$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfddccbb-feb3-3346-85d4-3a7cb49d1cd2.roa File: cfddccbb-feb3-3346-85d4-3a7cb49d1cd2.roa (raw, json) Hash identifier: tf9DSy5vXtrP7DwuzTRWNsgCffsSVNP8VdLNy4cGBL0= Subject key identifier: 7C:87:B7:EB:E2:C0:F3:D2:59:19:48:5C:92:E1:BB:2A:AF:05:CE:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C0A4EFF82ED74BBF06425F40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfddccbb-feb3-3346-85d4-3a7cb49d1cd2.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ef:f8:2e:d7:4b:bf:06:42:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=d9389547-4b6d-4561-9dfb-b7c3c7c22ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ef:e3:e4:53:09:8c:e9:08:a5:7c:13:10:df: ad:cf:97:72:e0:60:e8:06:c6:8f:00:cd:01:6b:9d: 1a:d6:7b:76:3f:53:01:78:1e:de:63:2e:3d:2e:f7: b6:fa:a7:07:24:3c:95:2c:49:1f:37:db:46:7c:5d: 77:87:18:05:22:a4:d0:22:9f:f9:38:5a:61:61:e2: 02:18:35:58:7a:7c:45:5f:eb:92:6e:35:2b:e8:a3: 75:34:3c:92:1b:ad:a9:a0:49:18:9d:d4:73:9a:c5: 7a:b4:ce:02:8b:9c:03:ef:00:b8:89:79:6c:cf:af: ca:ac:73:96:b9:34:6b:9c:88:cf:d0:25:ed:2b:0e: 0a:05:60:aa:ae:d2:96:73:b2:66:73:c5:50:9f:62: c9:f7:51:6d:55:23:ca:22:b7:2c:62:ab:b5:64:7a: 4c:21:af:a2:46:6a:40:e8:0d:aa:78:fe:d3:73:0c: b2:f1:db:21:56:d7:41:b2:ce:b1:bc:09:b3:7d:1c: fd:5e:f9:ec:07:f9:63:19:8c:44:de:1b:54:75:8c: 27:db:eb:a7:70:34:43:6a:5e:8e:dd:40:bd:98:99: 70:ee:26:e8:b5:41:ee:3a:51:a3:94:5e:7d:fc:40: a7:68:cf:3e:c1:b4:b6:28:ae:03:30:54:15:fe:20: cd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:87:B7:EB:E2:C0:F3:D2:59:19:48:5C:92:E1:BB:2A:AF:05:CE:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfddccbb-feb3-3346-85d4-3a7cb49d1cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e8:d5:49:78:67:ba:1c:c5:78:7c:58:01:a3:e7:81:44:b6: 45:75:0b:5f:1e:cd:21:d2:fd:66:58:57:7e:b9:cb:bd:7c:22: d2:e7:c1:d3:79:e7:86:94:2d:05:77:44:b3:af:f3:9e:7e:09: ab:fc:6c:84:04:fa:cb:05:d4:ff:78:88:c0:7b:c5:18:96:a6: de:69:24:3f:51:ad:98:0c:dc:f6:b1:b3:89:cb:96:ff:a9:be: 6c:60:2b:5b:4c:cd:48:7e:e7:1e:4a:b5:a9:65:23:c3:78:f6: ce:63:e8:15:d5:a9:48:4b:15:05:fe:14:f6:2f:b1:4a:16:82: f5:13:4e:68:fb:59:c0:5c:25:1a:d1:05:17:3e:03:98:a7:65: d0:2b:1e:dd:01:cb:f0:38:27:32:24:97:a4:33:5d:bd:b8:53: 3c:bd:fc:cc:5e:9b:7a:c1:cc:15:de:a4:1e:80:48:55:0a:78: 34:9c:a8:a7:28:d2:58:91:b4:e8:72:35:e0:50:cb:b1:d5:bc: af:18:9f:36:28:cf:18:7d:92:dd:ca:bd:5b:4a:ed:9a:d8:ee: 30:df:0e:30:29:97:16:06:f4:d8:2a:f3:c8:c6:0d:f8:24:58: e6:b4:ad:71:cf:a5:e5:31:89:d4:d9:cb:90:b0:81:8d:19:fc: 19:9b:c3:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApO/4LtdLvwZCX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDkzODk1NDctNGI2ZC00NTYxLTlkZmItYjdjM2M3YzIyY2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+/j5FMJjOkIpXwTEN+tz5dy4GDoBsaPAM0B a50a1nt2P1MBeB7eYy49Lve2+qcHJDyVLEkfN9tGfF13hxgFIqTQIp/5OFphYeIC GDVYenxFX+uSbjUr6KN1NDySG62poEkYndRzmsV6tM4Ci5wD7wC4iXlsz6/KrHOW uTRrnIjP0CXtKw4KBWCqrtKWc7Jmc8VQn2LJ91FtVSPKIrcsYqu1ZHpMIa+iRmpA 6A2qeP7Tcwyy8dshVtdBss6xvAmzfRz9XvnsB/ljGYxE3htUdYwn2+uncDRDal6O 3UC9mJlw7ibotUHuOlGjlF59/ECnaM8+wbS2KK4DMFQV/iDNtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyHt+viwPPSWRlIXJLhuyqvBc7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ZkZGNjYmItZmViMy0z MzQ2LTg1ZDQtM2E3Y2I0OWQxY2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHo1Ul4Z7ocxXh8WAGj54FEtkV1C18ezSHS/WZYV365y718ItLnwdN5 54aULQV3RLOv855+Cav8bIQE+ssF1P94iMB7xRiWpt5pJD9RrZgM3Paxs4nLlv+p vmxgK1tMzUh+5x5KtallI8N49s5j6BXVqUhLFQX+FPYvsUoWgvUTTmj7WcBcJRrR BRc+A5inZdArHt0By/A4JzIkl6QzXb24Uzy9/Mxem3rBzBXepB6ASFUKeDScqKco 0liRtOhyNeBQy7HVvK8YnzYozxh9kt3KvVtK7ZrY7jDfDjAplxYG9Ngq88jGDfgk WOa0rXHPpeUxidTZy5CwgY0Z/Bmbw44= -----END CERTIFICATE-----Generated at Sat Jun 7 19:12:11 2025 by rpki-client