$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4fe6864e-9edb-3792-a45f-b8bc3491cf3e.roa File: 4fe6864e-9edb-3792-a45f-b8bc3491cf3e.roa (raw, json) Hash identifier: xwofgxyFr4TFlH+DoQKUkqklmmIh3AI1f98UTMOXQS4= Subject key identifier: FB:14:F8:4A:66:08:53:0C:3F:23:EB:C1:60:12:87:65:E1:11:D8:28 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A708D76717ED57BAC9300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4fe6864e-9edb-3792-a45f-b8bc3491cf3e.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:70:8d:76:71:7e:d5:7b:ac:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=5d4f2a5f-e054-47e8-8e8d-9ef428509523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:7c:92:cd:1d:ed:71:c1:9d:93:51:76:23:04: a6:ae:f8:b9:3d:ef:c8:63:64:da:ce:07:a9:d8:9c: 4b:ba:06:c4:b8:f7:bc:ca:a8:0d:f9:98:e2:1d:2d: fd:c3:11:60:f4:f7:28:e1:1f:32:1b:14:0a:f3:19: a9:f3:6c:b9:25:b4:4d:9d:30:6d:a7:05:30:0f:04: ed:b8:19:cb:17:08:53:8a:04:69:33:15:c6:0a:bf: ac:a2:70:7d:40:6e:65:dc:b2:3a:1b:ba:10:c0:bb: 46:bf:fe:6b:df:cc:ce:1c:d3:d7:68:54:e3:1c:f9: e7:c7:a8:d3:4f:9b:f2:6a:de:93:da:2f:d8:99:cf: d7:a8:36:c5:92:7e:dd:39:63:b7:25:47:9e:63:a5: 9f:61:d0:63:8d:1a:88:91:7a:13:3b:eb:34:24:b3: 5e:52:f9:8d:76:2a:b6:05:11:ac:1d:1c:33:88:df: 28:ea:5f:24:2f:92:d1:2a:1b:97:70:d6:3c:1c:69: 06:72:4c:2a:23:f8:f8:5c:3f:e2:b0:53:cd:04:10: e0:fb:9b:fe:89:33:d6:2a:37:36:ae:e3:84:33:29: 00:1a:ab:c1:be:ee:c4:3c:43:35:bd:68:c6:10:f8: 5c:48:b6:10:8a:4a:fb:c4:72:7e:e5:44:64:c8:f6: 25:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:14:F8:4A:66:08:53:0C:3F:23:EB:C1:60:12:87:65:E1:11:D8:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4fe6864e-9edb-3792-a45f-b8bc3491cf3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f7:f5:ea:34:69:9e:c5:b8:6f:2d:dd:4b:c1:9c:13:49:d2: 6d:8d:a2:53:b3:a7:f1:32:7f:76:c7:e5:67:e1:b5:a2:45:ae: c5:68:9d:58:79:4a:27:e9:f0:c5:0c:5d:cf:7e:a2:01:2c:68: e1:b2:99:f6:84:c2:12:83:35:98:92:f3:bd:62:b3:e1:21:30: 35:30:ec:47:3b:4a:2e:ea:03:60:4f:d0:84:c4:3d:d6:a5:65: 9f:40:15:01:6a:ae:96:0d:98:fe:8c:2a:3e:5f:34:7f:d3:8f: 3d:2b:ea:b7:03:62:89:84:0f:81:a9:96:15:f3:4a:64:b7:b5: d4:4c:35:ed:d4:0f:15:0c:a7:c6:68:8c:d7:b3:94:37:c8:d0: 15:a5:19:1a:cd:0b:eb:9a:3e:ac:f6:6d:80:b7:4a:8c:c7:97: aa:f5:6a:dd:90:6d:7b:78:f3:1c:12:b9:02:68:09:8a:6e:ad: 5e:c0:95:18:48:8c:45:ee:9b:c4:2a:c0:b0:ac:f7:65:4b:a4: cd:f3:ee:ea:d4:f9:47:b7:fb:c1:22:e1:e5:40:60:85:a6:21: 54:1b:87:20:1f:35:6f:4c:7f:9f:3d:ed:81:0c:60:2a:ad:b3: 7a:6a:86:0f:d2:df:9b:8b:1e:3a:10:3f:e1:8a:a7:f0:97:4f: 49:3f:3b:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnCNdnF+1XuskwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NWQ0ZjJhNWYtZTA1NC00N2U4LThlOGQtOWVmNDI4NTA5NTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+nySzR3tccGdk1F2IwSmrvi5Pe/IY2Tazgep 2JxLugbEuPe8yqgN+ZjiHS39wxFg9Pco4R8yGxQK8xmp82y5JbRNnTBtpwUwDwTt uBnLFwhTigRpMxXGCr+sonB9QG5l3LI6G7oQwLtGv/5r38zOHNPXaFTjHPnnx6jT T5vyat6T2i/Ymc/XqDbFkn7dOWO3JUeeY6WfYdBjjRqIkXoTO+s0JLNeUvmNdiq2 BRGsHRwziN8o6l8kL5LRKhuXcNY8HGkGckwqI/j4XD/isFPNBBDg+5v+iTPWKjc2 ruOEMykAGqvBvu7EPEM1vWjGEPhcSLYQikr7xHJ+5URkyPYlnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsU+EpmCFMMPyPrwWASh2XhEdgoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGZlNjg2NGUtOWVkYi0z NzkyLWE0NWYtYjhiYzM0OTFjZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOLWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIH39eo0aZ7FuG8t3UvBnBNJ0m2NolOzp/Eyf3bH5WfhtaJFrsVonVh5 Sifp8MUMXc9+ogEsaOGymfaEwhKDNZiS871is+EhMDUw7Ec7Si7qA2BP0ITEPdal ZZ9AFQFqrpYNmP6MKj5fNH/Tjz0r6rcDYomED4GplhXzSmS3tdRMNe3UDxUMp8Zo jNezlDfI0BWlGRrNC+uaPqz2bYC3SozHl6r1at2QbXt48xwSuQJoCYpurV7AlRhI jEXum8QqwLCs92VLpM3z7urU+Ue3+8Ei4eVAYIWmIVQbhyAfNW9Mf5897YEMYCqt s3pqhg/S35uLHjoQP+GKp/CXT0k/O8I= -----END CERTIFICATE-----Generated at Sat Jun 7 18:53:25 2025 by rpki-client