$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cad853d-9359-36e1-8ab7-23580b1a89f0.roa File: 4cad853d-9359-36e1-8ab7-23580b1a89f0.roa (raw, json) Hash identifier: UsFv27gAfmNCRPn6UrSeD9WKPl6S3S2plzcOTxSIloI= Subject key identifier: F1:34:7C:75:CE:16:9C:6B:44:E1:3E:A4:AB:D5:B5:54:90:A8:73:4C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A77B16D9981E8DB0F2A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cad853d-9359-36e1-8ab7-23580b1a89f0.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:77:b1:6d:99:81:e8:db:0f:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=fc1863b9-d0c6-4ab3-bb70-7fa6cfe0cf7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:8e:92:73:6f:e9:3c:6c:31:e1:2b:cc:4b: ef:de:ba:c3:06:d6:77:ba:09:52:92:68:d3:55:a8: e2:91:ae:7b:e7:08:1c:08:80:55:47:57:15:0a:0e: 5e:cf:57:55:1d:1c:a4:a9:7f:ad:93:dd:a7:6e:93: 5a:c2:7a:82:a0:dd:f8:95:45:33:b4:48:e8:cf:e6: d3:d9:78:1a:80:d9:c9:39:fd:27:c4:72:0b:1f:b5: 47:21:e8:fb:c3:35:a7:cb:0d:0e:07:f6:4d:e1:80: 8b:a4:e4:ad:e7:d0:04:ca:5d:19:d6:84:14:b6:7c: 36:d9:91:18:a1:12:bc:6b:6f:55:de:49:59:2d:31: 16:98:f3:b6:f6:0b:a8:7a:a0:d2:96:82:c3:66:88: 0b:15:14:8a:26:12:db:ad:3f:bc:54:52:71:5d:a4: e6:f2:7c:70:29:04:d4:da:57:f3:7c:06:83:b8:41: 6b:e1:25:91:cc:01:bd:43:eb:e5:2b:a6:3f:82:94: cd:ee:eb:4a:ba:44:bd:d1:49:c5:f9:64:b0:55:b5: d4:b4:d3:83:40:8e:ba:33:6d:3d:94:b0:dc:50:5f: d5:64:ec:8f:16:b9:30:4a:ae:44:d6:dd:e0:81:d1: a4:89:4c:b7:b0:4d:35:3a:72:09:1f:ff:ec:bd:ad: 33:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:34:7C:75:CE:16:9C:6B:44:E1:3E:A4:AB:D5:B5:54:90:A8:73:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cad853d-9359-36e1-8ab7-23580b1a89f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:65:73:22:5d:d6:fb:4e:ca:13:26:1f:bc:cc:41:b8:b9:d0: 98:ab:2d:61:ea:9f:b7:a4:75:3f:ad:dd:fd:9b:92:47:8e:63: 97:be:72:2f:b5:52:e9:2c:f1:d7:9c:1d:ef:cd:d7:30:bb:ba: bd:73:36:34:ce:89:be:f6:a9:78:ad:7b:04:db:b0:56:8d:4b: e7:1b:a2:94:9c:10:49:f4:29:6a:31:8c:37:44:53:06:fb:66: 37:b7:52:a7:fd:bc:88:2a:d0:1b:b3:d1:88:eb:6b:4b:35:30: 32:44:ca:3e:f6:e7:f2:d8:98:ca:fb:a3:cf:bc:37:7c:ce:c7: 5e:12:f7:1a:1a:d9:01:48:9e:ee:c7:fc:ab:fc:12:98:b3:a8: af:6f:c3:f0:d9:ce:fe:cc:68:f2:f1:8a:fe:71:c2:87:28:c2: d4:3e:ad:09:be:07:10:3b:47:ee:57:d4:35:a2:db:6c:17:e4: f7:27:8a:b2:44:2c:d3:bd:76:e7:68:42:14:49:e4:32:9e:2f: 44:0c:47:9d:19:be:d8:94:65:4b:fd:68:d9:ad:d5:2b:37:55: 57:14:63:d0:af:ea:a6:69:d5:47:cc:df:80:57:7d:1b:d3:b3: df:10:27:36:b9:90:10:1f:93:ec:ef:40:9c:51:5f:78:5f:ee: f2:c5:42:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnexbZmB6NsPKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZmMxODYzYjktZDBjNi00YWIzLWJiNzAtN2ZhNmNmZTBjZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1aOknNv6TxsMeErzEvv3rrDBtZ3uglSkmjT Vajika575wgcCIBVR1cVCg5ez1dVHRykqX+tk92nbpNawnqCoN34lUUztEjoz+bT 2XgagNnJOf0nxHILH7VHIej7wzWnyw0OB/ZN4YCLpOSt59AEyl0Z1oQUtnw22ZEY oRK8a29V3klZLTEWmPO29guoeqDSloLDZogLFRSKJhLbrT+8VFJxXaTm8nxwKQTU 2lfzfAaDuEFr4SWRzAG9Q+vlK6Y/gpTN7utKukS90UnF+WSwVbXUtNODQI66M209 lLDcUF/VZOyPFrkwSq5E1t3ggdGkiUy3sE01OnIJH//sva0zGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPE0fHXOFpxrROE+pKvVtVSQqHNMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGNhZDg1M2QtOTM1OS0z NmUxLThhYjctMjM1ODBiMWE4OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARlcyJd1vtOyhMmH7zMQbi50JirLWHqn7ekdT+t3f2bkkeOY5e+ci+1 Uuks8decHe/N1zC7ur1zNjTOib72qXitewTbsFaNS+cbopScEEn0KWoxjDdEUwb7 Zje3Uqf9vIgq0Buz0Yjra0s1MDJEyj725/LYmMr7o8+8N3zOx14S9xoa2QFInu7H /Kv8EpizqK9vw/DZzv7MaPLxiv5xwocowtQ+rQm+BxA7R+5X1DWi22wX5PcnirJE LNO9dudoQhRJ5DKeL0QMR50ZvtiUZUv9aNmt1Ss3VVcUY9Cv6qZp1UfM34BXfRvT s98QJza5kBAfk+zvQJxRX3hf7vLFQj4= -----END CERTIFICATE-----Generated at Sat Jun 7 13:59:17 2025 by rpki-client