$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fb18405-10dd-3001-8e81-b4467c5fd67c.roa File: 3fb18405-10dd-3001-8e81-b4467c5fd67c.roa (raw, json) Hash identifier: JfxfauVoi3JCPs5xVFJSQJWwlPWN5C+dwXn5yYIeNlU= Subject key identifier: 14:C1:CC:C1:68:EE:09:97:E6:C2:70:37:05:0E:87:E5:BC:40:82:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A6FAB68DC872AC7736C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fb18405-10dd-3001-8e81-b4467c5fd67c.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:6f:ab:68:dc:87:2a:c7:73:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=eeb32d7e-b49d-42a6-9dbb-cfac566af220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0a:d1:51:04:f9:2b:1e:d4:82:68:fd:89:5d: 8f:7d:9e:8b:db:79:f9:76:aa:a5:52:4e:49:eb:3a: 6c:7d:f1:60:3c:95:57:71:d7:b9:bc:86:9b:18:66: 57:58:8f:ad:38:03:b8:82:eb:5a:eb:89:84:43:7e: 39:ec:70:d3:93:7d:40:0c:f5:5c:f4:17:e6:36:2d: ea:5c:d7:ca:4b:ad:85:69:cf:ab:f1:83:98:5b:5a: d5:1e:02:b0:ce:79:e6:eb:48:a5:95:18:44:00:be: 85:c1:8f:db:dc:e9:37:c4:26:2c:32:82:d2:76:85: 84:68:67:77:14:a2:58:78:5a:16:2e:3a:53:a1:f0: 2d:27:d8:9d:9c:d2:25:12:48:24:6b:46:02:0a:c0: 83:0c:4d:84:88:2e:4d:05:1b:0c:0b:6a:99:0d:62: e0:96:bd:9f:11:4b:e7:de:77:5a:38:c1:fe:79:64: d8:46:32:79:1c:0c:27:5d:ac:8d:66:d8:51:62:47: d3:91:96:78:86:7a:99:20:f5:f9:b9:cf:61:83:cd: e6:6b:02:6f:a2:d1:aa:89:a1:b8:30:8f:63:93:ee: 73:47:09:df:e6:b3:23:60:7b:7a:1d:94:ef:79:96: 61:dc:70:4d:35:4d:73:cd:67:7b:a2:d1:69:1c:de: 6e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C1:CC:C1:68:EE:09:97:E6:C2:70:37:05:0E:87:E5:BC:40:82:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fb18405-10dd-3001-8e81-b4467c5fd67c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:69:eb:e1:2e:d4:46:cb:f2:51:67:87:f6:34:71:b2:8b:4c: 77:57:9c:97:0b:2e:5b:73:f2:a6:4c:bd:6c:56:e9:4c:64:57: a2:26:91:72:78:97:2a:1d:1e:2d:95:7a:0a:88:e9:d8:15:09: 23:a8:c5:b0:3c:52:45:8d:26:12:f2:f6:45:c3:49:ed:15:90: 80:66:b7:86:ec:2f:eb:92:e8:1c:d5:98:9b:1f:ed:8a:a6:3d: 43:94:f3:ea:08:75:22:44:1f:eb:f2:5a:46:fa:40:f7:52:e1: 14:32:ce:d2:64:59:c5:f2:cf:40:18:2b:18:ef:6c:3a:82:18: 44:71:30:1e:ae:fd:86:7e:10:bc:27:d7:75:af:59:68:c6:64: 15:ed:9f:4e:ba:50:aa:5c:c2:1e:b4:d3:0d:b5:9d:8f:b0:31: c6:e9:da:b9:43:06:69:97:fc:c8:1a:c6:7a:e3:e7:e1:c6:bd: dc:e5:57:db:b5:ce:2f:9a:aa:f7:6a:52:fc:b8:da:c9:aa:5d: e3:e4:27:62:c8:98:ce:14:bf:19:66:c5:cf:f4:08:4a:58:90: f3:9b:cd:77:95:75:5f:69:4c:ee:c8:bc:9f:02:56:28:a7:ab: bf:76:32:5d:fe:38:0f:8b:81:bf:1a:06:ca:9d:6b:80:d4:f3: 86:91:97:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmm+raNyHKsdzbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZWViMzJkN2UtYjQ5ZC00MmE2LTlkYmItY2ZhYzU2NmFmMjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhArRUQT5Kx7Ugmj9iV2PfZ6L23n5dqqlUk5J 6zpsffFgPJVXcde5vIabGGZXWI+tOAO4guta64mEQ3457HDTk31ADPVc9BfmNi3q XNfKS62Fac+r8YOYW1rVHgKwznnm60illRhEAL6FwY/b3Ok3xCYsMoLSdoWEaGd3 FKJYeFoWLjpTofAtJ9idnNIlEkgka0YCCsCDDE2EiC5NBRsMC2qZDWLglr2fEUvn 3ndaOMH+eWTYRjJ5HAwnXayNZthRYkfTkZZ4hnqZIPX5uc9hg83mawJvotGqiaG4 MI9jk+5zRwnf5rMjYHt6HZTveZZh3HBNNU1zzWd7otFpHN5u7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTBzMFo7gmX5sJwNwUOh+W8QIKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ZiMTg0MDUtMTBkZC0z MDAxLThlODEtYjQ0NjdjNWZkNjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlp6+Eu1EbL8lFnh/Y0cbKLTHdXnJcLLltz8qZMvWxW6UxkV6ImkXJ4 lyodHi2VegqI6dgVCSOoxbA8UkWNJhLy9kXDSe0VkIBmt4bsL+uS6BzVmJsf7Yqm PUOU8+oIdSJEH+vyWkb6QPdS4RQyztJkWcXyz0AYKxjvbDqCGERxMB6u/YZ+ELwn 13WvWWjGZBXtn066UKpcwh600w21nY+wMcbp2rlDBmmX/Mgaxnrj5+HGvdzlV9u1 zi+aqvdqUvy42smqXePkJ2LImM4Uvxlmxc/0CEpYkPObzXeVdV9pTO7IvJ8CViin q792Ml3+OA+Lgb8aBsqda4DU84aRlyQ= -----END CERTIFICATE-----Generated at Sat Jun 7 23:09:37 2025 by rpki-client