$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa File: a24a5b45-65e4-3787-acd8-b655e54a2021.roa (raw, json) Hash identifier: xy2VKKs7N6uXbCC0nVx8oUoffQXnXxBCIaKtmLTjGyY= Subject key identifier: C2:9B:BA:D0:3A:4D:99:37:8E:06:AA:DB:06:E5:F6:31:77:A2:02:E8 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E96237A1353C0C442444E80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 172.223.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:23:7a:13:53:c0:c4:42:44:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=739ed1c1-57c5-4006-a047-852fd9ea5407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9b:98:70:97:2b:ed:e3:c3:1f:6e:ca:d7:ba: a8:79:c2:ee:7e:78:62:32:6c:31:57:fc:0b:96:d8: 38:18:eb:1d:ae:53:8a:f0:2c:59:0f:c3:29:35:24: 1c:84:39:cc:d1:8c:ff:8d:ee:49:c3:f4:c2:6c:54: 86:48:ca:ba:9a:bc:89:d0:b2:3e:d8:f0:7b:16:50: 8c:6f:65:40:46:ac:68:51:29:ac:3b:46:71:87:a8: 4c:9a:63:38:e5:8e:3c:73:c9:16:8d:26:13:24:66: 2f:4d:7b:ff:ef:c7:15:28:75:82:22:b6:ae:b9:a8: 63:01:5f:68:91:61:dd:4c:46:dc:e4:94:4e:e0:90: 98:ab:98:db:94:4b:26:52:9a:63:08:64:09:01:4b: 41:24:99:93:1d:21:04:5e:36:5b:e4:0d:a6:d5:35: 55:13:3e:b3:93:62:f3:52:82:44:f3:c9:9c:13:6f: a7:d8:e1:41:4c:45:a8:80:da:0a:0b:9b:c5:40:58: 7b:d3:69:e2:57:81:bf:57:92:12:1e:38:1d:bf:7d: 08:4f:34:ff:68:9d:9b:7c:dc:62:57:e4:20:74:3e: 04:33:35:d3:f0:8f:54:d6:4d:ab:37:9f:ef:b6:8d: 53:3d:6b:79:df:b5:1f:37:9f:fb:a0:54:40:59:59: e1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9B:BA:D0:3A:4D:99:37:8E:06:AA:DB:06:E5:F6:31:77:A2:02:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.223.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:75:21:99:89:52:3b:bd:0d:38:71:48:53:19:6d:4a:05:b5: d0:99:52:3b:52:cf:f2:f5:48:50:bf:4a:c9:53:93:fe:c8:04: 83:dc:94:0d:80:27:dd:10:2d:d0:b3:8c:28:df:d1:d7:8d:b2: 3b:00:6e:99:c9:31:03:a4:42:3a:fe:09:65:10:9b:24:24:7c: 6e:a3:75:1b:79:58:64:22:b2:38:97:33:b8:00:09:c0:00:71: 9a:98:ba:a6:12:88:17:5e:9d:d4:da:ba:87:80:4a:f4:72:a2: bb:2a:93:09:1b:66:8f:c3:ad:99:c4:c6:3c:ea:4b:86:20:1f: 1b:41:3f:ce:68:b4:e1:d0:fd:74:24:d8:cb:de:48:8c:a9:5d: 5c:3f:45:a4:d0:5f:65:fb:1a:e3:f3:7b:74:b9:6e:d5:5b:b2: f5:ac:1c:35:2a:2d:02:62:54:b3:ab:42:ca:87:dc:d4:d9:53: 8b:7b:38:c9:56:b3:e7:6e:84:9d:9a:36:28:2b:1c:a8:07:11: 6c:a5:0c:40:2d:e6:dd:e9:6f:e0:49:66:0e:a6:c5:a9:1e:a8: c9:c0:e7:ab:7d:19:cf:ff:78:b4:8a:78:ed:6b:9a:58:8f:05: 23:d6:a8:a0:bb:bb:d2:b4:be:86:89:ef:0e:78:0d:91:6e:2c: 7e:7a:0e:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeliN6E1PAxEJEToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NzM5ZWQxYzEtNTdjNS00MDA2LWEwNDctODUyZmQ5ZWE1NDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJuYcJcr7ePDH27K17qoecLufnhiMmwxV/wL ltg4GOsdrlOK8CxZD8MpNSQchDnM0Yz/je5Jw/TCbFSGSMq6mryJ0LI+2PB7FlCM b2VARqxoUSmsO0Zxh6hMmmM45Y48c8kWjSYTJGYvTXv/78cVKHWCIrauuahjAV9o kWHdTEbc5JRO4JCYq5jblEsmUppjCGQJAUtBJJmTHSEEXjZb5A2m1TVVEz6zk2Lz UoJE88mcE2+n2OFBTEWogNoKC5vFQFh702niV4G/V5ISHjgdv30ITzT/aJ2bfNxi V+QgdD4EMzXT8I9U1k2rN5/vto1TPWt537UfN5/7oFRAWVnhywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKbutA6TZk3jgaq2wbl9jF3ogLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTI0YTViNDUtNjVlNC0z Nzg3LWFjZDgtYjY1NWU1NGEyMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrN+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIt1IZmJUju9DThxSFMZbUoFtdCZUjtSz/L1SFC/SslTk/7IBIPclA2A J90QLdCzjCjf0deNsjsAbpnJMQOkQjr+CWUQmyQkfG6jdRt5WGQisjiXM7gACcAA cZqYuqYSiBdendTauoeASvRyorsqkwkbZo/DrZnExjzqS4YgHxtBP85otOHQ/XQk 2MveSIypXVw/RaTQX2X7GuPze3S5btVbsvWsHDUqLQJiVLOrQsqH3NTZU4t7OMlW s+duhJ2aNigrHKgHEWylDEAt5t3pb+BJZg6mxakeqMnA56t9Gc//eLSKeO1rmliP BSPWqKC7u9K0voaJ7w54DZFuLH56Dic= -----END CERTIFICATE-----Generated at Mon Aug 4 22:21:21 2025 by rpki-client