$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7834dcf2-c3a6-3c09-83b3-46d136891b88.roa File: 7834dcf2-c3a6-3c09-83b3-46d136891b88.roa (raw, json) Hash identifier: BoezN2jPOnXN6aRjU35+Fr63gPo0FrqFnBr9sUg7j1Y= Subject key identifier: AA:DD:BC:DC:77:A3:9D:57:91:CE:DF:D3:E7:6B:74:71:94:E9:18:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C0A4F9729CAE05498B4E1140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7834dcf2-c3a6-3c09-83b3-46d136891b88.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:f9:72:9c:ae:05:49:8b:4e:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=ef3f2ca4-ab94-4528-8d3a-716eff65408a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3a:e2:02:91:06:66:c3:3c:de:a2:7a:d4:37: bd:a0:21:7a:c4:79:5a:a9:04:d7:7f:4b:fc:f0:9e: 3f:4f:db:13:99:b1:dd:d9:08:bf:05:98:50:bd:1f: 5e:3d:58:05:63:3a:b4:f9:7d:56:cc:dc:1d:e9:66: d6:68:9f:2c:45:e9:26:7b:99:59:0c:2e:0c:a7:77: 3e:01:65:0c:57:0c:ec:d0:c0:de:62:0c:cc:24:cb: 0b:ad:96:01:a8:0c:0e:96:cc:e7:52:1b:b9:cb:91: de:96:b2:75:2a:7a:ae:81:0a:f3:b7:5e:64:8f:2f: f0:bb:ff:a8:32:d7:1e:21:cc:e7:dc:2d:29:1f:96: 22:f7:25:26:d3:96:88:1a:3a:9b:74:31:1d:9d:63: d4:11:41:a8:cd:22:8f:54:bd:2e:cd:4b:45:cf:99: 7d:2b:94:2d:9c:46:94:e3:82:50:fd:68:ce:b3:f0: 9e:72:17:fa:84:cd:7c:50:70:87:71:0e:ff:92:af: af:73:5e:73:dd:f0:1f:b8:10:61:d5:77:e8:dd:49: 41:fc:e4:cb:d8:01:9e:f9:9c:70:00:07:80:00:47: 13:c2:b6:98:86:39:03:5c:f4:52:21:cd:3a:2d:d0: 4d:68:8b:70:6c:3a:24:3e:9f:13:16:a9:c8:e8:2b: 12:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DD:BC:DC:77:A3:9D:57:91:CE:DF:D3:E7:6B:74:71:94:E9:18:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7834dcf2-c3a6-3c09-83b3-46d136891b88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:d3:89:ef:8a:45:f2:a6:cf:2d:9c:ce:9f:49:67:85:f4:d9: bb:ca:8d:2d:ee:e3:57:23:26:d8:55:e7:fc:e7:d0:cd:8b:53: 64:13:1b:9c:53:c1:a4:9e:f2:b0:4b:36:ef:90:cd:c6:7e:c4: 5f:19:86:eb:1a:72:db:df:35:d8:d3:e4:a7:42:cf:46:b2:57: 6f:73:9c:22:e0:5e:dd:3e:42:ac:7e:07:2a:41:26:99:b3:ca: cf:dd:06:f0:b5:ec:a9:34:7b:b1:e4:3e:61:69:95:eb:9e:d4: 60:87:7e:3c:d4:76:a3:63:dd:4e:3e:49:53:8e:f3:ba:ae:bb: 99:80:21:35:5a:a9:95:62:c5:f3:71:55:79:d4:fc:fa:39:40: 1b:87:94:32:3d:c1:18:9a:ed:76:9b:b3:e1:db:97:d2:0d:f2: 48:d3:c9:74:01:cc:0e:a8:06:76:df:d3:e0:d2:4b:b2:10:26: 96:65:ac:39:ab:86:55:39:90:42:56:22:3b:d7:39:9a:10:10: 01:aa:f6:44:47:7e:aa:c8:d4:c9:25:a2:e7:1f:8c:e1:d9:5f: fa:e8:5a:7b:80:30:92:af:fa:a0:6a:d9:4a:ea:78:02:62:4a: 21:9e:35:11:89:5c:9f:23:1b:0e:63:31:82:ea:6b:b4:74:c5: 2f:32:8b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApPlynK4FSYtOEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZWYzZjJjYTQtYWI5NC00NTI4LThkM2EtNzE2ZWZmNjU0MDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzriApEGZsM83qJ61De9oCF6xHlaqQTXf0v8 8J4/T9sTmbHd2Qi/BZhQvR9ePVgFYzq0+X1WzNwd6WbWaJ8sRekme5lZDC4Mp3c+ AWUMVwzs0MDeYgzMJMsLrZYBqAwOlsznUhu5y5HelrJ1KnqugQrzt15kjy/wu/+o MtceIczn3C0pH5Yi9yUm05aIGjqbdDEdnWPUEUGozSKPVL0uzUtFz5l9K5QtnEaU 44JQ/WjOs/Cechf6hM18UHCHcQ7/kq+vc15z3fAfuBBh1Xfo3UlB/OTL2AGe+Zxw AAeAAEcTwraYhjkDXPRSIc06LdBNaItwbDokPp8TFqnI6CsSSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrdvNx3o51Xkc7f0+drdHGU6Rg9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzgzNGRjZjItYzNhNi0z YzA5LTgzYjMtNDZkMTM2ODkxYjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDTie+KRfKmzy2czp9JZ4X02bvKjS3u41cjJthV5/zn0M2LU2QTG5xT waSe8rBLNu+QzcZ+xF8ZhusactvfNdjT5KdCz0ayV29znCLgXt0+Qqx+BypBJpmz ys/dBvC17Kk0e7HkPmFpleue1GCHfjzUdqNj3U4+SVOO87quu5mAITVaqZVixfNx VXnU/Po5QBuHlDI9wRia7Xabs+Hbl9IN8kjTyXQBzA6oBnbf0+DSS7IQJpZlrDmr hlU5kEJWIjvXOZoQEAGq9kRHfqrI1MkloucfjOHZX/roWnuAMJKv+qBq2UrqeAJi SiGeNRGJXJ8jGw5jMYLqa7R0xS8yi50= -----END CERTIFICATE-----Generated at Wed May 7 11:31:21 2025 by rpki-client