$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6f85c31-8739-3af2-93d6-fb5560258728.roa File: d6f85c31-8739-3af2-93d6-fb5560258728.roa (raw, json) Hash identifier: tPX+ZwEjdVoTyGBOATRdboBB7oISCtmG4RoYvr4vIQs= Subject key identifier: 07:D9:D4:CD:11:15:33:C4:26:28:72:69:33:A7:8B:E2:89:4F:DE:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9A6637BB36109D0744023100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6f85c31-8739-3af2-93d6-fb5560258728.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 36183 IP address blocks: 172.225.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:37:bb:36:10:9d:07:44:02:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=938d9550-439b-41e3-924a-505ac62f14d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:ee:99:3d:22:ed:2f:80:f4:09:50:83:59: 3d:be:57:ae:1a:64:e8:7a:d1:d9:a1:de:90:c1:72: 93:19:49:43:c9:cd:a5:88:4a:ce:67:0f:9a:55:ea: e1:31:88:0d:f2:95:f2:16:76:29:5e:b8:58:b6:5d: d9:c1:26:6a:45:38:ee:bf:17:e0:c5:b2:3c:75:63: a0:ca:4b:68:73:3e:f0:66:59:f3:bb:53:5d:cb:82: 79:ac:84:ad:c8:45:bc:ff:98:71:e3:a7:d3:58:1f: 4c:ce:f3:4d:bc:57:1d:d1:ce:1f:0a:4f:77:62:e0: 1d:d3:e9:24:c3:6d:15:a1:5c:86:86:f0:7b:ae:4f: 19:95:c5:37:96:f2:da:39:9d:63:b5:a8:d6:68:3e: 71:28:5d:27:3a:3f:ba:63:b2:22:ae:eb:7e:b8:48: a9:f8:5f:bd:12:27:0f:7c:0c:b3:7d:86:2c:de:11: cd:6d:8a:99:53:bf:bd:77:6f:7c:41:4d:c3:81:0e: 1a:f3:63:c2:1b:3e:f0:6c:0a:63:55:0c:23:c2:fc: 78:3d:a2:84:9b:47:df:16:8d:f4:a4:03:5b:6f:87: 76:e6:58:76:16:85:c9:50:f2:0d:77:93:f8:24:2b: 3c:85:f9:a8:82:f0:9a:3e:9f:51:f0:18:e8:98:e1: 59:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D9:D4:CD:11:15:33:C4:26:28:72:69:33:A7:8B:E2:89:4F:DE:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6f85c31-8739-3af2-93d6-fb5560258728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:04:70:10:e5:09:80:3b:ec:90:b2:c0:8d:78:b2:3c:48:f8: c0:d7:a0:35:7a:e4:5e:58:96:14:50:f8:a3:61:58:7d:95:69: 00:84:b7:8d:ed:2d:25:58:b1:0e:a6:67:71:5d:cf:5d:db:5e: 3e:18:5b:29:0f:26:8b:3c:06:ac:dd:7f:2f:e3:30:9d:a4:29: 79:8f:53:e5:75:43:be:e7:e6:2e:e2:d8:f7:86:70:59:e0:a3: 64:48:f2:fa:fa:46:46:01:01:b4:2f:47:65:b3:1e:2f:4d:db: 11:80:6d:3d:40:74:0f:dc:79:29:e7:ff:c8:77:4c:1f:57:e4: ec:8a:b2:08:0b:09:c0:95:8d:7b:f4:3e:89:24:22:5e:40:d1: 9f:e9:5b:14:ee:b9:e9:ff:5f:69:d3:ef:5a:10:c5:b1:58:61: ca:91:e5:47:be:ce:f6:3d:f1:8b:5c:34:88:49:df:ab:20:b2: c0:33:8d:40:a7:78:d4:4f:0a:7b:38:27:33:b9:b9:84:52:70: 65:e0:83:a6:aa:88:3c:c6:c9:c9:4b:55:d1:fb:b2:4f:5b:0f: 04:ae:a1:d2:e1:a5:40:e1:b4:34:f6:1d:ab:37:35:ae:eb:26: c0:12:6c:32:1b:d2:52:c9:5e:72:59:c5:83:44:fd:7b:94:29: 4a:fd:9a:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZje7NhCdB0QCMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk OTM4ZDk1NTAtNDM5Yi00MWUzLTkyNGEtNTA1YWM2MmYxNGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxynumT0i7S+A9AlQg1k9vleuGmToetHZod6Q wXKTGUlDyc2liErOZw+aVerhMYgN8pXyFnYpXrhYtl3ZwSZqRTjuvxfgxbI8dWOg yktocz7wZlnzu1Ndy4J5rIStyEW8/5hx46fTWB9MzvNNvFcd0c4fCk93YuAd0+kk w20VoVyGhvB7rk8ZlcU3lvLaOZ1jtajWaD5xKF0nOj+6Y7Iirut+uEip+F+9EicP fAyzfYYs3hHNbYqZU7+9d298QU3DgQ4a82PCGz7wbApjVQwjwvx4PaKEm0ffFo30 pANbb4d25lh2FoXJUPINd5P4JCs8hfmogvCaPp9R8BjomOFZFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfZ1M0RFTPEJihyaTOni+KJT96KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDZmODVjMzEtODczOS0z YWYyLTkzZDYtZmI1NTYwMjU4NzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMEcBDlCYA77JCywI14sjxI+MDXoDV65F5YlhRQ+KNhWH2VaQCEt43t LSVYsQ6mZ3Fdz13bXj4YWykPJos8Bqzdfy/jMJ2kKXmPU+V1Q77n5i7i2PeGcFng o2RI8vr6RkYBAbQvR2WzHi9N2xGAbT1AdA/ceSnn/8h3TB9X5OyKsggLCcCVjXv0 PokkIl5A0Z/pWxTuuen/X2nT71oQxbFYYcqR5Ue+zvY98YtcNIhJ36sgssAzjUCn eNRPCns4JzO5uYRScGXgg6aqiDzGyclLVdH7sk9bDwSuodLhpUDhtDT2Has3Na7r JsASbDIb0lLJXnJZxYNE/XuUKUr9mqM= -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:33 2025 by rpki-client