$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d10e03ec-a7cb-3363-be03-4c0a5249f4c3.roa File: d10e03ec-a7cb-3363-be03-4c0a5249f4c3.roa (raw, json) Hash identifier: h0400k7bDjPW4kXdsdTuwY179QnmJ+YDLU/wyStcRjM= Subject key identifier: EE:B9:8D:37:85:9A:96:A9:38:BD:35:6D:27:16:1B:55:CC:53:25:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849EAEE99620360525683053708 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d10e03ec-a7cb-3363-be03-4c0a5249f4c3.roa Signing time: Tue 20 May 2025 16:33:44 +0000 ROA not before: Tue 20 May 2025 16:33:44 +0000 ROA not after: Mon 18 Aug 2025 16:33:44 +0000 asID: 36183 IP address blocks: 172.225.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:ee:99:62:03:60:52:56:83:05:37:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 16:33:44 2025 GMT Not After : Aug 18 16:33:44 2025 GMT Subject: CN=690cc196-a007-4cd9-8054-e2a2882b4d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:71:5f:f0:74:fd:86:21:49:fc:57:ae:87:1a: c7:53:ca:4c:ed:29:7f:ff:d0:6b:e5:40:2f:50:12: ca:2a:28:f2:c0:d1:a1:fb:65:b8:6e:ec:83:f8:e6: f6:79:b5:69:c0:14:d3:06:09:98:de:49:51:9c:29: 89:00:5c:82:c3:0d:7a:ef:9e:94:d8:e9:71:3a:ec: 15:4c:77:a1:79:89:b5:e3:93:03:b4:7b:36:e2:33: 67:eb:62:c7:51:50:87:d8:b4:2e:9b:de:cb:94:a9: 3c:2a:48:a9:e0:ac:39:a7:b6:62:86:f3:e2:b2:06: 8b:f8:01:70:40:55:08:94:ac:86:6b:fe:9f:f7:3a: 3b:84:58:ed:32:1b:a7:b5:2d:4c:c7:b8:8b:9e:14: ef:91:e3:ee:65:8f:b9:df:79:de:66:9e:e7:91:12: 9a:3e:3e:01:63:dc:59:62:58:d1:96:0e:13:bf:af: c4:d6:28:f5:e6:bb:c9:e3:24:6d:d1:2d:79:ef:cd: 93:57:7b:af:62:17:d3:f9:d6:b5:66:57:51:65:68: 11:c8:1e:b0:e5:6a:61:e1:6e:b4:17:a6:21:95:91: 65:14:ad:9c:a5:e8:f8:5b:a9:96:9b:b1:50:0d:5c: 0f:f6:d3:af:89:fd:25:0f:3b:cc:d4:e7:f1:60:3a: 65:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B9:8D:37:85:9A:96:A9:38:BD:35:6D:27:16:1B:55:CC:53:25:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d10e03ec-a7cb-3363-be03-4c0a5249f4c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ce:15:4e:2a:1d:62:62:90:29:02:89:12:3a:1a:fa:6b:58: a2:5d:c0:eb:6b:92:bc:cf:2a:ef:3a:82:41:cf:7b:d2:90:ce: e1:b5:c2:46:84:0f:d0:8c:d1:00:70:73:98:90:2e:ca:60:1f: 16:8f:50:bc:b5:3e:0f:4b:00:a7:8e:88:53:ec:d2:54:e3:00: f8:b9:4d:86:71:e2:5a:87:e4:78:72:e7:ed:a8:20:75:9a:f1: c9:8b:45:71:51:01:b8:8d:47:8d:46:09:50:e6:9f:7c:d3:0f: 24:61:48:f2:06:18:e1:5b:88:b3:61:27:46:ff:3e:19:f3:8f: 16:35:f6:19:58:02:e8:94:8d:bc:b2:64:0c:e7:db:b5:75:df: c5:55:5c:83:e9:0b:ee:32:6c:c0:0b:07:04:8a:1a:7a:fb:55: ea:d9:76:e8:0e:38:45:7e:1c:17:6b:8a:93:39:aa:42:09:5a: 1f:7c:7e:c3:f5:90:00:e0:db:7c:25:6d:1a:0e:50:51:87:84: 2b:bf:67:36:e0:de:e9:01:4e:d2:9b:e0:df:bb:57:55:40:78: 0d:99:30:63:86:f7:e5:83:f9:59:a0:28:39:3c:3e:71:d1:d9: e6:8f:5c:8a:f1:7a:86:de:41:ca:d0:4c:b2:4f:26:a5:f0:b3: b8:68:18:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnq7pliA2BSVoMFNwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDE2MzM0NFoXDTI1MDgxODE2MzM0NFowLzEtMCsGA1UEAxMk NjkwY2MxOTYtYTAwNy00Y2Q5LTgwNTQtZTJhMjg4MmI0ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3Ff8HT9hiFJ/FeuhxrHU8pM7Sl//9Br5UAv UBLKKijywNGh+2W4buyD+Ob2ebVpwBTTBgmY3klRnCmJAFyCww16756U2OlxOuwV THeheYm145MDtHs24jNn62LHUVCH2LQum97LlKk8Kkip4Kw5p7ZihvPisgaL+AFw QFUIlKyGa/6f9zo7hFjtMhuntS1Mx7iLnhTvkePuZY+533neZp7nkRKaPj4BY9xZ YljRlg4Tv6/E1ij15rvJ4yRt0S15782TV3uvYhfT+da1ZldRZWgRyB6w5Wph4W60 F6YhlZFlFK2cpej4W6mWm7FQDVwP9tOvif0lDzvM1OfxYDplsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO65jTeFmpapOL01bScWG1XMUyXGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDEwZTAzZWMtYTdjYi0z MzYzLWJlMDMtNGMwYTUyNDlmNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOG5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbOFU4qHWJikCkCiRI6GvprWKJdwOtrkrzPKu86gkHPe9KQzuG1wkaE D9CM0QBwc5iQLspgHxaPULy1Pg9LAKeOiFPs0lTjAPi5TYZx4lqH5Hhy5+2oIHWa 8cmLRXFRAbiNR41GCVDmn3zTDyRhSPIGGOFbiLNhJ0b/PhnzjxY19hlYAuiUjbyy ZAzn27V138VVXIPpC+4ybMALBwSKGnr7VerZdugOOEV+HBdripM5qkIJWh98fsP1 kADg23wlbRoOUFGHhCu/Zzbg3ukBTtKb4N+7V1VAeA2ZMGOG9+WD+VmgKDk8PnHR 2eaPXIrxeobeQcrQTLJPJqXws7hoGPo= -----END CERTIFICATE-----Generated at Sat Jun 7 22:57:20 2025 by rpki-client