$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d314c6-55a6-3ee1-9a58-1dfc46631ee0.roa File: 21d314c6-55a6-3ee1-9a58-1dfc46631ee0.roa (raw, json) Hash identifier: BNmruK5JBSKyZv1+WuvVtkye0KFd3gKA8Sb7vuXva8w= Subject key identifier: B0:4A:3C:58:44:F5:CE:1C:43:65:43:92:D0:31:38:1A:8B:25:71:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A714DE042D8EB2ECF8CE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d314c6-55a6-3ee1-9a58-1dfc46631ee0.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:71:4d:e0:42:d8:eb:2e:cf:8c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=090fdd27-cb37-4c3a-a433-1185f7b88d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:70:09:24:f4:50:57:3c:bd:94:f3:62:3e: a1:b6:eb:fb:a1:0b:6d:61:62:28:1b:5f:62:96:39: 0e:0a:d2:49:25:62:4e:e4:18:a1:61:eb:13:20:41: e4:b9:c6:16:13:9f:7f:02:18:a2:1b:5d:38:9e:ed: 91:75:f2:54:97:a9:e2:a1:c0:e5:55:2e:53:99:e8: d4:03:a0:d4:95:46:3a:07:51:ae:df:ff:65:d4:3a: 49:ba:a3:e4:59:2e:75:58:de:0f:9b:2e:4b:a4:af: 8e:86:9a:3c:2e:38:fe:84:14:e1:da:f6:c1:73:af: bb:37:27:00:92:23:77:82:b5:cc:ac:cf:24:2a:a3: 37:5f:53:34:8f:fe:a0:e4:da:7e:49:ce:22:6e:7c: 7e:5f:bb:29:10:51:65:8b:1c:b0:f7:c3:cc:24:e8: 89:0e:62:61:ec:61:8f:12:16:0b:e6:b5:11:d7:a5: ca:f6:f1:a0:7e:f7:e0:cc:96:e3:b9:af:3d:3f:4d: cd:b4:fa:a3:9e:cf:0d:5f:60:ae:a7:b6:be:2f:0a: 43:79:5a:22:f6:a0:2e:b7:ab:95:16:3f:d2:61:9a: a9:b0:74:ae:a5:cf:57:86:d5:87:6d:39:2e:d9:e9: 4d:30:77:2c:ab:ee:f5:5e:96:55:25:ca:18:fc:cb: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4A:3C:58:44:F5:CE:1C:43:65:43:92:D0:31:38:1A:8B:25:71:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d314c6-55a6-3ee1-9a58-1dfc46631ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:79:87:79:22:c0:02:14:e4:26:00:81:49:ea:6f:90:6b:57: 20:d2:c5:27:7c:2f:21:d5:6c:1d:84:46:18:a8:e3:3c:77:10: 6f:b7:af:3c:4f:4a:1f:10:ae:a4:9e:f5:e6:d5:d5:bb:06:1b: b6:b9:df:84:52:ac:d4:40:22:7d:c8:59:d8:30:5e:d6:e3:84: 2f:2d:20:26:2b:59:15:22:bf:19:93:ab:90:33:83:7a:bb:03: b1:5c:f4:a8:fc:41:76:3f:aa:bf:1f:bc:78:65:91:c9:08:b7: 0e:27:27:24:12:3d:a5:0c:16:90:f8:1f:84:e7:2d:77:f7:99: 3a:97:f7:a3:19:c1:7c:39:fe:c1:ba:fb:13:03:a2:89:45:b2: 12:3f:c1:4e:6b:fa:15:24:bf:0d:e1:fd:9e:bb:e9:ec:f9:00: ed:37:12:9a:01:eb:da:85:d5:93:8f:27:41:a1:4e:1b:59:54: b9:86:8d:3a:47:c9:bb:21:79:1f:92:dd:9b:6a:c2:16:6f:76: 5f:17:aa:69:8d:ec:83:17:84:3c:5a:ae:34:12:65:ef:f9:f5: 90:81:11:c1:31:34:b2:8e:02:0b:6d:c3:a8:d3:c4:b8:44:8f: 58:db:a1:c5:9c:84:04:97:02:51:0d:c8:3c:9a:fc:b7:1d:31: d3:b3:81:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnFN4ELY6y7PjOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MDkwZmRkMjctY2IzNy00YzNhLWE0MzMtMTE4NWY3Yjg4ZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq51wCST0UFc8vZTzYj6htuv7oQttYWIoG19i ljkOCtJJJWJO5BihYesTIEHkucYWE59/AhiiG104nu2RdfJUl6niocDlVS5TmejU A6DUlUY6B1Gu3/9l1DpJuqPkWS51WN4Pmy5LpK+Ohpo8Ljj+hBTh2vbBc6+7NycA kiN3grXMrM8kKqM3X1M0j/6g5Np+Sc4ibnx+X7spEFFlixyw98PMJOiJDmJh7GGP EhYL5rUR16XK9vGgfvfgzJbjua89P03NtPqjns8NX2Cup7a+LwpDeVoi9qAut6uV Fj/SYZqpsHSupc9XhtWHbTku2elNMHcsq+71XpZVJcoY/MvxgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBKPFhE9c4cQ2VDktAxOBqLJXHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjFkMzE0YzYtNTVhNi0z ZWUxLTlhNTgtMWRmYzQ2NjMxZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN5h3kiwAIU5CYAgUnqb5BrVyDSxSd8LyHVbB2ERhio4zx3EG+3rzxP Sh8QrqSe9ebV1bsGG7a534RSrNRAIn3IWdgwXtbjhC8tICYrWRUivxmTq5Azg3q7 A7Fc9Kj8QXY/qr8fvHhlkckItw4nJyQSPaUMFpD4H4TnLXf3mTqX96MZwXw5/sG6 +xMDoolFshI/wU5r+hUkvw3h/Z676ez5AO03EpoB69qF1ZOPJ0GhThtZVLmGjTpH ybsheR+S3ZtqwhZvdl8XqmmN7IMXhDxarjQSZe/59ZCBEcExNLKOAgttw6jTxLhE j1jbocWchASXAlENyDya/LcdMdOzgTo= -----END CERTIFICATE-----Generated at Sat Jun 7 14:02:57 2025 by rpki-client