$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1adc26a3-e69e-3a60-abcd-835a6904b3a1.roa File: 1adc26a3-e69e-3a60-abcd-835a6904b3a1.roa (raw, json) Hash identifier: JT5fPnq0SNjbVbi67R7qHXPwnXDQEJjVIeKuPGm5Gbg= Subject key identifier: E2:93:CC:1B:35:D0:71:93:63:01:E2:F4:73:FD:5D:9C:CB:D4:74:9C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A682604088E1ACCB4E2686D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1adc26a3-e69e-3a60-abcd-835a6904b3a1.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 63949 IP address blocks: 172.235.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:04:08:8e:1a:cc:b4:e2:68:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=62ef30cb-082f-4b05-b03a-5a2bdec492fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:0a:37:15:10:ff:f4:ad:4b:59:e5:57:9d: 5b:6c:66:68:aa:51:d2:b5:6c:75:2e:e7:c5:33:8e: 64:df:d6:8d:6b:cd:fa:39:1c:45:2d:94:99:0b:2a: 67:3a:13:f4:32:9a:3c:a1:f1:a0:1f:c1:9a:40:da: 71:bf:15:5a:35:ee:56:6a:82:31:b8:86:e0:91:2c: e3:24:d4:41:6e:cf:48:27:55:45:e3:68:e4:66:a0: 70:9b:02:98:86:50:28:a2:06:d1:82:95:45:39:a9: af:6a:51:5d:e1:7a:70:44:75:64:4f:d2:9a:87:17: 07:1c:a3:b3:a6:fd:af:1e:4a:3c:3b:32:45:6e:4a: 3e:09:5c:80:fb:cf:7f:bf:38:dd:15:59:d2:f7:85: a8:b2:7c:73:46:99:8d:fd:ff:bf:e9:db:83:01:3c: 0e:9e:ab:3c:a5:37:77:67:0c:72:b2:b2:c8:22:a7: 93:4b:15:25:f9:d1:76:f4:39:52:fe:7d:44:45:8e: 8b:71:01:a3:6b:50:b7:5d:77:69:7f:6c:9f:ef:12: 34:e5:07:e9:28:4d:ea:3f:f8:6e:8c:e7:62:df:12: 12:1a:7a:0e:7d:59:4b:8a:10:bd:41:3e:b1:a7:7c: 3f:95:0f:a5:17:78:e9:89:f2:1c:3f:05:18:86:6e: 7e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:93:CC:1B:35:D0:71:93:63:01:E2:F4:73:FD:5D:9C:CB:D4:74:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1adc26a3-e69e-3a60-abcd-835a6904b3a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:8e:c9:18:e9:fd:da:53:86:3b:f4:4b:2e:9c:98:fb:34:62: 07:a7:a3:e8:8b:8d:9c:5e:34:13:5f:c8:4c:3b:38:09:b0:91: 36:d6:9c:92:29:86:fe:70:15:09:32:d8:39:58:85:91:0b:83: 96:bd:5a:98:d8:6a:c5:0b:f9:91:ea:10:dd:16:34:99:c0:3d: b0:21:0d:16:c3:03:ae:58:f3:f8:51:44:a5:38:88:29:ef:cb: 8a:4d:36:77:43:d7:75:ac:6e:3f:68:07:46:22:22:2f:f1:9a: 2a:04:35:44:b3:22:2b:87:f3:1f:ac:00:e5:a8:10:8b:23:a3: 3a:79:b6:68:14:8a:fd:84:5d:93:8d:ac:57:4d:74:68:e0:3f: 18:51:51:9e:0e:40:3d:f6:85:43:b0:06:09:da:ba:e0:ec:4b: 5d:10:7a:c8:84:da:82:4b:8f:25:0e:8c:ec:3c:c0:9d:15:10: 28:ff:c3:30:f9:8e:a7:1c:30:90:65:d5:d8:71:70:e5:6a:56: aa:29:f1:e5:26:07:11:8a:72:2d:bd:20:e1:6c:d2:e2:79:f1: c1:04:93:4f:ec:75:48:4c:ad:08:1b:d5:1b:8f:0b:28:17:00: 5d:a3:0c:08:b6:56:92:b5:52:f6:e9:5f:92:14:e8:59:2c:c6: b7:52:19:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgQIjhrMtOJobQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NjJlZjMwY2ItMDgyZi00YjA1LWIwM2EtNWEyYmRlYzQ5MmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNgKNxUQ//StS1nlV51bbGZoqlHStWx1LufF M45k39aNa836ORxFLZSZCypnOhP0Mpo8ofGgH8GaQNpxvxVaNe5WaoIxuIbgkSzj JNRBbs9IJ1VF42jkZqBwmwKYhlAoogbRgpVFOamvalFd4XpwRHVkT9KahxcHHKOz pv2vHko8OzJFbko+CVyA+89/vzjdFVnS94WosnxzRpmN/f+/6duDATwOnqs8pTd3 ZwxysrLIIqeTSxUl+dF29DlS/n1ERY6LcQGja1C3XXdpf2yf7xI05QfpKE3qP/hu jOdi3xISGnoOfVlLihC9QT6xp3w/lQ+lF3jpifIcPwUYhm5+jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKTzBs10HGTYwHi9HP9XZzL1HScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWFkYzI2YTMtZTY5ZS0z YTYwLWFiY2QtODM1YTY5MDRiM2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErOvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWOyRjp/dpThjv0Sy6cmPs0Ygeno+iLjZxeNBNfyEw7OAmwkTbWnJIp hv5wFQky2DlYhZELg5a9WpjYasUL+ZHqEN0WNJnAPbAhDRbDA65Y8/hRRKU4iCnv y4pNNndD13Wsbj9oB0YiIi/xmioENUSzIiuH8x+sAOWoEIsjozp5tmgUiv2EXZON rFdNdGjgPxhRUZ4OQD32hUOwBgnauuDsS10QesiE2oJLjyUOjOw8wJ0VECj/wzD5 jqccMJBl1dhxcOVqVqop8eUmBxGKci29IOFs0uJ58cEEk0/sdUhMrQgb1RuPCygX AF2jDAi2VpK1UvbpX5IU6FksxrdSGXQ= -----END CERTIFICATE-----Generated at Wed Jul 23 01:23:36 2025 by rpki-client