$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cca366e1-77db-3a4b-b04a-5110c564080c.roa File: cca366e1-77db-3a4b-b04a-5110c564080c.roa (raw, json) Hash identifier: rCZXG7IeSx+l5qtSYUbQCxNPxKXzNrlFsOl0CI53hDw= Subject key identifier: 9A:54:E6:E2:B3:BA:E5:40:D5:0D:6D:60:7E:4B:FF:A4:61:A0:F1:0B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C20AB6925C68A5EE1E82CC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cca366e1-77db-3a4b-b04a-5110c564080c.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 36183 IP address blocks: 172.225.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:b6:92:5c:68:a5:ee:1e:82:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=ccb6d7f0-d22f-4f96-9aa0-b413541ab980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:9e:69:71:10:4c:bd:e2:55:63:89:4d:4f: d5:28:f0:ea:1e:fd:c6:82:ad:17:17:c1:f6:b0:e4: cd:b5:47:bc:11:4d:20:28:45:58:10:69:cc:0d:d6: 9f:81:c7:bd:9b:6a:cb:40:79:3f:40:02:2e:68:88: 99:fa:61:d5:4c:fb:22:e5:92:85:3d:eb:5f:3f:6a: 07:cc:da:da:db:b0:58:69:b2:a3:c5:12:d3:50:ff: 1c:4d:8d:74:07:9b:1b:62:f0:15:a5:2e:09:e1:7a: 05:aa:6f:d3:f3:2a:23:6c:92:c3:c7:c3:0d:2b:fc: e8:23:05:96:83:70:f1:60:87:b4:8b:7e:1d:f9:dd: d9:1d:37:a1:c1:fa:5c:06:ae:54:03:5c:43:d0:4d: 4c:9f:71:7d:dd:7b:36:b0:2d:db:98:18:1a:ab:ff: 28:a4:5c:ba:3b:86:5a:60:dd:9f:b3:7d:7f:9a:7f: 1a:41:e5:57:0d:0b:36:a1:bf:f8:fe:62:ae:f5:9c: 54:50:d0:10:dd:a2:3d:e7:1f:e9:eb:b3:f6:34:b5: fe:fe:7a:7f:07:79:f4:03:0c:b1:b2:bc:74:b3:c1: 4f:cb:d4:3f:1f:d8:3d:c4:75:7c:f1:c9:5b:cf:d9: cb:cd:77:fa:de:bc:52:c9:09:40:be:a0:1d:07:5f: 4d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:54:E6:E2:B3:BA:E5:40:D5:0D:6D:60:7E:4B:FF:A4:61:A0:F1:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cca366e1-77db-3a4b-b04a-5110c564080c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:df:0d:a5:db:d6:b7:b4:73:20:e9:1a:de:57:78:71:dc:18: 67:f5:a7:67:ca:c8:86:04:70:95:68:64:3e:be:59:7a:a2:0a: 20:ea:f9:0f:50:c6:0f:47:a1:86:60:7e:7f:e6:8d:26:e6:e7: 2a:f8:9f:73:a9:78:4c:98:c5:98:d4:6c:1a:f7:55:8e:b0:2c: 95:66:e2:b1:f8:73:c5:5d:56:f3:c5:e5:00:a1:0c:0a:c2:87: 6b:58:44:d8:27:d0:fa:83:8e:2e:e6:1b:9a:47:4e:18:5c:68: 7d:59:1a:f3:50:1b:2b:48:e7:2c:80:d1:5d:11:77:1d:a5:a0: cd:6c:95:2b:9e:1e:a8:a4:8a:8a:88:f3:92:37:87:d1:83:a4: b7:aa:96:86:bc:1e:07:e4:c6:0b:4b:ac:60:56:ec:69:e1:a7: b3:d5:c6:b5:61:1e:e7:fb:19:ec:33:d7:f4:fc:73:92:47:eb: 4f:c7:f7:8b:80:1e:a6:a2:99:29:82:6f:67:2a:9d:39:91:b6: fb:1c:84:91:b2:be:fb:e9:19:35:9e:47:b4:3a:e8:8f:2a:7e: d4:ba:e0:6a:d9:a0:2c:b8:be:91:9b:4b:25:81:e6:24:67:6a: 58:02:97:c8:c0:da:09:08:dd:ee:fb:52:88:f1:ad:1b:9a:0f: 04:c0:95:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCraSXGil7h6CzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk Y2NiNmQ3ZjAtZDIyZi00Zjk2LTlhYTAtYjQxMzU0MWFiOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtGeaXEQTL3iVWOJTU/VKPDqHv3Ggq0XF8H2 sOTNtUe8EU0gKEVYEGnMDdafgce9m2rLQHk/QAIuaIiZ+mHVTPsi5ZKFPetfP2oH zNra27BYabKjxRLTUP8cTY10B5sbYvAVpS4J4XoFqm/T8yojbJLDx8MNK/zoIwWW g3DxYIe0i34d+d3ZHTehwfpcBq5UA1xD0E1Mn3F93Xs2sC3bmBgaq/8opFy6O4Za YN2fs31/mn8aQeVXDQs2ob/4/mKu9ZxUUNAQ3aI95x/p67P2NLX+/np/B3n0Awyx srx0s8FPy9Q/H9g9xHV88clbz9nLzXf63rxSyQlAvqAdB19NJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpU5uKzuuVA1Q1tYH5L/6RhoPELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2NhMzY2ZTEtNzdkYi0z YTRiLWIwNGEtNTExMGM1NjQwODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOH6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXfDaXb1re0cyDpGt5XeHHcGGf1p2fKyIYEcJVoZD6+WXqiCiDq+Q9Q xg9HoYZgfn/mjSbm5yr4n3OpeEyYxZjUbBr3VY6wLJVm4rH4c8VdVvPF5QChDArC h2tYRNgn0PqDji7mG5pHThhcaH1ZGvNQGytI5yyA0V0Rdx2loM1slSueHqikioqI 85I3h9GDpLeqloa8HgfkxgtLrGBW7Gnhp7PVxrVhHuf7Gewz1/T8c5JH60/H94uA HqaimSmCb2cqnTmRtvschJGyvvvpGTWeR7Q66I8qftS64GrZoCy4vpGbSyWB5iRn algCl8jA2gkI3e77UojxrRuaDwTAlUA= -----END CERTIFICATE-----Generated at Sat Jun 7 18:32:33 2025 by rpki-client