$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12c62143-9262-3dbe-abec-56d5bea02248.roa File: 12c62143-9262-3dbe-abec-56d5bea02248.roa (raw, json) Hash identifier: xequAIvw6/klBJqz0enG3/A2jTt9fJFuTGwVxG+OChE= Subject key identifier: DC:C4:0B:C7:77:12:78:E6:74:92:86:38:29:E4:85:92:CE:55:E9:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9A6638B62BA9A711D4B1E6DC Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12c62143-9262-3dbe-abec-56d5bea02248.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 36183 IP address blocks: 172.225.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:38:b6:2b:a9:a7:11:d4:b1:e6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=05a74150-5ff5-4b5f-a4b6-1cf3e81ccc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:50:07:a5:1a:43:72:59:b6:2e:f3:d5:3a:8d: cb:bc:bb:68:c1:61:9c:26:6e:d2:38:48:df:94:69: 8d:57:1e:5d:6e:92:fa:f6:10:d9:1a:e5:59:e7:58: 9d:77:c4:64:85:bd:3e:fe:55:7d:96:4d:e7:31:2c: 52:c7:7a:b7:2c:81:25:95:2a:5a:21:01:94:48:11: 12:e9:70:66:01:17:d8:98:3e:50:f0:da:fd:94:49: c9:90:c7:0e:a9:cf:60:eb:d5:22:38:98:32:7b:d5: c1:4e:c8:e0:b4:f6:62:3b:88:74:80:07:17:32:83: 36:84:e3:55:01:c5:92:f1:17:fa:be:e3:71:ca:27: 51:ff:3b:e5:5c:40:4e:51:e4:69:18:28:4f:d4:e7: c0:7a:4d:b5:37:fa:97:da:a2:df:83:22:8e:94:01: de:14:59:fd:08:f8:60:09:90:f8:e9:62:60:02:0f: 5a:29:fa:38:d0:77:72:0c:4b:3e:dd:9b:f6:0c:18: 93:38:67:99:8c:e2:30:77:20:03:b9:ac:e4:33:a1: 9a:0a:58:a4:d5:1e:da:30:55:2d:24:53:4c:cf:fb: 50:6a:9e:b7:22:b8:d6:c7:5f:be:e7:e5:f2:d9:c5: 6d:df:da:d1:75:34:65:a3:03:e3:fb:df:42:39:d9: fe:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C4:0B:C7:77:12:78:E6:74:92:86:38:29:E4:85:92:CE:55:E9:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12c62143-9262-3dbe-abec-56d5bea02248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:29:9b:cf:fa:bb:b7:e3:7d:8f:70:25:36:32:5e:01:59:89: 6a:c3:a7:63:98:c4:a4:2f:ea:52:92:03:5e:29:57:22:46:c5: 35:3d:30:c6:6b:76:f2:35:32:c8:74:ac:04:a8:e7:bc:1b:cc: 6a:5c:77:7d:8c:e5:dd:42:18:97:d0:b4:35:64:08:46:6a:36: b2:1d:bb:b5:e0:b9:11:c7:00:42:38:14:c7:5c:d7:d5:33:84: 71:eb:9c:29:e2:4f:09:1d:77:eb:3b:58:53:f0:08:58:82:da: de:71:b1:42:41:10:7a:58:54:4d:1c:04:0a:39:d5:06:d2:eb: 17:dc:13:b2:fa:de:e5:54:65:ad:62:57:e1:a2:02:bc:05:6d: d4:27:79:32:fa:85:d0:c4:2e:3e:eb:d6:5c:c2:b5:a7:17:2a: de:02:93:59:f1:a8:31:19:7c:ec:45:63:0b:01:d8:64:19:f0: 30:56:73:76:34:eb:a8:0c:24:b1:23:da:b7:0f:31:d2:2f:90: 02:48:b1:9f:d6:b6:13:29:97:f3:04:d2:b1:62:c3:5e:fc:55: 75:2d:b1:f5:4d:05:c4:a3:19:ec:d6:27:84:17:66:1f:40:8a: ca:b7:dd:2d:58:51:38:a9:f3:be:00:39:94:8b:8f:33:6f:2c: a8:6b:76:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZji2K6mnEdSx5twwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk MDVhNzQxNTAtNWZmNS00YjVmLWE0YjYtMWNmM2U4MWNjYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVAHpRpDclm2LvPVOo3LvLtowWGcJm7SOEjf lGmNVx5dbpL69hDZGuVZ51idd8Rkhb0+/lV9lk3nMSxSx3q3LIEllSpaIQGUSBES 6XBmARfYmD5Q8Nr9lEnJkMcOqc9g69UiOJgye9XBTsjgtPZiO4h0gAcXMoM2hONV AcWS8Rf6vuNxyidR/zvlXEBOUeRpGChP1OfAek21N/qX2qLfgyKOlAHeFFn9CPhg CZD46WJgAg9aKfo40HdyDEs+3Zv2DBiTOGeZjOIwdyADuazkM6GaClik1R7aMFUt JFNMz/tQap63IrjWx1++5+Xy2cVt39rRdTRlowPj+99COdn+iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzEC8d3EnjmdJKGOCnkhZLOVek5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTJjNjIxNDMtOTI2Mi0z ZGJlLWFiZWMtNTZkNWJlYTAyMjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0pm8/6u7fjfY9wJTYyXgFZiWrDp2OYxKQv6lKSA14pVyJGxTU9MMZr dvI1Msh0rASo57wbzGpcd32M5d1CGJfQtDVkCEZqNrIdu7XguRHHAEI4FMdc19Uz hHHrnCniTwkdd+s7WFPwCFiC2t5xsUJBEHpYVE0cBAo51QbS6xfcE7L63uVUZa1i V+GiArwFbdQneTL6hdDELj7r1lzCtacXKt4Ck1nxqDEZfOxFYwsB2GQZ8DBWc3Y0 66gMJLEj2rcPMdIvkAJIsZ/WthMpl/ME0rFiw178VXUtsfVNBcSjGezWJ4QXZh9A isq33S1YUTip874AOZSLjzNvLKhrdq0= -----END CERTIFICATE-----Generated at Wed Jul 23 11:48:29 2025 by rpki-client