$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c57870d-1148-344a-840e-d0c0263d5867.roa File: 2c57870d-1148-344a-840e-d0c0263d5867.roa (raw, json) Hash identifier: IAKlwc+VSynL8d4g1FFOvV4T0iNMkRMZnsRaE7/TlLs= Subject key identifier: 09:1B:A8:CE:1A:13:79:73:94:CC:76:20:8A:5A:3A:18:2D:90:C8:C1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C0A4EEAA39659A8534BB79F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c57870d-1148-344a-840e-d0c0263d5867.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ee:aa:39:65:9a:85:34:bb:79:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=a96bb6ee-55ef-47ee-bfbd-cf536f6c71b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fe:5f:72:e2:b7:52:53:8b:ce:e7:a4:1d:12: 73:e9:d8:a1:2b:1d:59:ad:1b:a4:be:43:61:4f:ad: f8:93:33:ba:78:2e:fd:f6:d9:77:6e:ec:88:8f:1e: 3e:32:99:dc:82:98:e9:c5:0c:3e:3f:18:34:91:b4: d6:38:85:4e:b2:ff:d5:4d:54:c5:a6:1f:55:ee:38: fa:46:c2:e5:89:a9:b6:1c:dc:b6:6f:0f:b5:b3:6d: 11:7f:3a:17:7e:2f:17:6f:70:4e:c5:2c:e8:6f:49: c1:30:f5:24:25:f9:6b:67:48:75:4c:23:0d:90:a7: 64:12:c7:c5:6b:bc:62:98:fe:87:26:37:ee:ac:54: 11:c0:f8:02:ad:28:ab:05:18:65:0d:ec:6b:15:5d: 75:cb:0b:69:56:cf:93:24:1c:29:b2:bc:e6:cd:4f: 79:97:1a:ce:5d:02:93:b8:32:89:36:16:57:d6:c5: 86:32:86:93:95:75:9d:d2:ba:36:dd:a3:94:2d:55: a9:8e:7a:34:38:f7:0e:37:e6:9c:ed:21:2c:b2:91: 3f:8e:22:1a:13:0b:69:6e:73:69:b4:a4:d6:3d:44: ec:db:7b:bf:2e:54:a7:2f:c1:5f:61:9e:71:0c:10: 5c:f5:29:5f:06:56:db:a0:e0:0b:16:ae:b8:b4:01: 66:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1B:A8:CE:1A:13:79:73:94:CC:76:20:8A:5A:3A:18:2D:90:C8:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c57870d-1148-344a-840e-d0c0263d5867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:47:5d:2d:1a:06:6a:21:52:41:6c:ec:7c:d7:59:a3:11:d9: e7:e8:43:10:5f:90:10:68:b4:bc:ea:5d:a8:b7:37:d7:aa:78: a7:2a:a7:cd:6d:86:a7:92:07:68:8d:8b:5c:dc:38:ca:75:f7: 2f:2f:28:eb:98:a4:42:e2:a4:0d:ce:2a:be:f2:1f:dd:ac:4e: 27:dc:c6:b3:b4:85:3f:b4:56:31:84:91:16:c5:a1:52:e6:30: 2f:c1:12:a0:c2:81:c8:8d:0a:88:93:89:e8:0f:98:2d:00:23: 26:07:f3:d0:05:a5:63:c5:29:40:84:5f:44:ca:80:f9:9c:85: 73:f7:b3:18:ea:b0:9f:18:2c:0d:e8:d8:98:bd:71:d5:26:1f: ab:b4:32:4c:81:0f:12:eb:17:f7:e3:63:ca:9a:af:a6:b1:a4: 1c:e3:2b:10:d2:de:20:86:71:dd:47:39:cd:1d:e3:6c:fb:ca: a2:cc:2e:ae:5d:ae:10:02:04:33:54:86:50:c8:84:3b:b2:95: 3b:f6:0c:6f:37:d8:13:7e:06:af:6c:9e:74:c5:d7:4e:1c:18: b4:bf:7a:19:af:9a:d6:94:44:21:ef:dc:75:49:9c:c6:83:c8: 19:55:1a:e2:e3:75:68:e9:2a:d6:65:9f:c7:6e:ad:12:c6:c8: 45:c6:d5:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApO6qOWWahTS7efAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YTk2YmI2ZWUtNTVlZi00N2VlLWJmYmQtY2Y1MzZmNmM3MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6P5fcuK3UlOLzuekHRJz6dihKx1ZrRukvkNh T634kzO6eC799tl3buyIjx4+MpncgpjpxQw+Pxg0kbTWOIVOsv/VTVTFph9V7jj6 RsLliam2HNy2bw+1s20RfzoXfi8Xb3BOxSzob0nBMPUkJflrZ0h1TCMNkKdkEsfF a7ximP6HJjfurFQRwPgCrSirBRhlDexrFV11ywtpVs+TJBwpsrzmzU95lxrOXQKT uDKJNhZX1sWGMoaTlXWd0ro23aOULVWpjno0OPcON+ac7SEsspE/jiIaEwtpbnNp tKTWPUTs23u/LlSnL8FfYZ5xDBBc9SlfBlbboOALFq64tAFmBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkbqM4aE3lzlMx2IIpaOhgtkMjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmM1Nzg3MGQtMTE0OC0z NDRhLTg0MGUtZDBjMDI2M2Q1ODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhHXS0aBmohUkFs7HzXWaMR2efoQxBfkBBotLzqXai3N9eqeKcqp81t hqeSB2iNi1zcOMp19y8vKOuYpELipA3OKr7yH92sTifcxrO0hT+0VjGEkRbFoVLm MC/BEqDCgciNCoiTiegPmC0AIyYH89AFpWPFKUCEX0TKgPmchXP3sxjqsJ8YLA3o 2Ji9cdUmH6u0MkyBDxLrF/fjY8qar6axpBzjKxDS3iCGcd1HOc0d42z7yqLMLq5d rhACBDNUhlDIhDuylTv2DG832BN+Bq9snnTF104cGLS/ehmvmtaURCHv3HVJnMaD yBlVGuLjdWjpKtZln8durRLGyEXG1T0= -----END CERTIFICATE-----Generated at Sat Jun 7 15:31:20 2025 by rpki-client