$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b923eb8b-4768-33b2-aab2-ec3ecab7256b.roa File: b923eb8b-4768-33b2-aab2-ec3ecab7256b.roa (raw, json) Hash identifier: zyH4i5DXJ68y0bmVhFGK8esfJ0eY4lORdjxr3iYNOss= Subject key identifier: 03:32:84:EE:01:00:DE:5C:14:84:47:E0:6F:61:8E:9A:A1:DB:6D:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F350B1CCC20E0DDCEE600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b923eb8b-4768-33b2-aab2-ec3ecab7256b.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 36183 IP address blocks: 172.224.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:35:0b:1c:cc:20:e0:dd:ce:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=5d78ee04-5f6a-43ae-86b0-2bfa5b8d10cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ec:bc:3d:db:f0:6b:e4:32:2d:e8:47:f7:a0: 84:51:99:f6:52:f4:8b:45:74:ce:9c:85:a9:97:52: 4c:88:8d:cb:84:fc:8c:a4:cc:ad:6a:a9:10:98:b2: a5:3f:5b:ec:2e:22:6c:1a:91:63:6b:56:80:06:b6: 0e:b6:db:ec:58:01:d3:c2:e4:a3:e4:e0:0e:7c:d8: 94:6a:79:7a:20:32:48:14:63:d0:bd:de:5b:ba:54: ce:77:ab:b0:02:67:28:80:ed:be:9f:b9:25:6e:44: 09:85:15:7a:bc:7f:63:fd:e1:46:4f:1e:1d:c2:7c: 9f:de:5d:32:0e:43:90:0e:72:4b:f5:c9:dd:77:4e: 85:90:3c:85:b2:cd:db:da:78:d6:cf:1e:7c:94:0f: 2d:07:33:33:c6:36:3e:fc:ad:d1:23:ce:00:fb:07: 1e:73:32:93:38:bd:bf:58:ee:70:d8:1e:1c:a5:76: 69:5e:46:bd:6d:84:a4:4d:e3:7d:52:33:cc:41:ac: de:f6:3d:ec:71:f9:01:b5:fa:f2:80:7d:bc:36:54: 97:d0:f4:0f:19:3f:a8:11:b4:34:17:96:ce:2d:4a: 98:83:d0:ff:81:f7:1e:85:47:92:fc:a7:d9:19:78: 8c:7b:24:b0:e3:42:d3:f5:ff:98:45:b0:59:ab:a8: 13:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:32:84:EE:01:00:DE:5C:14:84:47:E0:6F:61:8E:9A:A1:DB:6D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b923eb8b-4768-33b2-aab2-ec3ecab7256b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b7:15:9b:6b:1b:f6:68:b5:c2:56:8e:06:6e:9f:d3:19:16: 6d:42:ab:63:7f:6c:6a:fa:a4:20:37:ed:f6:f1:42:f5:22:bb: 62:34:cc:97:bc:aa:7d:6c:82:a6:1e:73:ba:35:2b:95:4f:cc: a3:70:82:aa:3f:dd:56:f3:24:9f:74:18:38:a3:e8:8f:a4:9c: 77:01:59:bd:83:fc:3c:3f:98:57:5e:7c:9d:c6:87:ff:2e:16: 00:54:3a:01:e9:2a:f7:e7:36:2a:16:82:68:e9:26:52:ba:b1: cd:00:ab:aa:2a:97:d7:89:79:fe:50:fa:56:b5:4e:8e:f1:ee: 0c:9d:a0:bf:17:b0:6d:d2:33:7c:42:e7:1e:98:f1:21:d6:bd: fc:18:bc:7c:d0:b2:03:46:3d:de:70:d0:f8:de:91:87:b3:56: dc:b4:86:f2:cb:3a:80:75:7f:a7:08:4e:c7:c7:6e:73:6f:39: c6:b4:34:fe:d1:5c:bb:1a:63:e0:84:1f:fd:37:80:3e:0b:d2: be:dd:5b:3e:3a:9b:c1:2d:24:b5:80:39:0b:8b:8d:27:9e:c6: a4:7a:9b:eb:67:a3:e5:6c:43:c9:f4:5b:23:7f:c2:0a:f8:80: 85:3f:00:be:71:a3:90:41:27:b8:66:8a:e4:8f:73:70:9c:8d: 0e:c2:b9:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbzULHMwg4N3O5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk NWQ3OGVlMDQtNWY2YS00M2FlLTg2YjAtMmJmYTViOGQxMGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOy8Pdvwa+QyLehH96CEUZn2UvSLRXTOnIWp l1JMiI3LhPyMpMytaqkQmLKlP1vsLiJsGpFja1aABrYOttvsWAHTwuSj5OAOfNiU anl6IDJIFGPQvd5bulTOd6uwAmcogO2+n7klbkQJhRV6vH9j/eFGTx4dwnyf3l0y DkOQDnJL9cndd06FkDyFss3b2njWzx58lA8tBzMzxjY+/K3RI84A+wceczKTOL2/ WO5w2B4cpXZpXka9bYSkTeN9UjPMQaze9j3scfkBtfrygH28NlSX0PQPGT+oEbQ0 F5bOLUqYg9D/gfcehUeS/KfZGXiMeySw40LT9f+YRbBZq6gT0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMyhO4BAN5cFIRH4G9hjpqh221nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjkyM2ViOGItNDc2OC0z M2IyLWFhYjItZWMzZWNhYjcyNTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa3FZtrG/ZotcJWjgZun9MZFm1Cq2N/bGr6pCA37fbxQvUiu2I0zJe8 qn1sgqYec7o1K5VPzKNwgqo/3VbzJJ90GDij6I+knHcBWb2D/Dw/mFdefJ3Gh/8u FgBUOgHpKvfnNioWgmjpJlK6sc0Aq6oql9eJef5Q+la1To7x7gydoL8XsG3SM3xC 5x6Y8SHWvfwYvHzQsgNGPd5w0PjekYezVty0hvLLOoB1f6cITsfHbnNvOca0NP7R XLsaY+CEH/03gD4L0r7dWz46m8EtJLWAOQuLjSeexqR6m+tno+VsQ8n0WyN/wgr4 gIU/AL5xo5BBJ7hmiuSPc3CcjQ7CuVE= -----END CERTIFICATE-----Generated at Sun Apr 27 01:03:41 2025 by rpki-client