$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/265a24b5-20be-36e6-9fdb-248da6ec6b22.roa File: 265a24b5-20be-36e6-9fdb-248da6ec6b22.roa (raw, json) Hash identifier: 1lsalzYvlp1U1RSaqutShX6lapooXpbo7TkgKRK7Fco= Subject key identifier: 23:B2:B2:FB:CF:F1:63:B8:45:71:A6:37:E7:8F:01:AB:2C:96:F1:C7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A6DB935BB8322CB057580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/265a24b5-20be-36e6-9fdb-248da6ec6b22.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:6d:b9:35:bb:83:22:cb:05:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=7c5210a3-e660-4943-8060-73062fa82c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c6:5e:62:c2:d3:63:18:49:b8:b5:29:b9:6d: 8e:fb:b0:a9:59:e9:36:53:e4:74:b0:1b:87:7d:c7: c2:31:42:8d:af:85:32:35:57:7c:ff:fe:ea:e1:7d: 08:f2:d0:b8:cb:fd:ff:e4:f5:9c:72:a4:cc:23:0d: 33:d9:40:22:6c:2a:cc:d0:aa:1b:a7:3a:b8:54:6e: 7a:d1:c1:db:c7:80:ba:18:92:0c:d3:b5:a6:07:b5: 86:a1:1e:17:b2:9f:d4:c4:2e:37:87:f6:e0:d1:d5: 8f:ad:2b:0d:53:d6:8e:87:4a:72:a0:a9:eb:02:a3: 82:84:81:e7:7c:8c:e1:70:83:c1:84:2d:1a:fb:41: b6:e0:78:0b:df:66:c6:e5:1c:b1:4e:dd:85:16:ff: 73:a7:09:62:57:fc:1b:58:ef:e0:91:14:32:31:e6: 05:01:a4:3f:22:e6:95:52:98:f0:45:0b:c3:b3:dc: d0:18:78:94:90:ad:20:2d:b6:11:1c:d8:62:e3:92: 6b:c4:63:ba:cb:6e:6d:ce:b9:5a:92:50:96:fa:f2: 50:32:4a:b0:52:7b:19:34:2f:6d:d8:a3:16:b3:86: 65:fd:db:eb:a0:e2:fb:76:b8:8a:45:4e:c6:58:27: eb:a7:91:69:8d:66:62:7b:1b:73:ea:2c:e4:c0:a6: 16:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B2:B2:FB:CF:F1:63:B8:45:71:A6:37:E7:8F:01:AB:2C:96:F1:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/265a24b5-20be-36e6-9fdb-248da6ec6b22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:7a:c0:c5:a9:41:58:c4:f4:2d:02:eb:f7:5f:01:f4:a2:2d: d7:44:c3:23:a9:c0:79:a4:d9:6b:6e:c0:cd:65:5f:57:e2:90: af:91:13:44:53:83:5d:45:6d:a4:de:b5:5a:b0:77:81:50:92: 13:b7:c2:d1:f5:50:d1:23:02:b6:e0:c7:fa:08:86:d3:df:4d: 92:1e:05:48:1d:f9:3e:e0:8e:c8:63:87:f1:69:c5:fa:8f:7b: e9:97:ee:6d:bd:0b:fc:58:23:24:6f:4e:65:56:4f:e7:23:1c: 60:8a:36:97:a2:6a:a7:f0:21:6c:23:60:e2:74:de:fd:81:2f: 2d:6f:ae:fa:14:e5:78:96:2b:e8:85:14:12:c2:d6:72:79:60: d4:d8:59:99:95:23:f7:5a:27:ba:e5:98:00:e1:b4:8a:f2:30: c7:25:19:6d:42:5d:8e:ef:89:fe:87:b0:a6:ba:8a:3c:2c:9b: fd:ec:e8:29:cd:4f:78:5b:cc:9f:0a:30:fc:5d:e8:4b:22:4e: a6:1c:5e:b4:37:e3:3a:9d:38:2d:c6:0e:e8:ee:04:a0:a6:51: c8:86:78:67:fe:5c:7d:20:65:f0:d1:8d:c6:30:42:b3:64:fc: b8:f7:a1:c8:c8:b0:92:57:35:7d:3d:2e:d3:06:2b:65:33:83: d8:ec:fe:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmm25NbuDIssFdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk N2M1MjEwYTMtZTY2MC00OTQzLTgwNjAtNzMwNjJmYTgyYzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsZeYsLTYxhJuLUpuW2O+7CpWek2U+R0sBuH fcfCMUKNr4UyNVd8//7q4X0I8tC4y/3/5PWccqTMIw0z2UAibCrM0Kobpzq4VG56 0cHbx4C6GJIM07WmB7WGoR4Xsp/UxC43h/bg0dWPrSsNU9aOh0pyoKnrAqOChIHn fIzhcIPBhC0a+0G24HgL32bG5RyxTt2FFv9zpwliV/wbWO/gkRQyMeYFAaQ/IuaV UpjwRQvDs9zQGHiUkK0gLbYRHNhi45JrxGO6y25tzrlaklCW+vJQMkqwUnsZNC9t 2KMWs4Zl/dvroOL7driKRU7GWCfrp5FpjWZiextz6izkwKYWbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOysvvP8WO4RXGmN+ePAasslvHHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjY1YTI0YjUtMjBiZS0z NmU2LTlmZGItMjQ4ZGE2ZWM2YjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJ6wMWpQVjE9C0C6/dfAfSiLddEwyOpwHmk2WtuwM1lX1fikK+RE0RT g11FbaTetVqwd4FQkhO3wtH1UNEjArbgx/oIhtPfTZIeBUgd+T7gjshjh/FpxfqP e+mX7m29C/xYIyRvTmVWT+cjHGCKNpeiaqfwIWwjYOJ03v2BLy1vrvoU5XiWK+iF FBLC1nJ5YNTYWZmVI/daJ7rlmADhtIryMMclGW1CXY7vif6HsKa6ijwsm/3s6CnN T3hbzJ8KMPxd6EsiTqYcXrQ34zqdOC3GDujuBKCmUciGeGf+XH0gZfDRjcYwQrNk /Lj3ocjIsJJXNX09LtMGK2Uzg9js/vA= -----END CERTIFICATE-----Generated at Sat Jun 7 13:54:49 2025 by rpki-client