$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3ce1707-0126-33b1-85cf-4de892b6bc2b.roa File: c3ce1707-0126-33b1-85cf-4de892b6bc2b.roa (raw, json) Hash identifier: XkkPMpHT4oJTy3rXNSK3czd4YIVwNUNz6n/1uuiXSR0= Subject key identifier: B0:8C:5F:E6:E5:57:92:3C:66:F0:4F:89:39:CF:3D:FA:02:6D:5C:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9A6638D373A0E52DBF103C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3ce1707-0126-33b1-85cf-4de892b6bc2b.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 36183 IP address blocks: 172.225.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:38:d3:73:a0:e5:2d:bf:10:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=a93c48a6-baab-4645-b3c2-1723fea04175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:02:a1:e5:07:04:88:35:e7:8a:20:c1:f5: 80:3f:36:67:02:52:79:2b:f2:84:a4:af:83:ff:bf: 4f:79:0d:37:4d:18:3f:65:7d:ae:64:6a:26:cb:23: 4f:3a:95:9f:75:c9:78:87:44:63:22:7e:01:89:11: 68:77:cd:be:d7:b5:04:a6:52:e7:e4:2f:f8:8c:bb: e0:56:9b:ff:93:8d:63:d5:2c:42:5b:23:3b:72:c4: 65:0b:f5:21:ca:7f:0c:a8:d5:cf:b9:2f:36:32:b0: 42:ca:80:80:11:52:a2:90:34:5f:e8:31:ff:b3:9d: 0e:8c:91:e7:26:32:49:f9:2c:29:e3:df:b1:bb:71: 04:27:6f:62:06:21:d1:ab:5c:81:52:80:ef:a2:42: 66:d2:81:19:9d:e1:0a:51:ec:be:92:c0:6f:a0:52: 72:72:4a:40:ea:36:44:5b:9f:19:1f:1e:3e:cc:2e: 43:bd:4f:b3:1c:d9:69:a0:bd:c4:15:dd:0e:99:bb: 0e:8e:66:59:b1:9e:6b:3c:fe:23:a4:dd:b1:ea:ed: 31:2a:68:f1:c9:10:b2:84:45:d4:6c:fb:ec:b2:f4: 8f:64:1f:62:10:23:06:35:69:15:8a:ac:ce:05:51: 18:fe:9d:c3:97:ec:0d:7c:3c:b2:a3:33:4e:10:1e: 75:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8C:5F:E6:E5:57:92:3C:66:F0:4F:89:39:CF:3D:FA:02:6D:5C:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3ce1707-0126-33b1-85cf-4de892b6bc2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:7a:f1:95:ce:f9:ca:f3:64:85:6b:c4:d2:b4:e4:aa:7e:69: dc:d6:6b:05:f8:cc:36:63:cb:55:6c:81:7d:dd:bf:5a:ee:44: 94:16:5f:ad:75:02:90:b0:75:a1:9f:77:7c:16:e1:15:8d:e0: aa:3d:15:dd:f1:4f:6f:6a:13:85:40:e7:c5:00:e4:8b:df:7b: f1:69:00:b6:fd:f3:af:ec:23:a8:1f:33:57:fb:f1:79:3c:44: dc:2d:4a:78:9a:a8:56:1e:78:22:cf:ca:cb:d7:ad:36:6e:25: be:2b:31:30:89:fe:e4:88:0e:9d:17:40:d0:61:84:c8:f0:1f: 77:51:ac:36:f5:d0:fd:9c:1e:b5:c9:36:91:d7:c2:41:b2:9f: 7f:d5:33:70:da:f6:c3:68:68:2c:75:b9:3b:a8:e2:ae:ee:ff: d1:ce:85:e8:9f:ae:ef:f9:bf:19:78:f7:74:f0:be:07:ce:c0: b9:36:a0:76:d9:8f:50:b6:ba:4e:8f:51:2b:ec:27:a8:25:ba: fc:3e:e0:88:d3:82:0d:7d:2b:f3:74:c3:d5:67:3d:b2:43:69: 95:d8:60:89:f8:8f:8e:75:ba:e6:10:fd:cf:9d:3b:ca:9e:ec: 88:d1:b5:3b:c6:d5:cb:66:f8:84:0c:9e:81:44:b1:de:a8:f1: 04:95:f6:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjjTc6DlLb8QPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk YTkzYzQ4YTYtYmFhYi00NjQ1LWIzYzItMTcyM2ZlYTA0MTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE8CoeUHBIg154ogwfWAPzZnAlJ5K/KEpK+D /79PeQ03TRg/ZX2uZGomyyNPOpWfdcl4h0RjIn4BiRFod82+17UEplLn5C/4jLvg Vpv/k41j1SxCWyM7csRlC/Uhyn8MqNXPuS82MrBCyoCAEVKikDRf6DH/s50OjJHn JjJJ+Swp49+xu3EEJ29iBiHRq1yBUoDvokJm0oEZneEKUey+ksBvoFJyckpA6jZE W58ZHx4+zC5DvU+zHNlpoL3EFd0OmbsOjmZZsZ5rPP4jpN2x6u0xKmjxyRCyhEXU bPvssvSPZB9iECMGNWkViqzOBVEY/p3Dl+wNfDyyozNOEB51xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCMX+blV5I8ZvBPiTnPPfoCbVx9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzNjZTE3MDctMDEyNi0z M2IxLTg1Y2YtNGRlODkyYjZiYzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh68ZXO+crzZIVrxNK05Kp+adzWawX4zDZjy1VsgX3dv1ruRJQWX611 ApCwdaGfd3wW4RWN4Ko9Fd3xT29qE4VA58UA5Ivfe/FpALb986/sI6gfM1f78Xk8 RNwtSniaqFYeeCLPysvXrTZuJb4rMTCJ/uSIDp0XQNBhhMjwH3dRrDb10P2cHrXJ NpHXwkGyn3/VM3Da9sNoaCx1uTuo4q7u/9HOheifru/5vxl493TwvgfOwLk2oHbZ j1C2uk6PUSvsJ6gluvw+4IjTgg19K/N0w9VnPbJDaZXYYIn4j451uuYQ/c+dO8qe 7IjRtTvG1ctm+IQMnoFEsd6o8QSV9k8= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:40 2025 by rpki-client