$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df7cb88f-1b65-3f74-bc07-f5b5f7185b94.roa File: df7cb88f-1b65-3f74-bc07-f5b5f7185b94.roa (raw, json) Hash identifier: PsVeDQsBHsKHWclh9R2xAPcP2Mao7CdnoVOIM/M4IeY= Subject key identifier: B1:C8:AC:08:B1:1C:60:6D:EC:CC:4B:DD:69:7C:EC:80:11:4A:30:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A6F1B35EBADF2B2EE0780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df7cb88f-1b65-3f74-bc07-f5b5f7185b94.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:6f:1b:35:eb:ad:f2:b2:ee:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=d7744745-55e3-47d9-ac91-d13e0a6b6ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f1:cc:b6:7a:00:2a:7d:7d:36:e1:f6:11:c5: 48:c2:5f:97:2d:60:92:fe:99:de:34:a6:1e:83:a9: e5:f4:16:2b:65:36:88:ac:84:c5:3b:58:31:25:cc: 5d:65:89:cc:3c:dd:d4:89:1a:5c:86:a4:9b:e2:9d: be:90:45:11:12:4f:2f:ef:b5:55:ba:f7:62:da:a1: 38:c8:89:d2:88:1a:cd:71:5a:c7:53:07:d7:79:a2: 5e:d2:3f:01:8f:59:3b:73:05:65:a6:7d:21:8d:11: 44:5e:f1:ad:fd:a2:7b:4d:ca:e8:54:2b:55:b7:b3: 32:74:d7:9f:b2:45:11:60:72:8c:4e:c9:f8:6b:02: 72:2c:cc:55:61:a2:52:0e:c8:d6:83:fe:6a:b1:cd: 3f:31:ff:41:7a:fc:79:d3:34:fc:d9:d4:e7:df:e3: 10:ce:33:1d:7b:8c:83:ec:8f:34:79:f0:4c:3c:b6: ed:9e:90:b9:6a:3e:be:aa:cd:b7:ad:45:e7:15:35: b6:35:1c:ff:ee:f8:da:8f:30:e3:66:45:19:9d:06: 34:2c:d4:d2:56:ab:32:93:3d:31:a9:9e:7c:7e:67: 16:57:69:32:6c:8f:c3:91:cc:e4:34:5d:f4:4d:cc: 6c:bc:7e:9b:13:b7:5a:53:c2:c5:9b:c8:90:5c:21: 45:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C8:AC:08:B1:1C:60:6D:EC:CC:4B:DD:69:7C:EC:80:11:4A:30:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df7cb88f-1b65-3f74-bc07-f5b5f7185b94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:fc:9d:5c:e8:69:a6:d1:e9:f2:ee:41:39:bd:bc:b8:97:c2: 8f:0b:33:6e:9f:ab:f5:d9:72:b6:d8:d1:e4:36:c6:e1:4a:35: c1:71:12:92:06:70:8d:4a:0f:02:fb:81:92:43:98:07:88:58: 41:22:df:50:2d:36:d7:ea:95:9c:6e:6b:87:1e:b5:f1:16:fb: 93:5c:81:4b:3e:19:15:93:06:a4:45:bb:6d:64:13:e2:18:55: 0e:34:a9:7b:b8:06:7f:b6:73:4a:ac:c5:59:4b:ba:4c:4e:be: 45:6b:3b:61:b2:25:5f:b1:40:8f:cf:57:bd:5a:6e:5d:df:3a: 1d:ea:ee:85:32:c0:5e:7d:e2:6a:ae:cb:96:27:29:5a:0a:a7: 87:81:5a:ec:26:d0:d6:7c:40:3d:61:51:d1:2c:d9:9c:51:d0: ea:24:78:55:c6:91:09:7b:a4:e7:90:58:9f:91:e9:26:f8:f5: 36:53:65:12:43:ef:87:be:d5:e7:6f:68:fa:aa:ce:c7:34:0e: 69:61:87:ad:86:a4:2a:ef:e6:a5:ad:72:1b:eb:ea:93:84:21: 77:51:75:4d:d2:fe:71:e2:b6:7d:02:23:79:ed:91:f0:36:34: fa:7a:97:44:02:3d:d6:96:2b:68:09:2a:2a:4a:a1:42:10:b3: 95:45:fd:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmm8bNeut8rLuB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZDc3NDQ3NDUtNTVlMy00N2Q5LWFjOTEtZDEzZTBhNmI2YWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/HMtnoAKn19NuH2EcVIwl+XLWCS/pneNKYe g6nl9BYrZTaIrITFO1gxJcxdZYnMPN3UiRpchqSb4p2+kEUREk8v77VVuvdi2qE4 yInSiBrNcVrHUwfXeaJe0j8Bj1k7cwVlpn0hjRFEXvGt/aJ7TcroVCtVt7MydNef skURYHKMTsn4awJyLMxVYaJSDsjWg/5qsc0/Mf9Bevx50zT82dTn3+MQzjMde4yD 7I80efBMPLbtnpC5aj6+qs23rUXnFTW2NRz/7vjajzDjZkUZnQY0LNTSVqsykz0x qZ58fmcWV2kybI/DkczkNF30TcxsvH6bE7daU8LFm8iQXCFFBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHIrAixHGBt7MxL3Wl87IARSjCDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGY3Y2I4OGYtMWI2NS0z Zjc0LWJjMDctZjViNWY3MTg1Yjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv8nVzoaabR6fLuQTm9vLiXwo8LM26fq/XZcrbY0eQ2xuFKNcFxEpIG cI1KDwL7gZJDmAeIWEEi31AtNtfqlZxua4cetfEW+5NcgUs+GRWTBqRFu21kE+IY VQ40qXu4Bn+2c0qsxVlLukxOvkVrO2GyJV+xQI/PV71abl3fOh3q7oUywF594mqu y5YnKVoKp4eBWuwm0NZ8QD1hUdEs2ZxR0OokeFXGkQl7pOeQWJ+R6Sb49TZTZRJD 74e+1edvaPqqzsc0Dmlhh62GpCrv5qWtchvr6pOEIXdRdU3S/nHitn0CI3ntkfA2 NPp6l0QCPdaWK2gJKipKoUIQs5VF/Z4= -----END CERTIFICATE-----Generated at Sat Jun 7 13:53:27 2025 by rpki-client