$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3380c823-95bb-375d-8a75-16c64bca4366.roa File: 3380c823-95bb-375d-8a75-16c64bca4366.roa (raw, json) Hash identifier: nF6+N3GPZ90dLi/tzzkhAw0/BZ6Ef2PhNgEQX65fuQ4= Subject key identifier: 4E:58:D3:C3:BE:E8:A1:EB:B7:E7:FD:6D:54:92:BD:93:56:B1:A9:3E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849EA85442A54E935C7B951DA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3380c823-95bb-375d-8a75-16c64bca4366.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 36183 IP address blocks: 172.224.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:44:2a:54:e9:35:c7:b9:51:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=d672fdae-7a4c-4235-ab60-92aee8eb48f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f6:c0:4c:4b:85:36:c6:98:3b:0e:57:45:4e: c9:e0:35:d7:7b:79:36:73:6f:18:c4:cc:f6:b1:9f: 35:e7:a9:fc:d3:b3:71:f6:52:26:16:1a:7f:c3:29: 1b:b9:04:86:75:cb:74:42:74:a1:0a:60:bf:cf:c7: 64:3a:6e:5e:b0:9e:5e:e4:0c:db:96:69:f3:29:57: 9d:04:70:b1:5a:99:fe:58:8b:ec:4e:90:e9:5b:63: 96:06:52:13:8f:11:b3:b7:bf:19:96:dd:88:62:3f: 52:30:90:a2:d6:a9:a0:5a:55:5e:f7:18:02:c0:82: 88:49:cd:b1:be:2b:d7:7a:a7:c9:92:b0:0b:b0:ca: 8f:a6:1f:63:49:1e:ec:60:0a:69:07:99:3d:b6:fd: 41:76:06:e2:3a:0c:7b:77:11:94:0b:14:7e:45:3d: af:83:e9:46:39:9f:de:5f:fb:76:dd:f9:c6:a0:16: 4b:1b:6a:7a:74:49:05:e8:09:22:4b:eb:8a:f9:32: 94:74:3a:bb:ea:93:12:8e:71:ff:8a:3e:44:ff:09: 81:17:77:27:63:e0:e9:8c:30:0c:e1:28:3f:e2:26: 06:12:47:61:ed:9c:22:83:74:bd:8c:98:e4:ba:18: d7:3e:b7:7c:d0:aa:89:c6:8c:f1:82:d8:40:15:f3: 29:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:58:D3:C3:BE:E8:A1:EB:B7:E7:FD:6D:54:92:BD:93:56:B1:A9:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3380c823-95bb-375d-8a75-16c64bca4366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:df:00:74:26:4e:9f:a9:a8:c0:8f:40:65:ae:6e:49:9e:df: 6d:34:59:ee:71:e2:ec:26:fe:39:3a:89:32:64:9e:42:2e:a9: ba:f8:86:7a:f8:66:07:e8:cb:8d:49:45:b0:a3:ce:66:30:c6: fc:2b:2a:53:a8:9b:cf:db:27:e8:77:48:b8:cd:23:e0:e4:5e: 15:fb:97:a6:ea:b0:ea:5d:6a:98:53:4e:ec:6c:a8:2d:92:8e: 01:2d:f0:75:56:87:75:bc:46:d2:8b:d6:df:9c:d8:ff:49:96: 18:b7:a6:e3:49:52:54:97:cb:3d:27:1f:79:64:d3:8f:c1:ed: ec:c0:a5:75:b6:c4:59:2e:39:df:4f:f7:af:10:2a:89:51:6f: 96:06:af:1a:8d:5b:0e:49:17:13:77:25:a2:60:07:eb:c3:f0: 44:07:08:16:b5:75:e9:50:10:a0:cd:dd:ac:73:21:0d:aa:b3: ca:ca:8f:e8:cb:cd:69:17:93:67:9d:e1:0e:e0:87:eb:88:b1: 5d:ce:fe:84:82:ed:58:67:22:7d:79:b2:7e:a6:1b:d0:73:84: e3:e8:c1:b0:3f:f2:fe:ef:d8:16:90:3f:48:1d:c7:81:78:9c: f8:d7:4e:49:49:d1:b7:a2:00:3c:4e:0f:40:21:39:40:dd:03: 2d:82:87:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUQqVOk1x7lR2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZDY3MmZkYWUtN2E0Yy00MjM1LWFiNjAtOTJhZWU4ZWI0OGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfbATEuFNsaYOw5XRU7J4DXXe3k2c28YxMz2 sZ8156n807Nx9lImFhp/wykbuQSGdct0QnShCmC/z8dkOm5esJ5e5AzblmnzKVed BHCxWpn+WIvsTpDpW2OWBlITjxGzt78Zlt2IYj9SMJCi1qmgWlVe9xgCwIKISc2x vivXeqfJkrALsMqPph9jSR7sYAppB5k9tv1BdgbiOgx7dxGUCxR+RT2vg+lGOZ/e X/t23fnGoBZLG2p6dEkF6AkiS+uK+TKUdDq76pMSjnH/ij5E/wmBF3cnY+DpjDAM 4Sg/4iYGEkdh7Zwig3S9jJjkuhjXPrd80KqJxozxgthAFfMpVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5Y08O+6KHrt+f9bVSSvZNWsak+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzM4MGM4MjMtOTViYi0z NzVkLThhNzUtMTZjNjRiY2E0MzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOC+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbfAHQmTp+pqMCPQGWubkme3200We5x4uwm/jk6iTJknkIuqbr4hnr4 Zgfoy41JRbCjzmYwxvwrKlOom8/bJ+h3SLjNI+DkXhX7l6bqsOpdaphTTuxsqC2S jgEt8HVWh3W8RtKL1t+c2P9Jlhi3puNJUlSXyz0nH3lk04/B7ezApXW2xFkuOd9P 968QKolRb5YGrxqNWw5JFxN3JaJgB+vD8EQHCBa1delQEKDN3axzIQ2qs8rKj+jL zWkXk2ed4Q7gh+uIsV3O/oSC7VhnIn15sn6mG9BzhOPowbA/8v7v2BaQP0gdx4F4 nPjXTklJ0beiADxOD0AhOUDdAy2Ch9Y= -----END CERTIFICATE-----Generated at Sat Jun 7 15:53:05 2025 by rpki-client