$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/717284ca-0bf6-3928-987d-375d53d3228a.roa File: 717284ca-0bf6-3928-987d-375d53d3228a.roa (raw, json) Hash identifier: f9tSGLWCNdX+BUg2Vcv1J+NrJaTA8VesBExa6CBcGW8= Subject key identifier: AC:5E:3F:64:59:88:E8:B7:95:18:82:6B:06:F6:28:BE:C1:4A:64:08 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9D30F3EF3832AD40B1508B30 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/717284ca-0bf6-3928-987d-375d53d3228a.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 36183 IP address blocks: 172.225.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f3:ef:38:32:ad:40:b1:50:8b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=713045f4-b083-47c8-8acf-99c61dafaf53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:60:d4:6f:cd:9d:28:be:04:ee:3a:58:9c:3c: c0:fc:4e:11:c1:6a:57:cc:ca:98:88:aa:73:79:70: 4d:ad:51:e4:c1:ed:19:8b:72:0c:d1:a1:d4:6c:ed: e2:c1:d4:59:39:de:89:cc:13:69:3d:71:d1:ac:65: a8:13:ac:6b:b3:c7:7e:59:16:b6:c4:92:d8:d0:15: be:42:c2:89:e1:f1:fa:59:27:30:56:cb:bb:7b:a1: cd:4a:91:f0:df:51:3a:99:0d:20:1d:4f:7f:81:b8: 25:9f:0d:b0:d1:46:5e:91:80:a3:ca:cd:3d:31:48: 4a:fb:35:b7:24:b3:cc:e7:d9:08:d4:64:4c:ff:e3: 86:6a:6c:f8:71:cd:1c:51:1e:24:65:a3:de:1f:86: 58:8f:2a:22:8f:23:de:ca:e9:b3:05:ef:aa:6a:e3: d2:fd:68:22:25:2a:d0:8a:05:23:04:f0:f2:08:fb: 2e:6e:a8:db:9c:02:73:40:23:85:c3:ea:7f:9d:d7: cc:54:89:d2:e8:3b:12:84:15:32:46:df:45:4e:f4: a6:ae:fa:13:86:c4:39:26:03:df:40:cb:53:7f:e9: dc:0c:20:26:f7:a0:8c:1a:10:d0:b4:e0:d8:f9:4c: 66:0d:b1:66:1d:03:21:e9:cf:59:d2:4e:0b:0a:5f: 1c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5E:3F:64:59:88:E8:B7:95:18:82:6B:06:F6:28:BE:C1:4A:64:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/717284ca-0bf6-3928-987d-375d53d3228a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:89:e2:e4:3d:08:b9:6f:14:89:ba:6e:0b:80:9b:28:e6:62: e0:4e:4e:37:ab:bb:fa:7b:09:a3:cf:90:28:40:31:67:fb:ec: 6c:54:c3:b7:ba:a7:16:e8:d1:0c:21:b1:3e:60:63:59:6b:25: 11:98:f9:06:ae:0f:4c:af:66:00:c5:b8:be:12:5b:2d:49:21: e6:93:ed:4b:f1:e0:d0:ee:ff:2b:e6:a0:ac:a2:d7:5a:91:5c: b0:5a:f8:f7:84:9b:2f:07:16:9a:c9:8e:a7:4d:1a:28:b1:44: 89:16:70:cd:1a:8d:74:33:7c:17:0a:63:68:b2:74:6f:9e:1c: 6e:59:f2:86:93:73:c9:20:73:aa:9d:d8:c7:37:a9:26:49:cc: 03:a5:91:f2:2d:74:3a:7e:87:c2:4b:bc:97:43:b2:a9:f3:06: 5c:e4:14:f1:af:62:57:52:b1:29:6c:46:9c:e8:c8:23:ef:90: d2:9d:8d:cb:01:7e:12:fa:28:1d:2f:9b:b7:f3:9a:23:2a:75: b0:ba:77:79:11:7a:1c:ae:5f:90:ab:52:17:9a:94:d7:28:45: 70:b7:d0:74:4b:81:a7:ce:40:bd:43:99:59:60:29:3e:3f:e1: 94:3d:ed:23:a4:4f:81:d1:5f:a7:14:23:9b:1c:9f:59:9c:61: 16:7e:0a:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPPvODKtQLFQizAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NzEzMDQ1ZjQtYjA4My00N2M4LThhY2YtOTljNjFkYWZhZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2DUb82dKL4E7jpYnDzA/E4RwWpXzMqYiKpz eXBNrVHkwe0Zi3IM0aHUbO3iwdRZOd6JzBNpPXHRrGWoE6xrs8d+WRa2xJLY0BW+ QsKJ4fH6WScwVsu7e6HNSpHw31E6mQ0gHU9/gbglnw2w0UZekYCjys09MUhK+zW3 JLPM59kI1GRM/+OGamz4cc0cUR4kZaPeH4ZYjyoijyPeyumzBe+qauPS/WgiJSrQ igUjBPDyCPsubqjbnAJzQCOFw+p/ndfMVInS6DsShBUyRt9FTvSmrvoThsQ5JgPf QMtTf+ncDCAm96CMGhDQtODY+UxmDbFmHQMh6c9Z0k4LCl8cHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxeP2RZiOi3lRiCawb2KL7BSmQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzE3Mjg0Y2EtMGJmNi0z OTI4LTk4N2QtMzc1ZDUzZDMyMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+J4uQ9CLlvFIm6bguAmyjmYuBOTjeru/p7CaPPkChAMWf77GxUw7e6 pxbo0QwhsT5gY1lrJRGY+QauD0yvZgDFuL4SWy1JIeaT7Uvx4NDu/yvmoKyi11qR XLBa+PeEmy8HFprJjqdNGiixRIkWcM0ajXQzfBcKY2iydG+eHG5Z8oaTc8kgc6qd 2Mc3qSZJzAOlkfItdDp+h8JLvJdDsqnzBlzkFPGvYldSsSlsRpzoyCPvkNKdjcsB fhL6KB0vm7fzmiMqdbC6d3kRehyuX5CrUhealNcoRXC30HRLgafOQL1DmVlgKT4/ 4ZQ97SOkT4HRX6cUI5scn1mcYRZ+Clo= -----END CERTIFICATE-----Generated at Thu Jul 24 16:26:38 2025 by rpki-client