$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/393d7f86-72e1-38cd-8eeb-8b9f3e961ea2.roa File: 393d7f86-72e1-38cd-8eeb-8b9f3e961ea2.roa (raw, json) Hash identifier: tjwHaFiO3lEdK3FHgWTFIhSGfMPXF8fdFYrHbPZSfLM= Subject key identifier: FF:89:45:1C:62:0A:21:F7:C3:D9:C3:7A:71:99:C1:72:34:AE:78:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C0A4EF19E5440692E3EC6F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/393d7f86-72e1-38cd-8eeb-8b9f3e961ea2.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ef:19:e5:44:06:92:e3:ec:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=422034e1-5871-44b6-ac5a-40b3ca314363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:40:63:d3:15:a6:c5:ff:e7:8d:f9:18:fe: 39:1c:61:0e:97:16:30:79:f4:21:b8:29:90:a8:0e: 4f:9e:73:2a:e7:2e:7e:83:81:17:04:24:76:03:3f: e0:a4:4f:98:5a:db:2e:67:0c:fb:0f:05:f0:49:ea: 8f:79:9c:ef:db:2b:ee:d9:15:80:ae:a9:4f:46:c9: 3e:ee:0b:11:3e:a6:71:a4:e9:f2:12:8b:2e:5c:df: 10:a6:19:b4:47:30:1b:3f:66:fc:18:35:2f:27:3a: d9:3c:47:c3:48:f9:0c:ab:3f:53:5d:1f:2e:d1:9c: 94:99:b5:26:9b:16:ff:25:5c:37:31:dd:d9:45:1a: 75:e9:50:8b:a5:ea:35:1c:c0:48:16:29:6a:fd:d3: 45:65:80:d8:6a:19:2b:bd:de:ca:39:90:d3:e2:84: 69:52:88:b9:dc:78:17:d7:fc:c5:1d:ea:f9:66:f5: 6e:71:24:dc:16:f4:47:f8:d1:15:bc:e1:89:61:01: 40:c1:41:d4:fa:dc:a3:bf:b7:4a:5f:d7:55:d9:20: ef:8f:cd:54:27:97:a5:73:8f:7e:a1:7a:98:5f:78: 5b:49:30:44:17:33:ee:e1:ba:a8:a6:9d:e0:68:8b: 47:5a:1f:59:bd:8c:c7:0a:b0:3a:78:99:d0:20:00: 3a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:89:45:1C:62:0A:21:F7:C3:D9:C3:7A:71:99:C1:72:34:AE:78:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/393d7f86-72e1-38cd-8eeb-8b9f3e961ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:94:8f:54:04:79:b1:03:0f:e0:02:a4:32:81:d1:45:b8:9a: 45:52:ec:a7:a7:8a:f6:21:60:70:9a:c3:41:f5:31:13:58:c7: 02:8b:75:4b:93:c6:bf:e5:d6:20:aa:c0:46:3b:23:1f:5d:b1: 7f:bb:53:6e:67:dd:1b:12:94:1c:c5:48:75:47:cb:ab:db:f9: 71:e7:1d:45:1d:9c:a8:6a:c7:cc:93:5b:45:d2:e2:1a:0f:eb: 9e:c8:89:0e:94:df:30:bf:a9:23:2e:ed:74:44:2a:46:7a:15: 17:38:58:fc:ab:4a:75:97:cd:d5:8d:88:bf:38:7b:90:98:5b: 89:cd:39:71:12:eb:a5:53:ee:10:0d:65:c9:b0:bd:df:14:5e: e0:57:71:d0:f0:fe:d4:b3:67:b6:79:50:83:d1:9f:df:55:80: 3b:e0:7f:26:78:e1:4e:97:7a:50:29:a7:14:ce:d8:0c:3c:7e: f8:59:93:22:ee:7b:40:87:2c:eb:02:23:b1:1f:35:ba:e8:69: 13:6a:90:48:96:06:80:7c:38:bf:ad:09:8a:d0:7e:a2:85:5e: 5c:1e:b6:5a:88:55:08:d7:23:bc:01:4f:83:1f:60:21:6b:c8: d2:71:12:cb:c7:16:7d:4f:0f:dc:ab:01:41:99:b2:5d:70:99: 78:96:5a:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApO8Z5UQGkuPsbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NDIyMDM0ZTEtNTg3MS00NGI2LWFjNWEtNDBiM2NhMzE0MzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq69AY9MVpsX/5435GP45HGEOlxYwefQhuCmQ qA5PnnMq5y5+g4EXBCR2Az/gpE+YWtsuZwz7DwXwSeqPeZzv2yvu2RWArqlPRsk+ 7gsRPqZxpOnyEosuXN8Qphm0RzAbP2b8GDUvJzrZPEfDSPkMqz9TXR8u0ZyUmbUm mxb/JVw3Md3ZRRp16VCLpeo1HMBIFilq/dNFZYDYahkrvd7KOZDT4oRpUoi53HgX 1/zFHer5ZvVucSTcFvRH+NEVvOGJYQFAwUHU+tyjv7dKX9dV2SDvj81UJ5elc49+ oXqYX3hbSTBEFzPu4bqopp3gaItHWh9ZvYzHCrA6eJnQIAA6VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+JRRxiCiH3w9nDenGZwXI0rnh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzkzZDdmODYtNzJlMS0z OGNkLThlZWItOGI5ZjNlOTYxZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOUj1QEebEDD+ACpDKB0UW4mkVS7KenivYhYHCaw0H1MRNYxwKLdUuT xr/l1iCqwEY7Ix9dsX+7U25n3RsSlBzFSHVHy6vb+XHnHUUdnKhqx8yTW0XS4hoP 657IiQ6U3zC/qSMu7XREKkZ6FRc4WPyrSnWXzdWNiL84e5CYW4nNOXES66VT7hAN Zcmwvd8UXuBXcdDw/tSzZ7Z5UIPRn99VgDvgfyZ44U6XelAppxTO2Aw8fvhZkyLu e0CHLOsCI7EfNbroaRNqkEiWBoB8OL+tCYrQfqKFXlwetlqIVQjXI7wBT4MfYCFr yNJxEsvHFn1PD9yrAUGZsl1wmXiWWvY= -----END CERTIFICATE-----Generated at Sun Jun 8 04:17:15 2025 by rpki-client