$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a719f30c-a40e-3f22-ab37-d090eca4dc1d.roa File: a719f30c-a40e-3f22-ab37-d090eca4dc1d.roa (raw, json) Hash identifier: 2rEI5z8qPX32iUbu60ibEqOkYfa8aUcB6AOjG1S/DhQ= Subject key identifier: AF:36:6C:29:CF:11:F5:12:BE:37:F9:51:2D:B5:B2:E4:8E:7D:B1:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA2C14E2B670D0750A0C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a719f30c-a40e-3f22-ab37-d090eca4dc1d.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2c:14:e2:b6:70:d0:75:0a:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=d13763f7-803c-4585-b6c6-fc0b9bbeee32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d9:07:be:fc:fc:d1:e0:e1:bf:96:d3:a1:44: f4:b5:b4:82:ba:36:93:cf:31:26:75:50:52:25:cb: 0d:10:aa:92:50:15:eb:1c:08:56:1a:30:f7:1d:a4: d3:c9:13:24:65:8e:e9:36:09:dc:b5:dd:2c:ec:15: ad:b8:cf:1d:84:ce:74:32:75:b6:12:79:da:65:ed: 5e:96:37:b0:01:1f:dd:a7:c7:4a:67:22:2b:49:e2: fa:90:c9:5b:31:8d:79:45:40:20:c7:1b:20:b7:7e: f0:8f:89:b7:90:3f:1a:7f:24:31:a6:3d:be:b1:df: e8:ec:84:5f:a4:09:28:37:48:4f:67:49:e4:fb:db: 7c:15:ea:0e:1a:f3:fa:1e:7e:57:39:3a:0d:3b:88: 2c:26:f5:7a:04:11:51:68:db:f6:7e:f1:59:2e:cb: 19:7e:38:b0:ab:2a:30:0f:5e:ba:03:52:79:17:29: a9:16:1e:f8:74:ef:2d:e6:25:a3:cf:2e:c2:fe:1b: a7:78:ca:18:20:99:45:d2:5c:ab:a0:ca:cf:b1:ca: 10:88:db:9c:5e:b5:25:be:27:44:92:f9:d0:3f:2e: 3b:15:99:c4:bc:ed:c8:2a:da:bf:69:62:04:52:93: 66:e1:9d:4a:d3:0c:c6:0f:49:ab:75:14:89:57:ce: 4f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:36:6C:29:CF:11:F5:12:BE:37:F9:51:2D:B5:B2:E4:8E:7D:B1:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a719f30c-a40e-3f22-ab37-d090eca4dc1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:9b:1e:4a:b8:71:26:7d:fe:81:d8:47:46:3f:42:ca:43:b7: c6:ee:9c:15:af:67:70:2a:17:d8:1a:a5:36:b0:b6:e0:63:42: de:6c:1d:ab:e1:19:55:24:34:72:d4:f5:2b:b4:d2:d7:0d:e5: 5f:3b:f6:31:33:94:e1:53:0a:99:78:51:2d:42:c5:b6:7c:11: 41:63:b3:9a:73:5d:85:e1:0c:69:bf:91:51:c1:4c:72:6c:77: 5d:93:16:97:16:a9:e7:77:63:54:f1:2c:68:5d:27:ed:6b:0e: d7:e4:fc:d4:23:49:35:44:a2:43:e9:6a:e7:68:6f:30:53:e5: df:83:91:42:24:82:2b:b1:41:00:0b:bf:e0:45:4e:98:83:e8: 97:6e:d2:34:95:b2:8a:5f:2e:0e:cd:73:48:88:02:a2:a2:d1: 15:f4:81:9e:5f:d7:2c:1d:ff:d7:fa:a9:31:b2:cf:33:15:7e: 74:30:a0:b8:61:2c:db:11:20:14:23:ff:0a:60:5a:1e:d1:3b: ba:0f:76:5d:32:9c:3e:93:cd:42:29:f4:9d:c1:ff:25:33:9e: 2f:64:0b:80:9a:8b:03:f0:d7:72:8f:47:5e:7d:ff:5f:a5:6e: cb:34:f9:ac:5a:35:3c:ad:7e:37:02:b5:9e:1c:d1:c0:80:79: 2d:68:a9:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92iwU4rZw0HUKDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZDEzNzYzZjctODAzYy00NTg1LWI2YzYtZmMwYjliYmVlZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NkHvvz80eDhv5bToUT0tbSCujaTzzEmdVBS JcsNEKqSUBXrHAhWGjD3HaTTyRMkZY7pNgnctd0s7BWtuM8dhM50MnW2EnnaZe1e ljewAR/dp8dKZyIrSeL6kMlbMY15RUAgxxsgt37wj4m3kD8afyQxpj2+sd/o7IRf pAkoN0hPZ0nk+9t8FeoOGvP6Hn5XOToNO4gsJvV6BBFRaNv2fvFZLssZfjiwqyow D166A1J5FympFh74dO8t5iWjzy7C/huneMoYIJlF0lyroMrPscoQiNucXrUlvidE kvnQPy47FZnEvO3IKtq/aWIEUpNm4Z1K0wzGD0mrdRSJV85PVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK82bCnPEfUSvjf5US21suSOfbHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTcxOWYzMGMtYTQwZS0z ZjIyLWFiMzctZDA5MGVjYTRkYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKbHkq4cSZ9/oHYR0Y/QspDt8bunBWvZ3AqF9gapTawtuBjQt5sHavh GVUkNHLU9Su00tcN5V879jEzlOFTCpl4US1CxbZ8EUFjs5pzXYXhDGm/kVHBTHJs d12TFpcWqed3Y1TxLGhdJ+1rDtfk/NQjSTVEokPpaudobzBT5d+DkUIkgiuxQQAL v+BFTpiD6Jdu0jSVsopfLg7Nc0iIAqKi0RX0gZ5f1ywd/9f6qTGyzzMVfnQwoLhh LNsRIBQj/wpgWh7RO7oPdl0ynD6TzUIp9J3B/yUzni9kC4CaiwPw13KPR159/1+l bss0+axaNTytfjcCtZ4c0cCAeS1oqSI= -----END CERTIFICATE-----Generated at Sat Jun 7 13:35:02 2025 by rpki-client