$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd7cc9a4-4c8f-3f70-95b5-c905e22f8699.roa File: dd7cc9a4-4c8f-3f70-95b5-c905e22f8699.roa (raw, json) Hash identifier: oj3tVPxYTDZ1CCDWiT90I9svltxc01AWB1+Xvh6Ri94= Subject key identifier: B9:B4:D6:19:34:5D:2B:59:FB:84:AD:4E:40:78:AE:D1:CD:35:24:E9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA3376154A7B76F22E8900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd7cc9a4-4c8f-3f70-95b5-c905e22f8699.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:33:76:15:4a:7b:76:f2:2e:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=281ef8a4-bdd2-4312-adf9-8e41fa33b204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1a:33:c6:b0:77:f6:52:85:b4:37:fa:2e:29: e8:5d:3d:f0:4c:bd:fd:ed:51:3e:a2:bb:e7:44:79: 70:a4:b0:76:b7:2f:d4:b1:0a:a8:14:7c:b2:b8:ce: e5:4a:4b:ec:4f:60:01:54:bb:ed:ce:ce:27:3a:74: ad:6c:62:e3:ed:27:1b:66:96:cc:f7:95:e2:f0:0e: 96:24:17:50:ce:cf:47:db:53:d6:3f:bc:a8:cb:78: 35:e5:ee:80:37:22:ff:4a:fb:fa:1e:bf:ae:18:f3: 2b:5d:ed:7b:6e:8b:66:21:5a:c6:21:13:6c:a4:5b: 79:c2:d5:d2:9f:aa:9b:6e:ef:61:9c:4c:28:99:3d: 52:08:5a:d9:3c:62:fd:06:f2:e6:b2:d7:3a:24:96: a4:52:f2:e1:fa:a9:9d:63:b1:be:35:18:fb:ec:ce: 5d:f0:88:f2:9a:ca:42:62:5d:94:be:27:89:bf:64: 27:80:85:23:26:f2:a0:43:d4:cc:38:03:cc:1a:44: 49:bc:7f:d0:fa:40:d7:3f:de:3c:73:6f:69:fc:cf: 9b:54:53:52:43:3a:fd:ca:21:13:52:8b:ec:72:82: 04:cc:b9:8f:27:dc:61:7f:43:aa:55:20:06:64:95: eb:ad:14:26:57:36:b3:76:dc:68:34:01:30:61:29: da:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B4:D6:19:34:5D:2B:59:FB:84:AD:4E:40:78:AE:D1:CD:35:24:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd7cc9a4-4c8f-3f70-95b5-c905e22f8699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b2:a1:d7:4a:bb:ce:0e:3d:9f:ea:6f:6d:78:c5:11:db:66: 9f:ee:dc:da:43:da:6f:e5:c4:68:95:f9:ec:06:ef:ae:8e:a3: 68:af:8f:dc:62:71:d0:b1:50:eb:cf:29:72:23:12:f1:e8:5b: db:04:c9:c6:37:e5:a9:1f:92:cb:8c:96:bd:e6:b9:58:43:6e: d9:ba:bd:15:12:1e:85:f3:3e:b4:00:6b:db:18:15:6c:76:09: c7:2f:b9:6f:e7:52:c5:79:49:49:1d:ae:a5:f7:25:18:24:28: cb:fa:c9:8d:27:64:0d:74:c2:a1:11:f7:50:fd:1b:bc:de:de: 22:c4:72:7f:7a:5b:91:d6:c0:55:74:37:3a:bd:2c:59:f9:a9: 77:ae:1c:5f:25:ad:92:9a:d8:83:a9:b1:24:b1:fe:14:f4:8f: 8c:51:86:1d:8c:fd:84:2e:7f:96:f6:e7:42:f7:fc:c7:db:5b: 8e:e5:be:d1:da:5a:7f:77:b7:f4:1e:35:0c:1e:28:0e:fd:76: 46:40:26:30:26:90:2f:17:1d:38:29:de:45:c2:32:14:0a:01: 3b:c5:ee:90:87:72:c4:ee:59:a1:94:9b:71:85:2b:1c:b2:35: 7f:d9:43:68:41:5b:5f:df:fd:d5:49:64:d4:b7:e4:ea:28:fa: cf:8e:dc:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jN2FUp7dvIuiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MjgxZWY4YTQtYmRkMi00MzEyLWFkZjktOGU0MWZhMzNiMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BozxrB39lKFtDf6LinoXT3wTL397VE+orvn RHlwpLB2ty/UsQqoFHyyuM7lSkvsT2ABVLvtzs4nOnStbGLj7ScbZpbM95Xi8A6W JBdQzs9H21PWP7yoy3g15e6ANyL/Svv6Hr+uGPMrXe17botmIVrGIRNspFt5wtXS n6qbbu9hnEwomT1SCFrZPGL9BvLmstc6JJakUvLh+qmdY7G+NRj77M5d8IjymspC Yl2UvieJv2QngIUjJvKgQ9TMOAPMGkRJvH/Q+kDXP948c29p/M+bVFNSQzr9yiET UovscoIEzLmPJ9xhf0OqVSAGZJXrrRQmVzazdtxoNAEwYSnaUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLm01hk0XStZ+4StTkB4rtHNNSTpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQ3Y2M5YTQtNGM4Zi0z ZjcwLTk1YjUtYzkwNWUyMmY4Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2yoddKu84OPZ/qb214xRHbZp/u3NpD2m/lxGiV+ewG766Oo2ivj9xi cdCxUOvPKXIjEvHoW9sEycY35akfksuMlr3muVhDbtm6vRUSHoXzPrQAa9sYFWx2 CccvuW/nUsV5SUkdrqX3JRgkKMv6yY0nZA10wqER91D9G7ze3iLEcn96W5HWwFV0 Nzq9LFn5qXeuHF8lrZKa2IOpsSSx/hT0j4xRhh2M/YQuf5b250L3/MfbW47lvtHa Wn93t/QeNQweKA79dkZAJjAmkC8XHTgp3kXCMhQKATvF7pCHcsTuWaGUm3GFKxyy NX/ZQ2hBW1/f/dVJZNS35Ooo+s+O3GM= -----END CERTIFICATE-----Generated at Sat Jun 7 13:46:14 2025 by rpki-client