$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d90ff904-2bad-37ea-b269-b965d7baa7a3.roa File: d90ff904-2bad-37ea-b269-b965d7baa7a3.roa (raw, json) Hash identifier: ltIuByGmltEZmfFMgYgj0HT+TPhkkvOzRmp7vqwu4TI= Subject key identifier: D0:C5:3D:38:EA:89:5E:7B:50:7B:E0:95:7D:E6:97:E0:81:30:5F:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A7949171D25E99AF28F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d90ff904-2bad-37ea-b269-b965d7baa7a3.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:79:49:17:1d:25:e9:9a:f2:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=25372846-7995-42ac-bf99-c7bcf72beb05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:e0:80:b4:a9:45:53:47:f5:47:b1:1c:7c: e1:ba:91:67:88:44:fe:66:01:a1:b8:95:d4:14:12: c8:cd:9a:e7:89:28:dd:02:89:6f:b7:8f:62:72:9c: 1c:5f:8c:56:81:5e:a6:a9:fa:f5:a2:98:6e:f5:29: 5d:a8:49:f1:02:40:01:98:b8:bc:79:a9:d7:b8:02: f0:de:97:b6:24:2b:51:ff:3a:44:c7:09:14:90:02: 50:b6:55:3c:73:9b:5b:9c:9f:7d:54:4b:e6:df:ba: 04:63:ed:cc:84:d5:76:69:ad:34:6d:aa:0b:15:c6: 27:95:b5:02:13:95:5b:83:42:33:ca:67:0a:e5:0a: 36:db:e1:a1:76:63:00:d4:6c:91:36:74:d6:06:c7: fb:b1:34:2c:e5:d9:3d:a8:e2:17:35:0e:bd:db:d7: d0:21:3f:c1:7c:45:d4:fb:8c:15:8b:46:e3:6c:06: e9:74:6f:3b:69:2d:f7:fd:7a:14:84:20:16:d6:d1: 8b:c1:6a:5f:be:85:d7:29:eb:b1:e8:68:ee:31:10: 9f:d5:6f:31:fc:1c:0b:93:c3:4f:6d:8a:3d:ad:57: ec:d9:5b:09:09:c2:ec:04:fc:85:8f:90:87:6d:8e: f0:b2:9e:61:64:0a:0c:9c:a4:11:56:08:19:f3:30: 5c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C5:3D:38:EA:89:5E:7B:50:7B:E0:95:7D:E6:97:E0:81:30:5F:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d90ff904-2bad-37ea-b269-b965d7baa7a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:6d:81:e5:7e:90:5c:76:6c:3d:2e:25:56:c5:68:98:64:b8: fe:16:96:50:0b:da:47:ba:2e:a0:f7:51:57:28:c9:a4:8e:2a: 47:e1:b5:b0:6c:9e:17:ef:1a:27:b4:cf:6a:68:d0:86:23:42: 5f:bc:c9:b9:53:16:16:be:97:6b:04:53:ce:d9:f3:84:58:25: ca:62:c6:b5:f2:0c:ca:43:06:a2:04:95:0e:af:6e:cc:16:78: 95:2b:78:bf:17:3b:cc:78:e4:68:87:08:d1:20:75:80:95:89: f4:05:ac:6a:b0:d2:69:a9:f0:d3:a0:3e:b3:45:da:fa:71:10: fe:ef:71:20:3f:f8:34:89:8f:cf:34:24:c7:9a:82:f7:a8:a3: ae:69:d8:0b:bb:bd:4f:d1:8a:05:5d:a4:b2:fd:d4:5c:f9:3d: ba:2a:ea:63:8b:09:35:f5:9c:62:47:ee:bc:69:d8:df:20:b8: 10:63:21:fa:89:4a:13:b5:63:ca:40:94:f3:9e:fa:6e:a3:67: 29:30:d0:77:94:23:ba:1a:7e:23:ff:11:0b:de:2f:07:71:bf: 5b:6d:8b:aa:ae:50:c5:2b:65:ba:18:2e:11:ab:e6:48:d2:05: c1:f2:51:05:c4:54:90:a0:24:a7:ef:25:03:92:8b:65:d8:88: 89:82:63:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnlJFx0l6ZryjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MjUzNzI4NDYtNzk5NS00MmFjLWJmOTktYzdiY2Y3MmJlYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4fggLSpRVNH9UexHHzhupFniET+ZgGhuJXU FBLIzZrniSjdAolvt49icpwcX4xWgV6mqfr1ophu9SldqEnxAkABmLi8eanXuALw 3pe2JCtR/zpExwkUkAJQtlU8c5tbnJ99VEvm37oEY+3MhNV2aa00baoLFcYnlbUC E5Vbg0IzymcK5Qo22+GhdmMA1GyRNnTWBsf7sTQs5dk9qOIXNQ6929fQIT/BfEXU +4wVi0bjbAbpdG87aS33/XoUhCAW1tGLwWpfvoXXKeux6GjuMRCf1W8x/BwLk8NP bYo9rVfs2VsJCcLsBPyFj5CHbY7wsp5hZAoMnKQRVggZ8zBceQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDFPTjqiV57UHvglX3ml+CBMF9VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDkwZmY5MDQtMmJhZC0z N2VhLWIyNjktYjk2NWQ3YmFhN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOK3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhtgeV+kFx2bD0uJVbFaJhkuP4WllAL2ke6LqD3UVcoyaSOKkfhtbBs nhfvGie0z2po0IYjQl+8yblTFha+l2sEU87Z84RYJcpixrXyDMpDBqIElQ6vbswW eJUreL8XO8x45GiHCNEgdYCVifQFrGqw0mmp8NOgPrNF2vpxEP7vcSA/+DSJj880 JMeagveoo65p2Au7vU/RigVdpLL91Fz5Pboq6mOLCTX1nGJH7rxp2N8guBBjIfqJ ShO1Y8pAlPOe+m6jZykw0HeUI7oafiP/EQveLwdxv1tti6quUMUrZboYLhGr5kjS BcHyUQXEVJCgJKfvJQOSi2XYiImCY/A= -----END CERTIFICATE-----Generated at Sat Jun 7 19:06:06 2025 by rpki-client