$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd5f341e-4f5a-35c3-aa95-9862b533c4a8.roa File: cd5f341e-4f5a-35c3-aa95-9862b533c4a8.roa (raw, json) Hash identifier: 9YggQAUR/bHn4JMND/d9Hrz570cAwTU7qivJJcvTmJE= Subject key identifier: CF:92:77:FA:3B:3C:39:06:B4:D9:9B:27:36:8F:81:DE:C5:85:A2:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA326C74C5D2089F642580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd5f341e-4f5a-35c3-aa95-9862b533c4a8.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:32:6c:74:c5:d2:08:9f:64:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=5f4bb38b-04a0-4070-b538-db59048b26d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:72:28:a0:4b:94:27:29:07:48:c5:42:09:a1: d2:3e:62:33:8f:59:42:e6:9a:f4:74:bf:9e:a7:53: f0:c6:1f:44:c9:dd:72:cf:11:75:ea:bc:c4:f8:fb: 9c:de:c0:96:89:45:d1:7a:40:f1:99:2d:e1:34:ae: 75:eb:5a:a8:05:75:19:99:c7:53:95:1e:47:06:bf: fc:1a:bb:da:c2:13:da:3b:5e:e1:c9:f4:5a:a4:1c: 8a:22:1a:f0:49:32:02:c7:cb:4d:61:fd:4d:34:04: 7d:03:df:d0:5f:c1:a0:63:1b:56:ff:41:17:fb:b5: 66:ae:a2:33:93:b7:70:ac:67:0a:b3:eb:45:c9:a9: a5:3c:ec:63:bd:75:10:f1:e4:4f:21:31:4c:01:79: 1e:73:90:14:e6:51:65:c2:a1:1f:b4:18:1f:70:29: f8:e3:1a:9d:49:9d:0b:b9:f0:88:9b:7a:d7:bd:78: c6:c5:5d:c3:71:27:6b:c0:26:d9:8f:da:0f:69:9a: 93:11:30:5e:ab:b7:d3:d3:53:f7:f0:f1:3d:ce:99: 7d:15:98:2f:27:67:bb:8c:50:14:40:84:44:fb:97: 25:40:07:56:ff:44:40:da:e0:c8:97:10:c8:34:2b: 1c:e2:25:7f:6c:7a:39:99:1c:93:b4:af:0a:b2:1a: a6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:92:77:FA:3B:3C:39:06:B4:D9:9B:27:36:8F:81:DE:C5:85:A2:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd5f341e-4f5a-35c3-aa95-9862b533c4a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:a5:cd:5a:31:42:45:62:c4:04:f7:b8:9a:d0:49:43:40:bb: 5b:ef:ec:1b:7d:a0:d0:62:43:b3:b5:96:b5:8e:b6:15:3c:f9: c6:ab:75:48:56:3e:bc:30:d8:85:24:5e:d0:70:f0:51:4a:75: 24:41:e0:4d:8d:0d:e6:22:14:c9:6f:1e:32:c3:4e:b2:ad:1e: 50:2b:d1:ca:49:14:cd:33:7a:45:32:67:44:6f:c4:e8:5b:7c: cf:89:73:98:1d:97:ac:16:35:1c:88:a6:77:0f:4b:33:8f:2a: 7e:53:45:d8:35:54:ca:c3:dd:7b:dd:17:b1:2d:e8:d6:27:5c: 41:2b:0a:0c:b6:74:63:96:a7:a8:a4:9a:3c:d0:cf:35:1d:1d: 9f:7b:6a:e7:9b:1d:55:b4:62:73:ec:f5:ea:28:d8:61:6f:94: eb:fd:f5:f0:a9:22:5e:1e:8b:3b:aa:f3:08:d2:2e:4f:a1:a5: 14:ce:a8:49:c5:ce:db:83:2c:8c:42:f0:54:aa:4b:c2:fe:42: 74:a8:71:45:74:c6:86:3b:dc:fc:9e:24:c1:c5:de:13:1e:b6: a0:85:7e:e9:d7:f8:35:69:fe:2f:e2:69:7a:bd:a0:3e:b9:85: 94:36:72:b1:9b:d1:7d:50:9f:ee:09:d6:ce:4a:c3:bd:04:69: ba:9f:e2:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jJsdMXSCJ9kJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NWY0YmIzOGItMDRhMC00MDcwLWI1MzgtZGI1OTA0OGIyNmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXIooEuUJykHSMVCCaHSPmIzj1lC5pr0dL+e p1Pwxh9Eyd1yzxF16rzE+Puc3sCWiUXRekDxmS3hNK5161qoBXUZmcdTlR5HBr/8 GrvawhPaO17hyfRapByKIhrwSTICx8tNYf1NNAR9A9/QX8GgYxtW/0EX+7VmrqIz k7dwrGcKs+tFyamlPOxjvXUQ8eRPITFMAXkec5AU5lFlwqEftBgfcCn44xqdSZ0L ufCIm3rXvXjGxV3DcSdrwCbZj9oPaZqTETBeq7fT01P38PE9zpl9FZgvJ2e7jFAU QIRE+5clQAdW/0RA2uDIlxDINCsc4iV/bHo5mRyTtK8Kshqm6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+Sd/o7PDkGtNmbJzaPgd7FhaLSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2Q1ZjM0MWUtNGY1YS0z NWMzLWFhOTUtOTg2MmI1MzNjNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGlzVoxQkVixAT3uJrQSUNAu1vv7Bt9oNBiQ7O1lrWOthU8+cardUhW Prww2IUkXtBw8FFKdSRB4E2NDeYiFMlvHjLDTrKtHlAr0cpJFM0zekUyZ0RvxOhb fM+Jc5gdl6wWNRyIpncPSzOPKn5TRdg1VMrD3XvdF7Et6NYnXEErCgy2dGOWp6ik mjzQzzUdHZ97auebHVW0YnPs9eoo2GFvlOv99fCpIl4eizuq8wjSLk+hpRTOqEnF ztuDLIxC8FSqS8L+QnSocUV0xoY73PyeJMHF3hMetqCFfunX+DVp/i/iaXq9oD65 hZQ2crGb0X1Qn+4J1s5Kw70Eabqf4qg= -----END CERTIFICATE-----Generated at Sat Jun 7 23:05:37 2025 by rpki-client