$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59e29263-b01b-36f4-82a8-ff51f23f4d64.roa File: 59e29263-b01b-36f4-82a8-ff51f23f4d64.roa (raw, json) Hash identifier: V5Cr9EewGJc5/l+9DSsZuvwHyPTWZmdmhys2VJNBE8k= Subject key identifier: EB:62:DA:71:FA:A2:54:88:D4:01:C1:CC:99:2C:35:EA:65:33:EE:20 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C0A4EFE8731683F0CCDB18C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59e29263-b01b-36f4-82a8-ff51f23f4d64.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ef:e8:73:16:83:f0:cc:db:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=5a1da850-66d0-4f36-af4c-b8469c58a6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:cb:b9:61:e9:05:f8:29:af:e1:2a:10:d1: 7c:e1:07:f9:6a:9f:07:e0:65:53:bf:67:4a:6b:79: d1:17:6a:0f:a8:d2:83:39:98:71:32:d3:64:54:eb: 93:d5:5c:8b:d3:c6:a8:a6:9a:16:2a:aa:0b:41:c4: 04:89:cd:ea:5f:3c:30:d9:9c:91:04:07:1f:71:1b: d9:94:ba:b7:4d:83:38:b5:10:96:9c:c2:08:58:48: c1:14:73:df:af:f9:1c:e0:aa:20:54:c8:b4:0d:d7: 28:ef:04:51:5d:1a:f2:11:ac:4f:f2:92:62:76:04: e5:5a:25:bd:1e:b3:89:d9:ae:22:ab:3b:e6:47:37: 04:b8:e9:6f:66:bc:14:58:7d:77:9e:d4:df:8b:c2: 19:ee:37:c6:a0:0f:01:62:ec:9f:f1:94:1f:ab:72: 84:30:99:f3:63:79:c4:de:e2:ef:4b:56:1a:73:62: ba:a0:5f:60:3e:eb:88:a5:c5:d1:e2:78:04:ef:a3: c4:e0:8c:d6:75:b8:80:2a:9e:9f:e3:33:b8:a3:d3: ce:ab:09:db:fd:91:1b:fd:18:09:16:f9:17:b9:04: 44:46:f4:19:42:22:54:69:21:90:ab:4b:1e:e9:2a: 5e:32:65:e2:76:12:16:af:af:5f:64:77:64:57:66: d8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:62:DA:71:FA:A2:54:88:D4:01:C1:CC:99:2C:35:EA:65:33:EE:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59e29263-b01b-36f4-82a8-ff51f23f4d64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:40:36:a7:61:0d:ad:b6:5e:a2:06:c5:8e:bb:ce:f8:4b:08: 01:67:80:74:23:70:b3:1a:8b:76:4a:a3:a0:42:dd:c4:30:1e: 8e:e1:4d:43:82:5e:25:00:e1:65:13:51:bf:dd:65:d7:0d:26: 54:73:45:7c:4a:51:e5:82:e3:2e:c5:8d:65:19:0e:e2:97:2c: 5a:47:6e:26:02:80:0b:22:a0:a5:90:48:81:e8:7e:5c:cf:10: 6f:24:a1:e2:b9:55:b0:d7:dc:3b:68:af:9d:49:23:76:db:71: 10:b2:da:f4:ef:65:ef:46:ac:2f:10:f5:25:bf:06:70:44:fa: 53:cb:f1:88:9a:be:bd:c3:0d:7a:fe:95:25:bd:a3:7a:6c:11: c1:a9:e0:cd:1f:a5:d7:c6:f3:4e:1e:6c:90:28:48:25:7f:be: 09:95:f0:bf:53:ce:32:f2:fc:42:20:1b:63:aa:03:5e:b5:23: 39:99:c6:58:16:38:bb:18:77:93:a8:47:81:4d:34:0c:c2:3e: 6c:83:3a:ea:50:61:57:7a:da:1b:cb:da:58:9d:08:c4:d6:06: a5:70:50:c5:f5:81:55:41:d8:ce:18:6c:11:91:3a:60:60:43: c6:a5:2c:d2:bf:d8:8a:82:d0:17:56:79:61:4c:e7:d3:cc:66: 51:0e:b3:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApO/ocxaD8MzbGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NWExZGE4NTAtNjZkMC00ZjM2LWFmNGMtYjg0NjljNThhNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3XLuWHpBfgpr+EqENF84Qf5ap8H4GVTv2dK a3nRF2oPqNKDOZhxMtNkVOuT1VyL08aoppoWKqoLQcQEic3qXzww2ZyRBAcfcRvZ lLq3TYM4tRCWnMIIWEjBFHPfr/kc4KogVMi0Ddco7wRRXRryEaxP8pJidgTlWiW9 HrOJ2a4iqzvmRzcEuOlvZrwUWH13ntTfi8IZ7jfGoA8BYuyf8ZQfq3KEMJnzY3nE 3uLvS1Yac2K6oF9gPuuIpcXR4ngE76PE4IzWdbiAKp6f4zO4o9POqwnb/ZEb/RgJ FvkXuQRERvQZQiJUaSGQq0se6SpeMmXidhIWr69fZHdkV2bYTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOti2nH6olSI1AHBzJksNeplM+4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTllMjkyNjMtYjAxYi0z NmY0LTgyYTgtZmY1MWYyM2Y0ZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5ANqdhDa22XqIGxY67zvhLCAFngHQjcLMai3ZKo6BC3cQwHo7hTUOC XiUA4WUTUb/dZdcNJlRzRXxKUeWC4y7FjWUZDuKXLFpHbiYCgAsioKWQSIHoflzP EG8koeK5VbDX3Dtor51JI3bbcRCy2vTvZe9GrC8Q9SW/BnBE+lPL8Yiavr3DDXr+ lSW9o3psEcGp4M0fpdfG804ebJAoSCV/vgmV8L9TzjLy/EIgG2OqA161IzmZxlgW OLsYd5OoR4FNNAzCPmyDOupQYVd62hvL2lidCMTWBqVwUMX1gVVB2M4YbBGROmBg Q8alLNK/2IqC0BdWeWFM59PMZlEOs7Q= -----END CERTIFICATE-----Generated at Sat Jun 7 13:53:43 2025 by rpki-client