$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/649189b4-bfc0-35b4-931b-45e2843949b0.roa File: 649189b4-bfc0-35b4-931b-45e2843949b0.roa (raw, json) Hash identifier: Nj4iStefAHFxt2D6UFw/1sq757M+StyQlq+1AfoIhnU= Subject key identifier: 0A:77:80:48:CC:10:7B:2F:52:5E:44:87:17:1B:74:AA:0A:D6:66:52 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA2CCE3C5FE8FD55CDA5F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/649189b4-bfc0-35b4-931b-45e2843949b0.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2c:ce:3c:5f:e8:fd:55:cd:a5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=a88a9540-21e1-422b-9c06-52f77ddaa67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bc:e7:17:c7:ef:36:f7:27:0e:ad:eb:d5:85: 84:10:12:55:2e:87:1a:a8:2b:81:ff:aa:47:af:6b: a2:5d:3a:2e:8d:b6:24:92:ee:4c:45:5f:6e:f0:1f: 69:98:22:e2:67:1d:a6:20:3b:54:91:0a:65:ff:03: f8:88:48:75:5a:1e:54:d0:8c:5a:6c:4d:e2:1b:3c: f8:ef:22:6d:0b:e4:17:94:55:b9:83:97:b2:e3:1d: f0:6a:c3:57:02:0c:e3:2d:2b:21:f8:0c:c5:55:be: 77:95:8a:ca:b6:ac:66:2b:8f:6a:49:31:f4:5d:11: 2b:14:ef:93:25:d2:5c:cd:a8:90:d5:07:24:81:19: fb:df:f7:dc:53:58:79:68:31:53:3d:dc:7f:a1:ff: 4a:02:e6:55:30:57:72:b8:51:7f:32:7c:a6:c9:d9: 2a:cd:8d:2d:16:d0:23:04:d0:e7:19:4a:4a:bc:94: 30:65:ed:d0:a6:40:38:d1:04:b6:d4:ce:4c:56:03: 09:d6:e3:06:66:b2:99:a7:f9:31:94:5a:48:b9:ae: 99:2d:33:b3:94:c2:af:9c:93:7d:92:7b:3a:d6:07: 2a:aa:5b:b7:2b:7b:b7:3f:79:5f:16:4d:c1:4a:9f: cc:58:01:40:cc:f5:a8:e0:3a:78:b9:5b:88:ce:1d: 34:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:77:80:48:CC:10:7B:2F:52:5E:44:87:17:1B:74:AA:0A:D6:66:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/649189b4-bfc0-35b4-931b-45e2843949b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:52:41:7b:d1:5a:fa:8f:c8:66:23:2a:94:7b:10:d8:08:28: 94:9f:ea:37:22:77:fa:79:45:7b:4e:05:9a:44:68:57:a1:2c: 4b:80:32:b9:cb:8e:dc:fd:73:ff:14:fb:da:dc:5e:e4:b9:30: 40:5a:82:b2:a6:05:d8:14:10:9a:f1:98:b7:80:b9:18:56:8c: 75:ff:06:42:7a:65:01:1d:5c:88:18:f9:a8:a3:9c:f9:64:b5: a7:f3:23:5d:29:84:33:63:1e:f5:fb:d0:90:45:21:cb:90:45: 64:31:b1:fa:d4:b0:1c:96:ac:f7:63:c8:b3:bd:f2:13:47:95: dc:79:41:2a:9f:0f:e7:32:31:9f:5b:26:2d:a2:e2:f4:9f:a7: ef:79:01:d2:44:1b:51:3d:aa:b5:3f:b9:bc:d2:c8:3b:01:f9: ab:ec:35:64:e2:89:2a:54:c4:a5:c3:8b:40:e9:a0:67:f2:af: fc:46:b1:0c:93:4e:2f:54:21:b5:50:5d:ea:4c:fd:81:4e:ea: 2e:14:84:36:ae:3e:2d:73:5d:6e:df:5a:81:de:e1:2b:99:36: ba:48:93:9a:28:27:80:4b:9a:f5:02:b9:ec:c6:53:36:7c:2d: dd:fb:65:71:65:19:a5:57:ce:5c:39:c4:93:f0:86:5e:8e:1a: 8d:5c:23:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92izOPF/o/VXNpfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk YTg4YTk1NDAtMjFlMS00MjJiLTljMDYtNTJmNzdkZGFhNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7znF8fvNvcnDq3r1YWEEBJVLocaqCuB/6pH r2uiXToujbYkku5MRV9u8B9pmCLiZx2mIDtUkQpl/wP4iEh1Wh5U0IxabE3iGzz4 7yJtC+QXlFW5g5ey4x3wasNXAgzjLSsh+AzFVb53lYrKtqxmK49qSTH0XRErFO+T JdJczaiQ1QckgRn73/fcU1h5aDFTPdx/of9KAuZVMFdyuFF/MnymydkqzY0tFtAj BNDnGUpKvJQwZe3QpkA40QS21M5MVgMJ1uMGZrKZp/kxlFpIua6ZLTOzlMKvnJN9 kns61gcqqlu3K3u3P3lfFk3BSp/MWAFAzPWo4Dp4uVuIzh00pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAp3gEjMEHsvUl5EhxcbdKoK1mZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjQ5MTg5YjQtYmZjMC0z NWI0LTkzMWItNDVlMjg0Mzk0OWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBSQXvRWvqPyGYjKpR7ENgIKJSf6jcid/p5RXtOBZpEaFehLEuAMrnL jtz9c/8U+9rcXuS5MEBagrKmBdgUEJrxmLeAuRhWjHX/BkJ6ZQEdXIgY+aijnPlk tafzI10phDNjHvX70JBFIcuQRWQxsfrUsByWrPdjyLO98hNHldx5QSqfD+cyMZ9b Ji2i4vSfp+95AdJEG1E9qrU/ubzSyDsB+avsNWTiiSpUxKXDi0DpoGfyr/xGsQyT Ti9UIbVQXepM/YFO6i4UhDauPi1zXW7fWoHe4SuZNrpIk5ooJ4BLmvUCuezGUzZ8 Ld37ZXFlGaVXzlw5xJPwhl6OGo1cI/k= -----END CERTIFICATE-----Generated at Wed Jul 23 01:41:00 2025 by rpki-client