$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07648e7f-f18e-3369-8226-70ca75b15b7e.roa File: 07648e7f-f18e-3369-8226-70ca75b15b7e.roa (raw, json) Hash identifier: ghWC7n/nqAscHGSndeb11P1lOeGgf+7aqnzLpZ1+vMc= Subject key identifier: 34:20:94:1F:8A:DE:C3:CB:40:12:14:71:47:BC:14:81:38:E2:12:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A7C5302C820143F623480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07648e7f-f18e-3369-8226-70ca75b15b7e.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:7c:53:02:c8:20:14:3f:62:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=76f63681-f607-40d2-888d-62175e0497e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b9:54:d3:51:64:86:3a:44:5a:3b:08:74:89: 69:95:00:e9:0e:70:0e:96:90:e2:25:74:26:7c:79: 6d:c6:85:ac:ae:f3:29:df:af:76:14:33:f0:f1:50: 92:31:c8:f2:29:0d:fb:c1:58:53:4a:84:86:60:98: 03:3d:28:36:2e:c6:59:e7:f6:40:c9:7e:7a:cb:45: 8b:dd:6b:17:1a:22:5c:aa:75:1e:3b:85:23:6d:8c: 0d:38:c6:7e:e1:b8:25:3d:94:b6:51:41:34:ff:67: 2c:a0:b1:17:a9:64:73:00:f8:25:8e:f0:69:b3:88: 85:6a:87:2f:95:9e:9f:91:ba:b9:ad:90:bf:af:dd: 7b:50:28:0e:67:40:a0:e3:47:35:86:69:3c:23:9c: 82:6d:90:e1:17:8f:4e:93:5e:5b:11:d2:86:ef:52: 64:0b:2d:2a:ce:60:e3:42:cc:c8:3d:ed:35:f5:11: 55:5e:5d:b7:68:06:5a:36:35:7f:c3:01:1e:b0:50: c9:86:18:c5:e9:9c:26:50:99:f7:a2:78:0e:2f:56: f5:9f:c7:00:92:0c:4a:78:eb:fd:13:a7:c2:d5:c0: 80:72:5b:cb:e7:ce:25:d2:21:64:7c:5c:ef:6c:48: df:3d:16:eb:cb:86:e7:f6:9a:bc:3d:8e:fe:25:9a: 3a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:20:94:1F:8A:DE:C3:CB:40:12:14:71:47:BC:14:81:38:E2:12:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07648e7f-f18e-3369-8226-70ca75b15b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:09:38:35:7b:2e:2c:49:ff:36:f9:16:65:cb:67:c3:b8:57: ba:86:e7:62:1c:28:a6:c3:a2:cf:5b:46:28:56:9d:dd:95:30: cf:13:c5:aa:17:59:2d:5f:54:88:f4:23:11:0c:28:b4:02:f8: 75:23:e9:d2:fa:82:77:e9:ac:19:b2:3b:d4:0d:8a:e3:72:28: c3:ab:94:4b:20:8e:32:10:3c:42:de:83:ad:86:53:b9:2c:ba: 37:17:f2:a5:eb:51:4b:f7:27:4b:41:0b:2f:cf:4a:54:18:47: c1:2a:86:03:8d:da:c0:07:46:b4:4b:58:7c:cc:66:2d:64:d0: 80:99:49:27:a9:b0:92:98:1d:cc:bf:1e:5e:ad:40:ac:ab:c4: 07:2a:0b:4b:26:3f:92:9d:85:76:f0:7f:bc:fc:37:f0:7a:f6: 1c:97:90:35:c6:11:4d:00:cf:5f:bc:5c:f9:11:a3:e8:f2:7d: 7f:c5:1d:19:92:d2:27:ce:06:c4:48:d3:b1:e7:c4:36:b2:7b: 17:11:65:9a:1f:9b:70:05:1f:70:df:1d:fe:c0:ec:49:81:6d: 0e:c6:d1:1c:ad:44:b3:38:27:62:06:0c:aa:9c:55:5a:5f:bc: 09:c1:cd:c6:ad:d5:64:e7:60:78:08:9d:4a:c9:46:4a:d7:1d: 0e:fe:fd:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnxTAsggFD9iNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NzZmNjM2ODEtZjYwNy00MGQyLTg4OGQtNjIxNzVlMDQ5N2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7lU01FkhjpEWjsIdIlplQDpDnAOlpDiJXQm fHltxoWsrvMp3692FDPw8VCSMcjyKQ37wVhTSoSGYJgDPSg2LsZZ5/ZAyX56y0WL 3WsXGiJcqnUeO4UjbYwNOMZ+4bglPZS2UUE0/2csoLEXqWRzAPgljvBps4iFaocv lZ6fkbq5rZC/r917UCgOZ0Cg40c1hmk8I5yCbZDhF49Ok15bEdKG71JkCy0qzmDj QszIPe019RFVXl23aAZaNjV/wwEesFDJhhjF6ZwmUJn3ongOL1b1n8cAkgxKeOv9 E6fC1cCAclvL584l0iFkfFzvbEjfPRbry4bn9pq8PY7+JZo61wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQglB+K3sPLQBIUcUe8FIE44hJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDc2NDhlN2YtZjE4ZS0z MzY5LTgyMjYtNzBjYTc1YjE1YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIJODV7LixJ/zb5FmXLZ8O4V7qG52IcKKbDos9bRihWnd2VMM8TxaoX WS1fVIj0IxEMKLQC+HUj6dL6gnfprBmyO9QNiuNyKMOrlEsgjjIQPELeg62GU7ks ujcX8qXrUUv3J0tBCy/PSlQYR8EqhgON2sAHRrRLWHzMZi1k0ICZSSepsJKYHcy/ Hl6tQKyrxAcqC0smP5KdhXbwf7z8N/B69hyXkDXGEU0Az1+8XPkRo+jyfX/FHRmS 0ifOBsRI07HnxDayexcRZZofm3AFH3DfHf7A7EmBbQ7G0RytRLM4J2IGDKqcVVpf vAnBzcat1WTnYHgInUrJRkrXHQ7+/a0= -----END CERTIFICATE-----Generated at Sat Jun 7 14:09:42 2025 by rpki-client