$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/123b7ba5-4a32-3ce6-9b49-0f3055e17fa4.roa File: 123b7ba5-4a32-3ce6-9b49-0f3055e17fa4.roa (raw, json) Hash identifier: RG/0Wsv46+vRbLcSBfI6bRGGyhGTDAQaMdgA2ZgdRlU= Subject key identifier: 08:78:03:0E:75:16:C7:20:51:0D:47:82:97:DB:25:A8:07:2C:EC:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AADF12835484E42754EF308A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/123b7ba5-4a32-3ce6-9b49-0f3055e17fa4.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 36183 IP address blocks: 172.225.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:28:35:48:4e:42:75:4e:f3:08:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=17374773-8a27-49e1-b45b-91bc04d385c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a3:8c:d0:70:38:cb:b2:34:d5:7d:ba:29:d3: 88:c3:f6:53:5a:00:81:1c:e5:8d:64:f1:38:bc:04: 2d:13:5a:cb:88:46:eb:58:b0:b6:c3:9c:ed:02:6e: 7d:c6:05:83:8c:8a:4a:28:71:39:fd:cb:34:cc:c3: 1f:a6:95:ef:13:70:b4:45:36:2e:c7:7a:ce:8b:cd: 4d:6e:eb:c6:72:5e:2b:67:9d:2f:d0:7a:c8:10:b4: 24:74:d7:bb:1f:6d:a0:0e:2d:cb:48:23:6f:40:20: 11:0d:01:61:dc:1b:c5:64:29:58:4c:b9:c4:d9:c4: 27:89:74:7f:db:57:59:92:a5:3b:a6:ae:b1:95:91: 7d:12:21:b5:3b:92:4c:c6:7a:40:c5:77:c3:bf:3a: 19:ef:47:bc:2e:c9:9a:36:9c:1c:fd:7a:7e:0c:44: 4e:a8:a9:bc:b5:81:73:90:f8:70:cb:ba:73:25:0b: 77:16:cf:32:8b:e5:72:3a:77:cc:30:0b:63:99:39: 9a:bc:21:ef:93:8a:99:cf:ab:1c:1f:0d:f6:3a:cc: 6e:56:66:a6:40:1d:4b:5d:63:31:4e:a1:c5:b3:61: 34:aa:f0:b4:cc:3c:5d:2d:83:52:45:f8:60:3f:fc: 45:59:7f:ff:20:4e:fd:4c:c1:d9:e3:3b:5d:24:32: 0a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:78:03:0E:75:16:C7:20:51:0D:47:82:97:DB:25:A8:07:2C:EC:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/123b7ba5-4a32-3ce6-9b49-0f3055e17fa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2f:11:bb:cd:c8:f9:3b:b4:49:0e:57:10:bb:fa:f3:fc:39: 3b:7c:f4:73:99:9f:e9:a5:92:30:0b:c3:bc:c0:f0:1b:2b:56: cf:8d:f5:d2:ac:3d:15:49:9b:59:88:5a:d5:e1:ca:1b:c1:09: 5b:83:e7:f6:89:8c:59:47:4f:0d:42:e3:ea:17:04:8b:a5:22: e6:f8:dc:5c:9d:c3:7d:fb:e8:9c:54:84:cd:ef:53:00:15:ed: 31:29:d7:bc:2f:39:b6:6b:ca:81:80:a0:ac:c3:cf:1b:26:8e: a7:ea:f5:f4:ad:42:d1:82:72:33:98:f1:a5:b9:9b:ab:6c:e8: 52:14:60:ac:b7:c4:c6:6f:9c:26:33:21:2c:31:e8:45:ba:70: 01:38:20:4b:f5:8c:7d:19:36:48:72:40:60:f1:2b:ef:65:d3: d8:a8:66:12:ab:2f:d9:68:1b:a5:92:d0:59:eb:3f:dd:f9:c5: 3a:77:bd:84:af:94:fe:87:3a:c3:d6:7a:82:24:c3:3e:c9:e6: ea:8a:b2:53:93:3d:b6:c7:5e:d2:1e:0f:22:f2:1f:c6:f1:ea: 04:f7:2e:df:be:eb:83:da:5f:d1:c2:a1:2c:ca:30:c7:4e:b2: b3:35:c6:24:3f:6d:00:64:c5:9d:f3:5a:04:49:13:5b:0c:67: bd:db:9c:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8Sg1SE5CdU7zCKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MTczNzQ3NzMtOGEyNy00OWUxLWI0NWItOTFiYzA0ZDM4NWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqOM0HA4y7I01X26KdOIw/ZTWgCBHOWNZPE4 vAQtE1rLiEbrWLC2w5ztAm59xgWDjIpKKHE5/cs0zMMfppXvE3C0RTYux3rOi81N buvGcl4rZ50v0HrIELQkdNe7H22gDi3LSCNvQCARDQFh3BvFZClYTLnE2cQniXR/ 21dZkqU7pq6xlZF9EiG1O5JMxnpAxXfDvzoZ70e8LsmaNpwc/Xp+DEROqKm8tYFz kPhwy7pzJQt3Fs8yi+VyOnfMMAtjmTmavCHvk4qZz6scHw32OsxuVmamQB1LXWMx TqHFs2E0qvC0zDxdLYNSRfhgP/xFWX//IE79TMHZ4ztdJDIKtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAh4Aw51FscgUQ1HgpfbJagHLOxCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTIzYjdiYTUtNGEzMi0z Y2U2LTliNDktMGYzMDU1ZTE3ZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMvEbvNyPk7tEkOVxC7+vP8OTt89HOZn+mlkjALw7zA8BsrVs+N9dKs PRVJm1mIWtXhyhvBCVuD5/aJjFlHTw1C4+oXBIulIub43Fydw3376JxUhM3vUwAV 7TEp17wvObZryoGAoKzDzxsmjqfq9fStQtGCcjOY8aW5m6ts6FIUYKy3xMZvnCYz ISwx6EW6cAE4IEv1jH0ZNkhyQGDxK+9l09ioZhKrL9loG6WS0FnrP935xTp3vYSv lP6HOsPWeoIkwz7J5uqKslOTPbbHXtIeDyLyH8bx6gT3Lt++64PaX9HCoSzKMMdO srM1xiQ/bQBkxZ3zWgRJE1sMZ73bnHo= -----END CERTIFICATE-----Generated at Mon Aug 4 19:16:34 2025 by rpki-client