$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e7c8a4-7e90-3b58-b519-8706951d1be2.roa File: 23e7c8a4-7e90-3b58-b519-8706951d1be2.roa (raw, json) Hash identifier: IUfW2KgWu1Tax4NLhQTKH0dGTOqXmtgDX0Of38G2XHQ= Subject key identifier: 6D:51:23:6A:49:9E:D5:5B:8C:60:3C:6B:50:09:29:1E:66:9C:B4:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A786708FFF01931893400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e7c8a4-7e90-3b58-b519-8706951d1be2.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:78:67:08:ff:f0:19:31:89:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=c671cd72-ffc2-42ec-a99c-e640427f2105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3e:52:25:1a:e6:0c:dd:67:95:cd:c6:36:fa: 73:ea:e6:32:12:f7:55:f1:36:46:90:45:33:e7:b8: 4b:71:8c:00:e1:7b:ff:dd:40:a4:86:82:32:19:2f: 40:66:8e:b2:70:58:4c:b4:fb:10:56:2f:d1:c2:4e: a0:e8:de:56:86:0d:07:5e:2f:3e:5d:68:b6:82:89: 0c:e0:ed:29:60:b8:e4:57:02:8a:87:c2:04:55:97: 65:f7:b9:c5:e5:72:b9:06:52:90:b6:d3:b5:d5:8a: e0:9e:29:52:63:e6:ff:6d:1c:3c:73:dd:35:b1:ef: 77:bb:56:73:fa:aa:30:94:e8:61:e8:bc:2b:72:6e: 50:be:20:09:8f:e2:a4:dc:c2:f8:a5:78:57:66:1d: 42:af:b8:e9:fc:a0:65:1a:78:36:86:4d:76:8a:41: af:43:da:16:dd:c9:72:34:1a:ea:dd:f0:6a:af:84: 26:cd:72:f1:ca:8b:d0:84:74:6e:ba:5e:0e:d7:20: 8e:83:82:eb:25:60:d4:4f:7b:69:2b:51:a3:53:9e: 3f:72:02:90:42:c9:c1:0c:a9:20:df:97:3e:1a:90: e6:00:1d:7a:97:5f:02:45:11:5d:21:b6:30:16:3a: 90:a7:8c:fe:87:c2:f7:60:f8:58:90:a2:d3:b1:4b: d6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:51:23:6A:49:9E:D5:5B:8C:60:3C:6B:50:09:29:1E:66:9C:B4:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e7c8a4-7e90-3b58-b519-8706951d1be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:0e:ef:61:94:2c:20:cb:47:d4:1c:0a:e2:07:fe:7f:04:47: dd:2b:41:f3:01:9d:7d:f2:f7:f7:35:8f:57:11:c8:ce:f5:5d: a0:79:bc:3f:88:3d:d4:77:12:5f:bc:a6:25:23:01:2b:a2:4f: b0:c5:2b:bc:80:4c:48:b4:a6:58:57:c7:96:99:84:00:3a:59: 46:24:c1:b7:99:7e:d0:0a:e0:75:ac:a2:d8:fd:d1:1f:96:fb: ee:d6:0e:7c:00:f1:a9:75:af:40:42:5f:02:fb:dd:eb:69:3b: 41:6e:03:c8:87:a3:b3:19:7b:71:05:eb:51:72:16:e9:68:03: 74:bb:dd:33:3b:53:bf:7e:14:58:d5:2d:bc:2b:9a:4b:09:cb: e5:a8:2c:e4:0b:1d:45:a8:34:22:7d:c9:c5:b3:eb:8f:5f:7c: c8:1d:5d:12:2f:90:af:3a:dc:8f:54:ff:4e:35:36:59:b8:b6: 52:f0:8d:5d:01:f2:8a:3f:dc:eb:10:0a:78:a4:93:1f:a0:f1: e3:7e:86:81:8e:38:e8:8e:c9:22:b9:3f:ca:6e:f9:dc:b2:f0: 11:a4:32:bb:f1:3d:6a:d4:b3:79:16:3f:e4:cd:53:1e:4b:b8: 39:54:22:0b:c8:24:cd:dd:1b:e4:50:d9:61:33:3e:9f:11:fc: 6e:1d:b6:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnhnCP/wGTGJNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YzY3MWNkNzItZmZjMi00MmVjLWE5OWMtZTY0MDQyN2YyMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD5SJRrmDN1nlc3GNvpz6uYyEvdV8TZGkEUz 57hLcYwA4Xv/3UCkhoIyGS9AZo6ycFhMtPsQVi/Rwk6g6N5Whg0HXi8+XWi2gokM 4O0pYLjkVwKKh8IEVZdl97nF5XK5BlKQttO11YrgnilSY+b/bRw8c901se93u1Zz +qowlOhh6Lwrcm5QviAJj+Kk3ML4pXhXZh1Cr7jp/KBlGng2hk12ikGvQ9oW3cly NBrq3fBqr4QmzXLxyovQhHRuul4O1yCOg4LrJWDUT3tpK1GjU54/cgKQQsnBDKkg 35c+GpDmAB16l18CRRFdIbYwFjqQp4z+h8L3YPhYkKLTsUvWGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1RI2pJntVbjGA8a1AJKR5mnLTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjNlN2M4YTQtN2U5MC0z YjU4LWI1MTktODcwNjk1MWQxYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0O72GULCDLR9QcCuIH/n8ER90rQfMBnX3y9/c1j1cRyM71XaB5vD+I PdR3El+8piUjASuiT7DFK7yATEi0plhXx5aZhAA6WUYkwbeZftAK4HWsotj90R+W ++7WDnwA8al1r0BCXwL73etpO0FuA8iHo7MZe3EF61FyFuloA3S73TM7U79+FFjV LbwrmksJy+WoLOQLHUWoNCJ9ycWz649ffMgdXRIvkK863I9U/041Nlm4tlLwjV0B 8oo/3OsQCnikkx+g8eN+hoGOOOiOySK5P8pu+dyy8BGkMrvxPWrUs3kWP+TNUx5L uDlUIgvIJM3dG+RQ2WEzPp8R/G4dtkc= -----END CERTIFICATE-----Generated at Sat Jun 7 22:54:36 2025 by rpki-client