$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc86acbd-49d9-3328-8db8-9407a04db24e.roa File: fc86acbd-49d9-3328-8db8-9407a04db24e.roa (raw, json) Hash identifier: /FGlMri4oBvevoewGpA0DM0+f3WqztHWhJX4dw9or8M= Subject key identifier: 48:45:BB:D3:5F:48:F7:07:38:47:FA:DC:5C:E1:A7:83:67:E0:00:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9A6639232C8F4295C49FA900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc86acbd-49d9-3328-8db8-9407a04db24e.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 36183 IP address blocks: 172.225.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:39:23:2c:8f:42:95:c4:9f:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=707ec035-6517-4c65-bda9-88df65524830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a3:86:0a:10:5c:c5:75:a6:a3:68:cf:27:1b: a3:39:15:81:55:91:85:0a:5e:fe:2f:94:93:93:ca: 5d:ca:19:a7:cc:c2:40:98:1a:10:b0:ea:f0:6c:7f: fb:9b:39:e5:aa:df:5d:20:7e:7e:fe:7e:68:46:5d: 3a:59:4f:2b:bb:aa:9a:68:98:4e:33:f6:76:15:53: 41:67:23:45:07:54:61:f7:68:bc:3a:7f:d8:e9:f7: db:10:5c:3d:73:c8:c5:a9:22:e8:e2:ac:d5:fb:ba: fc:ca:b7:70:34:28:10:1b:4d:91:0d:43:db:19:fe: ec:d3:de:e0:c4:34:23:de:dc:19:2a:3e:cd:4a:bc: 74:17:c0:5d:3a:f5:ca:2d:75:86:03:25:1c:d5:b7: 28:de:8c:a9:95:d8:40:3d:f4:9d:60:5f:24:0b:e8: 4a:8f:10:2a:7d:4e:51:a3:50:26:59:2c:a4:08:0b: 34:89:a2:fa:de:9f:44:76:04:b3:fd:94:d2:c5:ea: 7c:9e:7c:22:fb:22:09:ed:de:ff:70:8d:fc:0d:9c: fc:3e:8a:de:94:ef:c4:50:c4:53:aa:10:db:9d:5d: 93:9f:b9:67:99:62:2c:c2:8b:9b:c0:5f:b3:4f:79: da:24:12:9e:f3:dd:7a:bf:3d:9b:60:f5:53:9e:ff: 23:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:45:BB:D3:5F:48:F7:07:38:47:FA:DC:5C:E1:A7:83:67:E0:00:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc86acbd-49d9-3328-8db8-9407a04db24e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:44:e9:e8:8e:51:28:3a:47:04:03:51:cc:7d:fb:1f:bd:d5: 39:21:44:87:e7:72:d2:1c:35:4c:8e:bb:8a:b6:2a:e5:ad:25: f4:2f:8e:c2:cf:9a:25:d2:4d:88:74:3c:b0:16:35:2c:49:6a: a0:84:5e:aa:50:4e:9f:05:a9:43:f2:b2:8d:91:1a:e1:1f:e1: 68:3f:5a:39:e6:7a:7a:1c:71:7d:ae:5c:88:8e:cc:47:f9:0a: 04:94:24:61:c2:64:34:08:aa:42:8b:27:62:c3:f7:41:aa:c0: 93:a4:72:18:43:1e:fe:cc:ca:80:fe:22:4e:10:aa:7d:91:94: 3f:3f:97:46:91:93:b9:66:85:32:a5:a3:11:37:20:80:17:18: cf:91:7b:27:3a:cc:0e:c2:7b:88:ac:83:11:78:7b:7c:dc:a2: ce:a8:c3:7d:8b:ca:2b:17:d9:da:c7:2d:c3:21:6f:2a:13:c6: 7f:55:9d:b8:b2:cb:58:aa:6e:2d:8a:14:18:00:2e:0d:16:bb: 75:ed:c5:4a:00:75:1d:71:d5:40:69:83:11:a5:13:41:30:9f: af:c6:ef:9d:fb:1f:00:bc:de:85:6a:9f:95:92:f4:df:5b:9c: ee:44:c2:ef:a4:ba:c5:58:e8:28:38:f0:cd:cb:fb:9b:0e:0a: 14:b5:01:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjkjLI9ClcSfqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk NzA3ZWMwMzUtNjUxNy00YzY1LWJkYTktODhkZjY1NTI0ODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaOGChBcxXWmo2jPJxujORWBVZGFCl7+L5ST k8pdyhmnzMJAmBoQsOrwbH/7mznlqt9dIH5+/n5oRl06WU8ru6qaaJhOM/Z2FVNB ZyNFB1Rh92i8On/Y6ffbEFw9c8jFqSLo4qzV+7r8yrdwNCgQG02RDUPbGf7s097g xDQj3twZKj7NSrx0F8BdOvXKLXWGAyUc1bco3oypldhAPfSdYF8kC+hKjxAqfU5R o1AmWSykCAs0iaL63p9EdgSz/ZTSxep8nnwi+yIJ7d7/cI38DZz8PorelO/EUMRT qhDbnV2Tn7lnmWIswoubwF+zT3naJBKe8916vz2bYPVTnv8jcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhFu9NfSPcHOEf63Fzhp4Nn4AC+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmM4NmFjYmQtNDlkOS0z MzI4LThkYjgtOTQwN2EwNGRiMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpE6eiOUSg6RwQDUcx9+x+91TkhRIfnctIcNUyOu4q2KuWtJfQvjsLP miXSTYh0PLAWNSxJaqCEXqpQTp8FqUPyso2RGuEf4Wg/WjnmenoccX2uXIiOzEf5 CgSUJGHCZDQIqkKLJ2LD90GqwJOkchhDHv7MyoD+Ik4Qqn2RlD8/l0aRk7lmhTKl oxE3IIAXGM+Reyc6zA7Ce4isgxF4e3zcos6ow32LyisX2drHLcMhbyoTxn9Vnbiy y1iqbi2KFBgALg0Wu3XtxUoAdR1x1UBpgxGlE0Ewn6/G7537HwC83oVqn5WS9N9b nO5Ewu+kusVY6Cg48M3L+5sOChS1ASI= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:45 2025 by rpki-client