$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e11f8d-7ba1-3711-b0ea-55fb8ef8aba7.roa File: 23e11f8d-7ba1-3711-b0ea-55fb8ef8aba7.roa (raw, json) Hash identifier: IdRMCIHnbsKulV/ajmSzPk6M5RA74N3mO+eV6UcprQ0= Subject key identifier: 27:F0:B3:5B:8A:8E:6E:D7:04:07:69:30:6A:2C:AD:0F:A5:4A:93:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA339242954F0D796DFBC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e11f8d-7ba1-3711-b0ea-55fb8ef8aba7.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:33:92:42:95:4f:0d:79:6d:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=fd9d7a5c-1d6d-4d26-9565-1cc2da40bf68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e3:52:41:0d:d8:f1:8b:12:fc:40:b2:35:c4: be:b9:6d:fd:04:fe:df:0e:60:7b:4b:41:a1:50:38: 74:ad:a5:70:5c:81:06:3e:9b:79:63:a8:39:85:30: b0:28:a7:98:6a:4f:ea:71:e5:36:52:87:3a:24:54: 90:ad:3f:ee:fd:f4:79:14:26:c4:e5:2d:99:dd:8a: 64:ac:f6:f4:bc:00:8e:ba:22:a0:60:21:bc:10:e2: c3:03:25:a0:0a:44:76:37:28:0a:e4:53:08:2d:b3: a5:de:39:b7:5a:31:bb:ca:a7:b8:d0:28:1d:9f:f1: 0c:c2:98:5a:92:54:ab:42:05:1a:eb:5a:34:9d:c2: 93:6c:34:4c:a5:c8:ec:9a:98:8a:27:fd:95:4d:63: 53:7f:95:10:d2:bf:cf:01:a8:ca:a3:72:9b:1d:ef: fe:7a:54:0d:b3:60:68:8a:69:1b:7d:da:e0:0e:f6: d8:51:43:b7:b0:f3:84:5b:ed:6c:97:96:7e:e1:c7: 68:19:c3:88:60:ff:df:fd:2c:88:51:fe:a0:ff:a4: 1a:ca:fc:2a:1e:9e:12:8a:8b:1c:ac:17:a2:22:84: ff:5c:02:92:fa:d6:b9:1d:c0:e2:0e:5a:2a:cd:dd: 1b:9f:37:e9:ad:17:3a:04:ab:a4:53:aa:1e:4d:ed: d1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F0:B3:5B:8A:8E:6E:D7:04:07:69:30:6A:2C:AD:0F:A5:4A:93:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e11f8d-7ba1-3711-b0ea-55fb8ef8aba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:a0:7d:d7:f9:47:7d:75:2d:35:51:e3:4a:5f:f7:40:e6:ea: 00:5f:c0:1b:e7:94:b9:b5:54:91:b4:95:b2:cb:7e:6b:81:fe: 6a:fa:8b:d8:28:a0:6b:33:d2:de:25:97:a6:f6:94:8b:44:d8: fa:94:b7:4f:62:a3:63:00:53:65:01:95:b8:66:f7:52:ca:ce: 98:e3:61:23:22:ce:23:1e:b0:cb:7d:e8:01:8a:96:84:fc:67: 51:ae:8c:06:c0:05:c9:a1:78:43:8b:35:2d:95:8c:6c:d0:f2: 7d:b1:cb:dc:66:46:45:db:47:90:3a:e0:db:b0:7a:30:e2:59: ee:a3:01:3e:40:62:f2:45:9d:41:72:00:8e:a1:ef:b0:fa:e3: 03:fa:e4:73:55:93:67:2a:30:d4:26:0f:5d:14:54:42:27:c7: 61:05:e0:67:63:1a:99:8b:ca:f9:b2:27:27:a0:b1:8d:ba:32: 3f:62:e4:27:61:af:ff:f4:34:8f:bf:02:88:11:98:87:15:64: 76:93:02:64:26:a1:e2:61:61:60:f2:41:e5:9b:a3:ce:1d:ca: 83:7a:21:43:10:f4:47:c1:c5:b0:e6:42:8d:c4:16:e6:1b:6f: e2:e7:da:ec:bf:fc:e4:67:42:3c:b8:c5:39:96:36:a6:a8:56: 11:a3:a2:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jOSQpVPDXlt+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZmQ5ZDdhNWMtMWQ2ZC00ZDI2LTk1NjUtMWNjMmRhNDBiZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+NSQQ3Y8YsS/ECyNcS+uW39BP7fDmB7S0Gh UDh0raVwXIEGPpt5Y6g5hTCwKKeYak/qceU2Uoc6JFSQrT/u/fR5FCbE5S2Z3Ypk rPb0vACOuiKgYCG8EOLDAyWgCkR2NygK5FMILbOl3jm3WjG7yqe40Cgdn/EMwpha klSrQgUa61o0ncKTbDRMpcjsmpiKJ/2VTWNTf5UQ0r/PAajKo3KbHe/+elQNs2Bo imkbfdrgDvbYUUO3sPOEW+1sl5Z+4cdoGcOIYP/f/SyIUf6g/6QayvwqHp4Siosc rBeiIoT/XAKS+ta5HcDiDloqzd0bnzfprRc6BKukU6oeTe3RUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfws1uKjm7XBAdpMGosrQ+lSpMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjNlMTFmOGQtN2JhMS0z NzExLWIwZWEtNTVmYjhlZjhhYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEugfdf5R311LTVR40pf90Dm6gBfwBvnlLm1VJG0lbLLfmuB/mr6i9go oGsz0t4ll6b2lItE2PqUt09io2MAU2UBlbhm91LKzpjjYSMiziMesMt96AGKloT8 Z1GujAbABcmheEOLNS2VjGzQ8n2xy9xmRkXbR5A64NuwejDiWe6jAT5AYvJFnUFy AI6h77D64wP65HNVk2cqMNQmD10UVEInx2EF4GdjGpmLyvmyJyegsY26Mj9i5Cdh r//0NI+/AogRmIcVZHaTAmQmoeJhYWDyQeWbo84dyoN6IUMQ9EfBxbDmQo3EFuYb b+Ln2uy//ORnQjy4xTmWNqaoVhGjokA= -----END CERTIFICATE-----Generated at Wed Jul 23 01:27:04 2025 by rpki-client