$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43612791-7d6b-3e44-99b1-411c6d54b12e.roa File: 43612791-7d6b-3e44-99b1-411c6d54b12e.roa (raw, json) Hash identifier: oH3ES4Aq7THpRYjsfY7vYIML8ENO9lt+p4j8F3C2FrA= Subject key identifier: 18:54:F5:4E:B5:D9:48:B7:C8:46:CD:34:BD:18:CF:5C:76:8C:1C:1D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C20AB78278FFE04759953E90 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43612791-7d6b-3e44-99b1-411c6d54b12e.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 36183 IP address blocks: 172.225.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:b7:82:78:ff:e0:47:59:95:3e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=fed36b57-4b91-4e06-8f7e-69892ea2456e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:cc:69:f4:ff:d3:72:f0:28:1d:02:92:7d: 63:74:d8:0e:61:56:3f:1f:04:b8:f6:2b:65:1b:a8: c7:b2:21:70:5a:04:4f:75:6c:de:54:a3:5c:df:63: e1:60:b0:7e:a6:c6:64:ba:dd:58:53:16:9d:e2:00: 8c:72:a1:23:65:05:2c:c7:00:48:b1:88:59:1a:49: d3:18:62:a5:3a:fc:66:33:de:0c:37:50:f6:f7:55: bb:da:13:53:5b:4c:66:47:6a:ee:6b:99:70:9d:2d: 15:7f:c2:85:6b:a7:5d:79:65:d2:6f:fd:5f:92:06: 10:d4:05:56:75:bf:6d:14:b6:70:b0:c5:04:30:e9: b7:29:d0:44:aa:d2:25:13:94:86:5b:67:d8:f5:45: 11:7f:17:6f:f3:b0:fa:38:09:fa:6a:87:ff:6d:e1: ea:d0:f0:ea:5c:db:38:48:1d:56:e2:14:23:75:00: 8e:a8:41:25:c2:68:ab:72:8c:2a:ce:c2:fd:78:4d: 05:d1:5f:7d:1f:18:54:51:e8:57:4a:29:8d:5c:70: 3e:80:a8:bb:1c:0a:1b:b3:b4:99:ef:8d:13:64:a4: 77:c1:d2:df:1c:15:9d:d2:57:ad:c2:67:77:42:23: f9:92:0c:1e:aa:fa:71:bd:eb:d1:be:8e:4a:50:e3: 51:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:54:F5:4E:B5:D9:48:B7:C8:46:CD:34:BD:18:CF:5C:76:8C:1C:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43612791-7d6b-3e44-99b1-411c6d54b12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f4:f4:a3:17:27:cc:92:fe:01:cc:70:8c:a1:53:c8:f2:3f: 76:91:9e:d4:4b:6a:d9:27:79:be:6f:cc:25:f5:ea:68:fd:cf: 0b:ab:69:f9:93:d6:ee:fc:f1:f4:cb:cd:30:ea:6f:84:20:55: 7f:ba:f7:5c:d7:20:16:40:84:6f:48:25:6f:5d:40:af:11:d1: 75:9c:a5:eb:6e:85:16:42:2d:1e:b1:43:2b:6f:bc:09:8f:38: 61:51:c5:44:69:c6:9c:74:ed:3b:8f:de:a6:cc:5e:25:29:37: c1:d4:14:19:b0:40:97:0a:f6:df:79:2b:2f:ab:2e:be:eb:20: c1:1e:3b:33:05:b6:4b:44:3c:1c:4d:d1:13:c5:9d:f3:b2:fa: 2b:0a:29:e0:f6:f9:dd:95:f6:ef:eb:c9:1e:2b:85:ee:46:d3: 85:b3:55:06:43:bb:9d:6e:04:03:e7:eb:43:7b:7a:9a:7d:8c: 35:a5:5f:ea:7c:d1:59:ad:37:30:d5:a7:00:55:0c:1b:92:a5: d1:4a:45:39:9d:eb:25:33:fb:a9:e4:1c:c5:1b:91:09:da:da: 7f:62:2d:6d:3e:04:bc:14:eb:05:68:44:e7:12:ac:a9:3c:34: e9:b2:a8:dc:2b:60:a3:96:66:ae:d0:e0:b3:b7:5e:2e:ab:a4: ed:3f:cd:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCreCeP/gR1mVPpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZmVkMzZiNTctNGI5MS00ZTA2LThmN2UtNjk4OTJlYTI0NTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNXMafT/03LwKB0Ckn1jdNgOYVY/HwS49itl G6jHsiFwWgRPdWzeVKNc32PhYLB+psZkut1YUxad4gCMcqEjZQUsxwBIsYhZGknT GGKlOvxmM94MN1D291W72hNTW0xmR2rua5lwnS0Vf8KFa6ddeWXSb/1fkgYQ1AVW db9tFLZwsMUEMOm3KdBEqtIlE5SGW2fY9UURfxdv87D6OAn6aof/beHq0PDqXNs4 SB1W4hQjdQCOqEElwmircowqzsL9eE0F0V99HxhUUehXSimNXHA+gKi7HAobs7SZ 740TZKR3wdLfHBWd0letwmd3QiP5kgweqvpxvevRvo5KUONR6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhU9U612Ui3yEbNNL0Yz1x2jBwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDM2MTI3OTEtN2Q2Yi0z ZTQ0LTk5YjEtNDExYzZkNTRiMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOE7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX09KMXJ8yS/gHMcIyhU8jyP3aRntRLatkneb5vzCX16mj9zwurafmT 1u788fTLzTDqb4QgVX+691zXIBZAhG9IJW9dQK8R0XWcpetuhRZCLR6xQytvvAmP OGFRxURpxpx07TuP3qbMXiUpN8HUFBmwQJcK9t95Ky+rLr7rIMEeOzMFtktEPBxN 0RPFnfOy+isKKeD2+d2V9u/ryR4rhe5G04WzVQZDu51uBAPn60N7epp9jDWlX+p8 0VmtNzDVpwBVDBuSpdFKRTmd6yUz+6nkHMUbkQna2n9iLW0+BLwU6wVoROcSrKk8 NOmyqNwrYKOWZq7Q4LO3Xi6rpO0/zR0= -----END CERTIFICATE-----Generated at Sat Jun 7 14:51:39 2025 by rpki-client