$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5eae492-949a-38fc-b66d-ccd884cb4dae.roa File: a5eae492-949a-38fc-b66d-ccd884cb4dae.roa (raw, json) Hash identifier: LVlr2tJ0YAGKcpdpOB1MywUDeR/q2N7s5hG0i8h/0Gs= Subject key identifier: 56:3C:44:2C:65:10:3A:28:E9:C4:11:1C:51:27:21:99:0A:92:97:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A7AF9AC5473C60D79EBC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5eae492-949a-38fc-b66d-ccd884cb4dae.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:7a:f9:ac:54:73:c6:0d:79:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=5639c443-b815-4631-8f63-cfe63a1ad862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:7c:c2:82:55:32:68:5e:cb:cc:6e:3f:6c: 79:5b:8b:c1:23:fd:f3:c9:a4:61:5c:e9:9f:cb:21: d1:cd:96:9f:3d:92:5d:1c:43:f3:09:e0:65:03:98: a3:57:06:b3:ef:d2:63:73:5f:5d:bd:61:48:48:c3: 85:74:fc:c5:a4:a7:b0:2e:f7:65:60:de:1d:82:02: 54:da:03:9e:ec:ed:76:38:b3:05:41:13:ad:d2:23: 5b:4a:21:7c:1d:62:8f:60:04:fc:88:2b:24:b3:d6: 98:8f:f2:be:33:cd:43:49:ba:b4:70:56:95:93:2a: e6:86:24:13:a5:2c:f8:cd:43:eb:cf:38:41:ef:48: f0:d1:f9:31:33:26:24:94:e7:81:9f:43:ef:71:9b: 8d:90:c1:18:65:2d:d2:15:30:c2:1c:b0:cf:b2:23: 82:13:e6:f4:8a:e5:29:61:26:fc:83:f5:e8:a8:d7: 0d:6b:81:4d:c4:69:28:8f:77:7d:67:9c:77:7e:5d: fe:81:a1:d7:13:70:fe:eb:71:ed:b1:21:56:8a:f0: 99:b4:e3:17:7d:d2:ef:d0:60:43:d6:4f:54:e3:54: 00:4e:9b:85:32:fb:3d:a9:60:81:08:92:4e:0a:0c: 77:d0:92:04:ad:ab:f9:d0:d0:50:64:7f:e5:3c:bf: 4a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3C:44:2C:65:10:3A:28:E9:C4:11:1C:51:27:21:99:0A:92:97:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5eae492-949a-38fc-b66d-ccd884cb4dae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d5:df:34:34:84:a1:31:0a:06:83:94:3b:ab:52:ed:ad:96: e8:7d:9a:5f:c6:f3:ff:3f:91:83:e5:a2:76:ae:87:99:ac:7d: f6:47:f4:9a:d8:98:76:17:8d:32:a8:89:82:7f:62:3d:8a:ac: 4d:58:d6:10:1c:cf:5a:3a:dc:bd:65:82:57:c7:aa:aa:0c:38: 83:2f:30:f2:0a:85:8d:1e:f8:27:cf:4c:47:10:a4:d9:a4:93: a9:09:f7:92:9a:6a:56:00:a1:f6:13:a6:9a:bd:a0:e0:1c:e5: f8:a6:da:05:52:a5:74:2d:00:ed:73:55:4b:49:0e:1b:99:6f: 61:7f:86:1a:16:71:fc:7c:f9:eb:18:e7:58:2e:e5:20:e8:27: 56:70:75:53:66:49:4a:91:62:52:34:41:fb:9c:53:bb:e3:e7: 6a:2c:e5:61:5d:be:66:85:b7:b5:ef:66:f2:b9:e5:78:aa:d0: 84:19:42:c9:f2:fb:e1:bb:11:99:a4:75:73:c2:27:69:73:7b: ec:f2:3b:de:21:fa:ec:44:2d:ab:c0:58:85:a9:00:e5:42:d9: 9a:84:6a:83:2c:49:60:27:39:90:90:f4:9f:1e:51:ec:ab:08: 3d:1a:b4:87:f4:d0:20:a9:6c:22:f5:c6:50:9d:34:60:f5:42: 4c:fe:69:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnr5rFRzxg1568AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NTYzOWM0NDMtYjgxNS00NjMxLThmNjMtY2ZlNjNhMWFkODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5Z8woJVMmhey8xuP2x5W4vBI/3zyaRhXOmf yyHRzZafPZJdHEPzCeBlA5ijVwaz79Jjc19dvWFISMOFdPzFpKewLvdlYN4dggJU 2gOe7O12OLMFQROt0iNbSiF8HWKPYAT8iCsks9aYj/K+M81DSbq0cFaVkyrmhiQT pSz4zUPrzzhB70jw0fkxMyYklOeBn0PvcZuNkMEYZS3SFTDCHLDPsiOCE+b0iuUp YSb8g/XoqNcNa4FNxGkoj3d9Z5x3fl3+gaHXE3D+63HtsSFWivCZtOMXfdLv0GBD 1k9U41QATpuFMvs9qWCBCJJOCgx30JIErav50NBQZH/lPL9K9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFY8RCxlEDoo6cQRHFEnIZkKkpeAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTVlYWU0OTItOTQ5YS0z OGZjLWI2NmQtY2NkODg0Y2I0ZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbV3zQ0hKExCgaDlDurUu2tluh9ml/G8/8/kYPlonauh5msffZH9JrY mHYXjTKoiYJ/Yj2KrE1Y1hAcz1o63L1lglfHqqoMOIMvMPIKhY0e+CfPTEcQpNmk k6kJ95KaalYAofYTppq9oOAc5fim2gVSpXQtAO1zVUtJDhuZb2F/hhoWcfx8+esY 51gu5SDoJ1ZwdVNmSUqRYlI0QfucU7vj52os5WFdvmaFt7XvZvK55Xiq0IQZQsny ++G7EZmkdXPCJ2lze+zyO94h+uxELavAWIWpAOVC2ZqEaoMsSWAnOZCQ9J8eUeyr CD0atIf00CCpbCL1xlCdNGD1Qkz+aak= -----END CERTIFICATE-----Generated at Sat Jun 7 15:00:17 2025 by rpki-client