$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3fc2a7e-e68e-3d9d-b43c-4ffe97f03670.roa File: f3fc2a7e-e68e-3d9d-b43c-4ffe97f03670.roa (raw, json) Hash identifier: okMg0+Q+rQX79W4MOkAGiESzSqVL44cW04TdnQpn4jg= Subject key identifier: DC:64:A9:1B:F3:67:4E:7E:D0:5D:17:1C:DD:2A:75:2A:8A:7B:81:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9A663803DF496C93075C3D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3fc2a7e-e68e-3d9d-b43c-4ffe97f03670.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 36183 IP address blocks: 172.225.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:38:03:df:49:6c:93:07:5c:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=1604e8ba-33b0-4346-8912-910eca5920c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:98:ef:e9:00:06:7d:13:a4:27:e3:e6:a5: d3:04:e1:f2:19:0a:0d:c7:a5:11:65:51:c9:02:c5: 1b:da:48:e0:5e:91:d4:5b:38:4b:79:9a:63:78:0f: 1f:3d:28:35:fc:66:6f:4d:91:b8:0b:f9:7d:4a:44: f9:31:29:05:ce:6d:0d:7e:6b:6e:48:03:b3:bb:0b: 22:cc:99:a3:99:a9:20:d4:00:21:95:4c:42:e2:49: 95:8b:7a:6e:8b:a2:18:d3:bd:37:d7:64:4a:d3:71: bb:0f:73:27:57:6f:bd:5c:50:98:00:3d:ca:a4:ee: 94:2a:c1:78:7f:00:78:af:cd:9f:6b:58:e0:be:d9: a1:a3:89:60:19:7c:f7:ad:e1:6b:3b:36:56:cf:a0: e3:2b:72:5f:98:6b:c5:ae:fa:b8:a4:21:b6:3e:d4: cf:75:fa:67:d0:17:2f:40:53:97:aa:a7:3b:34:ac: d1:3b:7d:82:55:27:f3:a2:ae:c2:17:23:3d:88:49: b5:f4:5c:03:ae:57:8f:0e:25:c1:98:ea:86:cc:e0: 67:7b:03:47:5f:9d:e1:dc:a3:09:c0:67:30:c0:8a: f7:18:22:d7:ef:7d:22:9c:ab:89:13:ab:91:6e:ac: 3a:93:78:3d:0a:aa:bc:c9:65:18:20:0d:e6:fb:54: c9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:64:A9:1B:F3:67:4E:7E:D0:5D:17:1C:DD:2A:75:2A:8A:7B:81:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3fc2a7e-e68e-3d9d-b43c-4ffe97f03670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:df:29:04:1e:9d:a0:1d:7f:3d:97:41:7e:1f:97:e0:86:aa: dc:49:f9:58:83:00:cf:2d:2a:85:e7:16:43:bc:af:12:69:bd: f7:15:ee:f7:08:f7:63:66:6b:eb:b9:cd:72:59:35:21:ac:8d: 96:9f:a6:6c:56:4a:5d:fc:35:ab:f9:c3:7b:bb:4f:65:b7:53: c7:ba:ff:13:6a:0b:28:6b:ad:75:9f:51:42:ed:db:eb:53:56: d6:43:85:24:51:20:41:9b:30:ef:d5:2b:06:55:91:56:70:fc: 17:c4:b5:7b:e7:3a:c2:ff:71:f0:10:26:96:32:a3:60:cf:d7: 69:9b:1f:0a:ac:2d:35:ab:1b:b0:1a:3a:a5:49:05:dd:c7:ea: c4:bd:f1:8b:7e:85:8c:1c:34:74:37:26:0d:d9:6b:c2:7b:b3: db:b0:59:dd:e9:a1:d5:f8:89:4a:ee:e8:6f:89:58:76:0c:12: 45:f3:a7:cc:01:81:99:6d:46:e6:f8:0e:43:62:e5:51:d2:1b: 3c:98:fa:b5:94:c7:51:77:76:87:4e:20:c4:96:cb:62:a1:8c: a2:35:20:f8:0b:78:2c:df:f5:b4:59:ba:df:94:f8:25:c1:46: 01:f4:43:60:10:2d:7d:98:af:7c:49:47:f1:04:07:c3:eb:d0: 08:c6:98:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjgD30lskwdcPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk MTYwNGU4YmEtMzNiMC00MzQ2LTg5MTItOTEwZWNhNTkyMGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLCY7+kABn0TpCfj5qXTBOHyGQoNx6URZVHJ AsUb2kjgXpHUWzhLeZpjeA8fPSg1/GZvTZG4C/l9SkT5MSkFzm0NfmtuSAOzuwsi zJmjmakg1AAhlUxC4kmVi3pui6IY070312RK03G7D3MnV2+9XFCYAD3KpO6UKsF4 fwB4r82fa1jgvtmho4lgGXz3reFrOzZWz6DjK3JfmGvFrvq4pCG2PtTPdfpn0Bcv QFOXqqc7NKzRO32CVSfzoq7CFyM9iEm19FwDrlePDiXBmOqGzOBnewNHX53h3KMJ wGcwwIr3GCLX730inKuJE6uRbqw6k3g9Cqq8yWUYIA3m+1TJnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxkqRvzZ05+0F0XHN0qdSqKe4HaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjNmYzJhN2UtZTY4ZS0z ZDlkLWI0M2MtNGZmZTk3ZjAzNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOF7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArfKQQenaAdfz2XQX4fl+CGqtxJ+ViDAM8tKoXnFkO8rxJpvfcV7vcI 92Nma+u5zXJZNSGsjZafpmxWSl38Nav5w3u7T2W3U8e6/xNqCyhrrXWfUULt2+tT VtZDhSRRIEGbMO/VKwZVkVZw/BfEtXvnOsL/cfAQJpYyo2DP12mbHwqsLTWrG7Aa OqVJBd3H6sS98Yt+hYwcNHQ3Jg3Za8J7s9uwWd3podX4iUru6G+JWHYMEkXzp8wB gZltRub4DkNi5VHSGzyY+rWUx1F3dodOIMSWy2KhjKI1IPgLeCzf9bRZut+U+CXB RgH0Q2AQLX2Yr3xJR/EEB8Pr0AjGmMs= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:40 2025 by rpki-client