$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e931304e-ccfd-310c-993c-404836373b3c.roa File: e931304e-ccfd-310c-993c-404836373b3c.roa (raw, json) Hash identifier: GWMSdxw7nAC7uwSu5a3f9TElK3GVPOlTiPbtgeiCMDo= Subject key identifier: 22:2F:C2:54:45:A0:C5:67:FC:8B:35:5C:FE:C3:42:BA:70:51:35:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA3383108EEEBD2C802664 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e931304e-ccfd-310c-993c-404836373b3c.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:33:83:10:8e:ee:bd:2c:80:26:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=77db91e3-b50a-4a12-a373-2d2c7485aabf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:12:ba:27:57:33:49:db:fe:b0:e5:5b:00:5d: 5f:29:55:fe:bf:94:51:db:f6:30:17:6d:cf:93:3d: 9c:cc:71:4f:f6:d2:67:50:35:d8:f3:3f:90:1b:ff: ae:9e:e3:94:70:cb:ce:6e:be:87:a6:85:52:9c:a8: 96:42:01:05:38:f6:90:ff:91:41:a6:1b:7f:a3:35: 5d:3b:c0:d4:bf:f4:de:65:1c:90:26:18:fb:bb:4e: 25:6c:3c:c7:ae:97:b5:5b:36:dc:a7:4a:22:36:b6: c3:3e:8d:19:2a:03:10:7c:f2:94:a2:ca:d0:a0:5a: 54:17:b0:2f:59:95:2b:82:6f:d4:ad:07:39:58:67: 59:6a:a8:fa:23:c5:9f:c7:3b:ba:09:34:63:d8:30: 3c:d1:d0:73:68:44:5d:5a:ed:df:39:de:06:49:2c: 0a:f1:77:41:20:ef:71:87:10:41:92:6f:2e:c8:26: 30:ef:6e:76:0a:48:42:7e:3a:a9:4e:2a:2a:9f:89: eb:c0:5c:88:de:2c:d0:3e:50:40:b4:1d:a1:9f:df: 16:92:26:35:a7:54:8d:e7:fd:b8:1f:af:a5:dd:79: 11:1f:fc:e0:bc:08:c3:3c:87:a2:b4:16:4a:d9:e1: 73:76:67:53:49:93:96:8b:a4:64:23:1d:92:a8:a4: 39:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2F:C2:54:45:A0:C5:67:FC:8B:35:5C:FE:C3:42:BA:70:51:35:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e931304e-ccfd-310c-993c-404836373b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:07:84:47:78:ed:c1:60:3d:fd:8f:77:22:62:47:e7:1c:ef: ea:82:10:da:af:4f:3d:0f:eb:2f:f6:c2:58:7c:58:90:a4:f9: 33:0a:e6:bd:5f:c6:6c:1c:48:92:b0:46:ca:57:89:62:4a:a8: a6:5b:6d:55:39:03:f2:b6:42:23:4e:66:b7:f8:af:8a:6c:bc: 2e:d2:30:2a:61:9f:ce:22:f0:67:25:f8:6f:5e:d9:26:2a:8d: ca:5a:9a:2a:38:33:d5:e9:42:14:7c:ad:be:17:b7:78:05:3d: f7:ab:e5:9a:ac:66:16:b0:44:6f:f9:9b:4a:d3:d9:23:94:97: 20:f7:26:97:ec:24:b3:23:ec:29:12:7b:f6:71:bf:a0:dd:18: 4a:a4:38:39:9c:29:8b:7c:6c:e6:30:a7:43:05:4f:a8:a8:a7: 79:03:ab:db:89:ea:a4:df:50:94:19:63:4c:d5:fd:01:52:e6: e3:55:91:dd:4e:f5:6e:d9:17:3b:0f:4b:1f:0e:ca:23:8d:19: 9e:f3:71:56:24:e4:58:1f:fc:c9:28:40:50:42:10:7c:28:72: 4d:29:72:40:48:89:81:b9:73:76:9c:86:ef:cc:70:fb:b3:27: 77:41:85:77:77:d1:91:2f:97:bc:0f:d9:d6:49:6b:7a:83:22: 7c:2b:9a:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jODEI7uvSyAJmQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NzdkYjkxZTMtYjUwYS00YTEyLWEzNzMtMmQyYzc0ODVhYWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhK6J1czSdv+sOVbAF1fKVX+v5RR2/YwF23P kz2czHFP9tJnUDXY8z+QG/+unuOUcMvObr6HpoVSnKiWQgEFOPaQ/5FBpht/ozVd O8DUv/TeZRyQJhj7u04lbDzHrpe1Wzbcp0oiNrbDPo0ZKgMQfPKUosrQoFpUF7Av WZUrgm/UrQc5WGdZaqj6I8Wfxzu6CTRj2DA80dBzaERdWu3fOd4GSSwK8XdBIO9x hxBBkm8uyCYw7252CkhCfjqpTioqn4nrwFyI3izQPlBAtB2hn98WkiY1p1SN5/24 H6+l3XkRH/zgvAjDPIeitBZK2eFzdmdTSZOWi6RkIx2SqKQ5YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIvwlRFoMVn/Is1XP7DQrpwUTXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTkzMTMwNGUtY2NmZC0z MTBjLTk5M2MtNDA0ODM2MzczYjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkHhEd47cFgPf2PdyJiR+cc7+qCENqvTz0P6y/2wlh8WJCk+TMK5r1f xmwcSJKwRspXiWJKqKZbbVU5A/K2QiNOZrf4r4psvC7SMCphn84i8Gcl+G9e2SYq jcpamio4M9XpQhR8rb4Xt3gFPfer5ZqsZhawRG/5m0rT2SOUlyD3JpfsJLMj7CkS e/Zxv6DdGEqkODmcKYt8bOYwp0MFT6iop3kDq9uJ6qTfUJQZY0zV/QFS5uNVkd1O 9W7ZFzsPSx8OyiONGZ7zcVYk5Fgf/MkoQFBCEHwock0pckBIiYG5c3achu/McPuz J3dBhXd30ZEvl7wP2dZJa3qDInwrmms= -----END CERTIFICATE-----Generated at Mon May 5 10:01:36 2025 by rpki-client