$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7ec25e8-0335-393a-a09e-c9c05d7074f1.roa File: d7ec25e8-0335-393a-a09e-c9c05d7074f1.roa (raw, json) Hash identifier: SU7NDDFKv3GeW95PoAhhL0NOEpvxJZul3ZnqST7IKRs= Subject key identifier: F1:67:A5:07:B1:97:AB:0E:9D:7E:6D:21:D8:00:E5:6D:35:8D:7E:E7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA2CAD2BC8EF39309CAE60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7ec25e8-0335-393a-a09e-c9c05d7074f1.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2c:ad:2b:c8:ef:39:30:9c:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=9e1fe55d-196a-45e3-9a53-75fe8adac4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:f4:1c:15:a9:bc:ec:59:73:7c:f6:9a:1e: 19:6e:74:03:05:e8:87:97:e0:e0:6d:75:53:28:72: 0f:f0:ac:60:b7:d8:db:93:c0:04:3d:b5:3c:5f:5f: a9:b4:94:a3:0f:ca:38:81:a4:eb:2f:3a:a7:74:6f: 89:ea:5d:c5:1c:8d:b3:54:1e:67:aa:12:81:7c:f2: cc:e6:4d:48:ca:ee:9a:75:fc:81:6f:9b:b4:5d:ae: f2:df:00:9a:29:78:98:bd:be:da:43:90:1c:4f:ef: e8:bb:63:78:b4:f9:48:d8:21:4f:ee:6c:dd:a8:8b: 07:d9:1b:e4:59:54:72:8e:06:89:be:2d:00:75:46: d7:b1:bc:2e:5c:13:38:76:79:4a:7c:fb:b0:0f:88: 41:57:43:6f:74:52:df:34:67:0c:45:56:b5:2c:f5: 17:33:f9:48:03:98:21:2a:c9:2d:8f:04:c0:bd:57: b5:75:62:63:45:cb:18:75:a0:53:b5:1d:76:85:6b: 04:37:d1:7f:b6:84:c7:e3:69:90:1c:eb:10:c8:e3: 7c:df:f7:d4:83:5a:3b:08:57:eb:b1:c8:a6:4d:79: ed:e5:41:1a:0c:c7:ee:2f:c4:8c:ac:9a:c8:70:c6: 4d:ee:11:a1:e0:7d:d7:95:5f:94:66:27:89:b2:05: 0b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:67:A5:07:B1:97:AB:0E:9D:7E:6D:21:D8:00:E5:6D:35:8D:7E:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7ec25e8-0335-393a-a09e-c9c05d7074f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:6e:0a:62:98:f6:1b:25:41:48:ef:9e:28:fa:de:d8:be:f7: b8:eb:1b:93:98:12:bf:73:48:ae:e8:44:2c:b6:c9:a4:b2:b8: 9f:6d:2a:bc:ff:9b:d9:ec:6d:ee:11:fa:ba:ea:dc:cd:bc:be: 68:40:61:1e:f4:77:4e:61:3c:7d:40:62:00:55:98:68:d0:25: 78:b2:bb:6a:97:c3:29:df:20:81:4a:f6:86:72:c1:19:80:aa: 11:c5:c8:ab:d9:ce:47:ae:0d:a1:c6:f3:dd:d2:12:8f:e4:c9: 42:c6:d4:b5:6a:e8:cf:d3:b6:25:c9:5b:75:e2:e7:7e:99:7b: b0:5b:ae:a9:75:9e:38:df:a8:93:f2:37:4c:62:3a:d8:c0:df: 3e:54:a2:92:2a:f5:c9:68:95:73:1d:c9:b6:75:0e:67:89:de: 9d:4a:7e:80:eb:1c:d2:08:e1:25:ee:7c:da:71:94:58:e9:ab: 47:56:e3:59:3c:7f:36:bb:8d:2f:b2:63:0a:a8:fd:65:cc:72: 43:0e:04:c7:d3:e4:33:f8:5f:cb:fa:5e:27:fa:87:38:cb:2d: 19:ed:c7:6a:7d:4f:e2:17:19:63:04:eb:12:d9:b8:38:7b:96: 71:85:9a:da:a6:18:14:d8:d3:39:fc:c5:1a:51:34:5a:f8:ed: 7a:eb:de:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92iytK8jvOTCcrmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk OWUxZmU1NWQtMTk2YS00NWUzLTlhNTMtNzVmZThhZGFjNGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcz0HBWpvOxZc3z2mh4ZbnQDBeiHl+DgbXVT KHIP8Kxgt9jbk8AEPbU8X1+ptJSjD8o4gaTrLzqndG+J6l3FHI2zVB5nqhKBfPLM 5k1Iyu6adfyBb5u0Xa7y3wCaKXiYvb7aQ5AcT+/ou2N4tPlI2CFP7mzdqIsH2Rvk WVRyjgaJvi0AdUbXsbwuXBM4dnlKfPuwD4hBV0NvdFLfNGcMRVa1LPUXM/lIA5gh KsktjwTAvVe1dWJjRcsYdaBTtR12hWsEN9F/toTH42mQHOsQyON83/fUg1o7CFfr scimTXnt5UEaDMfuL8SMrJrIcMZN7hGh4H3XlV+UZieJsgUL3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFnpQexl6sOnX5tIdgA5W01jX7nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDdlYzI1ZTgtMDMzNS0z OTNhLWEwOWUtYzljMDVkNzA3NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANuCmKY9hslQUjvnij63ti+97jrG5OYEr9zSK7oRCy2yaSyuJ9tKrz/ m9nsbe4R+rrq3M28vmhAYR70d05hPH1AYgBVmGjQJXiyu2qXwynfIIFK9oZywRmA qhHFyKvZzkeuDaHG893SEo/kyULG1LVq6M/TtiXJW3Xi536Ze7Bbrql1njjfqJPy N0xiOtjA3z5UopIq9clolXMdybZ1DmeJ3p1KfoDrHNII4SXufNpxlFjpq0dW41k8 fza7jS+yYwqo/WXMckMOBMfT5DP4X8v6Xif6hzjLLRntx2p9T+IXGWME6xLZuDh7 lnGFmtqmGBTY0zn8xRpRNFr47Xrr3iE= -----END CERTIFICATE-----Generated at Wed Jul 23 01:27:59 2025 by rpki-client