$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04f854a6-3fcc-3186-bdc9-f23273f9b59a.roa File: 04f854a6-3fcc-3186-bdc9-f23273f9b59a.roa (raw, json) Hash identifier: lrB0JAqUVPYliubgxqXok88UEsF3QGOt/w6Qy2cvcQg= Subject key identifier: D7:3E:6C:F6:E2:0E:81:A4:A0:1F:4B:B9:41:E7:CA:AB:F0:57:62:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA2C32AF9E4487607ABB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04f854a6-3fcc-3186-bdc9-f23273f9b59a.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2c:32:af:9e:44:87:60:7a:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=02ad0ada-9050-470e-93ca-fb1154ff5dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ba:88:68:7c:5e:93:a2:c8:4a:ad:d3:a7:3c: 05:cd:ee:fc:b7:31:35:5a:98:23:b5:de:12:07:6f: 70:ae:95:9e:74:28:0a:8d:82:4b:68:bb:5b:91:48: f3:c9:e1:ce:33:e1:17:7d:4e:db:5b:97:00:bb:b5: 55:d9:52:e4:e7:4d:12:f3:c5:19:3c:34:b9:4a:07: 92:ad:e8:c8:dd:70:de:ea:64:01:d8:4c:3a:be:af: c9:d1:60:0a:a1:ce:02:f1:32:9e:bd:e9:eb:72:ef: 66:6c:3b:04:0a:d8:ac:d6:bb:e9:a2:be:d9:7a:be: 51:d2:c3:fe:21:f9:bf:8b:1e:df:63:17:56:39:92: 52:e8:96:25:56:0e:7e:72:8e:14:b7:1e:37:e9:14: 37:12:df:ab:cd:c1:cd:2c:b1:3f:fa:87:4e:b5:5c: 41:4b:2f:1a:c8:31:2b:60:49:32:fe:52:e5:92:b4: ed:be:95:77:34:48:72:41:b4:cd:0a:a3:09:1c:85: ca:b5:39:4b:60:d9:94:11:28:4c:42:4e:31:69:2b: f1:a9:66:ab:e4:93:63:19:15:b3:7f:54:3c:2a:44: c4:3a:57:27:a8:95:9b:8e:9a:d0:e7:7a:e0:3a:45: f4:cc:4d:4f:dd:b0:83:e1:a9:bb:ca:c3:9a:99:77: 54:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3E:6C:F6:E2:0E:81:A4:A0:1F:4B:B9:41:E7:CA:AB:F0:57:62:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04f854a6-3fcc-3186-bdc9-f23273f9b59a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:72:a5:51:b8:6b:bc:40:b8:da:30:b7:a3:cb:6e:77:6e:10: b1:6b:d9:3b:2c:f1:43:f4:6d:a8:4c:e1:63:c1:1e:40:64:a3: 5d:20:27:a2:98:62:5d:02:90:33:61:7e:d2:e8:39:ae:46:d4: c7:b6:75:d4:5d:b9:8d:fb:67:95:67:85:10:a8:5e:89:77:1e: 92:c0:51:13:66:cd:6f:52:38:80:76:0f:86:bb:45:58:4e:ed: 62:a8:76:a1:74:ca:0d:82:1e:3d:9a:a0:ab:82:42:e3:db:e8: 48:80:4e:8e:b3:55:63:8f:cf:5e:1c:63:09:fe:00:c3:e2:d4: f4:36:c9:b3:f2:4d:3a:df:59:ed:15:d6:11:f6:55:5b:99:f7: 38:66:0f:bb:cf:86:5b:24:fd:c3:bd:1a:76:06:65:c7:60:1c: df:70:5d:3d:58:cb:b1:f1:5f:86:85:50:7e:19:ce:03:9a:96: 5e:1e:f7:77:0f:c9:bd:2e:e7:4b:c2:c1:e7:0d:e8:08:82:55: c3:05:36:15:13:75:66:5b:c4:7b:5c:1d:31:7f:c2:d1:c5:50: 71:d9:12:1c:4d:0a:e2:33:eb:5c:a0:41:2b:c9:cf:46:9f:47: 7a:b1:24:c0:71:7e:7c:95:b0:91:f8:cf:a3:d2:49:b7:b0:b0: 8e:09:e7:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92iwyr55Eh2B6u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MDJhZDBhZGEtOTA1MC00NzBlLTkzY2EtZmIxMTU0ZmY1ZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LqIaHxek6LISq3TpzwFze78tzE1Wpgjtd4S B29wrpWedCgKjYJLaLtbkUjzyeHOM+EXfU7bW5cAu7VV2VLk500S88UZPDS5SgeS rejI3XDe6mQB2Ew6vq/J0WAKoc4C8TKevenrcu9mbDsECtis1rvpor7Zer5R0sP+ Ifm/ix7fYxdWOZJS6JYlVg5+co4Utx436RQ3Et+rzcHNLLE/+odOtVxBSy8ayDEr YEky/lLlkrTtvpV3NEhyQbTNCqMJHIXKtTlLYNmUEShMQk4xaSvxqWar5JNjGRWz f1Q8KkTEOlcnqJWbjprQ53rgOkX0zE1P3bCD4am7ysOamXdUbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc+bPbiDoGkoB9LuUHnyqvwV2JkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDRmODU0YTYtM2ZjYy0z MTg2LWJkYzktZjIzMjczZjliNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZypVG4a7xAuNowt6PLbnduELFr2Tss8UP0bahM4WPBHkBko10gJ6KY Yl0CkDNhftLoOa5G1Me2ddRduY37Z5VnhRCoXol3HpLAURNmzW9SOIB2D4a7RVhO 7WKodqF0yg2CHj2aoKuCQuPb6EiATo6zVWOPz14cYwn+AMPi1PQ2ybPyTTrfWe0V 1hH2VVuZ9zhmD7vPhlsk/cO9GnYGZcdgHN9wXT1Yy7HxX4aFUH4ZzgOall4e93cP yb0u50vCwecN6AiCVcMFNhUTdWZbxHtcHTF/wtHFUHHZEhxNCuIz61ygQSvJz0af R3qxJMBxfnyVsJH4z6PSSbewsI4J5x4= -----END CERTIFICATE-----Generated at Sat Jun 7 14:12:53 2025 by rpki-client