$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c842764-c4fb-3ea4-a60c-d1650908e4b2.roa File: 6c842764-c4fb-3ea4-a60c-d1650908e4b2.roa (raw, json) Hash identifier: v4HDVKBQ8Zqg7Yk/3DLjr2DTUu8pNeY+nfACf9moz7s= Subject key identifier: 36:59:B8:01:9D:6E:B9:04:A0:84:4C:F9:8D:EB:DE:59:0C:DF:28:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C0A4EE9CAB0DAED7B9CDBD88 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c842764-c4fb-3ea4-a60c-d1650908e4b2.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ee:9c:ab:0d:ae:d7:b9:cd:bd:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=db8c303a-7e52-4f9a-8b94-fc5df27e3828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b9:cc:b1:2a:b7:f0:72:f7:ed:4e:79:89:c9: b6:5e:1d:49:1c:05:72:84:a6:ec:cc:d7:86:7d:a4: 44:d3:22:e1:7e:70:92:9d:fc:8f:ec:f9:37:53:97: f3:12:2d:29:b1:4e:09:93:dc:95:5b:43:84:da:fb: bd:5f:87:3f:e9:c3:d2:65:74:04:ab:f3:ba:51:dc: 18:7f:c1:57:69:d7:59:7f:db:d3:e9:06:54:b9:f3: 3f:10:81:3a:f4:71:30:ce:1f:b5:80:ad:de:05:66: 9f:29:51:65:97:00:b7:59:d9:d3:a4:5a:50:a0:f9: 0d:69:5e:72:61:1d:f6:6f:61:15:78:89:24:b2:3c: 7d:0c:d4:58:bc:b3:5d:99:94:2a:f8:be:66:fb:1a: cf:08:89:60:03:c8:51:9e:5b:85:67:01:b7:ae:fe: 7d:47:13:08:d3:df:d5:0e:d0:c1:ad:24:be:d7:4d: fe:42:60:92:2e:01:26:9a:46:28:18:74:7b:c8:54: f1:0f:73:37:1e:b9:9a:1a:46:d7:93:51:75:be:17: e1:b4:42:55:b3:1d:61:17:21:5a:25:c2:2b:ec:9b: c1:06:9a:a5:d8:54:fc:be:7e:5c:5f:4b:69:d9:99: 0c:c1:d7:3b:87:8b:7a:39:f4:cc:1f:bc:e5:8e:98: 3f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:59:B8:01:9D:6E:B9:04:A0:84:4C:F9:8D:EB:DE:59:0C:DF:28:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c842764-c4fb-3ea4-a60c-d1650908e4b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:b3:28:bb:13:d1:f2:11:7d:7a:e3:d4:6d:f5:1a:64:1b:a5: e5:1a:43:a3:04:91:a8:44:1a:a9:fe:bd:16:98:3b:fa:57:00: f0:09:12:b5:92:68:93:4b:1e:8b:22:c0:86:2b:78:57:a4:c3: 92:ac:8e:76:14:45:6f:78:fb:a4:56:7e:4c:03:22:00:84:b1: 1b:9c:7d:cd:b6:e1:e8:aa:3c:61:f3:8f:f7:af:c8:cb:36:ef: c4:cc:13:71:d1:b9:82:2b:91:84:6d:87:4e:c2:d8:40:35:96: 0a:f4:40:45:c1:47:99:85:cf:ff:e8:ca:9d:54:e6:09:54:05: df:80:68:f0:93:ba:83:87:55:34:c8:0c:5d:79:8d:14:69:5f: 4d:2f:cb:5e:08:53:32:40:74:ad:bb:5f:a5:3e:95:22:7a:e5: 0b:15:bc:5b:b7:17:b2:8d:65:05:c5:ab:a8:a9:41:4e:f3:31: 83:5a:59:8f:4d:7c:2b:23:86:89:1d:50:ee:ea:3c:3a:53:5b: 8d:c0:49:ba:07:d6:af:ba:55:37:d4:66:c0:73:bc:d6:f4:cc: cd:69:ff:bd:e9:07:b3:15:20:68:8c:0c:6e:7e:07:c4:74:d6: 7f:27:43:ce:57:87:5f:ec:2a:4e:ef:f1:2b:20:23:5f:aa:d5: ee:0b:d7:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApO6cqw2u17nNvYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZGI4YzMwM2EtN2U1Mi00ZjlhLThiOTQtZmM1ZGYyN2UzODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLnMsSq38HL37U55icm2Xh1JHAVyhKbszNeG faRE0yLhfnCSnfyP7Pk3U5fzEi0psU4Jk9yVW0OE2vu9X4c/6cPSZXQEq/O6UdwY f8FXaddZf9vT6QZUufM/EIE69HEwzh+1gK3eBWafKVFllwC3WdnTpFpQoPkNaV5y YR32b2EVeIkksjx9DNRYvLNdmZQq+L5m+xrPCIlgA8hRnluFZwG3rv59RxMI09/V DtDBrSS+103+QmCSLgEmmkYoGHR7yFTxD3M3HrmaGkbXk1F1vhfhtEJVsx1hFyFa JcIr7JvBBpql2FT8vn5cX0tp2ZkMwdc7h4t6OfTMH7zljpg/JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZZuAGdbrkEoIRM+Y3r3lkM3yiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmM4NDI3NjQtYzRmYi0z ZWE0LWE2MGMtZDE2NTA5MDhlNGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGzKLsT0fIRfXrj1G31GmQbpeUaQ6MEkahEGqn+vRaYO/pXAPAJErWS aJNLHosiwIYreFekw5KsjnYURW94+6RWfkwDIgCEsRucfc224eiqPGHzj/evyMs2 78TME3HRuYIrkYRth07C2EA1lgr0QEXBR5mFz//oyp1U5glUBd+AaPCTuoOHVTTI DF15jRRpX00vy14IUzJAdK27X6U+lSJ65QsVvFu3F7KNZQXFq6ipQU7zMYNaWY9N fCsjhokdUO7qPDpTW43ASboH1q+6VTfUZsBzvNb0zM1p/73pB7MVIGiMDG5+B8R0 1n8nQ85Xh1/sKk7v8SsgI1+q1e4L14E= -----END CERTIFICATE-----Generated at Sat Jun 7 18:34:06 2025 by rpki-client