$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3d5b136-8b20-3a37-a607-c9809129af30.roa File: a3d5b136-8b20-3a37-a607-c9809129af30.roa (raw, json) Hash identifier: NlGMr5DXxDthQomYYbS64lcKmpKGGyr/wU75L6AkU98= Subject key identifier: 31:59:40:10:84:EF:1A:29:FD:01:A2:E3:F6:7D:E0:47:6B:83:13:E8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A7AE8DA6836B960E41540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3d5b136-8b20-3a37-a607-c9809129af30.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:7a:e8:da:68:36:b9:60:e4:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=de53a828-d3df-460a-b793-3c7f86bd2475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d5:6a:7d:9d:8b:8c:90:7c:59:44:8a:3a:02: b1:aa:bf:ba:b1:98:71:2a:c8:d0:a9:b2:b0:c6:70: a7:e3:03:c9:c8:ff:c2:11:fe:a9:d9:9e:7b:83:77: 3b:11:07:98:69:13:94:62:e1:7b:56:0c:4d:c8:7e: db:15:90:02:63:66:3f:cc:31:3d:d7:ad:47:97:f5: 4a:79:41:71:dc:02:00:58:b6:06:e9:98:5a:e5:45: 88:42:01:b6:81:ea:0a:0e:46:d0:8a:12:23:b8:09: a1:82:50:75:3c:78:03:06:18:0b:45:96:2e:f4:e7: 8c:83:f5:d0:a4:c8:88:a8:ae:f6:93:6b:bf:3e:9d: 16:8e:e3:bb:97:5f:47:e1:2b:33:6e:a3:4a:39:64: 7d:66:40:a0:3b:3f:72:6c:2f:40:3c:0e:63:15:3c: 40:a3:52:70:51:98:56:6d:40:38:c4:df:ef:84:a4: 9f:85:e1:58:df:bd:1c:51:6e:fe:89:59:21:31:dd: 7a:1d:2c:ea:da:a8:e9:fa:92:1d:8d:1c:cc:6a:fb: 7f:0f:f3:6d:8e:10:0e:ac:f9:a1:bb:82:4c:f2:32: 09:6e:3a:3a:04:68:40:24:96:5e:48:7c:9d:55:00: d8:4b:c1:1a:b9:9e:3d:ec:20:11:d9:17:19:52:d3: d0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:59:40:10:84:EF:1A:29:FD:01:A2:E3:F6:7D:E0:47:6B:83:13:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3d5b136-8b20-3a37-a607-c9809129af30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:91:c7:c1:df:32:2a:7d:a2:02:67:8c:a7:c9:fc:b6:b7:73: e5:8e:20:9b:45:8c:1f:1a:34:a6:3a:bd:30:97:3d:9d:be:5e: c7:fb:89:d0:20:1b:86:30:78:c5:bc:63:96:85:3c:d1:c5:33: b4:da:0d:13:04:6a:2f:72:ae:90:89:84:c9:e3:85:98:0a:88: 11:d1:91:a1:4b:b5:fc:af:df:44:38:46:e7:06:85:15:c5:36: 25:64:6f:1a:be:7e:c3:8f:86:ba:36:8d:48:a3:af:a4:b8:32: c6:43:12:bd:ff:0f:b2:8b:d6:5f:11:4d:82:a1:7a:ef:9e:48: 16:9b:2c:5a:dd:79:b7:97:62:e4:08:fe:33:c6:81:d0:3b:8f: db:14:4c:57:5e:2a:7a:e2:39:3b:6c:72:77:a5:84:74:97:d3: 9c:bf:04:f8:af:01:52:fb:85:47:f6:44:1f:47:c3:95:53:54: 8e:6c:ad:cd:6e:8d:f8:b6:c3:3e:d3:37:9c:6d:15:1e:c1:43: 5b:62:6a:74:ea:e5:21:af:d1:a2:28:97:77:e5:bc:79:02:35: 65:3a:c6:f4:6f:e6:6c:a3:2a:b3:d1:6f:4b:16:eb:f4:60:b9: a8:b8:34:ee:9c:d8:ec:bb:d4:85:1c:c4:2e:15:14:1d:74:0c: 8d:bc:ab:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnro2mg2uWDkFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZGU1M2E4MjgtZDNkZi00NjBhLWI3OTMtM2M3Zjg2YmQyNDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtVqfZ2LjJB8WUSKOgKxqr+6sZhxKsjQqbKw xnCn4wPJyP/CEf6p2Z57g3c7EQeYaROUYuF7VgxNyH7bFZACY2Y/zDE9161Hl/VK eUFx3AIAWLYG6Zha5UWIQgG2geoKDkbQihIjuAmhglB1PHgDBhgLRZYu9OeMg/XQ pMiIqK72k2u/Pp0WjuO7l19H4SszbqNKOWR9ZkCgOz9ybC9APA5jFTxAo1JwUZhW bUA4xN/vhKSfheFY370cUW7+iVkhMd16HSzq2qjp+pIdjRzMavt/D/NtjhAOrPmh u4JM8jIJbjo6BGhAJJZeSHydVQDYS8EauZ497CAR2RcZUtPQmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFZQBCE7xop/QGi4/Z94EdrgxPoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTNkNWIxMzYtOGIyMC0z YTM3LWE2MDctYzk4MDkxMjlhZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaRx8HfMip9ogJnjKfJ/La3c+WOIJtFjB8aNKY6vTCXPZ2+Xsf7idAg G4YweMW8Y5aFPNHFM7TaDRMEai9yrpCJhMnjhZgKiBHRkaFLtfyv30Q4RucGhRXF NiVkbxq+fsOPhro2jUijr6S4MsZDEr3/D7KL1l8RTYKheu+eSBabLFrdebeXYuQI /jPGgdA7j9sUTFdeKnriOTtscnelhHSX05y/BPivAVL7hUf2RB9Hw5VTVI5src1u jfi2wz7TN5xtFR7BQ1tianTq5SGv0aIol3flvHkCNWU6xvRv5myjKrPRb0sW6/Rg uai4NO6c2Oy71IUcxC4VFB10DI28q3w= -----END CERTIFICATE-----Generated at Sat Jun 7 14:08:48 2025 by rpki-client