$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98bb556e-e4a0-333f-bf83-473b032ea951.roa File: 98bb556e-e4a0-333f-bf83-473b032ea951.roa (raw, json) Hash identifier: GpYgUmPZc6kH1jQ0AAcHcSS24Te88dy8oY2QTfLOvBc= Subject key identifier: 8F:9E:91:67:DE:7A:4A:6E:06:C8:4D:B8:DA:75:9A:54:31:7D:DC:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9A66384D09E18C20E6343280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98bb556e-e4a0-333f-bf83-473b032ea951.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 36183 IP address blocks: 172.225.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:38:4d:09:e1:8c:20:e6:34:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=a99d9557-5e17-4fe9-a31d-1c3c059d8c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8a:bc:00:48:e4:1b:dc:15:4e:fb:5c:45:03: d1:65:44:0a:4e:43:49:20:30:12:82:29:37:29:3c: ba:03:48:d9:84:83:b2:9b:20:03:1c:60:5c:9b:90: bb:a8:58:af:61:b2:d6:7c:23:66:bb:6c:e9:18:a5: a1:21:0b:ff:cd:7b:58:bc:9c:70:bc:bd:be:79:d6: 59:16:43:42:f4:2b:37:af:b0:5e:30:3c:9e:af:ec: 10:f3:1d:fc:78:df:80:95:89:03:85:28:f2:31:f4: 00:fa:13:8f:1c:1f:ab:87:91:f2:e9:82:96:5c:a0: 18:24:a5:65:be:27:29:c0:2c:14:cc:04:f1:41:a9: cb:89:47:cc:47:e3:90:36:e8:da:5d:35:1c:c3:52: cd:e1:6a:b7:6d:6f:5d:a7:82:20:69:93:44:11:4d: 47:47:1d:4c:cd:09:b0:3b:5b:fe:5d:8d:0f:f1:77: 69:b9:01:32:30:e2:2a:df:99:7c:8c:23:c5:d6:d7: 4f:2c:6b:33:be:a3:db:b5:f0:6c:c6:c5:f7:72:be: 8b:a2:7e:2e:5b:c6:60:82:60:96:ee:75:26:00:71: 66:31:f4:b8:e3:09:1c:55:c4:1e:e3:ca:fe:7c:58: 4b:ad:06:ec:fd:5c:5f:b0:06:62:39:a2:39:e5:19: 85:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9E:91:67:DE:7A:4A:6E:06:C8:4D:B8:DA:75:9A:54:31:7D:DC:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98bb556e-e4a0-333f-bf83-473b032ea951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:34:d7:3e:96:94:c3:c2:aa:e2:30:16:88:61:a6:5d:81:f4: 36:d9:31:4a:f1:45:1c:31:8c:42:73:b0:1f:08:82:30:bd:da: cd:d4:87:c9:05:bd:ff:ef:8c:08:1b:4c:5d:47:86:b6:4d:97: 9a:f6:6e:fe:01:a8:46:42:fe:1f:41:cb:60:6b:c0:29:e9:fb: d8:e2:2a:c9:58:75:79:a2:7f:c2:08:f8:bc:01:d8:88:1f:4c: 97:4e:ab:63:5c:e7:b8:c5:ac:7b:88:d1:b1:ba:69:68:74:22: 8f:e7:9b:a3:44:af:75:df:f0:60:97:fe:0e:28:b6:27:25:83: 12:5d:34:16:91:2e:1d:c1:5d:f3:31:3d:f4:13:52:7b:1d:0c: ed:66:d9:0f:79:51:69:20:92:c1:30:d9:6c:4c:e7:a1:50:fe: 7e:9a:ed:36:1b:e3:71:a2:1c:48:dd:37:1a:71:40:94:05:32: bf:e1:ee:03:0f:e4:2b:8b:e4:b6:12:7b:5b:f4:4f:46:6d:5b: 6a:31:a4:80:63:f2:45:0d:27:5d:b2:d0:45:ad:71:ef:2b:2e: d7:17:d2:31:97:e4:79:34:70:a1:ee:42:b6:62:0d:63:06:fe: e3:16:a2:7d:31:c1:c7:b9:78:06:6d:49:97:69:4b:be:e0:9a: eb:49:d3:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjhNCeGMIOY0MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk YTk5ZDk1NTctNWUxNy00ZmU5LWEzMWQtMWMzYzA1OWQ4YzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Iq8AEjkG9wVTvtcRQPRZUQKTkNJIDASgik3 KTy6A0jZhIOymyADHGBcm5C7qFivYbLWfCNmu2zpGKWhIQv/zXtYvJxwvL2+edZZ FkNC9Cs3r7BeMDyer+wQ8x38eN+AlYkDhSjyMfQA+hOPHB+rh5Hy6YKWXKAYJKVl vicpwCwUzATxQanLiUfMR+OQNujaXTUcw1LN4Wq3bW9dp4IgaZNEEU1HRx1MzQmw O1v+XY0P8XdpuQEyMOIq35l8jCPF1tdPLGszvqPbtfBsxsX3cr6Lon4uW8ZggmCW 7nUmAHFmMfS44wkcVcQe48r+fFhLrQbs/VxfsAZiOaI55RmFbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+ekWfeekpuBshNuNp1mlQxfdzCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOThiYjU1NmUtZTRhMC0z MzNmLWJmODMtNDczYjAzMmVhOTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk01z6WlMPCquIwFohhpl2B9DbZMUrxRRwxjEJzsB8IgjC92s3Uh8kF vf/vjAgbTF1HhrZNl5r2bv4BqEZC/h9By2BrwCnp+9jiKslYdXmif8II+LwB2Igf TJdOq2Nc57jFrHuI0bG6aWh0Io/nm6NEr3Xf8GCX/g4oticlgxJdNBaRLh3BXfMx PfQTUnsdDO1m2Q95UWkgksEw2WxM56FQ/n6a7TYb43GiHEjdNxpxQJQFMr/h7gMP 5CuL5LYSe1v0T0ZtW2oxpIBj8kUNJ12y0EWtce8rLtcX0jGX5Hk0cKHuQrZiDWMG /uMWon0xwce5eAZtSZdpS77gmutJ07A= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:10 2025 by rpki-client