$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c25853d9-3d04-379e-9d63-b30abc9b3675.roa File: c25853d9-3d04-379e-9d63-b30abc9b3675.roa (raw, json) Hash identifier: SUoalufOAGXKHZ/bvdtIDu/rc4DoqxHr4G///fVmGBs= Subject key identifier: 88:0F:FC:1B:A3:14:F0:C7:A7:28:1D:41:38:CE:CA:9C:0F:F8:40:BC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A70D0A9535BF2EC8D2DA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c25853d9-3d04-379e-9d63-b30abc9b3675.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:70:d0:a9:53:5b:f2:ec:8d:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=6ba66196-8e0d-40ec-a95c-ac8b7e52dcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a0:c8:ea:e4:45:9a:2d:e6:89:5a:37:a8:d6: 90:ef:b9:95:dc:6c:e4:93:36:9b:a4:d2:2d:ea:37: 7b:9a:65:09:88:5f:60:c4:2e:c5:9e:4b:fa:0a:73: 10:7c:8d:ef:fe:7b:38:b8:7e:5c:04:1d:33:56:45: 65:7f:c8:02:91:0b:c9:d3:30:30:8c:ac:43:66:90: 5b:de:bc:d0:c8:ab:5f:16:f3:48:cd:41:45:f6:cd: 5d:b7:27:b2:a0:e9:e7:5a:3d:15:ab:a5:81:9d:10: b1:6c:a0:7b:3d:da:d6:c6:b4:68:e7:f9:1f:33:d7: 91:47:44:49:3b:14:af:8d:f8:ee:df:e7:62:31:4c: 5e:c5:df:f5:f5:99:d7:c8:d0:4b:fe:c5:0c:4d:33: 8a:3b:7d:80:4e:04:6c:3e:d4:e9:b0:e7:e6:8d:cc: 9e:56:8e:fb:e1:f0:11:73:dd:76:18:c2:89:f9:9b: 64:21:55:14:d5:1b:93:81:93:6f:0f:04:c3:a5:1b: c9:82:a0:fa:d2:23:67:f6:61:25:c4:af:9a:0a:56: 94:6c:f5:84:2f:ca:7e:cf:e5:36:65:4a:b8:07:5d: 0a:c2:87:3d:4f:54:4f:d0:13:de:88:d8:a3:cf:a1: 9e:73:22:85:56:14:94:80:96:f5:d8:8a:cb:44:f0: 1a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0F:FC:1B:A3:14:F0:C7:A7:28:1D:41:38:CE:CA:9C:0F:F8:40:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c25853d9-3d04-379e-9d63-b30abc9b3675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a0:18:28:7f:70:31:6f:6e:db:8d:0a:a3:f1:1f:a7:3c:c6: 40:c8:a0:a5:40:f3:63:f2:ca:08:31:a7:9e:36:7e:56:5b:9a: c1:50:a7:31:f4:43:9d:9a:c0:d0:48:d2:fe:f5:fb:fb:ad:4b: 5f:3a:c5:cd:16:07:7f:6d:b3:57:d7:13:72:dd:f4:9a:07:37: f9:78:a2:73:08:2d:99:23:5d:45:e3:5b:02:5c:53:48:4c:37: 2e:55:de:92:a3:d6:b3:12:52:9b:23:75:4e:e2:4c:9e:63:64: 2e:b1:0d:38:45:b4:35:68:42:51:fb:35:24:65:8d:92:4a:d3: ca:e3:d8:9d:a4:65:ca:cf:e7:e0:74:7a:12:03:ac:54:87:09: 0a:41:d7:0e:d4:6c:5c:67:39:02:4d:9e:81:49:d6:13:87:d4: 07:71:91:83:14:49:a2:19:ca:2d:ee:16:97:4f:c1:df:63:0b: 8a:7d:fc:4c:22:d1:5e:e9:c0:52:65:3b:22:83:71:1d:11:3e: f8:7b:50:9d:40:6f:ae:ba:ae:91:8a:46:a1:23:7d:11:62:75: 6a:bd:10:a0:51:32:fa:05:80:15:fd:aa:1e:89:76:25:ab:f7: f4:0b:95:20:fc:04:86:46:81:6c:fd:53:81:71:d5:d8:d8:56: e6:e8:2a:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnDQqVNb8uyNLaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NmJhNjYxOTYtOGUwZC00MGVjLWE5NWMtYWM4YjdlNTJkY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6DI6uRFmi3miVo3qNaQ77mV3GzkkzabpNIt 6jd7mmUJiF9gxC7Fnkv6CnMQfI3v/ns4uH5cBB0zVkVlf8gCkQvJ0zAwjKxDZpBb 3rzQyKtfFvNIzUFF9s1dtyeyoOnnWj0Vq6WBnRCxbKB7PdrWxrRo5/kfM9eRR0RJ OxSvjfju3+diMUxexd/19ZnXyNBL/sUMTTOKO32ATgRsPtTpsOfmjcyeVo774fAR c912GMKJ+ZtkIVUU1RuTgZNvDwTDpRvJgqD60iNn9mElxK+aClaUbPWEL8p+z+U2 ZUq4B10Kwoc9T1RP0BPeiNijz6GecyKFVhSUgJb12IrLRPAaqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgP/BujFPDHpygdQTjOypwP+EC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzI1ODUzZDktM2QwNC0z NzllLTlkNjMtYjMwYWJjOWIzNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIigGCh/cDFvbtuNCqPxH6c8xkDIoKVA82Pyyggxp542flZbmsFQpzH0 Q52awNBI0v71+/utS186xc0WB39ts1fXE3Ld9JoHN/l4onMILZkjXUXjWwJcU0hM Ny5V3pKj1rMSUpsjdU7iTJ5jZC6xDThFtDVoQlH7NSRljZJK08rj2J2kZcrP5+B0 ehIDrFSHCQpB1w7UbFxnOQJNnoFJ1hOH1AdxkYMUSaIZyi3uFpdPwd9jC4p9/Ewi 0V7pwFJlOyKDcR0RPvh7UJ1Ab666rpGKRqEjfRFidWq9EKBRMvoFgBX9qh6JdiWr 9/QLlSD8BIZGgWz9U4Fx1djYVuboKq4= -----END CERTIFICATE-----Generated at Sat Jun 7 14:08:44 2025 by rpki-client