$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02cb14bc-bb8b-31c4-a3f7-00015302fc58.roa File: 02cb14bc-bb8b-31c4-a3f7-00015302fc58.roa (raw, json) Hash identifier: /0g6aM5ZBE9yhUlnoJGmJJ4GwRsSs8K0NT3N5J0NONk= Subject key identifier: 97:4C:D3:11:87:A1:D0:1E:3C:0E:87:26:DF:FE:2E:85:15:C5:33:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB91BB8433ACA4B15A8839F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02cb14bc-bb8b-31c4-a3f7-00015302fc58.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 36183 IP address blocks: 172.224.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:b8:43:3a:ca:4b:15:a8:83:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=1194a365-4a61-40a0-a5f6-0a9a7f98898d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:fb:15:61:18:c7:ed:f4:61:60:48:eb:d4: 23:c8:a3:34:ab:1b:3a:63:02:1e:d2:fb:6d:ef:b4: 6f:f5:17:0f:ee:c6:f8:67:76:61:51:77:81:6c:b7: 55:95:d7:ed:17:b9:2c:d4:e9:46:00:02:3e:7f:bb: 93:dc:8a:53:df:df:00:94:3c:d8:fe:ca:e8:30:f8: 1d:fb:8d:9a:ec:f3:e5:13:eb:ff:37:ee:fa:76:a5: a1:51:ab:6e:0e:a8:d0:e4:7c:7d:5d:6d:02:b4:ae: c0:84:a1:06:7f:8a:ee:c0:3f:21:66:98:b9:25:96: 59:0f:05:93:85:5e:1d:ce:73:3a:96:38:d4:13:2f: 62:3e:5b:99:79:a0:c3:02:0c:72:a6:c2:60:f3:2d: 89:72:5e:c3:95:00:77:43:c1:24:37:27:33:51:20: cd:af:ef:f7:18:1a:89:19:0c:6f:67:59:af:a8:b5: c7:ec:22:04:fb:36:85:1a:ff:9d:b4:80:db:12:1a: ad:50:20:89:39:c0:b3:d8:3d:91:b3:37:e3:0e:1a: 3b:99:d4:35:e4:da:eb:f3:32:10:ce:11:8c:d2:64: 65:25:ac:71:fd:a3:ee:0b:21:6c:75:79:7c:9d:f5: 66:cd:a8:f6:95:42:05:0b:9b:23:07:92:17:83:89: 1f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4C:D3:11:87:A1:D0:1E:3C:0E:87:26:DF:FE:2E:85:15:C5:33:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02cb14bc-bb8b-31c4-a3f7-00015302fc58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:00:e0:d8:98:fa:46:b1:8f:f5:4e:2c:1b:3e:bb:b0:29:19: 68:01:50:64:d5:cf:cc:17:2f:74:d6:fb:57:97:37:0d:d9:cf: 61:29:23:c6:c7:83:ed:bc:3d:7b:b4:c8:bf:2e:6a:3f:41:f6: 74:ce:70:54:15:47:24:46:b8:2b:6e:16:56:34:32:c1:fb:ce: d3:80:0b:98:c9:46:cf:8e:c9:65:d7:e7:61:af:31:d0:92:55: 48:80:b5:e6:9f:f3:0d:d9:ad:00:99:00:fa:39:df:36:34:96: f9:d7:a3:41:f8:db:5a:50:8f:0a:b9:62:e5:29:ff:23:1b:d9: 1c:7c:d1:4e:52:1b:be:b3:d5:36:57:73:7c:53:42:0b:22:d5: 6c:22:5a:42:71:b6:03:73:a7:38:81:d3:79:7a:e1:cb:20:4b: 27:bf:2c:3c:5e:54:f9:a4:67:31:25:77:58:e2:8f:db:4c:1c: e6:26:47:94:0c:f3:1e:b9:33:bc:7c:d5:0c:39:05:6b:5a:f7: 28:f0:76:6c:dd:a7:9b:7f:8f:23:6d:80:14:31:3d:b6:47:d3: 46:33:13:21:a9:31:7c:4b:28:df:e2:b6:9f:ed:2b:aa:4b:46: 11:c4:f2:ce:59:4c:bc:67:8f:03:47:1c:5c:02:98:86:fc:55: f8:e0:3d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G7hDOspLFaiDn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MTE5NGEzNjUtNGE2MS00MGEwLWE1ZjYtMGE5YTdmOTg4OThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArur7FWEYx+30YWBI69QjyKM0qxs6YwIe0vtt 77Rv9RcP7sb4Z3ZhUXeBbLdVldftF7ks1OlGAAI+f7uT3IpT398AlDzY/sroMPgd +42a7PPlE+v/N+76dqWhUatuDqjQ5Hx9XW0CtK7AhKEGf4ruwD8hZpi5JZZZDwWT hV4dznM6ljjUEy9iPluZeaDDAgxypsJg8y2Jcl7DlQB3Q8EkNyczUSDNr+/3GBqJ GQxvZ1mvqLXH7CIE+zaFGv+dtIDbEhqtUCCJOcCz2D2RszfjDho7mdQ15Nrr8zIQ zhGM0mRlJaxx/aPuCyFsdXl8nfVmzaj2lUIFC5sjB5IXg4kfUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdM0xGHodAePA6HJt/+LoUVxTMVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDJjYjE0YmMtYmI4Yi0z MWM0LWEzZjctMDAwMTUzMDJmYzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOA6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwA4NiY+kaxj/VOLBs+u7ApGWgBUGTVz8wXL3TW+1eXNw3Zz2EpI8bH g+28PXu0yL8uaj9B9nTOcFQVRyRGuCtuFlY0MsH7ztOAC5jJRs+OyWXX52GvMdCS VUiAteaf8w3ZrQCZAPo53zY0lvnXo0H421pQjwq5YuUp/yMb2Rx80U5SG76z1TZX c3xTQgsi1WwiWkJxtgNzpziB03l64csgSye/LDxeVPmkZzEld1jij9tMHOYmR5QM 8x65M7x81Qw5BWta9yjwdmzdp5t/jyNtgBQxPbZH00YzEyGpMXxLKN/itp/tK6pL RhHE8s5ZTLxnjwNHHFwCmIb8VfjgPeI= -----END CERTIFICATE-----Generated at Tue Aug 5 17:16:16 2025 by rpki-client