$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1bee9e0f-9bc5-3154-b09a-2268390bb2b0.roa File: 1bee9e0f-9bc5-3154-b09a-2268390bb2b0.roa (raw, json) Hash identifier: 2e7/+TfxqxF4Xmw3F7Fatrdv7WIchSWALB7NoShUMKs= Subject key identifier: 45:B9:90:8E:4A:93:B4:E6:37:15:B7:62:D5:C4:5B:6D:24:55:64:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C0A4EEE21040B3907AF7C420 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1bee9e0f-9bc5-3154-b09a-2268390bb2b0.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ee:e2:10:40:b3:90:7a:f7:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=50181289-01be-4f48-a645-b0975bb91e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:5d:b2:fe:f1:01:ae:03:22:69:7e:82:2d: 95:ba:71:de:ab:a0:a2:d6:81:19:d9:2c:ab:25:6a: 6c:06:37:a0:d5:8c:37:56:0e:a6:f0:14:97:b4:dc: f9:8d:e8:45:1d:46:e4:46:2f:00:ab:18:ce:18:34: 05:41:e0:44:f9:63:1c:9a:12:87:c0:23:55:29:76: 4a:62:20:da:52:9a:1f:6a:6b:d1:89:cf:ce:db:58: 31:fd:c9:50:95:8f:56:9f:76:9a:bb:fd:14:58:18: 35:ed:66:82:9d:c1:1d:30:3d:a1:c7:0e:00:8a:e6: e4:1e:98:0a:52:2b:a1:40:fd:ce:bd:d2:00:48:1d: 37:96:b6:07:72:1d:2c:d7:d5:5a:37:c0:f7:70:33: 8a:87:1d:c4:87:c4:cb:eb:52:69:ee:b4:cd:29:8f: 49:ae:16:54:7e:55:f3:1b:4b:a7:c8:81:ca:71:3c: b2:bf:cc:72:53:75:f5:39:d7:44:db:b7:5c:48:74: 4e:14:e7:20:bf:10:d6:1a:e3:53:dc:bd:d1:22:02: e5:e5:44:1c:ef:b4:ce:80:e7:f5:c5:e9:85:6b:b2: 51:00:0d:ca:1f:39:31:c1:21:f5:4c:bf:8a:4f:ff: 9c:81:ec:2e:7b:ee:95:00:fe:af:46:b9:fb:af:b8: 47:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B9:90:8E:4A:93:B4:E6:37:15:B7:62:D5:C4:5B:6D:24:55:64:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1bee9e0f-9bc5-3154-b09a-2268390bb2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:31:9a:18:af:b8:28:f2:69:d9:bb:e8:c8:16:7d:9d:38:fb: e4:0e:f9:6a:e2:11:2c:12:1d:ee:04:a6:38:1f:86:60:6a:3e: 93:05:fc:a7:23:47:25:72:2b:e2:ae:f0:63:eb:42:c8:cc:71: 49:71:51:e5:b8:21:7d:78:66:0d:a8:c4:f8:d9:56:b5:cd:e8: 25:97:6b:8e:a7:86:77:3e:60:f8:f7:fc:63:5b:d3:e3:18:62: 8d:3e:37:b6:3a:fa:4f:58:6e:db:55:b1:db:8f:31:c3:75:e0: 84:9b:bb:b0:5a:07:7f:c6:fa:ed:cf:e0:96:fc:02:3d:9c:15: e6:2b:ce:6c:56:31:a0:cb:d1:99:c7:f0:7f:39:7c:85:73:44: b8:66:a3:7a:90:a8:f1:8b:bb:e9:82:63:1b:c1:3e:d2:fe:3a: 4a:15:d0:cc:ff:c7:f7:62:04:77:64:ab:26:74:74:0d:6f:61: e0:7f:07:14:d2:27:c2:5c:cb:7e:e4:cc:23:77:bb:93:37:d4: 9b:bd:f8:98:e0:8f:2d:a0:86:27:9a:df:e6:85:94:b2:5f:99: 2b:02:16:1b:83:13:17:49:75:2c:4f:64:f8:04:fd:80:56:61: 76:4d:7a:17:c3:66:81:5a:d1:e1:0c:27:4b:6d:6b:69:58:f1: a3:f2:e6:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApO7iEECzkHr3xCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NTAxODEyODktMDFiZS00ZjQ4LWE2NDUtYjA5NzViYjkxZTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCldsv7xAa4DIml+gi2VunHeq6Ci1oEZ2Syr JWpsBjeg1Yw3Vg6m8BSXtNz5jehFHUbkRi8AqxjOGDQFQeBE+WMcmhKHwCNVKXZK YiDaUpofamvRic/O21gx/clQlY9Wn3aau/0UWBg17WaCncEdMD2hxw4AiubkHpgK UiuhQP3OvdIASB03lrYHch0s19VaN8D3cDOKhx3Eh8TL61Jp7rTNKY9JrhZUflXz G0unyIHKcTyyv8xyU3X1OddE27dcSHROFOcgvxDWGuNT3L3RIgLl5UQc77TOgOf1 xemFa7JRAA3KHzkxwSH1TL+KT/+cgewue+6VAP6vRrn7r7hHPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEW5kI5Kk7TmNxW3YtXEW20kVWSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWJlZTllMGYtOWJjNS0z MTU0LWIwOWEtMjI2ODM5MGJiMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIxmhivuCjyadm76MgWfZ04++QO+WriESwSHe4EpjgfhmBqPpMF/Kcj RyVyK+Ku8GPrQsjMcUlxUeW4IX14Zg2oxPjZVrXN6CWXa46nhnc+YPj3/GNb0+MY Yo0+N7Y6+k9YbttVsduPMcN14ISbu7BaB3/G+u3P4Jb8Aj2cFeYrzmxWMaDL0ZnH 8H85fIVzRLhmo3qQqPGLu+mCYxvBPtL+OkoV0Mz/x/diBHdkqyZ0dA1vYeB/BxTS J8Jcy37kzCN3u5M31Ju9+Jjgjy2ghiea3+aFlLJfmSsCFhuDExdJdSxPZPgE/YBW YXZNehfDZoFa0eEMJ0tta2lY8aPy5qk= -----END CERTIFICATE-----Generated at Sun Jun 15 11:34:28 2025 by rpki-client