$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c6721ee-ed88-33fa-9f2f-f2812cd7a14b.roa File: 4c6721ee-ed88-33fa-9f2f-f2812cd7a14b.roa (raw, json) Hash identifier: HQt2c0afLNuIvp/CzbYgbXXxi/WzC28IaDvtsy5tx/U= Subject key identifier: 2A:1F:7C:FA:09:97:18:C1:70:68:CE:AC:A2:1C:6D:98:AD:BC:86:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A6EB54DB975C01FE07E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c6721ee-ed88-33fa-9f2f-f2812cd7a14b.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:6e:b5:4d:b9:75:c0:1f:e0:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=a7096b7e-eefc-4c15-bcd9-93460128f72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:74:69:76:89:96:77:ce:b4:58:3a:4f:2b: 79:c1:6a:6d:a4:8d:78:e7:7a:22:c0:61:35:ec:15: b7:86:55:bd:6e:10:b3:2d:45:35:4d:7c:d7:7f:ec: 0e:b7:62:61:7c:8e:67:56:1d:6b:f6:7b:ea:0e:ab: 8b:d5:c1:53:33:bd:7d:f3:25:36:29:5b:6d:bb:de: 82:5c:36:39:7a:c4:82:1f:4d:5e:13:c0:b1:5e:1e: eb:16:21:b5:ec:b9:47:3e:37:5a:27:61:33:2f:eb: 5b:68:61:13:50:70:3e:84:d0:fc:f2:c3:b7:0a:51: 55:d4:8f:4e:bd:e0:61:b2:47:6a:ac:44:79:47:f1: 1b:61:74:e6:61:c7:f7:6f:83:90:b9:50:e8:e5:bc: 58:76:06:10:b7:f8:a4:18:ed:3d:15:4f:36:2b:b9: 89:19:00:26:07:97:4a:0b:46:81:04:b7:df:f1:56: 11:58:42:02:41:6c:2f:f8:18:c7:b7:52:a5:e5:38: 5e:2a:3f:2a:3c:24:64:6a:f5:30:5e:6c:8b:95:a6: f4:e4:65:b0:2b:57:09:64:6f:c1:dd:41:5e:f1:e0: b3:a6:e2:7e:7d:67:d7:11:43:0a:15:db:b3:c2:e2: 38:b5:34:69:a6:08:7e:37:84:1a:57:1f:65:aa:f1: 24:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1F:7C:FA:09:97:18:C1:70:68:CE:AC:A2:1C:6D:98:AD:BC:86:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c6721ee-ed88-33fa-9f2f-f2812cd7a14b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:4a:6f:d4:56:4a:74:8d:a3:98:e3:d2:ce:bd:b5:fe:c6:f1: 5b:0f:90:5b:19:f9:1e:fc:7a:76:33:5e:e9:df:0d:cd:5c:d5: 57:74:cc:8b:dc:0c:3d:db:e0:e8:8f:13:4f:81:71:f5:7c:9d: 0a:e8:a8:e8:93:0f:96:54:5e:bc:57:b9:4c:11:f1:ab:29:2e: 5e:23:39:88:1b:40:32:d9:5c:c1:e2:48:47:b8:4e:e9:f2:2d: 14:e0:37:03:1f:8c:5a:8d:e7:55:85:de:f3:dd:ba:d4:9a:52: 0e:98:fb:7d:09:6d:00:a2:0c:5e:d9:67:4e:e0:df:6c:92:d6: 73:56:c8:26:2f:18:d0:6a:28:0d:34:6f:b6:f2:1b:2f:dd:f0: cb:ba:39:ce:85:ee:68:cb:ad:1e:91:f9:82:cb:95:63:54:55: 2e:2a:c4:c2:cc:0a:5f:fc:f6:b2:41:5d:b3:db:e3:69:21:91: fd:d6:ed:b2:a1:01:95:c0:1f:f4:8f:4a:b1:2c:bf:2c:5f:c4: c3:78:5a:d5:f6:f8:05:47:bc:85:e5:12:5a:95:fa:74:0d:c3: 29:32:cd:0b:7f:e7:2d:41:0e:f4:8b:6c:8e:26:d1:5b:8a:59: ca:52:6b:3a:d7:3d:1e:76:a6:0f:7b:ee:68:3d:b1:5c:21:3d: b8:86:ae:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmm61Tbl1wB/gfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YTcwOTZiN2UtZWVmYy00YzE1LWJjZDktOTM0NjAxMjhmNzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrp0aXaJlnfOtFg6Tyt5wWptpI1453oiwGE1 7BW3hlW9bhCzLUU1TXzXf+wOt2JhfI5nVh1r9nvqDquL1cFTM7198yU2KVttu96C XDY5esSCH01eE8CxXh7rFiG17LlHPjdaJ2EzL+tbaGETUHA+hND88sO3ClFV1I9O veBhskdqrER5R/EbYXTmYcf3b4OQuVDo5bxYdgYQt/ikGO09FU82K7mJGQAmB5dK C0aBBLff8VYRWEICQWwv+BjHt1Kl5TheKj8qPCRkavUwXmyLlab05GWwK1cJZG/B 3UFe8eCzpuJ+fWfXEUMKFduzwuI4tTRppgh+N4QaVx9lqvEkOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoffPoJlxjBcGjOrKIcbZitvIYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGM2NzIxZWUtZWQ4OC0z M2ZhLTlmMmYtZjI4MTJjZDdhMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpKb9RWSnSNo5jj0s69tf7G8VsPkFsZ+R78enYzXunfDc1c1Vd0zIvc DD3b4OiPE0+BcfV8nQroqOiTD5ZUXrxXuUwR8aspLl4jOYgbQDLZXMHiSEe4Tuny LRTgNwMfjFqN51WF3vPdutSaUg6Y+30JbQCiDF7ZZ07g32yS1nNWyCYvGNBqKA00 b7byGy/d8Mu6Oc6F7mjLrR6R+YLLlWNUVS4qxMLMCl/89rJBXbPb42khkf3W7bKh AZXAH/SPSrEsvyxfxMN4WtX2+AVHvIXlElqV+nQNwykyzQt/5y1BDvSLbI4m0VuK WcpSazrXPR52pg977mg9sVwhPbiGrvg= -----END CERTIFICATE-----Generated at Sat Jun 7 14:12:03 2025 by rpki-client