$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa3d8d83-4366-3af2-a4e2-b247c2d20188.roa File: aa3d8d83-4366-3af2-a4e2-b247c2d20188.roa (raw, json) Hash identifier: CAVUUz5pxwxHgPQ+LZL/DzKxPuLdcEtfx/SxMY2W/lM= Subject key identifier: A2:2E:E2:44:12:F4:7E:78:69:BF:46:D3:B8:51:AB:5A:E7:56:89:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA32D2EE3B7119914ACA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa3d8d83-4366-3af2-a4e2-b247c2d20188.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:32:d2:ee:3b:71:19:91:4a:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=e06481b9-074f-4386-9d50-5a6d9491c99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:72:13:cd:06:94:2b:53:79:d6:5d:8e:a3:2b: 7b:2e:bf:59:88:63:89:64:ac:2a:94:a2:15:f7:b7: 25:cc:bf:73:88:a8:bc:86:c6:46:cd:1f:4c:89:b5: ae:2b:aa:4d:72:f2:be:88:f8:21:c1:0d:6b:48:17: 02:d3:c5:fd:3d:bf:58:af:b8:9a:04:4f:7a:0b:6e: fd:11:b0:47:35:5b:82:97:23:41:3f:bf:56:f3:80: 9e:80:e6:7f:22:bc:26:21:ff:c0:8a:f4:5e:78:02: dc:5a:4a:eb:6b:42:2f:be:5f:75:a5:81:d7:3c:23: 39:ce:12:dd:81:f7:9e:7e:2b:bd:10:20:a6:5d:c8: 3e:54:16:54:6e:0f:f2:b3:5e:74:e9:f6:88:d9:d7: 36:96:15:58:46:95:b8:01:ce:56:b1:73:c1:e8:62: 11:2c:c0:40:8e:5b:ab:2d:33:b6:c9:e5:78:cb:45: ef:f5:fe:87:aa:d1:6a:bc:ec:3d:9a:ed:08:22:1f: 55:dc:a9:7c:fd:f8:2e:c1:7c:22:14:6a:9e:47:0e: 34:b6:aa:41:f6:38:e0:34:9e:61:db:a8:98:93:9a: 6b:35:80:97:b5:4b:50:e9:36:cd:3c:a6:f9:24:9f: b6:32:4c:79:f6:01:82:8b:3d:29:bb:61:d1:10:ee: 9d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2E:E2:44:12:F4:7E:78:69:BF:46:D3:B8:51:AB:5A:E7:56:89:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa3d8d83-4366-3af2-a4e2-b247c2d20188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:1d:b1:65:dd:b5:42:1e:7c:f1:de:0f:47:36:fb:65:fa:6f: 1c:6c:1e:45:5e:b8:9f:32:7c:9e:e8:9f:48:a0:0c:ef:e3:2a: eb:31:2a:c0:b2:96:34:b8:91:3e:e9:de:c4:29:ac:ff:90:a0: 5e:22:40:3d:c1:41:7d:47:4b:62:e3:95:1b:7b:24:3c:75:51: 85:7f:9c:dd:f9:c8:f4:cc:22:0c:c3:da:97:96:d3:5a:ee:4a: ea:f1:c3:b2:1c:3c:db:11:0e:75:9d:6f:25:6f:51:31:17:91: b2:76:a1:33:9b:cd:bb:db:f1:47:9b:e8:0f:15:2f:9a:32:58: 40:6c:08:aa:17:a2:51:22:6a:8c:9a:2a:e5:c8:aa:58:98:75: 72:d5:72:0c:56:5e:db:21:0f:65:60:b7:7e:cc:94:fe:26:13: ab:9c:1a:7d:59:39:51:fa:57:65:d3:47:14:fa:27:9b:aa:8b: 08:f8:41:d0:ed:2e:97:d9:23:75:d5:62:98:6a:d1:71:78:7f: 1d:8d:d4:0a:96:55:62:c6:f1:58:41:3e:06:bb:bb:c3:87:6f: eb:99:75:a1:75:96:1b:7c:56:46:8d:60:ed:38:22:b1:85:75: 53:dc:c3:82:cc:66:de:29:75:be:0d:fc:a6:54:cf:15:cd:38: e9:6a:01:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jLS7jtxGZFKygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZTA2NDgxYjktMDc0Zi00Mzg2LTlkNTAtNWE2ZDk0OTFjOTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XITzQaUK1N51l2Ooyt7Lr9ZiGOJZKwqlKIV 97clzL9ziKi8hsZGzR9MibWuK6pNcvK+iPghwQ1rSBcC08X9Pb9Yr7iaBE96C279 EbBHNVuClyNBP79W84CegOZ/IrwmIf/AivReeALcWkrra0Ivvl91pYHXPCM5zhLd gfeefiu9ECCmXcg+VBZUbg/ys1506faI2dc2lhVYRpW4Ac5WsXPB6GIRLMBAjlur LTO2yeV4y0Xv9f6HqtFqvOw9mu0IIh9V3Kl8/fguwXwiFGqeRw40tqpB9jjgNJ5h 26iYk5prNYCXtUtQ6TbNPKb5JJ+2Mkx59gGCiz0pu2HREO6dEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIu4kQS9H54ab9G07hRq1rnVokQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWEzZDhkODMtNDM2Ni0z YWYyLWE0ZTItYjI0N2MyZDIwMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEdsWXdtUIefPHeD0c2+2X6bxxsHkVeuJ8yfJ7on0igDO/jKusxKsCy ljS4kT7p3sQprP+QoF4iQD3BQX1HS2LjlRt7JDx1UYV/nN35yPTMIgzD2peW01ru Surxw7IcPNsRDnWdbyVvUTEXkbJ2oTObzbvb8Ueb6A8VL5oyWEBsCKoXolEiaoya KuXIqliYdXLVcgxWXtshD2Vgt37MlP4mE6ucGn1ZOVH6V2XTRxT6J5uqiwj4QdDt LpfZI3XVYphq0XF4fx2N1AqWVWLG8VhBPga7u8OHb+uZdaF1lht8VkaNYO04IrGF dVPcw4LMZt4pdb4N/KZUzxXNOOlqAag= -----END CERTIFICATE-----Generated at Mon May 5 09:43:08 2025 by rpki-client