$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09f6cbc7-47da-381f-9908-370716a22a7e.roa File: 09f6cbc7-47da-381f-9908-370716a22a7e.roa (raw, json) Hash identifier: VIIpGo9jqvThGlirddCORDPO2v/CaQQC+Oj1vclEiTI= Subject key identifier: B0:66:9B:25:86:C5:D1:28:0F:54:E2:1E:32:EF:E6:5D:E9:77:80:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A79C5313FFBEFCC46A25D Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09f6cbc7-47da-381f-9908-370716a22a7e.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:79:c5:31:3f:fb:ef:cc:46:a2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=f5a4d27a-1a62-4128-88e3-a70b39866e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:58:85:a4:3c:93:7a:ea:81:4b:64:24:87:61: 4c:9b:42:38:fc:d8:04:61:96:ab:12:00:7c:55:b3: af:fd:74:3f:d7:6d:8e:e7:26:45:63:5a:89:56:3d: 3a:93:90:f5:47:3d:83:eb:d0:6d:4a:05:47:11:8b: 13:84:e1:ab:d0:65:69:e6:ed:8a:f7:c6:6f:40:20: 4b:da:28:af:58:f7:20:54:17:de:25:d4:0c:d5:d3: cb:03:ae:31:b8:71:55:9f:f7:a8:72:15:c1:bd:06: ec:2a:46:0f:ce:02:04:1f:3c:5d:3a:f8:a5:3a:24: 2d:6d:ba:6a:d3:6c:f9:0c:73:f4:71:07:5d:06:54: c0:f1:53:e3:4a:eb:2f:7a:09:35:4a:aa:93:c8:54: aa:4a:84:66:05:aa:42:ef:f3:76:77:c7:b8:02:0f: c7:94:f0:2b:26:e8:bf:18:c0:28:26:6c:7d:0e:d0: 36:f1:47:c4:43:6d:4d:61:b5:48:25:08:af:1d:e7: 42:df:79:46:25:e9:31:7d:31:77:a5:68:23:2c:ae: c4:f4:de:5a:f8:6f:81:1c:33:77:1d:8b:d9:b4:00: de:c9:88:d9:09:37:8b:24:1b:70:1b:73:3d:f8:87: b5:68:9c:56:6d:ff:f7:7c:92:11:f1:1a:e2:98:1f: 28:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:66:9B:25:86:C5:D1:28:0F:54:E2:1E:32:EF:E6:5D:E9:77:80:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09f6cbc7-47da-381f-9908-370716a22a7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:24:0e:43:e2:ad:f3:a8:0d:15:02:da:49:a6:04:48:71:9d: 4e:2b:d2:66:0d:51:e6:d3:f2:57:37:46:1f:f5:9f:55:2d:9b: ec:21:8c:35:4b:a5:85:e8:a7:34:73:f5:c5:9b:54:b3:57:95: 8d:00:53:5b:d2:4d:af:38:37:cc:34:ff:c0:79:8c:78:cb:ef: 39:c3:d0:b4:b3:62:45:11:b6:a9:5b:45:92:e8:af:19:7d:f6: 63:6a:3b:e6:75:7f:da:1e:79:d4:20:34:e5:16:b5:8d:e2:d4: 60:83:19:d4:60:7a:dd:05:b9:da:a5:13:3d:69:69:fb:d3:23: 2f:1c:2d:b2:f2:81:db:4c:43:7b:71:8b:c8:62:52:29:21:a8: f8:17:55:9a:f9:10:82:f1:2f:c5:0c:c7:5e:29:1d:a5:3c:ff: 99:69:81:7c:ca:17:46:49:2d:fb:3e:1c:f6:c8:d8:d2:a4:6f: 1c:ab:84:a1:fc:76:5a:8c:2c:18:2a:52:51:c8:18:b4:3f:bb: 8d:47:af:2a:da:5e:70:5a:96:cb:66:97:f6:5d:04:7b:54:fa: ec:21:74:10:70:a6:a8:c6:49:49:c8:97:62:f4:c5:1e:31:ca: 09:31:2b:32:9e:1b:26:dc:46:0f:9a:a1:c6:22:42:66:43:1c: 2b:68:51:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnnFMT/778xGol0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZjVhNGQyN2EtMWE2Mi00MTI4LTg4ZTMtYTcwYjM5ODY2ZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlliFpDyTeuqBS2Qkh2FMm0I4/NgEYZarEgB8 VbOv/XQ/122O5yZFY1qJVj06k5D1Rz2D69BtSgVHEYsThOGr0GVp5u2K98ZvQCBL 2iivWPcgVBfeJdQM1dPLA64xuHFVn/eochXBvQbsKkYPzgIEHzxdOvilOiQtbbpq 02z5DHP0cQddBlTA8VPjSusvegk1SqqTyFSqSoRmBapC7/N2d8e4Ag/HlPArJui/ GMAoJmx9DtA28UfEQ21NYbVIJQivHedC33lGJekxfTF3pWgjLK7E9N5a+G+BHDN3 HYvZtADeyYjZCTeLJBtwG3M9+Ie1aJxWbf/3fJIR8RrimB8onwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBmmyWGxdEoD1TiHjLv5l3pd4DeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDlmNmNiYzctNDdkYS0z ODFmLTk5MDgtMzcwNzE2YTIyYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOLGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwkDkPirfOoDRUC2kmmBEhxnU4r0mYNUebT8lc3Rh/1n1Utm+whjDVL pYXopzRz9cWbVLNXlY0AU1vSTa84N8w0/8B5jHjL7znD0LSzYkURtqlbRZLorxl9 9mNqO+Z1f9oeedQgNOUWtY3i1GCDGdRget0FudqlEz1pafvTIy8cLbLygdtMQ3tx i8hiUikhqPgXVZr5EILxL8UMx14pHaU8/5lpgXzKF0ZJLfs+HPbI2NKkbxyrhKH8 dlqMLBgqUlHIGLQ/u41HryraXnBalstml/ZdBHtU+uwhdBBwpqjGSUnIl2L0xR4x ygkxKzKeGybcRg+aocYiQmZDHCtoUUk= -----END CERTIFICATE-----Generated at Sat Jun 7 14:14:21 2025 by rpki-client