$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fd85aee-f390-3a9f-9f6b-cb45ff629eac.roa File: 9fd85aee-f390-3a9f-9f6b-cb45ff629eac.roa (raw, json) Hash identifier: 0nf5AYgPVAcx6iZq38SF5GulDs4xWjM+QCsSMahkGoQ= Subject key identifier: D4:7F:EB:E3:C5:D3:EB:07:71:CC:FC:90:05:9E:05:45:28:ED:F8:6E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A79D4EDE34D5D6E6DF1C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fd85aee-f390-3a9f-9f6b-cb45ff629eac.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:79:d4:ed:e3:4d:5d:6e:6d:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=3054f9f8-0718-4afe-8be3-f7e6c7c82247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:24:a8:0b:47:9a:80:79:be:ed:4c:67:d3:aa: 37:7b:bc:1c:66:a2:a2:ff:99:11:21:da:a9:4e:e3: 7e:d2:a1:f5:73:7f:4b:00:b2:29:d1:a9:e0:a7:aa: dd:28:5c:6c:da:e8:d8:70:15:ee:3a:89:51:f2:bc: 94:38:76:60:17:5f:d4:08:28:23:4a:b3:d0:e3:62: 69:c9:09:13:f6:45:74:81:19:d6:a5:2a:de:d1:c9: 72:49:0f:6b:47:03:32:3a:fb:12:ce:fd:7a:0b:a9: 19:39:9c:df:36:c1:cc:5d:aa:17:fc:21:a9:49:c4: ef:31:d1:1e:42:6d:cc:ca:d4:41:b2:99:e2:5a:eb: 6d:4a:b6:05:50:05:de:5d:2e:9f:18:4f:fc:c0:58: da:14:1b:4f:ea:29:70:23:68:35:df:ce:06:bd:a6: 23:b5:ee:43:48:ae:aa:74:9a:c7:9d:bd:8e:a9:96: dd:c0:43:b3:62:65:e9:e6:81:43:69:da:b5:18:56: 22:e6:3e:8e:d5:32:6d:eb:6c:39:2c:70:48:4c:20: 44:00:85:66:30:9d:10:e5:23:c6:59:8e:a4:c7:53: 0d:58:40:13:25:aa:79:4c:c2:7a:5f:8b:ec:ca:0d: f6:fe:e0:62:14:d8:65:3f:e3:ad:9b:69:6e:09:cd: f7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7F:EB:E3:C5:D3:EB:07:71:CC:FC:90:05:9E:05:45:28:ED:F8:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fd85aee-f390-3a9f-9f6b-cb45ff629eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:26:eb:af:bc:45:0d:27:ff:a1:ca:07:72:8b:03:4c:bb:f5: d5:a7:af:24:e2:ac:fc:2c:a5:00:89:1c:ae:4b:7a:ca:29:08: 83:c5:44:cf:fc:ad:77:90:b6:a1:09:36:b8:06:73:51:80:77: 65:2e:ac:ca:f3:83:a6:ba:b6:27:32:e9:34:1d:88:cc:24:34: 3d:22:99:76:b2:57:58:c0:94:2a:29:43:99:62:49:9a:ce:44: ab:4e:ba:31:af:66:9a:27:73:11:7d:96:4d:7f:27:74:e8:96: 04:94:cd:7b:a3:d7:b9:30:c9:21:39:3f:d6:ca:4a:5d:63:75: 2e:7e:15:73:d4:b4:cc:34:a9:ba:73:18:b3:d8:7e:72:5d:f5: 32:2b:81:54:a2:4e:2d:ef:35:91:b5:f2:3b:3e:ab:0b:d0:17: ed:f5:e0:5b:f4:8e:2c:a0:5c:8c:3b:6b:a5:80:1d:aa:2a:e9: 39:a8:50:92:2b:e5:e1:b4:c1:fc:e8:2e:de:5a:72:dd:7f:b9: 0f:f7:5c:5c:9b:c8:8f:82:66:df:d2:75:30:cf:0e:ed:31:ad: 22:ce:e0:d1:ae:72:c6:29:73:ee:6d:e6:5e:44:83:5b:93:64: d3:e4:d6:be:ef:a9:6f:55:ec:0d:6f:76:f0:9b:45:d6:ad:7f: 0d:8d:30:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnnU7eNNXW5t8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MzA1NGY5ZjgtMDcxOC00YWZlLThiZTMtZjdlNmM3YzgyMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCSoC0eagHm+7Uxn06o3e7wcZqKi/5kRIdqp TuN+0qH1c39LALIp0angp6rdKFxs2ujYcBXuOolR8ryUOHZgF1/UCCgjSrPQ42Jp yQkT9kV0gRnWpSre0clySQ9rRwMyOvsSzv16C6kZOZzfNsHMXaoX/CGpScTvMdEe Qm3MytRBspniWuttSrYFUAXeXS6fGE/8wFjaFBtP6ilwI2g1384GvaYjte5DSK6q dJrHnb2OqZbdwEOzYmXp5oFDadq1GFYi5j6O1TJt62w5LHBITCBEAIVmMJ0Q5SPG WY6kx1MNWEATJap5TMJ6X4vsyg32/uBiFNhlP+Otm2luCc33HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNR/6+PF0+sHccz8kAWeBUUo7fhuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWZkODVhZWUtZjM5MC0z YTlmLTlmNmItY2I0NWZmNjI5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOLHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwm66+8RQ0n/6HKB3KLA0y79dWnryTirPwspQCJHK5LesopCIPFRM/8 rXeQtqEJNrgGc1GAd2UurMrzg6a6ticy6TQdiMwkND0imXayV1jAlCopQ5liSZrO RKtOujGvZponcxF9lk1/J3TolgSUzXuj17kwySE5P9bKSl1jdS5+FXPUtMw0qbpz GLPYfnJd9TIrgVSiTi3vNZG18js+qwvQF+314Fv0jiygXIw7a6WAHaoq6TmoUJIr 5eG0wfzoLt5act1/uQ/3XFybyI+CZt/SdTDPDu0xrSLO4NGucsYpc+5t5l5Eg1uT ZNPk1r7vqW9V7A1vdvCbRdatfw2NMEk= -----END CERTIFICATE-----Generated at Sat Jun 7 22:59:01 2025 by rpki-client