$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa File: 5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa (raw, json) Hash identifier: rUaLhAXEUQNw6jnrgiGheXBhaPFS4bNBjRQXC+rudOQ= Subject key identifier: FA:F9:23:70:3A:56:F2:A0:33:37:EB:4E:EA:42:8A:90:62:4E:0C:E6 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E96236B77F51133169C5F00 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 172.223.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:23:6b:77:f5:11:33:16:9c:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=a58f3128-fbf9-45c1-9261-22bdd041eb13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c5:47:39:ed:c0:c3:42:89:0c:a2:28:18:96: 7f:14:55:1b:cc:93:1b:19:d7:29:7e:8d:1b:c8:4b: 9a:83:9f:0b:c2:d9:8d:92:0b:c9:61:03:c9:99:ad: 12:22:b8:2f:5b:90:df:da:c8:3e:2a:46:e7:79:ba: 3a:3b:cd:c4:76:7b:86:6e:62:9c:d1:f5:e6:85:d4: 59:90:9f:34:20:18:14:f7:f6:a4:cc:63:79:36:17: 19:f9:ad:bb:e7:34:6f:ce:fd:93:27:ad:60:96:76: 41:54:69:14:7a:83:e1:eb:67:86:95:58:2c:6f:0e: b5:bc:9f:cf:57:19:74:20:e2:97:c2:96:ca:c7:c3: 25:22:cb:8e:0a:37:04:ac:71:70:a7:06:69:e1:f8: db:8c:51:0c:eb:a3:c3:e8:9e:22:d7:ec:24:d7:48: b4:2d:e6:97:33:82:62:1d:cb:f1:10:f0:47:b6:ef: dc:df:9e:f1:be:5c:f3:84:6d:6a:b1:7e:3d:9f:81: b4:fc:51:9b:11:69:a8:00:39:91:11:4d:85:5d:e0: 29:c0:fc:04:22:99:d6:30:cb:78:b2:d4:6e:e8:63: 4a:61:83:74:43:28:52:b0:dc:66:de:da:85:1f:c0: 9d:6e:52:ac:0a:3d:ce:29:a9:b8:ac:d7:99:4a:4c: 6f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F9:23:70:3A:56:F2:A0:33:37:EB:4E:EA:42:8A:90:62:4E:0C:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.223.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7a:45:44:d6:65:6a:62:02:d9:d3:01:61:d6:0b:39:75:85: 2b:94:8c:57:f3:35:cf:ee:27:b9:78:96:36:06:e1:d8:e4:69: 10:5d:af:85:07:45:e8:f5:a7:5b:d5:e0:c5:08:48:68:21:a3: e2:df:4f:40:2c:85:17:dd:1e:61:95:5b:f8:8c:ea:54:0a:cf: 0f:83:8c:d2:41:10:17:38:7a:12:df:74:d5:8b:05:c3:8e:ce: 74:88:54:be:2a:0b:71:32:87:bb:eb:57:73:fa:ab:bc:e7:eb: 49:26:57:6e:ac:34:0c:b9:92:33:e3:b5:10:45:4d:f8:91:44: f3:ab:84:7b:26:f4:97:f2:ca:5d:6f:41:08:61:5e:30:65:f7: 96:8d:33:60:3c:f4:0f:7b:bb:66:f1:51:2a:b6:05:1f:ea:19: 56:71:0c:a6:c4:0a:9d:4f:ff:6f:4e:fd:e2:91:5d:d6:5f:cf: d3:a7:4c:d3:be:be:b4:1a:22:d1:cc:d7:ed:98:1f:4c:5f:e3: f1:99:9d:bb:96:8d:6d:b6:65:94:f5:cc:6c:e1:b7:0b:db:a2: 5c:6f:c4:34:b6:ef:72:e3:2f:fa:5f:f1:09:ca:a4:ee:0f:92: 7a:c3:78:63:bf:81:7f:6d:50:a9:45:99:e4:42:0b:57:0a:fc: 97:61:78:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeliNrd/URMxacXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk YTU4ZjMxMjgtZmJmOS00NWMxLTkyNjEtMjJiZGQwNDFlYjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocVHOe3Aw0KJDKIoGJZ/FFUbzJMbGdcpfo0b yEuag58LwtmNkgvJYQPJma0SIrgvW5Df2sg+Kkbnebo6O83EdnuGbmKc0fXmhdRZ kJ80IBgU9/akzGN5NhcZ+a275zRvzv2TJ61glnZBVGkUeoPh62eGlVgsbw61vJ/P Vxl0IOKXwpbKx8MlIsuOCjcErHFwpwZp4fjbjFEM66PD6J4i1+wk10i0LeaXM4Ji HcvxEPBHtu/c357xvlzzhG1qsX49n4G0/FGbEWmoADmREU2FXeApwPwEIpnWMMt4 stRu6GNKYYN0QyhSsNxm3tqFH8CdblKsCj3OKam4rNeZSkxv3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPr5I3A6VvKgMzfrTupCipBiTgzmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNWFjNGJkMTItNzFhZS0z NTY5LThlOGMtOGY4NDRkNjViMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrN9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG96RUTWZWpiAtnTAWHWCzl1hSuUjFfzNc/uJ7l4ljYG4djkaRBdr4UH Rej1p1vV4MUISGgho+LfT0AshRfdHmGVW/iM6lQKzw+DjNJBEBc4ehLfdNWLBcOO znSIVL4qC3Eyh7vrV3P6q7zn60kmV26sNAy5kjPjtRBFTfiRRPOrhHsm9Jfyyl1v QQhhXjBl95aNM2A89A97u2bxUSq2BR/qGVZxDKbECp1P/29O/eKRXdZfz9OnTNO+ vrQaItHM1+2YH0xf4/GZnbuWjW22ZZT1zGzhtwvbolxvxDS273LjL/pf8QnKpO4P knrDeGO/gX9tUKlFmeRCC1cK/JdheJ0= -----END CERTIFICATE-----Generated at Mon Aug 4 14:20:07 2025 by rpki-client