtK/qitnkJf1yPZEI0eUYfxIw2KMLmMxcx6RBQ LGWQPrT2MNBjF1QrVSw6Leti/NtoTElsOPsgLiXu4rwiufR6K4ZFTy1r2YDhpz18 HjtefbBdKXNXub7+8emrih0PnruCe4Cy+Qks4eQpcWK98mudvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFx0wI96WvTLV/W4N21NAITIucnsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjA3ODgwODgtYTIzZS0z NDVhLWI2OGQtYTI4Y2E2YmNiOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErOvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi+PO5KPuomFIzdB4F9hIBjzKqPkDh2tyGeMIhTFn0BL6CNaLdEhETD fCRyV84s0l4XD42zDnPuyw8uH5tbFt2sM6qtHkB+LIoILoaShUjFoE8FYByqYraI sqREjwR38TboNS0QfLKQld0DM1oZYytlMOOeSg9qctjY0KswroTzRWky+abFRFa8 GK3lsXZNOxYFgqOFpPhyUyE4TrUwF/hvkconsOV+6J0eevfaNjckuUT0K54wGuqG onQuptPEWMwmtPNivCOEHBPUDtVDUu78mzA1FZO9drWsWxtRhpeRck2t0dmJRVuN l4IQjkHijPUedHIjRa4tXlRaUrrABL8= -----END CERTIFICATE-----Generated at Sun Apr 27 02:53:33 2025 by rpki-client