$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe017350-4574-30f0-987b-cc5a409e3aa2.roa File: fe017350-4574-30f0-987b-cc5a409e3aa2.roa (raw, json) Hash identifier: 6TnUexc44TkTiSCOQsVTHChbeEPCrTl5JybA8yCJ60M= Subject key identifier: FD:47:66:F3:82:67:08:4A:EC:7C:11:85:0D:08:15:E9:A2:3E:32:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5F62204A527B90FD0E800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe017350-4574-30f0-987b-cc5a409e3aa2.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 36183 IP address blocks: 172.224.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:f6:22:04:a5:27:b9:0f:d0:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=ba4ac50d-4e0d-4a85-bd71-c8436d49348c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:e6:2e:c1:43:07:19:1c:f1:be:4e:7f:e0: f6:05:d6:5b:d8:06:25:45:5e:41:5c:4c:d7:f0:39: 21:d2:94:16:9b:ea:e0:c5:1f:9c:41:19:26:6c:72: bf:6a:51:1d:06:19:6e:f4:cc:7a:cf:70:66:50:f6: b4:c0:c5:c7:44:e8:21:13:3e:ed:ad:73:63:50:3e: 11:55:21:5e:10:46:e1:6f:e6:30:be:59:7a:df:00: e0:2a:86:98:1b:56:d6:2b:73:15:de:e5:08:a6:14: e3:b7:e9:ce:60:cb:b5:2e:ac:e3:42:94:ca:d2:e3: 33:9d:a4:4a:6e:d5:26:91:f0:bd:63:9e:8c:3d:92: 73:60:87:e3:38:c1:63:96:b2:a9:c4:e9:4f:92:49: d6:c4:eb:71:a8:12:1b:4c:80:dd:1e:7c:ae:4f:ff: 7e:18:56:8c:be:35:e3:9d:47:e9:03:9d:c3:d6:99: 59:e8:2d:a4:0d:b3:5b:ba:d5:95:c6:c9:95:18:7a: 02:e2:89:72:c4:2b:c3:43:06:bb:2e:08:da:eb:54: 93:0e:3f:c1:f6:2e:9e:77:07:70:8d:1e:cf:16:1f: 84:ac:87:bb:55:50:31:af:8d:87:b8:17:76:22:1d: d6:0b:14:8c:1a:ab:ca:03:7d:13:6c:d6:0d:c2:64: e8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:47:66:F3:82:67:08:4A:EC:7C:11:85:0D:08:15:E9:A2:3E:32:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe017350-4574-30f0-987b-cc5a409e3aa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:87:c1:a4:46:2d:8c:8d:44:4e:b7:7b:11:2c:4f:27:31:aa: 34:5c:be:1b:ee:6c:5d:f7:64:ea:fc:33:87:bc:90:7e:bb:33: 74:ed:3a:6e:6b:05:a4:4a:3b:e7:00:1b:cf:ae:d8:2b:5d:18: bd:00:2c:69:cc:1f:59:fa:fc:70:de:44:a4:eb:58:b5:38:59: 0d:8d:ca:8e:5b:7d:ea:be:4b:6b:d6:a1:7b:8c:0b:1b:f8:5a: d8:61:85:cd:42:94:f1:95:79:11:49:a7:a7:29:a2:36:6d:c1: 7c:bc:b6:2b:48:f8:01:be:df:3d:50:4e:4f:93:94:db:b5:74: 7b:1d:60:af:c1:4c:bd:38:eb:27:e6:88:d4:e9:6c:c9:b4:02: 6f:3c:26:a2:e0:80:12:90:23:b5:8b:8b:85:05:72:7c:30:07: 78:3d:68:62:42:38:76:be:46:00:54:f7:c3:f8:3e:13:9f:37: 02:9e:1c:9f:90:06:16:7f:0e:d6:6f:80:b3:67:07:89:5a:28: 67:b5:ec:58:ea:78:3e:29:12:7a:33:8a:13:bc:a2:59:83:da: ed:02:5e:8e:d0:dc:23:4c:95:11:a7:43:98:c4:14:2b:a0:d9: 71:af:cf:15:97:27:6e:5c:ca:cf:82:6c:bc:ce:1d:c5:2d:2c: 01:64:f1:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxfYiBKUnuQ/Q6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk YmE0YWM1MGQtNGUwZC00YTg1LWJkNzEtYzg0MzZkNDkzNDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrnmLsFDBxkc8b5Of+D2BdZb2AYlRV5BXEzX 8Dkh0pQWm+rgxR+cQRkmbHK/alEdBhlu9Mx6z3BmUPa0wMXHROghEz7trXNjUD4R VSFeEEbhb+Ywvll63wDgKoaYG1bWK3MV3uUIphTjt+nOYMu1LqzjQpTK0uMznaRK btUmkfC9Y56MPZJzYIfjOMFjlrKpxOlPkknWxOtxqBIbTIDdHnyuT/9+GFaMvjXj nUfpA53D1plZ6C2kDbNbutWVxsmVGHoC4olyxCvDQwa7Lgja61STDj/B9i6edwdw jR7PFh+ErIe7VVAxr42HuBd2Ih3WCxSMGqvKA30TbNYNwmToLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1HZvOCZwhK7HwRhQ0IFemiPjLaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmUwMTczNTAtNDU3NC0z MGYwLTk4N2ItY2M1YTQwOWUzYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiHwaRGLYyNRE63exEsTycxqjRcvhvubF33ZOr8M4e8kH67M3TtOm5r BaRKO+cAG8+u2CtdGL0ALGnMH1n6/HDeRKTrWLU4WQ2Nyo5bfeq+S2vWoXuMCxv4 Wthhhc1ClPGVeRFJp6cpojZtwXy8titI+AG+3z1QTk+TlNu1dHsdYK/BTL046yfm iNTpbMm0Am88JqLggBKQI7WLi4UFcnwwB3g9aGJCOHa+RgBU98P4PhOfNwKeHJ+Q BhZ/DtZvgLNnB4laKGe17FjqeD4pEnozihO8olmD2u0CXo7Q3CNMlRGnQ5jEFCug 2XGvzxWXJ25cys+CbLzOHcUtLAFk8R4= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:45 2025 by rpki-client