$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa File: 88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa (raw, json) Hash identifier: DX0Eku7oEYGTd17wRtT22Q/N+8kI0ayGtxVejHr/WPg= Subject key identifier: A5:1B:C7:0F:A6:DD:BE:ED:04:CD:D0:45:B6:1A:34:F7:FE:B6:69:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BB0F7A69361FC3EE6828B020 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 36183 IP address blocks: 172.225.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:7a:69:36:1f:c3:ee:68:28:b0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=f3eeff45-98d7-4955-99d1-e71fa9ce11af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:49:26:9f:8d:1c:b3:1c:9a:fb:3a:aa:25:8b: 5f:ca:88:aa:f9:b5:ce:71:24:3b:9c:73:c0:be:09: 13:65:f7:fd:ff:95:18:dd:e3:eb:21:d5:f1:e2:c8: 28:f3:07:93:c9:40:48:88:cd:2a:07:e4:1f:53:6a: 7e:93:37:34:d8:06:c4:1c:4a:bc:f9:61:4c:4b:c6: 28:4e:c0:a0:3b:25:58:2b:b6:4a:ab:73:52:b7:d7: ec:e2:09:2e:02:99:54:4c:93:b8:ba:cf:56:c9:19: 63:5f:6b:22:f7:72:3a:54:93:3a:5b:44:13:af:2e: 03:d6:ab:93:5c:90:50:38:1f:e2:ce:25:da:1b:65: 86:28:be:8c:fa:73:40:57:7e:ff:c8:0b:8d:01:6e: ad:d2:9d:a2:7a:45:b1:f9:e7:3b:a3:f9:fa:7e:6e: a7:1a:3e:59:30:ab:1d:42:8f:fb:0a:4b:bf:12:32: 22:cd:d9:c2:ff:57:d3:79:f1:2d:6e:d9:12:2a:82: a2:b0:46:16:56:b0:50:f5:c1:e3:10:fe:04:49:6e: e8:ea:27:23:4e:27:d4:71:a9:c1:50:75:cc:58:49: 62:9d:11:66:10:0b:2b:e0:fc:e4:fa:96:72:e3:09: 76:fa:c0:18:5d:d6:c3:0f:c4:49:82:17:ab:36:df: 3a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1B:C7:0F:A6:DD:BE:ED:04:CD:D0:45:B6:1A:34:F7:FE:B6:69:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:5d:fd:f7:fd:05:e2:e3:ca:db:fe:d0:cf:b3:07:83:7f:ea: e9:44:27:d8:84:73:2e:57:68:07:aa:75:5c:7f:df:32:9c:06: dc:96:b1:2e:79:c3:fd:a1:4f:c3:01:66:c5:61:10:6e:9b:15: f5:e6:42:fe:a1:4a:5b:c3:59:5b:b2:5c:2c:bd:f7:dd:3f:bb: 60:89:ae:42:ea:b9:1b:59:68:a5:7c:e6:86:db:0d:44:cf:e5: e1:ff:9b:df:f2:71:5d:04:07:2e:59:c2:c3:6e:f3:2c:32:9e: 0c:6c:e6:e7:8e:43:1e:c0:e6:b8:c6:8e:7f:a7:ba:a9:6f:1b: d3:22:8f:3c:ce:41:ff:bd:a8:9b:e7:6b:91:2c:f3:0e:76:3c: 38:84:00:40:15:b9:ee:a2:bc:64:ed:1a:b4:8b:e2:96:b6:3f: 5e:ee:ab:b2:50:f8:61:b4:20:de:e5:ac:83:1c:6a:0d:f6:6c: 59:46:3a:8a:e5:51:d5:2f:3e:8b:be:1c:5c:0e:95:6c:3f:be: da:c0:7a:2f:2a:bc:1c:3a:60:4c:f2:c0:8a:15:f6:02:d2:85: 76:f6:2b:2f:16:d0:55:1a:e6:e4:1e:07:23:3c:15:26:f5:43: ee:31:f7:36:25:c2:a5:d1:e5:48:5d:fa:69:40:90:b7:b2:1e: 4c:37:61:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D3ppNh/D7mgosCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk ZjNlZWZmNDUtOThkNy00OTU1LTk5ZDEtZTcxZmE5Y2UxMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEkmn40csxya+zqqJYtfyoiq+bXOcSQ7nHPA vgkTZff9/5UY3ePrIdXx4sgo8weTyUBIiM0qB+QfU2p+kzc02AbEHEq8+WFMS8Yo TsCgOyVYK7ZKq3NSt9fs4gkuAplUTJO4us9WyRljX2si93I6VJM6W0QTry4D1quT XJBQOB/iziXaG2WGKL6M+nNAV37/yAuNAW6t0p2iekWx+ec7o/n6fm6nGj5ZMKsd Qo/7Cku/EjIizdnC/1fTefEtbtkSKoKisEYWVrBQ9cHjEP4ESW7o6icjTifUcanB UHXMWElinRFmEAsr4Pzk+pZy4wl2+sAYXdbDD8RJgherNt86KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUbxw+m3b7tBM3QRbYaNPf+tmlDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhlOWQ2M2EtY2JjYS0z ZDczLTliZDMtNjdlNGEwOGY3YzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxd/ff9BeLjytv+0M+zB4N/6ulEJ9iEcy5XaAeqdVx/3zKcBtyWsS55 w/2hT8MBZsVhEG6bFfXmQv6hSlvDWVuyXCy9990/u2CJrkLquRtZaKV85obbDUTP 5eH/m9/ycV0EBy5ZwsNu8ywyngxs5ueOQx7A5rjGjn+nuqlvG9MijzzOQf+9qJvn a5Es8w52PDiEAEAVue6ivGTtGrSL4pa2P17uq7JQ+GG0IN7lrIMcag32bFlGOorl UdUvPou+HFwOlWw/vtrAei8qvBw6YEzywIoV9gLShXb2Ky8W0FUa5uQeByM8FSb1 Q+4x9zYlwqXR5Uhd+mlAkLeyHkw3YSs= -----END CERTIFICATE-----Generated at Mon May 5 15:36:05 2025 by rpki-client