$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa File: 884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa (raw, json) Hash identifier: mSz2fsuBGuD7OCi+v9GObAZSSk85d1XqCXOB6OHHCnQ= Subject key identifier: C0:1A:2F:79:8A:9F:E6:0E:CC:F9:6F:3C:1A:DE:75:FE:E6:90:DA:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D4312BE1CB4DEDD80F431980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.224.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:2b:e1:cb:4d:ed:d8:0f:43:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=1b908fb9-f9ae-47f7-a06f-e058eb80224d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c0:ab:0e:9f:fa:c0:c7:9f:23:ad:c9:36:ad: 14:c1:84:73:9f:83:86:21:10:f9:ce:0d:65:d5:f7: ba:07:72:29:24:48:48:b6:81:b2:be:45:5a:d3:c3: 35:c5:7c:8c:fc:63:b8:ad:38:d0:98:e3:eb:43:e1: 70:4a:c8:48:ec:c7:63:0e:e5:89:f0:fc:7b:0c:94: 96:9f:db:9f:bd:cc:fa:25:b1:11:d8:ff:ca:8c:53: 25:2e:08:ab:5f:d1:4d:f7:ca:17:61:bd:f6:6b:a7: 52:a9:37:41:91:2d:d7:56:9d:b7:33:0d:fb:61:53: 6f:ec:c0:e5:1f:6f:ab:0c:43:ec:ca:73:8e:40:69: 8b:b7:60:c1:e5:a6:8d:4e:b8:66:1c:d1:be:d0:e0: 7c:77:af:aa:a7:00:fb:02:00:34:dc:e2:28:51:db: b5:85:d7:39:ca:e6:c4:64:7e:28:4c:c9:a0:31:74: cc:eb:97:1b:ef:ec:4f:75:5e:db:76:18:0a:fd:8e: 08:96:0b:f9:17:f2:35:60:55:ce:c3:fe:e5:b1:6b: 94:40:79:5a:0c:62:a7:3c:9b:d0:53:ef:ab:45:e6: 62:0b:1b:34:b4:4f:11:f6:a5:fd:76:61:28:41:8c: e5:6e:04:44:18:71:4b:ba:19:bc:f3:3c:73:6d:83: 95:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1A:2F:79:8A:9F:E6:0E:CC:F9:6F:3C:1A:DE:75:FE:E6:90:DA:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ee:3f:15:bd:55:02:37:1c:62:1b:2a:6b:c2:23:82:6f:f5: b5:0b:18:6e:52:9e:fd:62:63:b2:1d:a1:f7:62:d6:ca:6c:74: e4:b5:0e:c9:6c:09:36:ca:49:ce:ea:9b:98:bf:78:55:59:72: 2d:87:95:27:fa:a9:3d:ce:3e:4f:09:d4:55:b0:e9:a1:74:5b: 29:aa:ec:7c:47:bd:9f:41:60:3a:29:dc:38:28:c0:20:e9:f4: 31:24:2a:de:46:69:a5:0c:60:08:9e:e8:d3:ff:32:cd:9b:9a: 40:6a:55:dc:bc:a9:b9:ed:02:ad:8d:df:30:ba:58:ac:b6:b6: fd:91:92:77:0e:bc:cd:32:79:75:0e:8b:fc:3b:40:4e:ec:d1: b2:95:99:6f:54:a2:83:a5:4f:5b:fe:85:c3:0c:4e:78:a9:12: a8:8e:87:31:fa:0b:2d:71:55:70:a4:a2:c9:5a:eb:3c:bc:6d: 75:55:5a:57:f5:87:20:22:f5:32:48:6f:f2:7a:ab:23:9c:5d: 34:16:3c:43:ad:0e:44:49:81:46:cc:c5:04:0c:f8:c9:7f:45: 40:dd:ba:41:41:73:ca:c6:13:ac:f3:52:b9:a4:af:9f:ea:8d: 1c:49:ea:76:26:41:78:6f:47:58:49:bc:5d:96:3c:18:52:9f: 34:19:1c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMSvhy03t2A9DGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MWI5MDhmYjktZjlhZS00N2Y3LWEwNmYtZTA1OGViODAyMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8CrDp/6wMefI63JNq0UwYRzn4OGIRD5zg1l 1fe6B3IpJEhItoGyvkVa08M1xXyM/GO4rTjQmOPrQ+FwSshI7MdjDuWJ8Px7DJSW n9ufvcz6JbER2P/KjFMlLgirX9FN98oXYb32a6dSqTdBkS3XVp23Mw37YVNv7MDl H2+rDEPsynOOQGmLt2DB5aaNTrhmHNG+0OB8d6+qpwD7AgA03OIoUdu1hdc5yubE ZH4oTMmgMXTM65cb7+xPdV7bdhgK/Y4Ilgv5F/I1YFXOw/7lsWuUQHlaDGKnPJvQ U++rReZiCxs0tE8R9qX9dmEoQYzlbgREGHFLuhm88zxzbYOVewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAaL3mKn+YOzPlvPBredf7mkNpVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODg0ZTFiYjQtZjZlOS0z MDdlLWE0OWUtNTFlN2E2Y2EzZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvuPxW9VQI3HGIbKmvCI4Jv9bULGG5Snv1iY7Idofdi1spsdOS1Dsls CTbKSc7qm5i/eFVZci2HlSf6qT3OPk8J1FWw6aF0Wymq7HxHvZ9BYDop3DgowCDp 9DEkKt5GaaUMYAie6NP/Ms2bmkBqVdy8qbntAq2N3zC6WKy2tv2RkncOvM0yeXUO i/w7QE7s0bKVmW9UooOlT1v+hcMMTnipEqiOhzH6Cy1xVXCkosla6zy8bXVVWlf1 hyAi9TJIb/J6qyOcXTQWPEOtDkRJgUbMxQQM+Ml/RUDdukFBc8rGE6zzUrmkr5/q jRxJ6nYmQXhvR1hJvF2WPBhSnzQZHEY= -----END CERTIFICATE-----Generated at Mon Jun 16 04:40:58 2025 by rpki-client