$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/945902be-2e75-355d-ba30-77f51e86f5da.roa File: 945902be-2e75-355d-ba30-77f51e86f5da.roa (raw, json) Hash identifier: 1rTLSBQcBj0o1oF36d81+jKWpLF0aSNAB3NbHuUjUOA= Subject key identifier: 1C:90:E4:32:3F:DA:E6:CE:C0:ED:7A:2D:3B:BB:A4:B2:8C:07:12:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A782FBCDE5E9EA9600F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/945902be-2e75-355d-ba30-77f51e86f5da.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:78:2f:bc:de:5e:9e:a9:60:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=34fd4e00-1563-4f83-8310-46265c48ac9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:68:f6:ad:10:59:00:a4:5f:95:14:f6:c9:bd: c8:bb:df:b6:9f:24:08:9f:92:b3:05:84:b6:b0:ac: 55:4c:5e:07:cc:2a:81:30:73:49:fa:13:89:44:37: aa:43:ce:c8:55:21:05:3f:5f:bb:b9:2f:92:c9:66: 08:b2:a7:8e:e2:de:1d:5b:8a:e4:67:27:c5:d1:64: 47:b6:ed:4b:f7:66:b4:79:ac:2a:5d:3b:35:bc:70: 0b:f5:e3:c3:61:31:0f:ce:82:ac:7c:39:e6:e7:81: 46:00:4b:5f:e7:80:0f:34:d0:15:fc:4b:87:0d:6c: 79:74:f9:2e:b6:c4:7f:1d:50:61:b1:bc:7c:a5:bc: 30:9c:fa:5a:9d:1b:42:65:7e:e4:1b:82:a8:8e:81: d5:f6:07:ba:2c:9f:0f:19:c4:b5:a8:92:11:86:db: ce:e6:a3:07:5d:6c:70:57:ab:05:f3:f2:a4:40:41: 0e:38:40:3c:ac:1f:34:5e:40:72:36:ba:76:27:dd: 50:3e:38:bb:ad:fc:e0:e6:20:06:37:25:fb:5b:ae: 8c:4a:9c:dd:42:9d:fa:ff:87:a5:d8:34:ab:ce:10: 57:38:0e:de:4f:1f:27:ea:b6:5e:f9:b7:d9:ac:a2: 5c:d2:0f:79:31:ec:4e:92:4e:af:b9:18:c0:e6:c6: b5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:90:E4:32:3F:DA:E6:CE:C0:ED:7A:2D:3B:BB:A4:B2:8C:07:12:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/945902be-2e75-355d-ba30-77f51e86f5da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0e:66:e3:9b:e8:ce:cd:b9:d0:5b:ed:65:0c:01:a3:ac:dd: a0:11:eb:90:63:64:2b:7d:93:08:00:4f:f1:49:b5:36:ad:11: 71:6a:bf:10:de:47:20:ef:77:ac:60:e6:29:84:9b:97:14:37: 49:b0:e6:c1:99:c1:3c:31:0f:ae:32:11:97:1a:e3:c1:c1:c2: 52:7d:8d:2b:2d:37:8a:da:d6:5d:c4:f6:ad:9c:0d:b7:cd:8e: 3f:48:b4:62:e5:0d:ad:ad:c0:e3:38:3c:e7:5f:c1:f9:b2:a1: cb:1d:1a:d0:26:9e:71:99:94:f1:e4:08:ce:a0:e8:03:15:3a: 11:2b:08:fc:21:87:65:3c:86:cd:d3:f0:fb:94:e2:a9:80:92: 2c:e7:9c:ee:e2:ab:d1:83:8b:60:76:cb:86:c1:b9:fc:65:16: e4:49:89:bb:4b:66:75:40:f7:b1:da:64:0f:5a:19:be:12:f4: 54:91:21:21:89:5d:c0:31:b1:f9:ed:a9:28:52:c3:d0:7f:96: 2a:8f:66:70:22:53:13:5f:fb:4d:29:e7:fc:ae:9e:46:c1:ca: ef:43:07:26:8c:21:6c:f1:90:a8:e2:3a:f1:eb:80:09:07:e6: d1:23:5c:89:1e:c3:d6:de:71:45:f2:d9:be:c6:7e:b1:24:72: d6:61:a5:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmngvvN5enqlgD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MzRmZDRlMDAtMTU2My00ZjgzLTgzMTAtNDYyNjVjNDhhYzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGj2rRBZAKRflRT2yb3Iu9+2nyQIn5KzBYS2 sKxVTF4HzCqBMHNJ+hOJRDeqQ87IVSEFP1+7uS+SyWYIsqeO4t4dW4rkZyfF0WRH tu1L92a0eawqXTs1vHAL9ePDYTEPzoKsfDnm54FGAEtf54APNNAV/EuHDWx5dPku tsR/HVBhsbx8pbwwnPpanRtCZX7kG4KojoHV9ge6LJ8PGcS1qJIRhtvO5qMHXWxw V6sF8/KkQEEOOEA8rB80XkByNrp2J91QPji7rfzg5iAGNyX7W66MSpzdQp36/4el 2DSrzhBXOA7eTx8n6rZe+bfZrKJc0g95MexOkk6vuRjA5sa1nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByQ5DI/2ubOwO16LTu7pLKMBxKjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTQ1OTAyYmUtMmU3NS0z NTVkLWJhMzAtNzdmNTFlODZmNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwOZuOb6M7NudBb7WUMAaOs3aAR65BjZCt9kwgAT/FJtTatEXFqvxDe RyDvd6xg5imEm5cUN0mw5sGZwTwxD64yEZca48HBwlJ9jSstN4ra1l3E9q2cDbfN jj9ItGLlDa2twOM4POdfwfmyocsdGtAmnnGZlPHkCM6g6AMVOhErCPwhh2U8hs3T 8PuU4qmAkiznnO7iq9GDi2B2y4bBufxlFuRJibtLZnVA97HaZA9aGb4S9FSRISGJ XcAxsfntqShSw9B/liqPZnAiUxNf+00p5/yunkbByu9DByaMIWzxkKjiOvHrgAkH 5tEjXIkew9becUXy2b7GfrEkctZhpWU= -----END CERTIFICATE-----Generated at Sat Jun 7 15:32:26 2025 by rpki-client