$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa File: 88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa (raw, json) Hash identifier: /G6j4VzZMMiAclkZvv24ob2QoVhe/OImqIERNYV/GWY= Subject key identifier: 43:7A:9C:A0:54:92:BA:55:A9:E5:7A:91:3F:D1:CA:38:92:CC:91:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9A663A5936BFED36B641608C Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 36183 IP address blocks: 172.225.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:3a:59:36:bf:ed:36:b6:41:60:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=f0a725a2-9a74-43ad-847a-1c6850d667a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:62:5f:aa:a1:61:ec:14:28:84:0a:0b:5e:8c: 59:83:98:b8:c6:1b:be:d2:a9:65:f8:47:25:6a:61: 95:8b:0f:a5:e1:cc:5a:45:a7:98:27:78:99:64:8b: 98:7a:26:14:da:0e:8c:2c:ef:9d:41:db:51:3e:a2: c5:58:37:66:6a:23:a6:60:52:b2:53:18:a7:9a:c7: 08:96:3e:02:02:65:69:4a:1b:71:69:86:81:cd:2d: 27:6b:27:dc:00:eb:54:54:b2:09:d7:d3:ea:b9:33: 3d:e7:9c:4a:4e:74:5a:ea:90:60:d7:ee:b1:58:26: 7a:c0:a9:19:18:5e:8e:74:36:83:14:68:db:53:a3: c6:81:8c:45:45:9c:f1:20:34:f0:84:09:c2:c3:81: bf:d9:a7:2e:38:c2:6e:fb:d5:b8:72:5a:45:96:a0: 72:f3:59:e7:2b:ab:25:8d:05:c7:14:5d:cd:5c:49: d8:52:82:94:fb:e8:94:6f:f8:4f:21:f7:58:d1:f7: 04:a9:b6:7c:8a:48:ad:c0:fc:42:9e:19:cd:15:c4: d9:62:19:f6:f0:68:41:b5:e2:b5:01:3d:7c:ad:48: ad:4c:24:58:da:18:87:ee:23:63:20:47:d6:46:ee: 4d:f9:b3:97:16:c8:80:e4:d0:e3:3b:26:2d:08:78: 60:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7A:9C:A0:54:92:BA:55:A9:E5:7A:91:3F:D1:CA:38:92:CC:91:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:eb:84:cc:e9:b3:5d:2d:39:a1:22:19:77:ee:dc:f2:91:42: 93:a8:ae:7d:b4:48:fe:44:a8:7e:ad:4e:6f:01:75:30:62:d0: 5b:5e:89:32:f7:1e:f3:e6:08:36:8c:01:85:13:5a:ec:16:f9: 5d:0a:67:ed:f1:58:ca:35:f4:e9:31:c3:81:12:99:52:66:76: d8:ff:e1:4a:39:52:b7:4f:d0:dd:1a:e1:90:72:d0:38:14:dc: 0d:45:2e:42:a7:31:0e:d5:e3:2a:3d:7e:62:a1:d7:94:a4:f1: 28:e6:60:92:53:19:bb:72:ff:b4:10:30:6e:7e:a4:30:b8:80: 89:48:3b:02:bd:b1:7b:ee:3d:cf:b1:aa:84:cb:44:63:fe:c9: c3:5e:d7:01:36:3e:40:5b:0f:78:7d:34:7d:ba:98:e8:27:0f: b3:86:aa:90:fd:2d:ff:21:46:16:09:9d:a5:0d:a4:7a:81:23: c4:06:cd:3b:34:cb:15:69:af:d0:07:ee:70:9f:ac:4e:32:11: 49:06:e5:ce:5f:5a:27:e7:34:2e:60:22:0d:d5:e9:73:23:95: e3:dc:8e:9f:69:07:b7:26:26:75:4a:44:41:b2:25:3d:d7:4e: bf:f5:0e:f7:f1:eb:dd:a0:85:12:e0:95:8b:89:c4:da:21:e5: 62:5e:2c:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjpZNr/tNrZBYIwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk ZjBhNzI1YTItOWE3NC00M2FkLTg0N2EtMWM2ODUwZDY2N2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWJfqqFh7BQohAoLXoxZg5i4xhu+0qll+Ecl amGViw+l4cxaRaeYJ3iZZIuYeiYU2g6MLO+dQdtRPqLFWDdmaiOmYFKyUxinmscI lj4CAmVpShtxaYaBzS0nayfcAOtUVLIJ19PquTM955xKTnRa6pBg1+6xWCZ6wKkZ GF6OdDaDFGjbU6PGgYxFRZzxIDTwhAnCw4G/2acuOMJu+9W4clpFlqBy81nnK6sl jQXHFF3NXEnYUoKU++iUb/hPIfdY0fcEqbZ8ikitwPxCnhnNFcTZYhn28GhBteK1 AT18rUitTCRY2hiH7iNjIEfWRu5N+bOXFsiA5NDjOyYtCHhggwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN6nKBUkrpVqeV6kT/RyjiSzJHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhlOWQ2M2EtY2JjYS0z ZDczLTliZDMtNjdlNGEwOGY3YzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXrhMzps10tOaEiGXfu3PKRQpOorn20SP5EqH6tTm8BdTBi0FteiTL3 HvPmCDaMAYUTWuwW+V0KZ+3xWMo19Okxw4ESmVJmdtj/4Uo5UrdP0N0a4ZBy0DgU 3A1FLkKnMQ7V4yo9fmKh15Sk8SjmYJJTGbty/7QQMG5+pDC4gIlIOwK9sXvuPc+x qoTLRGP+ycNe1wE2PkBbD3h9NH26mOgnD7OGqpD9Lf8hRhYJnaUNpHqBI8QGzTs0 yxVpr9AH7nCfrE4yEUkG5c5fWifnNC5gIg3V6XMjlePcjp9pB7cmJnVKREGyJT3X Tr/1Dvfx692ghRLglYuJxNoh5WJeLM0= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:02 2025 by rpki-client