$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29fe36e9-0a64-327a-8187-4d203c9cdf69.roa File: 29fe36e9-0a64-327a-8187-4d203c9cdf69.roa (raw, json) Hash identifier: vNHxTnqTXGQGDyge1ktjDAGUB0FzbYG2luykU+y7Uq4= Subject key identifier: EB:46:F0:B8:A1:65:08:45:B6:F2:DE:2B:E0:B8:FC:67:57:4E:C9:3E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A6F9DDF09423134CC9200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29fe36e9-0a64-327a-8187-4d203c9cdf69.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:6f:9d:df:09:42:31:34:cc:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=e5b72a38-5e9e-423a-8a14-0ccdde32e3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:7b:08:7b:33:5a:9f:30:61:fb:66:53:08: f7:49:24:52:40:89:a2:36:ab:9e:f6:17:ce:7f:b8: a6:5d:7a:3e:de:df:4e:04:24:e0:86:77:05:71:67: 66:55:80:db:ca:9a:84:aa:c0:fb:60:1d:b4:e4:1f: a1:04:22:45:bd:5b:76:25:38:a6:d8:fb:2a:d3:81: 1f:7a:9c:fe:88:ba:1c:8a:35:fa:5e:a8:b1:28:e6: 35:89:19:56:c2:f3:91:06:f4:7e:82:af:b0:be:bd: c4:2d:21:38:c8:3a:08:8b:39:ae:5c:2f:ab:bc:a7: 3a:51:14:1e:d8:35:7e:fc:bb:a5:76:0d:aa:47:1d: fa:b5:ce:33:8f:13:82:ee:59:cd:df:29:29:6a:4e: a7:d5:81:8f:09:32:60:80:c6:62:ce:18:31:82:06: e9:c4:4e:70:9a:af:ec:24:8e:7b:be:ac:f7:5d:e5: 61:a5:10:7c:37:9f:ed:3a:bc:a9:54:60:de:ec:ed: 32:e8:6b:a0:2e:c0:f3:ec:66:88:e4:fe:7b:ce:54: e0:91:f0:15:cc:ee:11:64:f9:a8:21:ab:68:3e:8e: 50:9c:20:22:2a:7e:1f:82:10:3b:87:31:92:7e:08: 5b:98:16:94:d8:a0:7a:8d:ad:be:cd:1e:74:6d:aa: 9d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:46:F0:B8:A1:65:08:45:B6:F2:DE:2B:E0:B8:FC:67:57:4E:C9:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29fe36e9-0a64-327a-8187-4d203c9cdf69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a4:22:d7:12:0d:d0:0f:49:e4:bd:bf:09:b0:f1:8e:28:da: a6:fb:85:ab:7f:93:75:fc:ad:67:8a:a1:ee:02:b7:53:9e:53: 74:b2:1f:83:5b:ca:a6:51:17:98:8a:3d:d5:21:73:0d:61:bd: c2:4e:64:44:c7:7e:8b:fc:47:3b:41:82:5f:dd:53:af:d0:04: 2c:42:d4:ac:4a:d7:c2:48:4e:c1:02:63:20:63:57:68:7e:c5: 9e:73:06:57:c6:c1:68:53:4d:0e:0f:d0:9d:25:a9:fb:91:20: f4:8c:e0:a2:ef:99:04:4a:1b:8b:03:4c:01:ec:39:2c:e5:5e: 20:2d:e7:da:a3:ba:f5:0e:e9:1e:ee:ea:8e:eb:1a:a9:a9:b6: d8:27:38:1f:f2:19:b9:54:a0:7b:88:45:ae:f8:89:bd:76:82: 10:0e:c8:6b:86:4d:82:c5:74:69:13:64:46:fd:c7:73:43:f5: 79:a1:98:9d:82:36:c7:71:64:91:3d:f8:22:4b:bd:f9:ed:be: 3f:9f:44:fe:34:cb:03:96:f6:ee:67:69:2a:78:7e:73:23:79: 90:2c:98:60:de:5f:e9:df:68:71:b9:7a:83:c6:50:90:4d:ab: 7a:ea:39:2f:3d:fa:8b:5a:35:96:28:0f:04:85:a3:01:69:bf: ac:1e:61:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmm+d3wlCMTTMkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZTViNzJhMzgtNWU5ZS00MjNhLThhMTQtMGNjZGRlMzJlM2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIt7CHszWp8wYftmUwj3SSRSQImiNque9hfO f7imXXo+3t9OBCTghncFcWdmVYDbypqEqsD7YB205B+hBCJFvVt2JTim2Psq04Ef epz+iLocijX6XqixKOY1iRlWwvORBvR+gq+wvr3ELSE4yDoIizmuXC+rvKc6URQe 2DV+/Luldg2qRx36tc4zjxOC7lnN3ykpak6n1YGPCTJggMZizhgxggbpxE5wmq/s JI57vqz3XeVhpRB8N5/tOrypVGDe7O0y6GugLsDz7GaI5P57zlTgkfAVzO4RZPmo IatoPo5QnCAiKn4fghA7hzGSfghbmBaU2KB6ja2+zR50baqdGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtG8LihZQhFtvLeK+C4/GdXTsk+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjlmZTM2ZTktMGE2NC0z MjdhLTgxODctNGQyMDNjOWNkZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2kItcSDdAPSeS9vwmw8Y4o2qb7hat/k3X8rWeKoe4Ct1OeU3SyH4Nb yqZRF5iKPdUhcw1hvcJOZETHfov8RztBgl/dU6/QBCxC1KxK18JITsECYyBjV2h+ xZ5zBlfGwWhTTQ4P0J0lqfuRIPSM4KLvmQRKG4sDTAHsOSzlXiAt59qjuvUO6R7u 6o7rGqmpttgnOB/yGblUoHuIRa74ib12ghAOyGuGTYLFdGkTZEb9x3ND9XmhmJ2C NsdxZJE9+CJLvfntvj+fRP40ywOW9u5naSp4fnMjeZAsmGDeX+nfaHG5eoPGUJBN q3rqOS89+otaNZYoDwSFowFpv6weYR0= -----END CERTIFICATE-----Generated at Sun Jun 8 00:58:41 2025 by rpki-client