$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9eeee94f-99c3-3e60-8ff4-29875927ed7a.roa File: 9eeee94f-99c3-3e60-8ff4-29875927ed7a.roa (raw, json) Hash identifier: KSH3qXDQ/zXtJqD9BwMO7EyUiQnhRbcr6/t7MI9D5dc= Subject key identifier: 9F:64:1A:35:B1:C4:D9:16:66:D3:48:8E:0D:42:FE:5B:93:E4:35:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C0A4EF7727B4E1162A4EB600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9eeee94f-99c3-3e60-8ff4-29875927ed7a.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ef:77:27:b4:e1:16:2a:4e:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=cb8d2f78-8967-4fdd-bba3-8a77315b44b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:12:ef:6c:e0:13:b9:42:25:45:75:ab:16: 68:64:e9:b2:d0:bc:5f:c2:df:3e:87:45:60:50:73: 24:51:a5:44:0d:bc:81:40:1f:3e:82:c3:94:67:c2: ae:4a:48:cb:9f:90:25:02:90:c9:f7:9f:27:4f:08: 14:94:0b:46:0d:10:70:78:03:b2:f8:f2:82:c1:b7: 54:06:00:1e:d9:68:86:9a:2a:7e:50:74:5c:14:32: 4b:40:c2:b0:bd:e7:8e:1e:f7:61:7c:99:8f:02:f2: 36:f6:0d:9d:7e:fa:53:1a:4b:e9:23:65:99:d4:49: f5:2e:ff:6a:b7:65:b5:41:d4:24:13:94:a5:bf:14: de:fb:e7:4c:6e:45:63:7e:83:85:82:bb:ab:c0:88: b8:75:e5:f3:f3:fe:c8:14:0f:f0:ee:02:62:d7:e3: 7a:94:7e:bf:c1:6c:6a:fe:98:32:40:87:3e:03:61: d8:10:80:07:cc:24:99:63:ad:77:68:aa:9d:36:ec: e0:bb:ab:7c:6f:de:e8:43:c2:66:4e:dc:4b:19:4b: 64:cf:85:f4:5f:72:b6:c7:44:fc:a3:11:36:1b:05: 6e:74:be:56:63:ef:c9:30:5f:85:28:fb:40:66:9d: e1:14:56:fb:4d:6e:4f:d5:fa:8d:11:5c:70:10:43: 25:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:64:1A:35:B1:C4:D9:16:66:D3:48:8E:0D:42:FE:5B:93:E4:35:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9eeee94f-99c3-3e60-8ff4-29875927ed7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:c6:b3:64:3f:8b:f9:f3:09:e2:4c:53:21:66:d6:84:dc:f2: b7:09:6e:9b:f5:27:8f:b0:08:77:b1:73:68:d0:fb:8a:23:a3: d5:fc:61:a6:d2:3e:a6:b7:0b:4d:29:7f:db:1d:24:2d:cc:b4: 9a:82:09:af:f0:4a:fc:86:04:2f:c5:b5:3c:a8:22:7d:1f:05: e8:0f:dc:88:55:1f:b7:b4:56:a3:27:c4:b7:d7:81:6b:6c:1e: 63:0a:36:64:8c:a3:0b:54:f0:68:73:7f:c5:93:c8:39:48:81: df:e8:34:3b:48:ce:66:3b:57:c5:d1:51:5d:05:c5:d3:f5:08: c1:66:01:02:94:d6:1c:9a:63:d0:cb:a4:2f:47:f5:9f:47:c7: 79:64:e7:e8:46:72:36:c6:22:89:8e:03:bb:34:aa:e8:74:a9: 29:01:bd:7a:a2:db:84:f8:5c:2a:28:8a:b5:db:6a:58:7d:7a: 41:74:1b:b2:48:40:3c:1e:54:fc:f8:f9:59:94:43:20:b6:4f: 99:d5:9b:d5:f6:9d:40:d3:9a:28:1f:7e:47:aa:3f:b7:4b:08: 0e:38:75:bb:91:aa:2c:38:f9:e7:2d:7c:5a:92:2a:92:a0:03: b3:d2:54:9b:d1:97:93:2e:a2:a6:ec:e7:1f:bf:ea:74:cb:fb: c3:e2:04:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApO93J7ThFipOtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk Y2I4ZDJmNzgtODk2Ny00ZmRkLWJiYTMtOGE3NzMxNWI0NGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUkS72zgE7lCJUV1qxZoZOmy0Lxfwt8+h0Vg UHMkUaVEDbyBQB8+gsOUZ8KuSkjLn5AlApDJ958nTwgUlAtGDRBweAOy+PKCwbdU BgAe2WiGmip+UHRcFDJLQMKwveeOHvdhfJmPAvI29g2dfvpTGkvpI2WZ1En1Lv9q t2W1QdQkE5SlvxTe++dMbkVjfoOFgrurwIi4deXz8/7IFA/w7gJi1+N6lH6/wWxq /pgyQIc+A2HYEIAHzCSZY613aKqdNuzgu6t8b97oQ8JmTtxLGUtkz4X0X3K2x0T8 oxE2GwVudL5WY+/JMF+FKPtAZp3hFFb7TW5P1fqNEVxwEEMl4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9kGjWxxNkWZtNIjg1C/luT5DWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWVlZWU5NGYtOTljMy0z ZTYwLThmZjQtMjk4NzU5MjdlZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXGs2Q/i/nzCeJMUyFm1oTc8rcJbpv1J4+wCHexc2jQ+4ojo9X8YabS Pqa3C00pf9sdJC3MtJqCCa/wSvyGBC/FtTyoIn0fBegP3IhVH7e0VqMnxLfXgWts HmMKNmSMowtU8Ghzf8WTyDlIgd/oNDtIzmY7V8XRUV0FxdP1CMFmAQKU1hyaY9DL pC9H9Z9Hx3lk5+hGcjbGIomOA7s0quh0qSkBvXqi24T4XCooirXbalh9ekF0G7JI QDweVPz4+VmUQyC2T5nVm9X2nUDTmigffkeqP7dLCA44dbuRqiw4+ectfFqSKpKg A7PSVJvRl5Muoqbs5x+/6nTL+8PiBGE= -----END CERTIFICATE-----Generated at Sat May 10 06:57:22 2025 by rpki-client