$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21121190-c709-304d-9477-0e0a0ca38ccc.roa File: 21121190-c709-304d-9477-0e0a0ca38ccc.roa (raw, json) Hash identifier: B8BkQtEUec/K9FObDzkxQ2cj6SKpIC10icFCb7N/NtU= Subject key identifier: 29:E2:9E:29:5D:8A:17:71:F7:48:B8:1A:28:C1:72:1B:FF:BF:27:9E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C0A4F962ECCFCD08FE7F1300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21121190-c709-304d-9477-0e0a0ca38ccc.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f9:62:ec:cf:cd:08:fe:7f:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=e6d888df-6698-49c8-ac70-77b42282a9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:c9:fb:dd:f4:de:1a:1f:f1:c3:61:1a:87: e7:de:12:84:ef:c7:f9:b6:19:44:58:bd:5b:79:8a: 31:ac:15:68:04:51:41:cb:f0:99:9e:b5:d5:58:de: 26:64:72:ab:c2:ae:42:d6:a8:7e:0a:ba:cc:10:bb: ed:0c:31:4e:4a:80:ec:16:a7:10:c1:18:24:e9:a8: d1:45:ce:18:64:22:bb:84:0e:9a:15:69:aa:26:e8: c3:2f:3d:7d:20:10:85:71:8b:26:3f:e3:f9:92:87: 14:9f:59:c5:db:d6:aa:a2:ba:1f:22:07:ed:85:4f: 80:f3:f1:8a:d8:e6:85:93:e6:0c:5b:1b:af:d2:f0: 72:b3:f4:b2:bc:d9:7b:e8:d8:e2:c7:9d:6f:24:9e: b9:36:8c:b0:f9:32:f6:2b:f6:27:0f:08:8f:d6:e7: cb:fd:2c:d9:2f:7e:8d:f0:0d:54:fe:98:58:4d:4e: 2a:28:ae:a8:e5:fd:2b:8c:8c:95:36:56:7b:4c:1e: ac:f8:49:ba:60:df:41:fe:96:af:ab:58:a2:d7:41: b0:dc:17:7b:36:b3:e3:94:9b:13:70:db:c1:d2:0a: 1d:81:1c:71:4f:a5:ad:4d:a3:be:f9:b2:fe:93:a4: 49:df:16:2f:4a:aa:17:57:2f:a1:40:3a:05:04:e3: 27:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E2:9E:29:5D:8A:17:71:F7:48:B8:1A:28:C1:72:1B:FF:BF:27:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21121190-c709-304d-9477-0e0a0ca38ccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:61:05:24:c4:26:a8:9f:d6:24:6e:5a:25:83:e1:68:b5:4b: 41:6d:0b:1d:b5:85:be:b2:df:4a:e4:de:58:16:3f:de:b6:21: 95:40:55:23:96:84:63:58:10:4a:1a:86:ba:f1:5c:df:0a:ed: 2d:f7:e0:45:59:6f:3c:52:1e:5f:b7:32:fd:07:e3:89:92:d2: ac:89:4c:b3:06:3e:9b:78:0d:b3:f2:dc:a2:b7:e2:71:46:20: 18:18:2b:46:2e:f1:ae:35:01:fb:33:1e:af:54:ab:fd:5a:9b: 2d:d3:64:97:94:8b:39:d2:7d:ef:e3:e7:a2:11:d0:f4:60:fa: 6c:fc:40:f1:9b:2b:c5:3a:43:5c:d8:d7:4c:d9:2a:f8:11:aa: 13:fc:e0:63:e5:da:5a:d3:26:3d:a8:14:8b:6c:b0:d3:eb:bc: a5:18:06:7a:80:42:a1:1f:cb:52:9f:bd:10:97:d9:6a:21:f3: ec:fd:97:c7:f6:d2:50:82:67:da:f7:05:3b:d0:07:98:62:50: dc:0a:2c:6f:d0:68:a3:57:1d:03:ca:b5:cb:e5:2b:3b:c9:b3: bd:6c:1c:47:29:d1:73:74:7f:98:80:f5:59:cb:be:93:21:76: d1:48:57:f0:28:86:95:bf:5c:f0:f7:40:2e:a7:5a:52:e5:5b: 8d:2b:38:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApPli7M/NCP5/EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZTZkODg4ZGYtNjY5OC00OWM4LWFjNzAtNzdiNDIyODJhOWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoujJ+9303hof8cNhGofn3hKE78f5thlEWL1b eYoxrBVoBFFBy/CZnrXVWN4mZHKrwq5C1qh+CrrMELvtDDFOSoDsFqcQwRgk6ajR Rc4YZCK7hA6aFWmqJujDLz19IBCFcYsmP+P5kocUn1nF29aqorofIgfthU+A8/GK 2OaFk+YMWxuv0vBys/SyvNl76Njix51vJJ65Noyw+TL2K/YnDwiP1ufL/SzZL36N 8A1U/phYTU4qKK6o5f0rjIyVNlZ7TB6s+Em6YN9B/pavq1ii10Gw3Bd7NrPjlJsT cNvB0godgRxxT6WtTaO++bL+k6RJ3xYvSqoXVy+hQDoFBOMnfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCninildihdx90i4GijBchv/vyeeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjExMjExOTAtYzcwOS0z MDRkLTk0NzctMGUwYTBjYTM4Y2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJhBSTEJqif1iRuWiWD4Wi1S0FtCx21hb6y30rk3lgWP962IZVAVSOW hGNYEEoahrrxXN8K7S334EVZbzxSHl+3Mv0H44mS0qyJTLMGPpt4DbPy3KK34nFG IBgYK0Yu8a41AfszHq9Uq/1amy3TZJeUiznSfe/j56IR0PRg+mz8QPGbK8U6Q1zY 10zZKvgRqhP84GPl2lrTJj2oFItssNPrvKUYBnqAQqEfy1KfvRCX2Woh8+z9l8f2 0lCCZ9r3BTvQB5hiUNwKLG/QaKNXHQPKtcvlKzvJs71sHEcp0XN0f5iA9VnLvpMh dtFIV/AohpW/XPD3QC6nWlLlW40rOLo= -----END CERTIFICATE-----Generated at Sun Jun 8 07:27:16 2025 by rpki-client