$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/756bdcf1-51bd-3f18-9afb-668837ae0cbb.roa File: 756bdcf1-51bd-3f18-9afb-668837ae0cbb.roa (raw, json) Hash identifier: P55UsWFY7RI8PDUSH5J0WYEoRfBOHgxqZjNBto7vVnQ= Subject key identifier: 38:37:03:44:96:1F:17:0F:83:27:4D:18:1A:94:DA:EF:D5:57:EB:9C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA2CF88E9C94682277F780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/756bdcf1-51bd-3f18-9afb-668837ae0cbb.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2c:f8:8e:9c:94:68:22:77:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=f490de9a-598c-41d2-b571-7ac4b4889704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:de:86:c2:96:5a:dc:ce:43:dc:08:d7:1c: 18:2c:f8:86:bc:cb:66:43:f1:27:d3:42:39:3d:47: e0:dc:af:6c:3d:3a:b6:00:29:7c:fc:21:8e:7a:01: 9f:a1:4c:ed:3d:7b:94:0a:c0:aa:01:92:97:ae:a5: fd:ce:67:c4:14:9f:2e:2a:02:2e:d0:28:76:96:e6: 48:52:e1:44:ee:1a:91:d2:ac:56:35:88:57:67:69: bb:b4:8e:08:b6:9a:15:b5:48:a5:ff:9c:c6:e6:9b: 2d:96:46:98:f6:37:4d:22:9e:d7:19:63:ca:98:bb: fb:b2:72:9e:a1:8a:08:af:86:f8:c5:48:a4:84:20: bc:a1:04:bb:8a:7d:81:cf:2b:71:f1:5d:79:aa:8a: e5:11:53:d0:82:60:5b:0f:49:65:bd:3d:bc:b5:61: 58:28:d7:c7:1c:cc:df:89:d0:be:f6:81:52:22:f9: 10:99:3f:23:88:36:d8:62:c4:79:ef:6e:2b:24:41: aa:3d:1c:0c:bf:3a:ae:28:9b:b4:f4:ef:9a:03:e7: ff:0d:e5:a7:4c:7d:da:f1:73:88:02:f2:4c:15:a3: 57:91:ef:f6:77:38:17:14:98:c0:e1:07:29:89:4e: 97:43:bd:f4:31:7b:c2:46:a1:59:4a:ba:29:aa:2f: de:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:37:03:44:96:1F:17:0F:83:27:4D:18:1A:94:DA:EF:D5:57:EB:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/756bdcf1-51bd-3f18-9afb-668837ae0cbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:9b:77:2b:2b:0a:38:21:75:9c:78:47:62:99:65:96:22:9e: e8:fe:21:9b:5e:f6:89:a2:60:cb:3f:87:fb:9f:9c:f6:1a:c3: f2:84:4b:51:cb:37:33:85:d8:30:7d:58:fe:1c:fa:d5:12:71: bf:37:00:03:08:c9:67:dc:da:1e:c3:c4:67:91:77:88:bd:da: 8c:37:ca:5e:e9:3b:55:f4:67:04:b6:96:74:07:7a:48:31:46: 09:18:78:c6:d7:f4:f5:d0:1c:79:b9:74:6c:0b:f4:5c:ab:28: 89:6b:b8:3c:b3:86:d6:0b:9e:b1:01:5e:1e:8e:fb:48:ea:dd: cd:e2:1d:23:ba:a1:58:0e:af:df:6e:5f:8e:e1:b7:80:6a:0b: f0:88:d0:59:c2:78:51:93:f0:7a:1b:0e:39:9d:b2:a1:6f:f1: f7:04:b2:2d:79:0c:bb:37:d6:c2:bc:a1:1a:2d:95:d8:27:a1: b6:e1:1a:8d:4a:bd:86:94:47:dd:db:37:0b:2f:ed:77:31:4f: 9a:b1:21:22:0c:37:ad:fc:a9:34:ca:af:31:67:e4:d9:13:58: 17:cb:2f:2e:24:b5:13:1f:68:5c:aa:f3:39:af:5b:9d:a5:4c: 8d:fc:0b:5f:d6:4e:23:3d:be:0c:53:c4:f7:d3:12:84:7f:bf: 7a:12:0a:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92iz4jpyUaCJ394AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZjQ5MGRlOWEtNTk4Yy00MWQyLWI1NzEtN2FjNGI0ODg5NzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/vehsKWWtzOQ9wI1xwYLPiGvMtmQ/En00I5 PUfg3K9sPTq2ACl8/CGOegGfoUztPXuUCsCqAZKXrqX9zmfEFJ8uKgIu0Ch2luZI UuFE7hqR0qxWNYhXZ2m7tI4ItpoVtUil/5zG5pstlkaY9jdNIp7XGWPKmLv7snKe oYoIr4b4xUikhCC8oQS7in2Bzytx8V15qorlEVPQgmBbD0llvT28tWFYKNfHHMzf idC+9oFSIvkQmT8jiDbYYsR5724rJEGqPRwMvzquKJu09O+aA+f/DeWnTH3a8XOI AvJMFaNXke/2dzgXFJjA4QcpiU6XQ730MXvCRqFZSropqi/e8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg3A0SWHxcPgydNGBqU2u/VV+ucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzU2YmRjZjEtNTFiZC0z ZjE4LTlhZmItNjY4ODM3YWUwY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqbdysrCjghdZx4R2KZZZYinuj+IZte9omiYMs/h/ufnPYaw/KES1HL NzOF2DB9WP4c+tUScb83AAMIyWfc2h7DxGeRd4i92ow3yl7pO1X0ZwS2lnQHekgx RgkYeMbX9PXQHHm5dGwL9FyrKIlruDyzhtYLnrEBXh6O+0jq3c3iHSO6oVgOr99u X47ht4BqC/CI0FnCeFGT8HobDjmdsqFv8fcEsi15DLs31sK8oRotldgnobbhGo1K vYaUR93bNwsv7XcxT5qxISIMN638qTTKrzFn5NkTWBfLLy4ktRMfaFyq8zmvW52l TI38C1/WTiM9vgxTxPfTEoR/v3oSChs= -----END CERTIFICATE-----Generated at Mon May 5 02:30:43 2025 by rpki-client