$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f8f3e80-1e67-3cc1-b4ad-70d6998effcd.roa File: 6f8f3e80-1e67-3cc1-b4ad-70d6998effcd.roa (raw, json) Hash identifier: rDRmttS9LDjC+TaQ1hS5ERVWaYNkTAoqvbkW+U7yf5s= Subject key identifier: 1C:5E:4A:2B:90:24:67:C5:94:87:9A:BA:10:8C:89:AF:C3:FE:73:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C0A4F0992918C47DE64EDF20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f8f3e80-1e67-3cc1-b4ad-70d6998effcd.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f0:99:29:18:c4:7d:e6:4e:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=8dea2baa-e0fa-4ffe-8a60-86bfb9c4f2ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:eb:13:e0:96:7e:93:b2:47:7f:8c:1e:0c: cd:05:a8:01:6c:00:ae:51:9a:46:56:09:82:d4:12: d0:80:a0:c8:0a:85:da:59:13:a5:42:69:c4:18:4e: ae:a6:28:f5:28:bc:a8:36:49:f9:c3:8e:19:65:93: e4:31:f2:d5:88:b6:f9:4a:67:48:1c:5b:c1:05:10: c6:72:12:c6:f6:73:ab:f0:44:96:ff:9b:c4:7b:2f: 8b:1e:e1:5c:c8:b2:bf:41:cf:e2:7e:c8:85:fb:9d: d2:71:30:01:15:a4:d6:71:42:76:54:6b:fa:9a:fd: 69:61:62:ec:9c:ad:10:73:a5:b2:84:67:59:3e:8c: 2f:25:b7:d2:c5:9a:c9:ea:bc:af:65:70:37:92:ac: c7:11:cc:03:54:b3:1c:ea:2a:f5:5c:b7:d0:29:e4: 61:45:1e:19:a5:3b:00:b7:42:ca:c9:5b:c6:58:cd: 83:c9:96:ed:35:bd:7f:1c:42:cc:ec:da:ce:7e:d8: 8b:ad:d7:cd:ad:af:69:c4:5d:7e:7c:f9:11:1a:a7: 41:a0:f0:d3:76:b2:f4:af:35:1b:ce:7d:1c:a3:01: d0:61:2a:07:bc:8e:d8:74:c4:1a:38:1c:99:5b:e3: 11:f2:8d:36:fa:70:7d:18:42:ca:45:44:a9:10:e1: b7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5E:4A:2B:90:24:67:C5:94:87:9A:BA:10:8C:89:AF:C3:FE:73:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f8f3e80-1e67-3cc1-b4ad-70d6998effcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f1:e9:6a:88:02:45:8c:f1:07:58:43:7c:e0:d7:24:69:fc: 2f:cf:07:be:46:49:36:2a:d3:24:df:ea:b8:27:3c:a7:18:0d: 06:1b:bd:9c:06:9a:0b:78:c2:58:1b:dc:9e:8d:50:54:62:29: fa:f8:2a:bd:97:5f:ce:78:4e:92:aa:d1:d6:8b:1a:aa:65:5d: c7:03:73:79:d1:c7:a9:e4:54:e0:1c:08:85:ca:47:d4:35:70: 46:50:d0:47:dc:25:01:0e:15:e9:65:0d:a4:88:3e:ad:00:d2: a1:b9:38:fe:67:8f:1b:80:62:7c:df:34:0f:75:f8:06:f6:43: d0:4d:00:d9:96:df:df:01:28:b1:08:eb:5b:cf:6c:83:96:81: 1c:0e:b8:c4:a4:be:f1:bb:20:d4:18:f6:46:65:75:d9:b9:27: b7:cb:5d:ca:3c:b4:cd:ef:6a:97:8f:1b:d5:ee:90:c4:73:7f: 23:12:6a:90:61:0f:7f:d1:91:26:62:cf:a1:53:d4:47:f4:9c: 9e:cd:31:7d:0a:3e:74:6d:64:03:3e:12:a1:a4:cf:02:25:6b: 11:91:f9:6e:1e:a4:5c:a0:af:cb:e8:47:a9:09:2e:77:2d:f7: e2:96:9c:f8:80:f1:19:da:d0:2b:38:21:ac:ee:c2:b8:55:14: 4c:a3:8c:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApPCZKRjEfeZO3yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk OGRlYTJiYWEtZTBmYS00ZmZlLThhNjAtODZiZmI5YzRmMmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9rrE+CWfpOyR3+MHgzNBagBbACuUZpGVgmC 1BLQgKDICoXaWROlQmnEGE6upij1KLyoNkn5w44ZZZPkMfLViLb5SmdIHFvBBRDG chLG9nOr8ESW/5vEey+LHuFcyLK/Qc/ifsiF+53ScTABFaTWcUJ2VGv6mv1pYWLs nK0Qc6WyhGdZPowvJbfSxZrJ6ryvZXA3kqzHEcwDVLMc6ir1XLfQKeRhRR4ZpTsA t0LKyVvGWM2DyZbtNb1/HELM7NrOftiLrdfNra9pxF1+fPkRGqdBoPDTdrL0rzUb zn0cowHQYSoHvI7YdMQaOByZW+MR8o02+nB9GELKRUSpEOG3mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxeSiuQJGfFlIeauhCMia/D/nNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmY4ZjNlODAtMWU2Ny0z Y2MxLWI0YWQtNzBkNjk5OGVmZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLx6WqIAkWM8QdYQ3zg1yRp/C/PB75GSTYq0yTf6rgnPKcYDQYbvZwG mgt4wlgb3J6NUFRiKfr4Kr2XX854TpKq0daLGqplXccDc3nRx6nkVOAcCIXKR9Q1 cEZQ0EfcJQEOFellDaSIPq0A0qG5OP5njxuAYnzfNA91+Ab2Q9BNANmW398BKLEI 61vPbIOWgRwOuMSkvvG7INQY9kZlddm5J7fLXco8tM3vapePG9XukMRzfyMSapBh D3/RkSZiz6FT1Ef0nJ7NMX0KPnRtZAM+EqGkzwIlaxGR+W4epFygr8voR6kJLnct 9+KWnPiA8Rna0Cs4IazuwrhVFEyjjB4= -----END CERTIFICATE-----Generated at Mon May 5 14:32:39 2025 by rpki-client