$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acfad1da-a3d0-31f4-9e9f-319a57c52807.roa File: acfad1da-a3d0-31f4-9e9f-319a57c52807.roa (raw, json) Hash identifier: OVW0xJXwOtJfF0JT6dZh1DBvf+6sbmxvm7RlGgebAXk= Subject key identifier: 06:29:CE:5C:40:21:76:86:72:DA:C5:86:B8:BE:EC:91:3D:F5:58:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA3345D45B0BEB99F8A980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acfad1da-a3d0-31f4-9e9f-319a57c52807.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:33:45:d4:5b:0b:eb:99:f8:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=340b1fcd-55f7-4a09-9447-e2ae05817698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8b:ab:c9:d9:98:0c:f9:f9:62:48:3b:ff:c6: ba:98:8a:55:7b:6b:f5:52:56:19:6b:32:c9:96:0c: 2c:b7:ab:fa:0a:6a:82:aa:b1:cb:bc:a1:68:0b:44: 3b:70:7e:c9:dd:cc:33:cb:f7:8d:41:0d:38:20:99: 3c:a3:e8:bc:e3:03:ef:49:47:0b:aa:9f:21:3c:3f: 36:5c:b1:0f:45:3b:af:86:6b:80:30:5e:1d:e1:d7: e9:c7:13:58:05:9b:2e:91:d1:c2:8e:02:f5:16:9a: 08:33:9c:d1:3b:fc:39:dd:bc:75:dc:6a:c0:58:c1: f7:2b:85:c7:b1:ea:4a:17:e0:72:73:f9:7e:84:f0: e9:de:d0:7a:66:6f:ea:bb:a7:73:bd:c8:e1:76:88: e8:b3:39:bf:9d:be:6b:00:6c:c3:2e:ba:ab:f4:9f: a4:89:35:a0:30:c9:31:e8:4d:a2:1a:c2:74:15:60: 44:94:cc:9a:b8:80:99:a9:fd:ca:22:b4:52:f1:3c: 0f:20:c2:fb:70:9f:f7:ad:58:c0:71:20:fd:e9:18: 6a:fb:47:58:49:2a:e1:c2:34:a4:bb:b5:a9:b8:5f: 68:ee:05:66:05:e4:e3:94:27:47:ba:a4:98:99:40: 90:e4:8b:d8:66:b1:11:46:93:a2:b7:52:e1:a8:7c: 6c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:29:CE:5C:40:21:76:86:72:DA:C5:86:B8:BE:EC:91:3D:F5:58:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acfad1da-a3d0-31f4-9e9f-319a57c52807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:cc:de:77:f8:4e:0d:12:06:8c:00:15:6c:38:6e:f8:a6:0b: 95:e9:eb:23:02:6a:f2:b9:2e:85:32:42:a2:49:41:2b:85:10: 1b:34:3c:fd:6d:cc:ce:26:33:17:53:df:07:a0:df:b4:c8:cc: 0b:6f:03:87:d0:c6:81:a3:9e:f8:0c:15:0d:49:23:36:36:bb: 0f:6a:45:4c:e3:e8:9f:a1:9c:81:48:85:34:a4:18:19:73:60: 26:da:ae:e1:d7:9b:0e:35:17:17:dc:18:a6:f5:61:bb:e8:e0: d8:4f:73:2c:38:e2:0c:df:75:17:eb:62:a3:57:ab:aa:4d:bc: 00:06:02:dc:7a:a4:a1:32:1e:48:74:98:0b:aa:ab:fa:fd:08: d6:16:63:4a:38:ff:96:5a:41:f4:a8:fb:2f:50:dc:9c:ca:a8: 20:ab:6b:c4:14:2b:c4:64:1d:02:d6:a7:b1:a6:56:97:f6:85: d1:cc:ba:65:f4:b4:64:6d:4d:16:9c:ea:1e:e2:87:f1:71:b4: b5:df:e8:89:da:6e:e8:e5:d8:66:17:c2:d5:d1:89:6a:9e:9a: e9:18:a9:8d:41:ad:09:e2:6b:70:c4:3f:45:09:5f:c5:c0:03: 52:f6:83:e8:3b:69:ae:7b:27:e5:44:2c:78:b5:b8:ba:d9:47: e9:e8:46:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jNF1FsL65n4qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MzQwYjFmY2QtNTVmNy00YTA5LTk0NDctZTJhZTA1ODE3Njk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIurydmYDPn5Ykg7/8a6mIpVe2v1UlYZazLJ lgwst6v6CmqCqrHLvKFoC0Q7cH7J3cwzy/eNQQ04IJk8o+i84wPvSUcLqp8hPD82 XLEPRTuvhmuAMF4d4dfpxxNYBZsukdHCjgL1FpoIM5zRO/w53bx13GrAWMH3K4XH sepKF+Byc/l+hPDp3tB6Zm/qu6dzvcjhdojoszm/nb5rAGzDLrqr9J+kiTWgMMkx 6E2iGsJ0FWBElMyauICZqf3KIrRS8TwPIML7cJ/3rVjAcSD96Rhq+0dYSSrhwjSk u7WpuF9o7gVmBeTjlCdHuqSYmUCQ5IvYZrERRpOit1LhqHxsMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYpzlxAIXaGctrFhri+7JE99VgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWNmYWQxZGEtYTNkMC0z MWY0LTllOWYtMzE5YTU3YzUyODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/M3nf4Tg0SBowAFWw4bvimC5Xp6yMCavK5LoUyQqJJQSuFEBs0PP1t zM4mMxdT3weg37TIzAtvA4fQxoGjnvgMFQ1JIzY2uw9qRUzj6J+hnIFIhTSkGBlz YCbaruHXmw41FxfcGKb1Ybvo4NhPcyw44gzfdRfrYqNXq6pNvAAGAtx6pKEyHkh0 mAuqq/r9CNYWY0o4/5ZaQfSo+y9Q3JzKqCCra8QUK8RkHQLWp7GmVpf2hdHMumX0 tGRtTRac6h7ih/FxtLXf6Inabujl2GYXwtXRiWqemukYqY1BrQnia3DEP0UJX8XA A1L2g+g7aa57J+VELHi1uLrZR+noRro= -----END CERTIFICATE-----Generated at Wed May 7 20:31:34 2025 by rpki-client