$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa File: 91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa (raw, json) Hash identifier: bjExhC4Fb0eAsHi3hXk1naFJBesfXW7aN/fixTVIE1w= Subject key identifier: EA:A5:AD:AA:FF:96:5E:6C:D1:F5:04:84:A2:86:EB:F2:1A:2C:F7:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9A66378E38925B9431949200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 36183 IP address blocks: 172.225.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:37:8e:38:92:5b:94:31:94:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=5a9c0f69-72b5-4ca4-8bf0-22c785c84737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:69:5d:60:4c:f4:c2:f2:66:0e:60:a9:d2:4c: a6:25:42:92:c3:53:d3:8b:f0:41:e7:9c:cc:6a:26: 78:2e:db:87:b7:d1:f0:9a:71:79:80:61:d3:f2:9d: 35:bc:d6:ce:fb:31:0f:fc:a3:25:24:a0:60:82:1a: 97:87:6a:96:d0:38:b8:1c:0d:e7:29:27:d0:54:58: f6:ee:41:55:63:53:88:1f:04:6b:e3:0d:b7:3c:a1: 2a:07:89:c0:e7:58:6a:a3:b6:b1:a6:0d:2b:b0:90: d8:90:45:18:db:6a:43:6d:86:27:b0:91:66:41:5f: 10:00:10:3b:07:d6:52:3f:5d:41:c2:2b:5b:f1:01: 04:96:38:1e:55:1a:a3:3e:d3:68:50:9e:05:af:75: 07:cd:ba:a2:cd:27:0a:e5:4e:cf:a2:fd:f9:57:56: 97:14:32:6f:59:e8:62:63:4a:ac:46:80:d2:a6:14: 54:0f:78:ad:7b:80:30:d8:a6:74:73:09:f1:74:c0: 41:a6:3c:fb:4a:b3:d4:26:d2:38:30:f0:b6:e0:a7: ba:f6:78:91:e4:b6:9a:dd:70:3e:ae:00:a8:90:44: 5b:6f:50:ea:36:ee:15:7b:92:42:0b:5d:07:75:29: d0:e1:ec:87:a4:71:06:49:40:ce:55:2e:29:4b:73: 4a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A5:AD:AA:FF:96:5E:6C:D1:F5:04:84:A2:86:EB:F2:1A:2C:F7:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:f7:e0:f7:28:9b:ff:8a:3f:a5:fb:5e:8b:40:27:a5:cf:a4: be:60:c3:b0:a4:76:8f:04:04:b7:70:08:34:e2:d4:a4:c2:dd: 96:59:25:b1:35:a6:9f:80:0a:b1:88:62:db:dc:f2:f3:d2:22: dc:c2:5f:81:81:67:e6:3b:14:d1:00:ec:f0:a9:30:22:fe:cd: 91:fd:77:86:e3:f5:8f:27:55:79:ff:4e:0d:e5:d5:39:83:a8: 12:3a:c7:ff:d1:c4:02:69:00:11:46:88:6f:bd:1b:67:12:79: da:ad:da:28:76:18:0d:d2:f2:14:4e:a0:d6:54:6b:cd:44:ed: 5e:7b:ca:22:3e:af:b7:42:11:c7:48:ca:26:2b:d5:26:a1:44: e2:96:35:73:25:6c:d4:6f:a1:37:d9:de:b2:95:c6:74:af:f7: 00:90:54:19:93:26:ee:93:0e:f5:40:08:65:4d:23:03:2b:18: f8:70:00:d9:38:e4:99:04:d5:50:87:48:aa:88:61:64:9c:74: 61:f2:5b:fe:c3:93:65:e1:26:ca:b2:84:13:f0:75:af:f2:1f: 44:d6:d3:0a:ff:7e:aa:ab:f2:0e:81:ea:30:08:8d:31:7b:7f: cb:bd:d5:a0:f4:d5:26:d9:e4:0a:c3:fb:27:e7:1c:9a:ad:ca: c2:1d:28:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjeOOJJblDGUkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk NWE5YzBmNjktNzJiNS00Y2E0LThiZjAtMjJjNzg1Yzg0NzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWldYEz0wvJmDmCp0kymJUKSw1PTi/BB55zM aiZ4LtuHt9HwmnF5gGHT8p01vNbO+zEP/KMlJKBgghqXh2qW0Di4HA3nKSfQVFj2 7kFVY1OIHwRr4w23PKEqB4nA51hqo7axpg0rsJDYkEUY22pDbYYnsJFmQV8QABA7 B9ZSP11Bwitb8QEEljgeVRqjPtNoUJ4Fr3UHzbqizScK5U7Pov35V1aXFDJvWehi Y0qsRoDSphRUD3ite4Aw2KZ0cwnxdMBBpjz7SrPUJtI4MPC24Ke69niR5Laa3XA+ rgCokERbb1DqNu4Ve5JCC10HdSnQ4eyHpHEGSUDOVS4pS3NKKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqlrar/ll5s0fUEhKKG6/IaLPf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTFhMDlkNGQtZTRlOC0z NTBlLWIwZGEtNzdhNThhMzdkNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJT34Pcom/+KP6X7XotAJ6XPpL5gw7Ckdo8EBLdwCDTi1KTC3ZZZJbE1 pp+ACrGIYtvc8vPSItzCX4GBZ+Y7FNEA7PCpMCL+zZH9d4bj9Y8nVXn/Tg3l1TmD qBI6x//RxAJpABFGiG+9G2cSedqt2ih2GA3S8hROoNZUa81E7V57yiI+r7dCEcdI yiYr1SahROKWNXMlbNRvoTfZ3rKVxnSv9wCQVBmTJu6TDvVACGVNIwMrGPhwANk4 5JkE1VCHSKqIYWScdGHyW/7Dk2XhJsqyhBPwda/yH0TW0wr/fqqr8g6B6jAIjTF7 f8u91aD01SbZ5ArD+yfnHJqtysIdKEs= -----END CERTIFICATE-----Generated at Wed Jul 23 01:30:12 2025 by rpki-client