$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b239dff-6b17-3b05-aa3f-e7b82a0dea95.roa File: 8b239dff-6b17-3b05-aa3f-e7b82a0dea95.roa (raw, json) Hash identifier: /9vXFuUIxdJ+UyeZQmOOkn3IbAH1nQaELnSrb1w/uJY= Subject key identifier: 59:3A:2F:68:27:40:E4:6F:3D:FC:59:87:26:8C:C2:96:77:71:91:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C4D4CBD5DD1946971728AD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b239dff-6b17-3b05-aa3f-e7b82a0dea95.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 63949 IP address blocks: 172.236.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:cb:d5:dd:19:46:97:17:28:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=85eec91a-ceac-49dc-98c4-a4f9ca49715e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ad:d4:4c:fb:54:02:28:55:8b:d9:cf:b8:bd: a2:2c:60:d6:d9:c9:85:f2:9d:9d:56:2b:9b:f6:ab: 7b:1d:90:12:b1:d8:77:0d:93:1f:18:11:42:fd:5e: 8f:71:e2:ee:25:59:94:ca:e4:10:64:88:15:4c:26: 82:0a:bd:21:93:e3:40:59:b8:64:d0:f9:57:dc:66: a7:55:e1:4d:63:1c:c9:01:a0:e1:16:86:74:4e:db: 73:c8:7a:42:59:fe:ae:09:fd:91:c4:81:15:dc:c7: 2c:c3:d0:0b:1e:51:e5:e4:d7:a0:c1:1c:4b:b2:9d: 09:b6:8a:07:17:9f:8d:0a:e1:e2:b6:9e:a1:ea:a6: 22:d6:13:f2:09:b9:4d:d8:84:7f:58:be:11:f1:00: 34:36:7e:8e:79:85:ad:bc:5d:a2:b5:24:51:f6:c8: 32:8d:c4:03:60:5e:7a:b4:62:7e:fd:ca:8e:95:27: b0:62:26:46:c0:04:e9:8b:9f:84:3e:15:0f:12:ba: 3f:7e:95:3d:58:ad:03:c5:c5:33:c4:6a:a2:64:d5: 7b:f6:1e:e4:bc:da:76:aa:46:43:9a:c5:83:d5:eb: a6:20:3d:07:40:fb:b5:cc:00:24:82:e9:16:e2:d6: bf:f6:85:86:35:fa:27:76:f3:d8:2b:df:57:d6:43: b8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3A:2F:68:27:40:E4:6F:3D:FC:59:87:26:8C:C2:96:77:71:91:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b239dff-6b17-3b05-aa3f-e7b82a0dea95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.236.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:67:dd:02:9d:25:91:ce:cd:3b:ae:2f:ca:59:af:58:81:91: e5:3f:88:5d:f4:7b:6c:36:eb:6e:bc:f1:c5:08:a5:b7:73:84: a7:f0:45:3d:37:b0:34:d4:f1:b8:5b:ce:7f:33:e2:2b:92:fd: ab:67:8a:3a:38:7d:0a:22:9e:e6:1d:58:1d:1e:93:83:2a:c1: 8e:e5:d9:5a:de:df:b8:10:c8:1b:74:85:5d:35:4e:1a:fa:b0: dd:35:ff:ff:2e:ea:d4:9d:73:cb:1f:5e:ed:b9:bd:db:b7:53: 00:76:8d:78:ea:0e:24:f3:ff:4a:18:f4:2c:f5:2e:54:fd:36: e7:bd:ca:e0:bc:38:f6:4e:f7:82:8e:dd:2e:b4:83:33:0b:83: 2d:74:ca:5d:ab:27:ad:1c:0c:9f:3d:5c:ab:ad:28:c4:64:73: 96:83:2b:03:e7:b4:57:5a:97:79:ba:09:97:d3:f7:1e:98:30: de:b9:4f:2b:74:04:19:b3:a4:06:5a:d7:70:04:76:43:bc:67: d5:05:3f:d6:34:fc:25:be:bb:47:78:69:ce:84:8f:b5:b5:52: 8e:76:c9:60:6a:53:f8:74:b9:4c:ea:c8:f1:13:33:96:55:67: 47:b1:3e:ad:fd:b6:44:82:54:fb:93:64:3a:8e:c4:de:24:32: d5:74:ac:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MvV3RlGlxcorYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ODVlZWM5MWEtY2VhYy00OWRjLTk4YzQtYTRmOWNhNDk3MTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk63UTPtUAihVi9nPuL2iLGDW2cmF8p2dViub 9qt7HZASsdh3DZMfGBFC/V6PceLuJVmUyuQQZIgVTCaCCr0hk+NAWbhk0PlX3Gan VeFNYxzJAaDhFoZ0TttzyHpCWf6uCf2RxIEV3Mcsw9ALHlHl5NegwRxLsp0JtooH F5+NCuHitp6h6qYi1hPyCblN2IR/WL4R8QA0Nn6OeYWtvF2itSRR9sgyjcQDYF56 tGJ+/cqOlSewYiZGwATpi5+EPhUPEro/fpU9WK0DxcUzxGqiZNV79h7kvNp2qkZD msWD1eumID0HQPu1zAAkgukW4ta/9oWGNfondvPYK99X1kO4hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFk6L2gnQORvPfxZhyaMwpZ3cZGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGIyMzlkZmYtNmIxNy0z YjA1LWFhM2YtZTdiODJhMGRlYTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdn3QKdJZHOzTuuL8pZr1iBkeU/iF30e2w262688cUIpbdzhKfwRT03 sDTU8bhbzn8z4iuS/atnijo4fQoinuYdWB0ek4MqwY7l2Vre37gQyBt0hV01Thr6 sN01//8u6tSdc8sfXu25vdu3UwB2jXjqDiTz/0oY9Cz1LlT9Nue9yuC8OPZO94KO 3S60gzMLgy10yl2rJ60cDJ89XKutKMRkc5aDKwPntFdal3m6CZfT9x6YMN65Tyt0 BBmzpAZa13AEdkO8Z9UFP9Y0/CW+u0d4ac6Ej7W1Uo52yWBqU/h0uUzqyPETM5ZV Z0exPq39tkSCVPuTZDqOxN4kMtV0rDY= -----END CERTIFICATE-----Generated at Sun Jun 15 19:36:16 2025 by rpki-client