$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52a49189-805c-325e-8598-e9f6daa0967b.roa File: 52a49189-805c-325e-8598-e9f6daa0967b.roa (raw, json) Hash identifier: GkTdfeaZjI0hAg1WgnKuJNO7r8q8+yb6e/zbyXHsb88= Subject key identifier: 82:4B:07:72:F2:DF:68:72:79:DA:D9:0E:E5:2B:82:DB:16:43:DA:1A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA32E191A6BBC6DE38C100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52a49189-805c-325e-8598-e9f6daa0967b.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.225.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:32:e1:91:a6:bb:c6:de:38:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=1e27fea8-12f6-41a5-a68d-f14cd5553565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:89:c8:da:4b:e0:be:54:82:2c:90:73:be:4b: 7f:28:6a:d4:54:b3:85:8c:e5:89:9b:b7:6d:34:2b: 65:41:64:e6:52:a2:55:1b:c8:19:3a:10:31:71:38: 8c:3a:9e:26:34:c8:90:0d:aa:db:64:bb:f3:a3:68: 9e:19:c4:e1:9c:6f:d0:7e:a7:e5:cc:10:70:90:be: 47:ec:54:17:1a:89:ca:a9:88:fc:c4:1a:7d:b5:2f: a0:46:8d:bb:6d:e4:90:9c:d5:1d:f2:5e:31:12:50: c1:1c:2e:c5:9d:8e:3c:c6:5c:4b:9f:9e:87:c6:5f: 1d:b2:81:63:d0:50:0b:35:f6:85:95:a2:21:ba:7b: ae:a1:51:00:88:15:65:e6:7d:eb:35:2a:3d:24:3e: eb:a5:e3:2c:dc:54:01:2f:88:c4:15:4a:e7:be:6e: 64:f0:80:f4:2f:73:22:cc:ec:86:af:ec:61:e5:6c: aa:85:70:c4:e2:16:d5:92:0f:ca:b6:c9:93:9c:13: bd:a5:cf:e1:b5:74:63:2c:4d:b5:24:25:a8:22:4b: 59:33:3c:05:dd:45:ab:a7:9b:69:40:fc:a0:e6:d0: 83:5c:1b:4d:74:98:7a:b1:91:9b:07:5b:23:ac:38: 8a:56:92:d9:41:22:01:73:f8:9f:85:52:b6:0c:38: 1e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4B:07:72:F2:DF:68:72:79:DA:D9:0E:E5:2B:82:DB:16:43:DA:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52a49189-805c-325e-8598-e9f6daa0967b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b9:16:21:2c:10:f5:8b:d0:19:8e:ad:d6:a8:a5:fa:19:fd: e2:fb:89:16:d9:c1:aa:f4:b1:4b:f2:b3:b5:68:20:e8:45:65: ca:18:71:a5:28:4f:a6:a8:6c:3e:53:a4:ee:86:13:2d:03:51: ff:9d:76:dd:40:ff:b4:2b:71:d3:f0:4e:51:05:b5:6e:ba:28: 1c:8d:fb:8f:6d:76:f6:38:15:05:75:1e:8b:ed:10:8e:8d:b0: 62:90:de:2b:db:8a:54:8f:07:41:d1:22:34:ba:1f:84:c7:88: 57:5d:01:83:14:2c:c1:43:a4:0e:b9:63:96:14:d3:50:d9:d8: d3:d5:fe:0b:fe:ac:b7:37:49:fe:ab:bd:67:40:52:24:34:97: cc:83:ec:28:76:60:6e:95:72:3e:55:33:34:3b:e0:58:f4:0e: 7d:ed:d9:13:43:7a:52:f4:a3:19:d9:2a:a9:9d:2e:d5:5b:70: e5:95:0f:6d:19:38:40:ae:55:07:7f:00:fb:14:95:a5:f4:de: ac:37:5b:ca:68:f2:e7:d5:dd:4e:4e:16:97:d4:fb:31:2e:dc: a2:56:fd:4a:29:d1:5c:84:ba:35:01:ac:fa:52:cb:10:84:2d: 21:1d:97:18:32:6c:08:f7:92:01:11:32:26:04:dc:87:59:20: cd:2b:e7:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jLhkaa7xt44wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MWUyN2ZlYTgtMTJmNi00MWE1LWE2OGQtZjE0Y2Q1NTUzNTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjonI2kvgvlSCLJBzvkt/KGrUVLOFjOWJm7dt NCtlQWTmUqJVG8gZOhAxcTiMOp4mNMiQDarbZLvzo2ieGcThnG/QfqflzBBwkL5H 7FQXGonKqYj8xBp9tS+gRo27beSQnNUd8l4xElDBHC7FnY48xlxLn56Hxl8dsoFj 0FALNfaFlaIhunuuoVEAiBVl5n3rNSo9JD7rpeMs3FQBL4jEFUrnvm5k8ID0L3Mi zOyGr+xh5WyqhXDE4hbVkg/KtsmTnBO9pc/htXRjLE21JCWoIktZMzwF3UWrp5tp QPyg5tCDXBtNdJh6sZGbB1sjrDiKVpLZQSIBc/ifhVK2DDgeVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJLB3Ly32hyedrZDuUrgtsWQ9oaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTJhNDkxODktODA1Yy0z MjVlLTg1OTgtZTlmNmRhYTA5NjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOG0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACW5FiEsEPWL0BmOrdaopfoZ/eL7iRbZwar0sUvys7VoIOhFZcoYcaUo T6aobD5TpO6GEy0DUf+ddt1A/7QrcdPwTlEFtW66KByN+49tdvY4FQV1HovtEI6N sGKQ3ivbilSPB0HRIjS6H4THiFddAYMULMFDpA65Y5YU01DZ2NPV/gv+rLc3Sf6r vWdAUiQ0l8yD7Ch2YG6Vcj5VMzQ74Fj0Dn3t2RNDelL0oxnZKqmdLtVbcOWVD20Z OECuVQd/APsUlaX03qw3W8po8ufV3U5OFpfU+zEu3KJW/Uop0VyEujUBrPpSyxCE LSEdlxgybAj3kgERMiYE3IdZIM0r5+Y= -----END CERTIFICATE-----Generated at Sun Jun 15 11:49:31 2025 by rpki-client