$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaaa684c-ff01-3495-9e82-064b86d06d2b.roa File: aaaa684c-ff01-3495-9e82-064b86d06d2b.roa (raw, json) Hash identifier: xMklRB+F2lZ+WvRSqSYk1RbGbrvyt4l/jpt+b755l7w= Subject key identifier: D7:76:BB:4F:1A:68:3D:26:F4:74:B4:66:A5:1A:AB:C0:36:96:BF:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A6F8FBFF433556D44ACC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaaa684c-ff01-3495-9e82-064b86d06d2b.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:6f:8f:bf:f4:33:55:6d:44:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=8250d362-14ae-4c2c-8fcc-0027431f69a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:54:70:60:d0:bd:46:28:4d:b6:1d:d5:a9:6f: f5:8a:d0:84:9b:e6:9b:5f:9f:b2:c6:7b:9a:61:ad: 0d:cf:41:ad:b9:2e:6c:90:28:3f:06:30:a5:e9:7b: 8c:8d:a5:2e:37:dc:71:ec:af:cd:e1:0d:55:90:55: f9:4a:e3:a7:48:2a:0a:cf:46:4d:13:c9:fe:33:b1: 74:4e:8b:6c:d7:1e:73:d3:0f:54:2b:1d:36:36:a8: 01:34:64:60:48:42:3f:c5:7d:27:80:50:08:62:0e: e7:ba:39:ce:65:4d:c3:62:63:2b:fe:f6:1e:47:09: 7c:00:c6:3f:43:df:bf:aa:82:80:88:4f:c0:e3:c3: 45:60:3b:31:83:56:8e:9d:74:c0:92:30:b7:fd:0d: 9b:5b:63:4f:2e:7b:74:28:ea:d1:e3:b0:c2:67:9e: 69:50:8f:e1:6d:6b:f4:1e:0d:83:7d:cb:c6:06:26: 7a:90:85:86:83:7b:80:af:84:6b:81:4c:20:a9:22: 03:3c:a7:60:ae:e4:30:c6:72:b3:2a:f0:4e:9b:27: 3b:7f:8c:ed:7b:22:3f:7b:7f:45:19:fc:f5:5f:46: e4:80:3c:ee:75:05:43:ae:cd:87:c9:54:ae:6c:98: 38:20:81:8f:7e:fa:a2:be:ae:87:64:93:b4:3d:56: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:76:BB:4F:1A:68:3D:26:F4:74:B4:66:A5:1A:AB:C0:36:96:BF:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaaa684c-ff01-3495-9e82-064b86d06d2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:87:a1:83:12:cd:26:ad:a5:2c:74:8c:4f:e4:de:fb:e4:8f: f0:45:0e:35:49:af:2b:2f:49:81:f1:bc:72:c9:50:b5:c9:52: 5a:c4:77:25:a3:b5:b1:94:46:15:b9:13:b4:6f:2d:86:3d:ea: ea:30:a8:20:b0:82:54:11:aa:b8:b0:02:b9:82:d2:5e:1c:a7: 9d:7b:53:fb:b7:da:4a:a1:59:e8:87:89:ca:81:d8:74:f0:d9: 7d:4a:db:ea:a6:32:f1:c6:8f:ca:8f:e2:d6:aa:dc:dd:eb:a4: 2c:97:62:ee:50:10:8f:36:0b:eb:4f:36:c4:5a:42:a7:c3:fc: 80:31:71:43:37:08:ee:92:a4:83:c9:1c:71:f2:49:11:91:bf: d4:ec:6c:10:55:1b:d6:a2:99:de:82:8f:be:c8:83:dc:1e:49: 9c:34:17:4f:04:e6:09:86:b8:09:17:e6:9e:9a:2b:55:d0:87: 42:31:08:27:be:12:09:b4:90:56:45:13:53:75:87:0b:b7:62: a2:cc:d0:ca:b7:21:68:f1:b4:cb:52:93:42:97:ee:74:94:3e: 30:7d:ab:28:99:90:46:2d:e1:ec:d6:bf:43:e3:b1:4a:4f:93: 4e:db:6d:f4:99:36:b8:f2:98:1d:a5:20:42:5d:70:4a:e1:fd: 7a:b7:d4:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmm+Pv/QzVW1ErMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ODI1MGQzNjItMTRhZS00YzJjLThmY2MtMDAyNzQzMWY2OWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1RwYNC9RihNth3VqW/1itCEm+abX5+yxnua Ya0Nz0GtuS5skCg/BjCl6XuMjaUuN9xx7K/N4Q1VkFX5SuOnSCoKz0ZNE8n+M7F0 Tots1x5z0w9UKx02NqgBNGRgSEI/xX0ngFAIYg7nujnOZU3DYmMr/vYeRwl8AMY/ Q9+/qoKAiE/A48NFYDsxg1aOnXTAkjC3/Q2bW2NPLnt0KOrR47DCZ55pUI/hbWv0 Hg2DfcvGBiZ6kIWGg3uAr4RrgUwgqSIDPKdgruQwxnKzKvBOmyc7f4zteyI/e39F Gfz1X0bkgDzudQVDrs2HyVSubJg4IIGPfvqivq6HZJO0PVbJEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNd2u08aaD0m9HS0ZqUaq8A2lr8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWFhYTY4NGMtZmYwMS0z NDk1LTllODItMDY0Yjg2ZDA2ZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2HoYMSzSatpSx0jE/k3vvkj/BFDjVJrysvSYHxvHLJULXJUlrEdyWj tbGURhW5E7RvLYY96uowqCCwglQRqriwArmC0l4cp517U/u32kqhWeiHicqB2HTw 2X1K2+qmMvHGj8qP4taq3N3rpCyXYu5QEI82C+tPNsRaQqfD/IAxcUM3CO6SpIPJ HHHySRGRv9TsbBBVG9aimd6Cj77Ig9weSZw0F08E5gmGuAkX5p6aK1XQh0IxCCe+ Egm0kFZFE1N1hwu3YqLM0Mq3IWjxtMtSk0KX7nSUPjB9qyiZkEYt4ezWv0PjsUpP k07bbfSZNrjymB2lIEJdcErh/Xq31Ho= -----END CERTIFICATE-----Generated at Sat Jun 7 22:57:26 2025 by rpki-client