$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d86175b3-fe1a-3b2c-bc02-20289f2fb965.roa File: d86175b3-fe1a-3b2c-bc02-20289f2fb965.roa (raw, json) Hash identifier: slDkPAcbFJ1DiMKM7SbA2vwTO8N1cIn5sPt5nkR/n5U= Subject key identifier: 0E:8D:F8:D8:4F:C8:2D:06:39:BB:73:A1:EB:80:9F:75:2C:AA:28:E3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA2CE9E9F759C10E82CD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d86175b3-fe1a-3b2c-bc02-20289f2fb965.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2c:e9:e9:f7:59:c1:0e:82:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=5b44194c-9821-496d-855d-4d80f234b866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:50:c2:96:20:a5:f8:16:51:0a:f9:1d:7b:d3: b1:0f:57:50:74:47:26:5f:6c:c4:3b:ee:92:ae:c1: 4a:3d:8d:6c:26:17:5d:95:d4:f3:2d:60:ab:a1:7b: c1:63:a3:fa:ec:85:08:38:37:e3:bc:88:98:f6:35: 0b:a7:f9:8c:3f:bb:fe:ad:4e:77:f9:c6:6e:e2:d7: 2e:c3:16:4a:3d:42:33:99:d6:7f:bb:51:f8:2a:d3: 99:c3:5e:2c:cd:d0:46:af:1e:1a:25:c0:d7:a5:0b: 4b:b8:01:1a:7a:be:21:ae:4d:ca:20:16:c6:50:c4: d3:9e:6b:9f:26:f7:2f:4c:49:78:be:41:36:17:ee: 49:81:44:86:b0:e2:2b:b8:8f:64:74:34:1f:24:d6: dc:eb:5f:2c:05:11:ce:8d:98:a0:5f:09:3b:75:68: 38:9c:b8:4d:2b:64:3e:af:3b:a9:30:41:89:c6:30: a8:8e:ec:32:0b:96:bd:3f:af:f5:fc:8b:d0:18:7a: de:4e:2e:8f:f3:b9:25:50:0c:8c:c8:5c:6f:93:4a: d9:81:e0:81:e7:b1:d1:b5:92:77:6d:72:c5:0f:7f: 39:a3:da:43:45:2b:7b:84:eb:52:86:e0:70:7f:b4: 9a:a1:57:df:68:42:f1:69:85:c1:c3:b2:a8:6f:31: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8D:F8:D8:4F:C8:2D:06:39:BB:73:A1:EB:80:9F:75:2C:AA:28:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d86175b3-fe1a-3b2c-bc02-20289f2fb965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:03:75:b2:6d:81:37:b3:5c:89:40:32:e3:85:a7:6c:9d:f1: 97:d9:1b:04:43:cf:35:3f:0e:81:6f:15:5a:52:31:d5:ce:a7: 48:c0:fe:91:56:fd:33:ad:9b:14:3b:ac:d3:4c:c6:ea:18:10: 45:d9:a8:b1:72:79:ad:4d:cd:98:65:95:96:5d:a2:8b:cc:28: 38:51:a0:c6:2a:25:c9:3f:ec:eb:44:21:fc:04:f9:ee:64:16: 47:a1:bc:0f:67:8b:56:4a:90:93:23:50:96:19:ca:f3:14:d1: 52:09:cf:31:c6:2b:3d:a0:43:73:01:8d:11:44:b7:51:70:26: 55:40:aa:1e:49:6a:b8:c9:82:63:2a:d1:02:cd:8e:ae:62:08: 8c:a6:29:f3:7a:5d:a3:e9:8e:5c:10:3d:d4:f7:df:ec:e3:8f: a1:3e:d3:bb:f8:5f:0e:0f:38:a5:9d:c4:3b:94:b6:67:56:4c: de:d2:bc:6b:48:4a:d3:14:76:2b:9c:42:28:b2:c9:e1:8f:dd: ae:78:e0:0c:90:90:c3:52:ad:60:f8:4e:24:0d:2e:5d:cf:07: a8:2b:ff:90:19:2e:a9:5b:3e:a2:f0:ef:09:9a:c3:6f:8e:cf: fc:70:06:72:6f:98:2a:9c:2b:13:52:ba:e1:a2:6f:8e:b9:84: 43:c2:af:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92izp6fdZwQ6CzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NWI0NDE5NGMtOTgyMS00OTZkLTg1NWQtNGQ4MGYyMzRiODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVDCliCl+BZRCvkde9OxD1dQdEcmX2zEO+6S rsFKPY1sJhddldTzLWCroXvBY6P67IUIODfjvIiY9jULp/mMP7v+rU53+cZu4tcu wxZKPUIzmdZ/u1H4KtOZw14szdBGrx4aJcDXpQtLuAEaer4hrk3KIBbGUMTTnmuf JvcvTEl4vkE2F+5JgUSGsOIruI9kdDQfJNbc618sBRHOjZigXwk7dWg4nLhNK2Q+ rzupMEGJxjCojuwyC5a9P6/1/IvQGHreTi6P87klUAyMyFxvk0rZgeCB57HRtZJ3 bXLFD385o9pDRSt7hOtShuBwf7SaoVffaELxaYXBw7KobzE+5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6N+NhPyC0GObtzoeuAn3UsqijjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDg2MTc1YjMtZmUxYS0z YjJjLWJjMDItMjAyODlmMmZiOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoDdbJtgTezXIlAMuOFp2yd8ZfZGwRDzzU/DoFvFVpSMdXOp0jA/pFW /TOtmxQ7rNNMxuoYEEXZqLFyea1NzZhllZZdoovMKDhRoMYqJck/7OtEIfwE+e5k FkehvA9ni1ZKkJMjUJYZyvMU0VIJzzHGKz2gQ3MBjRFEt1FwJlVAqh5JarjJgmMq 0QLNjq5iCIymKfN6XaPpjlwQPdT33+zjj6E+07v4Xw4POKWdxDuUtmdWTN7SvGtI StMUdiucQiiyyeGP3a544AyQkMNSrWD4TiQNLl3PB6gr/5AZLqlbPqLw7wmaw2+O z/xwBnJvmCqcKxNSuuGib465hEPCrzo= -----END CERTIFICATE-----Generated at Wed May 7 13:16:04 2025 by rpki-client