$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/524df8c9-153b-3562-b90e-97cf8df41341.roa File: 524df8c9-153b-3562-b90e-97cf8df41341.roa (raw, json) Hash identifier: kZ5iM1FaXPH8ZzyRNFM/lke/9SIPr2E2ndMK/aa9yMk= Subject key identifier: EC:79:3A:BD:0C:5D:26:07:D5:C8:36:66:30:31:ED:10:C4:89:DB:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA2C88DCA2C1779562E180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/524df8c9-153b-3562-b90e-97cf8df41341.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2c:88:dc:a2:c1:77:95:62:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=e1a3f0ee-25b8-483e-9e79-a12749beebbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:0d:e4:7f:f1:13:83:08:e1:a1:2c:40:dc: 2c:6c:44:2a:d3:99:86:b6:3f:88:af:f0:1d:53:51: 35:00:6f:20:09:4d:0c:3e:17:68:ac:8a:ac:88:cd: c5:0d:0c:d1:35:45:31:6e:43:8f:05:4c:a5:b7:25: 98:8b:f7:e2:e5:9c:42:e2:6f:48:b3:b2:db:90:47: cb:a6:f0:54:59:a0:9c:d3:24:df:b2:46:1e:c7:6c: c5:8c:c3:77:f2:0a:88:1f:89:57:5f:83:af:50:dc: 55:8a:8a:d2:1a:78:ae:ad:5d:79:9f:0e:f6:e4:f2: 2c:4f:6f:9a:48:ed:b7:0c:ad:a9:3c:cc:68:28:9c: 1d:25:cd:14:b5:ea:49:cc:d3:d1:e9:eb:3f:34:ec: a6:ff:68:8e:c6:0f:b9:57:b4:f5:fa:e7:8e:34:39: dc:3a:0f:a3:ab:ae:0e:a9:0f:53:2f:c0:c8:a4:12: 9f:02:72:4b:fa:c5:9b:4b:2f:b8:75:af:bd:26:9e: 56:20:ad:66:3a:17:d9:1f:60:82:12:b2:a0:70:c0: 2e:0a:ad:e3:bb:d4:ab:53:c6:00:46:7a:38:40:cb: e4:5f:73:c5:9b:19:c6:13:64:25:83:da:85:2b:27: 55:41:b8:f3:89:d9:3c:94:d7:a3:90:2d:f2:74:66: 18:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:79:3A:BD:0C:5D:26:07:D5:C8:36:66:30:31:ED:10:C4:89:DB:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/524df8c9-153b-3562-b90e-97cf8df41341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e1:61:40:c7:c2:2c:df:c4:23:88:78:0b:bd:88:68:e7:c1: 75:fb:b9:cf:a4:ca:36:c7:ee:31:1f:92:15:56:50:91:40:09: 40:34:3e:3d:0d:24:98:85:78:89:9d:df:62:38:c0:4b:ad:bf: f3:58:7f:91:2f:c6:86:fb:ea:53:73:5e:01:3b:d1:8f:95:9d: 50:b4:10:1d:eb:2d:df:b8:e1:60:36:31:49:94:ed:23:92:a4: ba:04:35:b4:ff:75:4c:08:97:f9:25:20:f0:6d:53:87:40:fc: b9:09:f0:94:72:58:d2:61:3c:a1:ec:a4:6f:57:cb:86:b1:ba: fb:e8:6a:42:a1:44:b3:5b:ad:a8:3a:23:17:b2:8f:85:9f:7b: 73:02:68:cf:ed:62:48:e1:3d:3e:dd:93:92:ea:83:c8:c1:16: 43:9a:a1:db:f0:72:e5:54:ae:68:5c:1a:fc:d2:f8:70:72:21: 9c:9e:cf:c0:a9:f4:91:a5:a5:7d:80:a7:2b:78:14:26:ce:f3: 39:ae:e1:5b:19:0e:a6:c9:ac:a5:b9:4f:0e:38:9b:20:7d:1e: 84:b2:59:5d:42:2d:85:a7:cd:7a:9a:d4:ac:84:9c:4e:de:67: c1:1a:90:e3:91:be:76:89:33:ac:cb:a6:c8:f8:6f:27:39:e2: 7b:75:cb:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92iyI3KLBd5Vi4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZTFhM2YwZWUtMjViOC00ODNlLTllNzktYTEyNzQ5YmVlYmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFUN5H/xE4MI4aEsQNwsbEQq05mGtj+Ir/Ad U1E1AG8gCU0MPhdorIqsiM3FDQzRNUUxbkOPBUyltyWYi/fi5ZxC4m9Is7LbkEfL pvBUWaCc0yTfskYex2zFjMN38gqIH4lXX4OvUNxViorSGniurV15nw725PIsT2+a SO23DK2pPMxoKJwdJc0UtepJzNPR6es/NOym/2iOxg+5V7T1+ueONDncOg+jq64O qQ9TL8DIpBKfAnJL+sWbSy+4da+9Jp5WIK1mOhfZH2CCErKgcMAuCq3ju9SrU8YA Rno4QMvkX3PFmxnGE2Qlg9qFKydVQbjzidk8lNejkC3ydGYYBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOx5Or0MXSYH1cg2ZjAx7RDEidtvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTI0ZGY4YzktMTUzYi0z NTYyLWI5MGUtOTdjZjhkZjQxMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOG6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3hYUDHwizfxCOIeAu9iGjnwXX7uc+kyjbH7jEfkhVWUJFACUA0Pj0N JJiFeImd32I4wEutv/NYf5Evxob76lNzXgE70Y+VnVC0EB3rLd+44WA2MUmU7SOS pLoENbT/dUwIl/klIPBtU4dA/LkJ8JRyWNJhPKHspG9Xy4axuvvoakKhRLNbrag6 Ixeyj4Wfe3MCaM/tYkjhPT7dk5Lqg8jBFkOaodvwcuVUrmhcGvzS+HByIZyez8Cp 9JGlpX2Apyt4FCbO8zmu4VsZDqbJrKW5Tw44myB9HoSyWV1CLYWnzXqa1KyEnE7e Z8EakOORvnaJM6zLpsj4byc54nt1ywo= -----END CERTIFICATE-----Generated at Mon May 5 12:59:01 2025 by rpki-client