$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d444ab7-5d92-35ea-964e-d44b820f1cca.roa File: 5d444ab7-5d92-35ea-964e-d44b820f1cca.roa (raw, json) Hash identifier: lDtmq+IY9SWYkWf2aSwjIprnuZAnsgJHOA/eQilqslI= Subject key identifier: FD:B8:63:EA:46:E8:F5:69:75:ED:F7:8F:A0:30:B3:A4:69:4B:55:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5F68769B0F74DFDEE9540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d444ab7-5d92-35ea-964e-d44b820f1cca.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 36183 IP address blocks: 172.224.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:f6:87:69:b0:f7:4d:fd:ee:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=eaa6ef11-7af9-40c8-9685-32c10a6c6420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a6:78:a5:02:9e:d1:13:aa:0a:a1:d7:6f:88: c0:35:7e:4a:82:33:54:50:fb:61:8b:02:cc:dd:f5: e7:4d:b2:cb:96:1a:24:19:7e:01:da:da:fd:2b:fc: 09:22:cd:23:b7:cf:83:1c:fe:9e:ea:4e:4f:c7:3f: b7:63:fe:96:48:8d:67:7c:ca:74:50:1e:dc:e0:f5: 1c:aa:4b:2f:b8:9e:28:ed:ec:db:0f:89:30:01:46: 8d:bc:44:43:87:1c:42:60:c3:61:cc:9e:a7:20:04: 27:b5:ed:05:8e:9e:96:bc:81:00:fc:1f:3f:4f:e9: fa:86:c7:74:ba:7a:8a:be:63:1a:02:66:9a:86:ff: 51:9a:5a:dc:df:53:17:b0:82:ba:a5:0f:7c:d1:41: 09:8d:2d:e5:25:6d:62:23:b2:70:51:34:06:e7:c1: ae:63:bd:bd:15:4c:72:52:0e:fb:69:fe:2e:82:e8: fa:c7:9f:86:0f:08:d1:99:df:88:24:4b:37:ba:48: e0:4f:f8:50:2f:e5:f2:1e:67:a2:c5:65:56:8e:31: 49:da:6d:8e:fe:7e:b1:0f:7a:52:f2:c1:94:7c:ea: 62:19:78:c2:6a:43:da:ee:b8:9b:1e:a8:d5:20:07: c0:57:1b:b5:f8:85:c6:6a:3d:90:93:81:49:59:43: d1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B8:63:EA:46:E8:F5:69:75:ED:F7:8F:A0:30:B3:A4:69:4B:55:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d444ab7-5d92-35ea-964e-d44b820f1cca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:85:54:da:ae:02:36:f6:c4:10:8d:dc:f5:22:8d:47:3a:09: bd:0d:80:ac:57:52:3e:40:98:d6:ce:df:36:d6:b9:11:33:13: 72:e1:8c:01:4f:60:a5:fb:8b:61:16:53:3e:56:19:6b:27:4b: 06:61:47:8b:93:f7:78:47:28:0f:ea:6b:69:86:4f:f0:39:7c: aa:60:94:cb:c0:66:32:0d:a6:34:e7:e4:df:f1:18:1d:d8:d9: a7:8c:73:54:7f:73:13:6b:5e:dd:10:84:85:73:90:b7:e4:be: de:8b:e3:52:42:79:ab:1c:fa:bd:36:58:29:00:82:ce:77:e0: 7d:bc:b1:69:b2:4f:a6:fc:40:61:c8:b1:3b:78:d5:1c:7f:51: 55:ae:8c:26:da:83:35:04:71:bd:a2:bc:cf:33:43:61:55:1a: 03:09:51:f7:5f:30:53:c5:b5:cd:e2:27:86:15:90:6e:f1:12: a0:92:eb:bb:d6:ae:5a:16:87:70:20:df:d2:a4:ae:52:da:38: 86:55:c9:6b:0c:5a:bf:3f:7b:c0:d3:ac:99:1d:cf:7a:6d:8e: 12:40:34:9f:8b:eb:bc:a1:cc:b7:55:8b:2a:33:b9:2c:56:b0: eb:b6:51:32:43:54:15:42:7f:0b:ee:f7:bf:92:ad:d1:57:34: 84:6f:5b:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxfaHabD3Tf3ulUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZWFhNmVmMTEtN2FmOS00MGM4LTk2ODUtMzJjMTBhNmM2NDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKZ4pQKe0ROqCqHXb4jANX5KgjNUUPthiwLM 3fXnTbLLlhokGX4B2tr9K/wJIs0jt8+DHP6e6k5Pxz+3Y/6WSI1nfMp0UB7c4PUc qksvuJ4o7ezbD4kwAUaNvERDhxxCYMNhzJ6nIAQnte0Fjp6WvIEA/B8/T+n6hsd0 unqKvmMaAmaahv9Rmlrc31MXsIK6pQ980UEJjS3lJW1iI7JwUTQG58GuY729FUxy Ug77af4uguj6x5+GDwjRmd+IJEs3ukjgT/hQL+XyHmeixWVWjjFJ2m2O/n6xD3pS 8sGUfOpiGXjCakPa7ribHqjVIAfAVxu1+IXGaj2Qk4FJWUPROQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP24Y+pG6PVpde33j6Aws6RpS1XJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWQ0NDRhYjctNWQ5Mi0z NWVhLTk2NGUtZDQ0YjgyMGYxY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKFVNquAjb2xBCN3PUijUc6Cb0NgKxXUj5AmNbO3zbWuREzE3LhjAFP YKX7i2EWUz5WGWsnSwZhR4uT93hHKA/qa2mGT/A5fKpglMvAZjINpjTn5N/xGB3Y 2aeMc1R/cxNrXt0QhIVzkLfkvt6L41JCeasc+r02WCkAgs534H28sWmyT6b8QGHI sTt41Rx/UVWujCbagzUEcb2ivM8zQ2FVGgMJUfdfMFPFtc3iJ4YVkG7xEqCS67vW rloWh3Ag39KkrlLaOIZVyWsMWr8/e8DTrJkdz3ptjhJANJ+L67yhzLdViyozuSxW sOu2UTJDVBVCfwvu97+SrdFXNIRvW48= -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:35 2025 by rpki-client