$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86cd9256-6fcf-332c-a44c-c68fa0da4db2.roa File: 86cd9256-6fcf-332c-a44c-c68fa0da4db2.roa (raw, json) Hash identifier: ku1Re8HfGJhKoxmCkeafqhJZZmnDNmhKdwi6yos9Z4g= Subject key identifier: 91:FC:00:E6:99:CB:03:A0:D4:2B:63:71:32:F5:96:ED:C0:1F:CF:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA33EB27B1664C6A06B120 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86cd9256-6fcf-332c-a44c-c68fa0da4db2.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:33:eb:27:b1:66:4c:6a:06:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=d72fc023-8ab5-441e-b89c-6110d9296f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:61:b9:99:13:8f:c7:a5:93:a6:ae:01:ec: 6d:ec:16:24:8e:ad:52:2f:76:75:33:c7:5f:e7:b4: a9:e5:51:33:c9:3f:e4:16:00:2b:3d:e5:d4:0a:d1: a3:7a:d8:a1:28:50:40:af:ff:2e:44:bd:3a:58:d1: 07:fe:af:ee:c7:a4:7e:9f:59:c8:4d:b9:9c:27:5e: 4e:74:46:7a:aa:52:32:06:33:14:93:04:83:2a:95: 76:b2:0c:80:74:30:29:43:c3:36:47:62:56:37:12: 45:4c:ba:37:6b:82:1a:64:a5:18:ff:83:4c:14:fc: e8:5b:fd:5f:8c:8e:55:e1:39:ce:1c:d5:c2:54:19: 4d:55:40:88:1c:1b:2c:cb:0b:2b:d6:59:38:ab:d3: 56:0d:d5:a8:5b:26:03:25:b6:ba:a5:a8:8e:b3:43: e6:c9:7f:8b:84:e4:76:6a:e6:f9:3b:65:0b:d2:89: 61:c8:bf:11:d9:1a:86:21:af:7a:43:84:b1:db:f9: 9d:6a:83:da:52:da:aa:ca:33:4b:03:54:2a:9b:77: f3:c6:50:87:b3:3e:ef:cd:ce:48:bc:2a:45:f9:12: 22:b3:70:93:59:99:c2:a4:bf:23:19:8d:67:68:4d: e3:e2:9d:0f:0f:eb:c2:20:e7:d8:07:7b:f9:2b:b1: d0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FC:00:E6:99:CB:03:A0:D4:2B:63:71:32:F5:96:ED:C0:1F:CF:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86cd9256-6fcf-332c-a44c-c68fa0da4db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:45:59:63:48:2a:6e:48:72:8d:02:da:b1:1a:55:d3:e1:e9: 8f:fc:10:6e:14:0f:03:13:a3:7f:98:a5:d0:93:d8:59:48:d3: 14:cf:67:84:ed:96:2a:6c:74:f9:52:0c:da:6c:b2:c7:66:60: 61:bb:9d:87:5b:9d:b5:f3:24:c0:3f:08:79:01:a5:d5:91:6e: 71:9f:67:cc:e9:28:6a:29:3e:5a:f4:74:25:c3:9a:b4:bd:9e: e5:c9:ea:5e:f3:d7:4b:6d:77:af:34:78:26:5c:c7:91:a9:f6: 27:d9:16:75:50:38:34:99:2e:2f:bb:2c:bb:0c:e3:c0:64:68: 8c:57:8f:1e:3e:b6:67:82:34:26:a0:25:ef:9b:9c:99:dd:76: 65:d1:7c:be:54:a8:ab:e8:f8:99:cd:81:76:28:26:bc:25:6b: 28:51:ab:34:f0:b2:19:e8:b6:b8:cc:b1:19:96:35:2e:e5:80: cf:3d:b9:41:3c:3a:c6:95:d5:68:52:c2:cc:09:cf:e5:f0:85: bd:35:16:71:8c:a2:8b:d7:35:93:11:7d:3e:fd:6d:20:32:e3: 25:67:52:e5:0f:a2:9d:a7:f2:db:6a:c6:6a:af:7c:71:93:2f: 25:df:2a:f1:99:99:eb:3c:91:90:6f:b5:f1:6a:88:8b:95:97: dc:70:32:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jPrJ7FmTGoGsSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZDcyZmMwMjMtOGFiNS00NDFlLWI4OWMtNjExMGQ5Mjk2ZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkhhuZkTj8elk6auAext7BYkjq1SL3Z1M8df 57Sp5VEzyT/kFgArPeXUCtGjetihKFBAr/8uRL06WNEH/q/ux6R+n1nITbmcJ15O dEZ6qlIyBjMUkwSDKpV2sgyAdDApQ8M2R2JWNxJFTLo3a4IaZKUY/4NMFPzoW/1f jI5V4TnOHNXCVBlNVUCIHBssywsr1lk4q9NWDdWoWyYDJba6paiOs0PmyX+LhOR2 aub5O2UL0olhyL8R2RqGIa96Q4Sx2/mdaoPaUtqqyjNLA1Qqm3fzxlCHsz7vzc5I vCpF+RIis3CTWZnCpL8jGY1naE3j4p0PD+vCIOfYB3v5K7HQIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJH8AOaZywOg1CtjcTL1lu3AH8/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZjZDkyNTYtNmZjZi0z MzJjLWE0NGMtYzY4ZmEwZGE0ZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFFWWNIKm5Ico0C2rEaVdPh6Y/8EG4UDwMTo3+YpdCT2FlI0xTPZ4Tt lipsdPlSDNpsssdmYGG7nYdbnbXzJMA/CHkBpdWRbnGfZ8zpKGopPlr0dCXDmrS9 nuXJ6l7z10ttd680eCZcx5Gp9ifZFnVQODSZLi+7LLsM48BkaIxXjx4+tmeCNCag Je+bnJnddmXRfL5UqKvo+JnNgXYoJrwlayhRqzTwshnotrjMsRmWNS7lgM89uUE8 OsaV1WhSwswJz+Xwhb01FnGMoovXNZMRfT79bSAy4yVnUuUPop2n8ttqxmqvfHGT LyXfKvGZmes8kZBvtfFqiIuVl9xwMjU= -----END CERTIFICATE-----Generated at Sat Jun 7 13:44:49 2025 by rpki-client