$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61f844d5-ca0a-3e17-b5fa-2c8493bb0b48.roa File: 61f844d5-ca0a-3e17-b5fa-2c8493bb0b48.roa (raw, json) Hash identifier: pxkBVyK2si60JQh0gPiaR2bpWjNEkVWKdCR6x0NIsbI= Subject key identifier: 1F:2D:75:51:20:17:3A:3C:08:A1:6A:39:58:F1:E2:FD:19:2D:1E:94 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C0A4F03569527C121D805830 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61f844d5-ca0a-3e17-b5fa-2c8493bb0b48.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f0:35:69:52:7c:12:1d:80:58:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=33aaa18a-e013-4ba0-b17e-3fbf3f20be6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5d:5a:59:fe:96:e6:ba:d3:ae:4b:bb:ea:cd: 64:ff:de:06:4b:45:9c:7b:6c:ab:a0:7e:ba:96:ff: 40:55:ac:70:34:ba:4d:80:da:ab:74:1b:62:96:9e: a5:07:49:42:5a:8c:31:8e:ab:01:29:bb:03:ac:92: 5e:e4:71:0a:16:c3:4a:9d:06:7e:20:ef:0a:91:d9: 6b:81:ea:98:fd:ea:b8:4d:c8:60:09:3d:0a:79:35: 5c:53:34:4f:e6:c6:34:5b:ba:d5:de:82:15:2a:39: 94:4f:3e:9b:4d:c2:e4:e2:f3:49:12:82:ee:64:2d: 74:7d:df:f2:85:7f:83:80:64:68:6c:db:26:30:24: 3a:46:32:57:44:9e:34:73:ce:97:8d:eb:e6:24:f7: 07:45:d7:d6:9e:b5:3b:91:f1:42:24:4f:2f:69:df: 7a:39:c1:fa:e5:e9:7c:bc:d0:11:0e:8a:6c:4c:68: 27:83:95:c5:a7:3a:fa:43:65:41:9a:ef:df:29:9d: ec:f5:f0:fc:b5:8d:ac:cc:35:d6:4f:4f:0a:af:ab: 28:b7:d5:76:e5:7b:c4:c9:71:4a:c8:4f:ef:1f:fe: 14:58:78:53:bd:5c:c9:38:75:34:11:f0:e2:2b:49: c9:d6:39:0a:55:8d:b2:42:c5:ce:2e:8e:8e:f2:03: a2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2D:75:51:20:17:3A:3C:08:A1:6A:39:58:F1:E2:FD:19:2D:1E:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61f844d5-ca0a-3e17-b5fa-2c8493bb0b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:55:71:9d:e1:38:33:1c:b2:26:04:49:7c:a0:8e:c1:ce:ee: 6a:3e:72:8b:eb:fb:36:a9:c8:70:25:e7:ba:f2:11:48:9f:f1: 16:77:77:36:27:df:07:e6:0a:87:47:41:a9:57:99:3b:a6:0b: f2:b2:bb:43:d5:c1:1d:4f:9c:ab:bc:79:fa:87:51:4d:72:c5: 41:00:89:90:87:4e:9c:32:a5:ce:23:45:6b:49:6b:43:e1:f7: 76:b0:7e:46:63:5f:d1:fc:11:c8:11:8d:ba:55:f6:8f:42:eb: 7f:e9:7c:45:52:15:0b:0e:12:e2:ee:e6:c2:7a:c1:23:33:e2: 8e:2b:70:fb:66:74:98:23:e1:f3:a5:b1:cd:6d:10:51:82:fb: d4:2e:52:ca:9c:e2:df:89:22:5a:92:fd:e3:f2:24:62:28:c1: de:08:33:a1:80:13:15:dd:11:55:1c:3c:21:87:e8:b3:01:bf: 95:e1:9b:73:e4:fe:5d:03:24:26:8f:fa:ec:de:d9:3d:b2:e2: 3b:de:e6:e2:a1:0d:8e:c6:a7:b8:4f:95:a7:79:01:93:d4:36: d4:a6:87:47:94:fe:e7:92:15:e5:f5:1b:6e:8b:9e:9f:85:77: 2d:ed:72:eb:81:ab:66:8d:57:70:38:cc:c2:5e:17:f9:ad:ff: 67:5a:d5:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApPA1aVJ8Eh2AWDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MzNhYWExOGEtZTAxMy00YmEwLWIxN2UtM2ZiZjNmMjBiZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl1aWf6W5rrTrku76s1k/94GS0Wce2yroH66 lv9AVaxwNLpNgNqrdBtilp6lB0lCWowxjqsBKbsDrJJe5HEKFsNKnQZ+IO8Kkdlr geqY/eq4TchgCT0KeTVcUzRP5sY0W7rV3oIVKjmUTz6bTcLk4vNJEoLuZC10fd/y hX+DgGRobNsmMCQ6RjJXRJ40c86XjevmJPcHRdfWnrU7kfFCJE8vad96OcH65el8 vNARDopsTGgng5XFpzr6Q2VBmu/fKZ3s9fD8tY2szDXWT08Kr6sot9V25XvEyXFK yE/vH/4UWHhTvVzJOHU0EfDiK0nJ1jkKVY2yQsXOLo6O8gOi6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8tdVEgFzo8CKFqOVjx4v0ZLR6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjFmODQ0ZDUtY2EwYS0z ZTE3LWI1ZmEtMmM4NDkzYmIwYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFVcZ3hODMcsiYESXygjsHO7mo+covr+zapyHAl57ryEUif8RZ3dzYn 3wfmCodHQalXmTumC/Kyu0PVwR1PnKu8efqHUU1yxUEAiZCHTpwypc4jRWtJa0Ph 93awfkZjX9H8EcgRjbpV9o9C63/pfEVSFQsOEuLu5sJ6wSMz4o4rcPtmdJgj4fOl sc1tEFGC+9QuUsqc4t+JIlqS/ePyJGIowd4IM6GAExXdEVUcPCGH6LMBv5Xhm3Pk /l0DJCaP+uze2T2y4jve5uKhDY7Gp7hPlad5AZPUNtSmh0eU/ueSFeX1G26Lnp+F dy3tcuuBq2aNV3A4zMJeF/mt/2da1cs= -----END CERTIFICATE-----Generated at Sat Jun 7 14:02:22 2025 by rpki-client