$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32fef26c-9dc1-3164-b8e3-74b8c43eb11e.roa File: 32fef26c-9dc1-3164-b8e3-74b8c43eb11e.roa (raw, json) Hash identifier: I1NkO1cTkyP6gnfEYKNpC4UkftxcL1a6flH7qkz85RM= Subject key identifier: A6:BE:C9:87:8C:0D:61:53:12:7A:9F:61:86:A9:F6:C2:C8:14:61:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C0A4EEFE4887CE8B78B10700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32fef26c-9dc1-3164-b8e3-74b8c43eb11e.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ee:fe:48:87:ce:8b:78:b1:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=0a6a4b38-7e1e-4fbd-96a0-c25acc13d437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:db:d1:6f:ef:b9:bf:a6:1a:c4:57:c6:0c:4f: fd:67:49:ff:92:79:9f:8f:40:6d:00:c1:88:4a:11: c3:34:a4:ee:b2:99:56:d4:87:f6:39:70:43:cb:0d: 4f:2a:2e:11:3a:c2:76:cb:7f:8d:97:b8:66:41:48: 39:bc:ef:9b:1c:61:a0:ec:78:68:61:66:6f:4d:3a: 1c:19:61:39:e3:37:36:e4:43:0c:84:5a:3d:37:f7: a4:f7:ac:f5:9a:10:3d:37:32:0c:fb:c6:76:54:fa: 4c:e8:d4:44:0f:0f:b3:ac:1f:fe:d7:58:2d:89:cc: e4:6f:00:8d:69:9e:af:55:5d:cc:dc:4a:a5:8c:65: 11:d0:23:60:6d:12:2f:8d:28:c1:7c:81:03:eb:c7: d4:58:6a:48:d1:97:52:18:b6:b3:11:6d:4c:60:e7: 7c:65:e9:9c:4e:60:2d:b8:de:8f:fd:83:3b:14:5f: b6:80:f0:ef:98:3b:6b:4d:09:15:c4:f7:ee:7f:85: df:e2:7a:83:83:61:06:36:7e:ab:53:5f:f2:1a:5b: 6e:af:8d:14:bf:fa:f0:3a:6a:3f:68:d3:86:96:69: 00:1d:87:f5:b8:4a:dc:a4:52:11:c4:43:d3:0a:96: 3d:a2:22:eb:e9:6f:b4:bf:bb:49:44:f8:d9:d3:68: 78:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BE:C9:87:8C:0D:61:53:12:7A:9F:61:86:A9:F6:C2:C8:14:61:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32fef26c-9dc1-3164-b8e3-74b8c43eb11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:48:c6:f2:20:bc:b2:87:ac:fb:58:07:35:67:4f:95:b0:35: f0:ac:d5:77:14:34:84:72:81:3f:9a:34:99:77:08:fe:0e:6b: f1:f0:60:94:45:9e:c2:23:e4:41:c9:be:5d:e3:c5:28:a9:4d: bd:62:9a:d0:62:7b:d6:1b:bb:fe:ac:3a:e5:2d:3e:e3:b2:57: 6f:7c:77:8b:94:0c:19:9e:fe:a0:bc:31:3d:d5:30:27:50:22: f5:a1:b7:36:d7:66:d3:e2:f9:90:60:cf:e4:0a:32:16:5d:cb: 6d:65:51:c9:50:4c:6f:96:96:42:7b:00:de:34:e6:c5:98:b3: 8d:a6:6e:d7:c6:b4:75:15:68:cd:15:1b:0b:1c:98:72:81:7a: ad:56:2e:f8:b9:bb:e8:2b:ed:68:59:c1:f9:31:74:2b:d1:11: b2:ef:78:48:83:8b:df:6e:90:ce:83:b3:65:e7:92:c8:85:50: 8e:83:13:ce:af:80:56:5a:48:dd:b0:ff:1d:a1:ac:30:d1:45: ca:b6:32:e3:90:23:91:14:15:4d:16:c1:7d:70:82:5d:36:14: 12:ae:1e:33:35:aa:35:68:f4:e4:73:11:a6:e5:23:96:8e:43: 04:d4:33:5c:b9:ff:04:7a:92:ac:ba:9d:25:bc:01:40:06:e6: 4f:94:fa:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApO7+SIfOi3ixBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MGE2YTRiMzgtN2UxZS00ZmJkLTk2YTAtYzI1YWNjMTNkNDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9vRb++5v6YaxFfGDE/9Z0n/knmfj0BtAMGI ShHDNKTusplW1If2OXBDyw1PKi4ROsJ2y3+Nl7hmQUg5vO+bHGGg7HhoYWZvTToc GWE54zc25EMMhFo9N/ek96z1mhA9NzIM+8Z2VPpM6NREDw+zrB/+11gticzkbwCN aZ6vVV3M3EqljGUR0CNgbRIvjSjBfIED68fUWGpI0ZdSGLazEW1MYOd8ZemcTmAt uN6P/YM7FF+2gPDvmDtrTQkVxPfuf4Xf4nqDg2EGNn6rU1/yGltur40Uv/rwOmo/ aNOGlmkAHYf1uErcpFIRxEPTCpY9oiLr6W+0v7tJRPjZ02h4rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa+yYeMDWFTEnqfYYap9sLIFGH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJmZWYyNmMtOWRjMS0z MTY0LWI4ZTMtNzRiOGM0M2ViMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItIxvIgvLKHrPtYBzVnT5WwNfCs1XcUNIRygT+aNJl3CP4Oa/HwYJRF nsIj5EHJvl3jxSipTb1imtBie9Ybu/6sOuUtPuOyV298d4uUDBme/qC8MT3VMCdQ IvWhtzbXZtPi+ZBgz+QKMhZdy21lUclQTG+WlkJ7AN405sWYs42mbtfGtHUVaM0V GwscmHKBeq1WLvi5u+gr7WhZwfkxdCvREbLveEiDi99ukM6Ds2XnksiFUI6DE86v gFZaSN2w/x2hrDDRRcq2MuOQI5EUFU0WwX1wgl02FBKuHjM1qjVo9ORzEablI5aO QwTUM1y5/wR6kqy6nSW8AUAG5k+U+qU= -----END CERTIFICATE-----Generated at Sat Jun 7 13:56:46 2025 by rpki-client