$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/5d003fa2-3876-3e07-a7c0-cc4602b2899e.roa File: 5d003fa2-3876-3e07-a7c0-cc4602b2899e.roa (raw, json) Hash identifier: gD83a3cfaJI+Ny0HiFek++PX6elAjnAG0TNjk9pH7wU= Subject key identifier: 10:AD:0A:A3:39:4F:8B:7D:B6:69:5A:59:76:2B:6F:47:27:59:66:28 Certificate issuer: /CN=e06c5587-5b99-4fbf-8de6-e9c983f1495a Certificate serial: 010D0C9F43285849CE9A62213005D392CD69B140 Authority key identifier: 4C:4A:60:E2:E3:1C:C2:4C:C5:C0:E5:83:03:1D:66:D9:8D:55:0C:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/5d003fa2-3876-3e07-a7c0-cc4602b2899e.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 74.112.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:62:21:30:05:d3:92:cd:69:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e06c5587-5b99-4fbf-8de6-e9c983f1495a Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=dd3c6406-1aa6-468a-bb34-d9d0123c43b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ce:1a:70:4a:4f:f3:04:ca:4c:80:63:9b:e9: ca:9e:66:f3:32:46:58:c2:28:c1:0d:ad:d7:77:1b: 85:6a:84:0c:ab:b2:66:bc:59:8e:45:79:01:93:86: 9b:93:23:cf:5a:2b:25:d6:77:7d:18:3f:ef:52:39: 41:41:89:32:fb:d9:fc:9f:0b:b1:40:a9:8f:b8:f4: 3e:91:3f:e5:31:fd:16:5c:36:a6:c4:6d:bd:4e:ef: 0e:77:c3:13:4c:09:f5:a2:28:98:e0:71:99:4f:49: 9b:ec:0e:db:d3:c7:ee:6e:27:30:00:0c:9d:58:0b: 6d:df:ec:f7:6b:4b:d0:30:07:b6:4a:cd:44:d5:74: 12:7d:82:4e:34:1d:e9:73:d2:03:f2:89:76:02:85: 41:75:6e:fc:bf:25:2f:c4:bb:8d:39:77:07:74:55: 79:75:51:49:43:1b:8e:79:f6:0b:84:97:9c:46:85: 91:f7:c9:31:39:5a:ae:e2:9d:09:cd:a3:b8:a0:f3: 3a:44:d7:41:10:53:3e:88:5d:5d:bd:d5:54:81:ee: c3:e7:55:61:df:d2:87:79:ed:47:42:51:18:f6:63: c7:51:30:9f:12:a6:6a:91:f9:6e:0e:87:6f:18:97: 1e:d9:e3:ea:08:d8:33:04:7a:69:35:18:ac:55:4d: b1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AD:0A:A3:39:4F:8B:7D:B6:69:5A:59:76:2B:6F:47:27:59:66:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/5d003fa2-3876-3e07-a7c0-cc4602b2899e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.crl X509v3 Authority Key Identifier: keyid:4C:4A:60:E2:E3:1C:C2:4C:C5:C0:E5:83:03:1D:66:D9:8D:55:0C:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer sbgp-ipAddrBlock: critical IPv4: 74.112.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:0e:d9:08:f1:e6:cd:2e:19:5e:20:82:67:20:1e:79:7f:b8: 50:b3:35:81:ca:f8:bb:ad:19:c8:f0:23:e5:14:a3:22:b9:ef: cc:76:ce:c8:69:95:8f:45:b6:f1:02:2c:95:2f:48:1d:97:5f: 2b:b0:e1:fd:df:55:a3:c4:02:87:bf:24:42:22:b3:d1:8d:0b: a1:be:94:c7:38:cd:b5:93:51:bc:37:f5:52:ac:b3:b5:84:35: b4:8b:d1:61:b7:d9:40:4a:4e:50:c2:e0:16:4f:23:c4:4d:37: b5:7a:d9:c4:e8:f6:15:71:1c:db:42:f9:3f:89:a8:c0:09:34: 91:8d:ef:95:b2:73:a7:43:95:cf:4e:2d:6e:4e:13:29:82:c7: c2:98:d4:0b:d9:a6:4a:94:3d:8c:f4:61:6e:f6:e2:c7:8b:55: ba:b1:5b:f2:35:9f:34:2f:66:8a:82:5f:fa:79:60:e6:a7:2d: b6:31:00:0b:a7:91:41:33:87:ef:ec:db:6f:e8:e7:a3:78:b6: 45:5c:d5:a5:ba:41:a0:29:1e:fb:27:14:d0:28:c3:48:50:4d: c5:5e:b7:86:af:9a:74:33:e8:ac:a8:bd:62:52:74:eb:0a:06: 02:2c:cd:20:69:a8:2e:9e:2f:dd:f4:c7:16:08:85:36:54:fa: 14:3f:ca:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmIhMAXTks1psUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA2YzU1ODctNWI5OS00ZmJmLThkZTYtZTljOTgzZjE0 OTVhMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZGQzYzY0MDYtMWFhNi00NjhhLWJiMzQtZDlkMDEyM2M0M2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm84acEpP8wTKTIBjm+nKnmbzMkZYwijBDa3X dxuFaoQMq7JmvFmORXkBk4abkyPPWisl1nd9GD/vUjlBQYky+9n8nwuxQKmPuPQ+ kT/lMf0WXDamxG29Tu8Od8MTTAn1oiiY4HGZT0mb7A7b08fubicwAAydWAtt3+z3 a0vQMAe2Ss1E1XQSfYJONB3pc9ID8ol2AoVBdW78vyUvxLuNOXcHdFV5dVFJQxuO efYLhJecRoWR98kxOVqu4p0JzaO4oPM6RNdBEFM+iF1dvdVUge7D51Vh39KHee1H QlEY9mPHUTCfEqZqkfluDodvGJce2ePqCNgzBHppNRisVU2x7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCtCqM5T4t9tmlaWXYrb0cnWWYoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMDZj NTU4Ny01Yjk5LTRmYmYtOGRlNi1lOWM5ODNmMTQ5NWEvNWQwMDNmYTItMzg3Ni0z ZTA3LWE3YzAtY2M0NjAyYjI4OTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTA2YzU1ODctNWI5OS00ZmJmLThk ZTYtZTljOTgzZjE0OTVhL2UwNmM1NTg3LTViOTktNGZiZi04ZGU2LWU5Yzk4M2Yx NDk1YS5jcmwwHwYDVR0jBBgwFoAUTEpg4uMcwkzFwOWDAx1m2Y1VDKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMDZjNTU4Ny01Yjk5LTRmYmYtOGRlNi1lOWM5 ODNmMTQ5NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnCHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAO2Qjx5s0uGV4ggmcgHnl/uFCzNYHK+LutGcjwI+UUoyK578x2zshp lY9FtvECLJUvSB2XXyuw4f3fVaPEAoe/JEIis9GNC6G+lMc4zbWTUbw39VKss7WE NbSL0WG32UBKTlDC4BZPI8RNN7V62cTo9hVxHNtC+T+JqMAJNJGN75Wyc6dDlc9O LW5OEymCx8KY1AvZpkqUPYz0YW724seLVbqxW/I1nzQvZoqCX/p5YOanLbYxAAun kUEzh+/s22/o56N4tkVc1aW6QaApHvsnFNAow0hQTcVet4avmnQz6KyovWJSdOsK BgIszSBpqC6eL930xxYIhTZU+hQ/yu8= -----END CERTIFICATE-----Generated at Sun Jun 15 00:10:42 2025 by rpki-client