$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310aa2b6-46c7-3c3f-be18-80729877d42a.roa File: 310aa2b6-46c7-3c3f-be18-80729877d42a.roa (raw, json) Hash identifier: jnkcBHfe0pNMiTNCxYUVGHLllYn9LiqC+eUvEercD9E= Subject key identifier: 13:7F:DD:26:A6:83:AA:3E:F8:6A:80:56:F8:09:AC:CE:0F:94:31:9A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA33C87B073087A1117440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310aa2b6-46c7-3c3f-be18-80729877d42a.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:33:c8:7b:07:30:87:a1:11:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=5aa5606c-1996-4573-9fe0-b25383d53135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f9:f3:4e:72:b9:51:75:eb:70:5b:da:2a:92: 33:d8:d3:cb:03:ec:eb:33:b8:9e:56:08:f0:e5:e1: 2a:00:d5:fc:7c:10:90:54:a3:da:57:7f:66:03:b9: 34:a1:58:57:1a:e0:81:01:e1:b4:2b:bd:8b:82:51: a1:cc:ef:d8:1a:79:62:3c:72:84:4b:7a:31:7d:7f: 26:cb:3b:db:9e:2c:a5:70:cb:71:3b:4b:4e:de:a5: bb:87:02:bd:38:43:97:1d:00:a0:20:2f:b7:e2:8b: a2:7c:33:ad:e5:8d:c1:cb:89:b9:43:e4:c3:81:62: 30:c1:2c:66:18:d5:13:0f:73:06:87:42:94:1d:9a: e0:ab:9a:33:2d:89:97:83:ec:6d:ff:4a:4c:c1:c5: 01:4c:5c:08:af:67:60:16:78:b8:d2:7a:4d:e3:27: b9:d3:7c:9b:74:1c:99:cb:3e:9e:f3:ba:6b:b0:11: d2:6b:c9:7a:d6:d3:75:6c:e6:a6:82:f0:1c:57:7c: f4:03:51:e7:ef:1c:46:fb:31:69:99:67:3e:ef:ee: c6:ef:68:ed:0b:fd:84:7a:3f:1d:6c:e8:83:83:4e: 40:11:c5:51:ee:1f:67:ca:4f:fb:b0:cc:d1:37:64: 32:91:e5:72:a9:bf:13:d0:6a:f6:0e:98:90:d5:c3: 21:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7F:DD:26:A6:83:AA:3E:F8:6A:80:56:F8:09:AC:CE:0F:94:31:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310aa2b6-46c7-3c3f-be18-80729877d42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:4d:6b:cb:a2:93:68:79:6a:48:42:e6:a1:34:bb:2c:82:6c: e8:34:7d:bc:20:91:68:8e:9e:c7:f9:54:96:80:9b:67:c8:75: 04:4d:63:3d:5d:f3:be:43:4e:59:a2:3d:95:48:2e:fc:8b:ec: 0c:f2:a9:3d:ed:48:c5:fb:f8:4d:58:30:c0:ed:72:f7:87:04: d3:76:f8:ba:51:19:08:9c:67:44:c7:39:ce:f5:83:fc:8f:df: 42:61:8b:7f:20:5a:d7:13:15:7f:1c:fe:6b:01:8e:c4:24:00: 42:b6:98:67:a5:29:ea:d6:b3:a2:67:18:55:1c:03:71:f5:c3: 8d:46:83:2c:a9:ea:54:4b:a8:33:c8:b4:72:32:09:74:d3:c0: eb:da:1e:d2:bd:58:22:36:2e:9b:5e:1b:1f:30:75:9a:ff:46: ed:2b:b9:b5:0f:d4:7a:58:c1:9d:e2:05:15:0e:98:b5:58:0b: d3:21:41:b9:a6:14:03:6b:d8:12:af:f9:e3:18:0e:66:b3:71: dd:13:47:49:f0:66:80:b2:80:5d:4d:d5:28:74:9d:8a:64:9b: e2:12:a2:8f:ee:38:58:32:95:1b:9f:d9:2b:85:08:da:7e:4d: eb:86:bc:61:07:bf:dd:9b:d6:dc:9c:41:77:b3:28:f5:39:b4: 28:a7:95:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jPIewcwh6ERdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NWFhNTYwNmMtMTk5Ni00NTczLTlmZTAtYjI1MzgzZDUzMTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vnzTnK5UXXrcFvaKpIz2NPLA+zrM7ieVgjw 5eEqANX8fBCQVKPaV39mA7k0oVhXGuCBAeG0K72LglGhzO/YGnliPHKES3oxfX8m yzvbniylcMtxO0tO3qW7hwK9OEOXHQCgIC+34ouifDOt5Y3By4m5Q+TDgWIwwSxm GNUTD3MGh0KUHZrgq5ozLYmXg+xt/0pMwcUBTFwIr2dgFni40npN4ye503ybdByZ yz6e87prsBHSa8l61tN1bOamgvAcV3z0A1Hn7xxG+zFpmWc+7+7G72jtC/2Eej8d bOiDg05AEcVR7h9nyk/7sMzRN2QykeVyqb8T0Gr2DpiQ1cMhMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBN/3Samg6o++GqAVvgJrM4PlDGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzEwYWEyYjYtNDZjNy0z YzNmLWJlMTgtODA3Mjk4NzdkNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOECMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABNa8uik2h5akhC5qE0uyyCbOg0fbwgkWiOnsf5VJaAm2fIdQRNYz1d 875DTlmiPZVILvyL7AzyqT3tSMX7+E1YMMDtcveHBNN2+LpRGQicZ0THOc71g/yP 30Jhi38gWtcTFX8c/msBjsQkAEK2mGelKerWs6JnGFUcA3H1w41Ggyyp6lRLqDPI tHIyCXTTwOvaHtK9WCI2LpteGx8wdZr/Ru0rubUP1HpYwZ3iBRUOmLVYC9MhQbmm FANr2BKv+eMYDmazcd0TR0nwZoCygF1N1Sh0nYpkm+ISoo/uOFgylRuf2SuFCNp+ TeuGvGEHv92b1tycQXezKPU5tCinlfA= -----END CERTIFICATE-----Generated at Mon May 5 10:09:00 2025 by rpki-client