$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ad240be-05c6-37f6-8873-be547fec4c7d.roa File: 1ad240be-05c6-37f6-8873-be547fec4c7d.roa (raw, json) Hash identifier: VgbnCm+K1Cone6EWEkUOonkY8Qu1cpDZyd95pzq8WSM= Subject key identifier: 90:97:C7:6D:CB:20:78:E3:F8:06:8D:6A:03:9E:68:34:E5:CD:87:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A88409D8D7B38B46D65194780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ad240be-05c6-37f6-8873-be547fec4c7d.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 63949 IP address blocks: 172.237.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:9d:8d:7b:38:b4:6d:65:19:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=a7ab5233-d3a5-4a3f-8ef7-0471a4a30acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:a2:3d:c1:55:79:96:84:f8:c5:1a:c1:b6: 59:5d:5c:8e:b2:80:65:4a:53:ab:65:42:1c:dd:39: e4:9e:ed:f9:ee:5c:1d:bc:c6:48:b0:0f:65:ae:05: c9:5b:bd:9f:69:d0:2c:8a:8d:80:4e:12:8d:2f:7d: b9:56:8d:b7:0e:76:c5:4e:f4:e4:15:17:9d:d2:6a: 7f:a5:b2:91:19:70:1e:68:60:35:63:fa:4e:39:1d: df:63:af:43:db:8b:d6:c7:0b:ad:cb:70:92:c5:a6: fa:7c:e0:61:2b:b7:70:7b:11:f7:da:c8:ca:2f:41: a1:80:af:53:ff:af:f1:19:f3:75:1f:3f:d3:10:a1: a1:11:44:ef:24:fd:f3:36:bb:97:da:78:bf:61:a9: 01:36:52:30:66:76:9b:1b:03:52:b2:d1:be:1f:5d: bd:c8:41:ad:93:4f:c9:5b:f5:6a:0a:a4:49:f3:17: 24:fa:d5:a6:fe:48:ef:2c:f9:9f:b1:86:3f:96:13: eb:7b:11:02:11:84:4a:43:0c:ff:df:b5:7e:33:dc: 94:0d:88:e9:f5:b2:36:22:53:6c:2e:8e:f1:64:9c: 32:dd:af:41:a6:33:00:7e:c5:31:80:66:a0:02:ba: 16:22:80:d9:f9:3e:ce:f2:e8:a9:3b:9e:a6:09:d4: 7e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:97:C7:6D:CB:20:78:E3:F8:06:8D:6A:03:9E:68:34:E5:CD:87:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ad240be-05c6-37f6-8873-be547fec4c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.237.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:fe:fc:be:e5:7c:6e:99:d2:a7:fd:0e:ac:86:16:4c:93:02: 16:b1:c2:f5:dc:c6:f0:85:d0:95:d0:1d:50:12:30:56:87:b6: cc:5b:51:ad:30:96:10:9f:9a:b9:fc:fd:78:98:65:5d:a1:ab: 06:6c:cf:2f:78:dc:c2:8d:ef:d2:fc:8b:a7:2c:f2:44:3b:ba: a8:1c:79:81:fb:60:90:63:52:be:7f:e4:06:73:a0:ea:f1:be: 5d:50:cd:30:61:4c:10:fa:d3:fd:d6:bc:32:b6:cb:d3:07:02: 64:18:42:0e:c8:d4:64:73:8e:83:e2:f5:34:be:6b:b4:23:ac: 8f:4f:d7:05:f0:7e:79:9a:64:21:03:9c:a9:5c:06:c3:c6:55: 85:be:6b:79:91:19:59:63:61:ef:35:07:3f:cf:bd:7e:df:5e: 65:a4:43:81:54:52:8b:4e:ff:51:d7:46:a9:0d:a1:d4:99:66: 86:91:4c:71:8e:24:01:87:fc:04:0b:32:e7:5e:d9:2d:00:53: 55:c3:ae:de:54:0f:91:7d:4d:26:75:c5:f0:5b:b0:c6:7d:42: 9b:22:9d:1e:2b:b9:ed:93:5a:20:5b:01:b5:b4:d8:4e:32:80: 08:63:21:91:9b:b6:bb:36:0c:4f:bb:2a:2d:db:85:12:10:8a: 1d:ba:ce:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQJ2Nezi0bWUZR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk YTdhYjUyMzMtZDNhNS00YTNmLThlZjctMDQ3MWE0YTMwYWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPWiPcFVeZaE+MUawbZZXVyOsoBlSlOrZUIc 3Tnknu357lwdvMZIsA9lrgXJW72fadAsio2AThKNL325Vo23DnbFTvTkFRed0mp/ pbKRGXAeaGA1Y/pOOR3fY69D24vWxwuty3CSxab6fOBhK7dwexH32sjKL0GhgK9T /6/xGfN1Hz/TEKGhEUTvJP3zNruX2ni/YakBNlIwZnabGwNSstG+H129yEGtk0/J W/VqCqRJ8xck+tWm/kjvLPmfsYY/lhPrexECEYRKQwz/37V+M9yUDYjp9bI2IlNs Lo7xZJwy3a9BpjMAfsUxgGagAroWIoDZ+T7O8uipO56mCdR+oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCXx23LIHjj+AaNagOeaDTlzYdcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWFkMjQwYmUtMDVjNi0z N2Y2LTg4NzMtYmU1NDdmZWM0YzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErO0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz+/L7lfG6Z0qf9DqyGFkyTAhaxwvXcxvCF0JXQHVASMFaHtsxbUa0w lhCfmrn8/XiYZV2hqwZszy943MKN79L8i6cs8kQ7uqgceYH7YJBjUr5/5AZzoOrx vl1QzTBhTBD60/3WvDK2y9MHAmQYQg7I1GRzjoPi9TS+a7QjrI9P1wXwfnmaZCED nKlcBsPGVYW+a3mRGVljYe81Bz/PvX7fXmWkQ4FUUotO/1HXRqkNodSZZoaRTHGO JAGH/AQLMude2S0AU1XDrt5UD5F9TSZ1xfBbsMZ9QpsinR4rue2TWiBbAbW02E4y gAhjIZGbtrs2DE+7Ki3bhRIQih26ziM= -----END CERTIFICATE-----Generated at Tue Jul 22 19:42:33 2025 by rpki-client