$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/faac51d6-ba9e-369f-91d7-2911f9117e4d.roa File: faac51d6-ba9e-369f-91d7-2911f9117e4d.roa (raw, json) Hash identifier: Tn/7Vu7VpWYWTmCS+VlDMsfAqBRXmeTWuVOG3UzIKPg= Subject key identifier: AB:24:2A:22:CB:C1:69:BA:D7:D2:50:A2:C2:93:B7:A0:3F:66:A9:13 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D594F7D2A5598C0CE2F06080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/faac51d6-ba9e-369f-91d7-2911f9117e4d.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 36183 IP address blocks: 172.224.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f7:d2:a5:59:8c:0c:e2:f0:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=c12668fa-f682-4de6-bf20-091192e070cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:87:c7:39:56:52:dc:75:99:4e:84:8f:5d: 0b:b3:ea:bb:0c:8b:5e:b8:c3:22:99:14:07:b7:3a: 7e:91:13:1d:67:42:ed:2c:fb:76:84:71:70:02:8a: 5f:dd:ee:78:7d:18:7c:23:c9:c8:10:86:e1:26:af: 2b:af:22:9a:4f:14:7b:fa:73:ae:c0:fd:ce:d5:ee: b3:f2:2f:8c:c1:01:d5:97:1d:13:ca:41:07:e4:78: ad:67:18:89:01:4a:f3:e1:c0:0f:e6:5f:45:8d:62: 56:4e:f7:5c:7d:77:d1:24:62:ff:f3:11:03:ce:b1: 08:38:68:98:c9:05:65:f5:55:b7:94:22:12:0e:6a: 6b:8f:60:71:78:5a:25:89:81:7a:c8:05:8c:3e:e2: 30:53:6c:0a:17:b5:c8:53:04:aa:a9:95:71:29:81: ee:ac:48:1f:ad:e4:c8:7d:8b:54:c6:0e:12:e8:95: 79:d8:6f:5c:a9:0b:73:9f:88:67:e1:ac:7a:65:d7: 43:76:a6:64:3d:7e:6c:00:c2:e5:aa:80:ac:2b:3b: 64:84:78:25:0c:b7:96:76:bf:63:60:0d:29:6b:ed: 63:0c:f2:12:91:44:7c:43:88:34:d8:a5:c8:29:d1: 45:19:1f:e3:72:c6:33:c0:0b:b5:ed:95:38:71:60: b3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:24:2A:22:CB:C1:69:BA:D7:D2:50:A2:C2:93:B7:A0:3F:66:A9:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/faac51d6-ba9e-369f-91d7-2911f9117e4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f1:ad:f0:bb:bb:f6:df:a3:c9:1e:27:03:e7:e9:16:20:cd: 1d:ba:9d:b4:fa:54:f4:1a:af:86:ce:55:ab:26:b4:04:64:8a: b4:51:68:98:01:ba:08:58:72:d8:9f:48:0e:35:0e:36:a8:9c: 24:e6:3d:23:db:b0:0e:07:70:11:59:1a:ac:25:34:b1:53:b4: 88:82:20:ed:62:e3:81:fb:3f:b7:2a:9c:04:8f:6c:69:3f:e6: a3:49:33:82:37:01:60:cc:3c:77:c6:43:55:8b:82:30:d6:46: 54:2b:04:fd:48:a6:cc:37:7e:07:b4:56:ff:1e:e9:08:ae:69: 91:f7:4c:c4:f7:71:e4:3b:d8:43:92:61:4a:8b:47:34:82:d7: c5:2f:ac:0e:c3:04:e3:bd:05:f3:22:e9:b0:17:09:19:84:19: da:9a:35:77:14:9f:e3:e1:2d:8a:35:34:8e:6d:3d:28:3d:67: 82:cc:31:17:fe:00:63:9c:f2:15:f2:3e:2e:49:d6:e7:5d:d0: 38:84:87:0d:4f:c5:09:9a:b5:24:0a:8c:56:cc:77:c4:32:ba: d7:49:32:54:fe:e2:c6:dd:99:e2:27:2c:be:11:0f:63:f4:76: b0:e0:bf:ed:99:10:61:98:39:19:0e:40:17:84:2f:34:54:97: 82:50:8c:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlPfSpVmMDOLwYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk YzEyNjY4ZmEtZjY4Mi00ZGU2LWJmMjAtMDkxMTkyZTA3MGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugaHxzlWUtx1mU6Ej10Ls+q7DIteuMMimRQH tzp+kRMdZ0LtLPt2hHFwAopf3e54fRh8I8nIEIbhJq8rryKaTxR7+nOuwP3O1e6z 8i+MwQHVlx0TykEH5HitZxiJAUrz4cAP5l9FjWJWTvdcfXfRJGL/8xEDzrEIOGiY yQVl9VW3lCISDmprj2BxeFoliYF6yAWMPuIwU2wKF7XIUwSqqZVxKYHurEgfreTI fYtUxg4S6JV52G9cqQtzn4hn4ax6ZddDdqZkPX5sAMLlqoCsKztkhHglDLeWdr9j YA0pa+1jDPISkUR8Q4g02KXIKdFFGR/jcsYzwAu17ZU4cWCzeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKskKiLLwWm619JQosKTt6A/ZqkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmFhYzUxZDYtYmE5ZS0z NjlmLTkxZDctMjkxMWY5MTE3ZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzxrfC7u/bfo8keJwPn6RYgzR26nbT6VPQar4bOVasmtARkirRRaJgB ughYctifSA41DjaonCTmPSPbsA4HcBFZGqwlNLFTtIiCIO1i44H7P7cqnASPbGk/ 5qNJM4I3AWDMPHfGQ1WLgjDWRlQrBP1Ipsw3fge0Vv8e6QiuaZH3TMT3ceQ72EOS YUqLRzSC18UvrA7DBOO9BfMi6bAXCRmEGdqaNXcUn+PhLYo1NI5tPSg9Z4LMMRf+ AGOc8hXyPi5J1udd0DiEhw1PxQmatSQKjFbMd8QyutdJMlT+4sbdmeInLL4RD2P0 drDgv+2ZEGGYORkOQBeELzRUl4JQjOQ= -----END CERTIFICATE-----Generated at Sat Jun 7 23:16:34 2025 by rpki-client