$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa File: 9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa (raw, json) Hash identifier: PEqQkxcVUZVJJ8AX9vGXI9wbIPJwmqDSENY6aZrNwzE= Subject key identifier: 15:03:68:F1:BA:F8:8A:B5:E2:48:5E:13:89:D3:A7:E9:6E:85:2E:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A785A068C83EE6F746880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:78:5a:06:8c:83:ee:6f:74:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=18c514a0-ded6-4dec-8f1b-21ba2dc5cd98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:8c:2f:0f:b2:79:77:a6:35:40:cb:b7:fc: 20:57:c0:86:71:1e:a3:61:88:84:83:4b:55:9e:fa: 2f:04:2c:4c:d3:8b:70:e0:37:dd:4f:8b:96:b0:24: 96:d3:1f:ac:83:21:7c:46:32:39:f3:11:09:50:6c: 33:1e:b5:40:d4:6a:35:88:7c:58:92:d6:7f:89:39: a1:0d:0b:df:ec:58:33:a8:3b:ae:22:77:54:7d:9a: 2b:11:83:59:81:ac:a4:e3:77:f5:f6:56:51:d7:e1: 36:c9:48:6d:95:72:94:2b:2b:58:0b:5c:5b:49:ef: 6d:fd:98:d6:2d:94:95:9b:77:46:fa:88:d6:e8:0d: 2c:ab:a5:03:17:50:97:26:ff:3b:b9:e6:77:2b:58: a9:f7:f5:4c:a8:9f:9e:f9:eb:22:69:00:db:e8:32: e6:d3:8c:ba:47:69:12:1b:e5:d8:ca:27:4a:23:54: e4:98:46:6a:77:f4:a5:3e:12:70:8b:1f:a9:0f:8d: 4f:4a:df:a4:37:66:6e:bc:e5:33:98:e0:2a:c8:fa: a0:14:b1:07:2a:9a:a2:9f:4f:23:3c:ac:e9:38:70: a1:95:d6:48:66:25:d6:aa:0f:76:91:6d:76:6a:25: 98:02:d9:ad:da:d3:56:91:37:9e:c6:37:c8:2a:15: 43:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:03:68:F1:BA:F8:8A:B5:E2:48:5E:13:89:D3:A7:E9:6E:85:2E:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:19:cc:9b:d5:88:95:89:57:95:19:d5:6f:0b:25:34:3d:bc: 02:6b:e4:f8:b0:5a:e5:a5:62:48:d3:23:88:6a:40:49:0e:b1: 18:c6:7d:f9:8c:80:55:49:f2:79:e1:ae:b2:46:bf:62:81:41: 8c:3e:b6:d0:d2:70:34:ec:3d:44:c4:9b:93:f4:03:9c:85:6f: d8:b5:7f:4e:d9:a3:2b:dd:7c:8c:e4:37:b6:b1:25:79:72:6a: 59:61:20:79:25:2f:b5:86:53:a5:10:05:43:57:54:ef:bd:55: 2b:76:45:94:cc:ea:ac:89:fe:36:3d:32:ae:cd:3b:2c:b8:c9: d5:b6:36:d5:f9:f4:2a:26:99:9f:d0:90:9a:ac:61:8a:1c:d3: fb:a9:f9:d6:25:22:3f:6d:18:1b:0a:d3:c9:fb:b5:55:f4:90: de:1f:30:50:6d:bb:ca:ef:a6:e9:8a:17:c1:b2:8c:9d:c8:19: cb:ef:6e:bc:e0:35:e7:77:90:9c:2d:c5:df:85:92:7b:1a:20: d7:97:f2:72:71:42:45:22:34:1a:99:e1:40:56:0d:1d:60:4a: 1a:b8:34:4d:64:97:fa:95:26:80:64:bb:b2:70:cc:c7:e7:96: e1:8c:5b:06:d4:01:a6:bb:39:a6:3f:1a:95:36:7f:ed:9a:b5: e7:eb:0c:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnhaBoyD7m90aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MThjNTE0YTAtZGVkNi00ZGVjLThmMWItMjFiYTJkYzVjZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3CMLw+yeXemNUDLt/wgV8CGcR6jYYiEg0tV nvovBCxM04tw4DfdT4uWsCSW0x+sgyF8RjI58xEJUGwzHrVA1Go1iHxYktZ/iTmh DQvf7FgzqDuuIndUfZorEYNZgayk43f19lZR1+E2yUhtlXKUKytYC1xbSe9t/ZjW LZSVm3dG+ojW6A0sq6UDF1CXJv87ueZ3K1ip9/VMqJ+e+esiaQDb6DLm04y6R2kS G+XYyidKI1TkmEZqd/SlPhJwix+pD41PSt+kN2ZuvOUzmOAqyPqgFLEHKpqin08j PKzpOHChldZIZiXWqg92kW12aiWYAtmt2tNWkTeexjfIKhVDuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUDaPG6+Iq14kheE4nTp+luhS7rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWY0ZGM2ZTctZmU4OC0z YmQ3LWI5MDQtMzYxYjRmMGJhYmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAZzJvViJWJV5UZ1W8LJTQ9vAJr5PiwWuWlYkjTI4hqQEkOsRjGffmM gFVJ8nnhrrJGv2KBQYw+ttDScDTsPUTEm5P0A5yFb9i1f07ZoyvdfIzkN7axJXly allhIHklL7WGU6UQBUNXVO+9VSt2RZTM6qyJ/jY9Mq7NOyy4ydW2NtX59CommZ/Q kJqsYYoc0/up+dYlIj9tGBsK08n7tVX0kN4fMFBtu8rvpumKF8GyjJ3IGcvvbrzg Ned3kJwtxd+FknsaINeX8nJxQkUiNBqZ4UBWDR1gShq4NE1kl/qVJoBku7JwzMfn luGMWwbUAaa7OaY/GpU2f+2atefrDDA= -----END CERTIFICATE-----Generated at Sat Jun 7 23:03:38 2025 by rpki-client