$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efc95c0f-3f35-39e4-a44b-de53458820ee.roa File: efc95c0f-3f35-39e4-a44b-de53458820ee.roa (raw, json) Hash identifier: goDjcMel1OYfbPNQln3sQbxTGume0Cn5neM26255quc= Subject key identifier: 49:6D:96:5C:82:DC:39:EB:65:F0:06:6E:40:F8:9A:B6:8D:6C:58:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9A66377F0D6984149A71F780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efc95c0f-3f35-39e4-a44b-de53458820ee.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 36183 IP address blocks: 172.225.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:37:7f:0d:69:84:14:9a:71:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=9f71b59d-ce35-4837-a1a1-fd230bc545a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:51:22:5f:f0:b7:15:c2:3b:3b:7f:14:48: ee:51:b7:16:1c:d3:39:1c:6d:c2:eb:c0:57:08:dd: b2:4e:1a:b0:ef:1b:52:bf:9f:91:81:75:5a:99:34: 47:9d:3c:66:d7:b4:88:a3:4e:18:13:d2:44:47:58: 5a:14:af:d2:d3:9e:a4:d1:ad:99:bd:f2:82:14:ed: 98:b4:d4:54:0c:24:7a:3f:4b:9b:c0:f7:50:81:1d: ac:fb:a7:5b:73:e2:a8:76:92:81:c7:37:e0:f1:5c: 6f:5a:77:f0:c3:b2:26:d0:72:e3:a9:b7:ed:78:30: 90:1c:d0:9b:0a:8a:65:cb:14:65:99:dd:dd:4e:03: 6e:08:b2:90:26:4d:10:8e:a4:7b:a9:9e:67:cc:2f: 62:3e:49:36:f2:ab:1e:33:ae:97:c9:d9:39:7b:07: 24:97:d4:8c:cc:08:17:57:14:82:6d:11:57:08:3a: 10:54:af:9f:a4:37:b6:3e:c7:70:79:7b:df:3c:ef: 66:ed:89:c8:69:a5:42:04:4c:e7:36:28:43:f7:03: e9:f7:b1:cc:21:96:ae:10:8d:59:94:12:f5:66:e1: 64:a2:b5:b2:78:e7:50:3d:7e:d8:6d:57:e4:7d:1b: 3b:e0:7d:89:74:3c:ee:c5:f5:a3:0c:27:a0:16:c6: 1d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6D:96:5C:82:DC:39:EB:65:F0:06:6E:40:F8:9A:B6:8D:6C:58:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efc95c0f-3f35-39e4-a44b-de53458820ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f6:ba:04:ac:8f:3b:f8:d5:04:98:e5:5d:7d:6b:f9:51:d7: c9:a9:14:d6:b9:b5:b0:06:86:84:10:4d:17:d9:12:bf:85:00: 23:61:12:e7:f5:b5:da:da:3c:25:7e:67:6d:59:d4:b7:5b:61: 91:a4:6b:3e:c7:c1:e9:4e:dd:a2:25:19:92:07:f8:f2:42:87: e9:6e:5c:da:8d:b9:d0:96:eb:a7:2e:4e:05:4a:36:b4:3b:c5: 36:73:50:2a:39:55:d4:21:46:94:fe:38:75:f2:b3:67:35:70: be:82:fb:db:24:31:4f:94:29:d8:fb:29:30:6d:52:5e:69:0c: 05:89:5e:53:ea:51:72:90:42:f0:3c:90:8d:47:09:d0:09:e2: 9d:74:08:38:2e:57:ad:2c:e7:33:b4:7f:01:d6:18:f0:15:ff: 82:cd:2f:3f:51:51:15:d5:46:11:3a:86:2e:00:5a:5b:dd:46: 43:25:65:fd:cb:8d:db:ac:dd:f8:88:51:3e:08:6b:00:62:65: cc:8b:6c:6b:6a:f4:84:26:30:93:2d:ff:a5:6b:61:ed:1b:a5: 7f:a9:85:80:11:c8:ab:9b:5f:c2:44:07:b8:fa:6e:ff:5a:ad: e6:90:b7:c0:8a:3a:f4:0a:95:a3:99:18:ed:b4:1d:c6:71:42: 3e:d9:2b:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjd/DWmEFJpx94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk OWY3MWI1OWQtY2UzNS00ODM3LWExYTEtZmQyMzBiYzU0NWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuhRIl/wtxXCOzt/FEjuUbcWHNM5HG3C68BX CN2yThqw7xtSv5+RgXVamTRHnTxm17SIo04YE9JER1haFK/S056k0a2ZvfKCFO2Y tNRUDCR6P0ubwPdQgR2s+6dbc+KodpKBxzfg8VxvWnfww7Im0HLjqbfteDCQHNCb CoplyxRlmd3dTgNuCLKQJk0QjqR7qZ5nzC9iPkk28qseM66Xydk5ewckl9SMzAgX VxSCbRFXCDoQVK+fpDe2PsdweXvfPO9m7YnIaaVCBEznNihD9wPp97HMIZauEI1Z lBL1ZuFkorWyeOdQPX7YbVfkfRs74H2JdDzuxfWjDCegFsYd3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEltllyC3DnrZfAGbkD4mraNbFiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWZjOTVjMGYtM2YzNS0z OWU0LWE0NGItZGU1MzQ1ODgyMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb2ugSsjzv41QSY5V19a/lR18mpFNa5tbAGhoQQTRfZEr+FACNhEuf1 tdraPCV+Z21Z1LdbYZGkaz7HwelO3aIlGZIH+PJCh+luXNqNudCW66cuTgVKNrQ7 xTZzUCo5VdQhRpT+OHXys2c1cL6C+9skMU+UKdj7KTBtUl5pDAWJXlPqUXKQQvA8 kI1HCdAJ4p10CDguV60s5zO0fwHWGPAV/4LNLz9RURXVRhE6hi4AWlvdRkMlZf3L jdus3fiIUT4IawBiZcyLbGtq9IQmMJMt/6VrYe0bpX+phYARyKubX8JEB7j6bv9a reaQt8CKOvQKlaOZGO20HcZxQj7ZK/8= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:24 2025 by rpki-client