$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e359c936-5de1-344b-8ae7-f9698bdeba0b.roa File: e359c936-5de1-344b-8ae7-f9698bdeba0b.roa (raw, json) Hash identifier: RuOIhLy0Bn1tgWF1SgYj/wSeOCYxEBDcI+BtlE2HSgg= Subject key identifier: 14:31:0D:6E:0A:8E:57:3B:3B:24:DF:BD:51:B7:EC:3C:FB:50:36:8F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C20B47F89C569888EB9D63F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e359c936-5de1-344b-8ae7-f9698bdeba0b.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 36183 IP address blocks: 172.225.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0b:47:f8:9c:56:98:88:eb:9d:63:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=26b8ecf6-512b-4ebc-bd00-ef5590bbca9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:79:52:b2:d7:b0:d4:5d:25:72:5f:75:24:15: f4:e5:0d:dc:36:c8:8f:78:9a:13:29:01:d6:ae:8f: 7f:8e:b4:40:f3:0c:7c:52:aa:0c:01:11:26:32:5c: 74:94:08:23:14:e4:28:a4:78:ec:f7:94:51:ef:e8: 2b:c9:ed:00:f8:2f:96:ab:3f:90:fd:18:37:4f:e7: 5c:ee:3d:f7:22:86:d6:f8:e5:ac:ce:fb:e6:ba:6d: 83:71:d8:2b:96:55:ee:3d:68:df:8b:36:21:19:9e: 8a:8d:bb:de:bb:d2:c0:9e:04:5b:3e:da:f6:30:f1: a1:68:42:d5:76:0a:9c:6f:86:52:6f:94:95:1b:6c: 23:0e:02:4a:3c:88:87:86:b0:23:c3:f6:1e:79:34: 39:5e:17:e2:48:55:19:a9:e7:7e:79:fe:2e:18:12: 7b:b6:37:31:e1:aa:37:c7:6d:7a:52:f7:1d:ca:6f: 96:39:7d:9e:50:10:d9:2d:7f:64:52:41:c2:30:e3: 50:d8:40:cb:45:b2:f0:5e:cb:a4:7a:26:1c:61:fb: 51:47:b8:07:dd:5a:ca:18:ff:19:c2:76:1e:d9:8f: 73:0c:5b:a6:ef:b8:3a:99:61:11:cf:41:ee:71:6f: 7f:de:53:bd:a1:79:d8:6c:42:f1:f3:cc:87:6b:17: 54:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:31:0D:6E:0A:8E:57:3B:3B:24:DF:BD:51:B7:EC:3C:FB:50:36:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e359c936-5de1-344b-8ae7-f9698bdeba0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f0:21:1e:89:99:19:d5:17:9b:d4:1c:1a:49:47:0c:51:fc: 93:b9:1b:5e:eb:7b:17:e6:f4:30:64:0c:1c:37:3b:88:3e:8e: 25:5e:db:38:45:f7:54:b2:82:a4:46:c3:99:7a:e6:8c:e9:f9: c0:7f:49:92:44:b5:c4:c8:59:59:72:76:51:ce:d7:b0:0e:da: 57:91:1d:df:81:63:99:7d:d5:7d:85:5b:a0:dc:65:e1:46:63: 4e:4f:d9:5c:8e:63:73:58:bc:19:ce:29:35:4a:63:cf:95:93: 85:b8:ff:24:4c:d2:0b:84:c1:5f:e0:2b:1e:44:a4:bc:29:e6: 2b:61:9b:f5:6a:48:b3:86:fb:69:3f:85:a9:20:d8:2e:ab:fa: ed:23:a2:41:01:cc:e1:59:1a:18:09:84:1f:4e:a9:7f:73:15: 77:a4:89:51:47:69:0a:01:82:1f:41:3f:c1:98:51:8f:3c:15: be:0c:bc:2c:aa:1b:38:e5:7e:3c:be:4b:69:0e:dd:47:c4:cd: dd:b8:4f:37:b0:90:ae:5e:32:2f:30:4a:02:da:cb:43:21:71: b7:bc:40:87:cf:35:0d:5c:ae:94:c7:fe:ea:72:70:35:05:65: f0:c5:3e:b7:4f:47:6b:20:42:87:7a:d5:09:ea:b3:c5:a4:e4: ac:a0:15:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCC0f4nFaYiOudY/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MjZiOGVjZjYtNTEyYi00ZWJjLWJkMDAtZWY1NTkwYmJjYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3lSstew1F0lcl91JBX05Q3cNsiPeJoTKQHW ro9/jrRA8wx8UqoMAREmMlx0lAgjFOQopHjs95RR7+grye0A+C+Wqz+Q/Rg3T+dc 7j33IobW+OWszvvmum2DcdgrllXuPWjfizYhGZ6Kjbveu9LAngRbPtr2MPGhaELV dgqcb4ZSb5SVG2wjDgJKPIiHhrAjw/YeeTQ5XhfiSFUZqed+ef4uGBJ7tjcx4ao3 x216Uvcdym+WOX2eUBDZLX9kUkHCMONQ2EDLRbLwXsukeiYcYftRR7gH3VrKGP8Z wnYe2Y9zDFum77g6mWERz0HucW9/3lO9oXnYbELx88yHaxdUnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQxDW4Kjlc7OyTfvVG37Dz7UDaPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTM1OWM5MzYtNWRlMS0z NDRiLThhZTctZjk2OThiZGViYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnwIR6JmRnVF5vUHBpJRwxR/JO5G17rexfm9DBkDBw3O4g+jiVe2zhF 91SygqRGw5l65ozp+cB/SZJEtcTIWVlydlHO17AO2leRHd+BY5l91X2FW6DcZeFG Y05P2VyOY3NYvBnOKTVKY8+Vk4W4/yRM0guEwV/gKx5EpLwp5ithm/VqSLOG+2k/ hakg2C6r+u0jokEBzOFZGhgJhB9OqX9zFXekiVFHaQoBgh9BP8GYUY88Fb4MvCyq Gzjlfjy+S2kO3UfEzd24TzewkK5eMi8wSgLay0Mhcbe8QIfPNQ1crpTH/upycDUF ZfDFPrdPR2sgQod61Qnqs8Wk5KygFWE= -----END CERTIFICATE-----Generated at Thu May 8 02:58:25 2025 by rpki-client