$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16987aa2-d008-3aa1-808f-cfde9c5ff8d8.roa File: 16987aa2-d008-3aa1-808f-cfde9c5ff8d8.roa (raw, json) Hash identifier: BIMPYrYahCOHXqUCU+TCHFGSMiKn2ODK+NNaV/T5c5w= Subject key identifier: 44:3F:81:18:77:C9:D5:CF:74:39:11:10:C3:BE:ED:1E:5D:A0:2E:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB650FAB9A80B9272EF241440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16987aa2-d008-3aa1-808f-cfde9c5ff8d8.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 36183 IP address blocks: 172.224.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:fa:b9:a8:0b:92:72:ef:24:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=86f38b49-1d18-495f-af15-1de21fda4b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:45:2c:83:ac:43:a0:9a:f7:73:37:13:e2:f9: 0f:af:ae:11:81:39:9b:c9:d0:f7:e6:1f:16:0e:cd: 19:76:d0:4b:53:a7:64:5c:ff:fe:22:18:77:ee:e4: bb:d4:ab:dd:a2:03:04:af:04:18:99:fb:47:21:de: b5:a3:75:bd:77:54:78:b8:27:75:d4:5c:f6:5d:dc: ed:9f:87:27:0c:02:33:1c:eb:5f:76:b5:b1:b8:d9: e0:8e:4e:88:7e:45:4b:ef:25:37:e2:fa:4d:f9:f0: ab:68:94:51:c0:92:8e:96:d0:83:5c:e3:20:30:b7: 73:5e:d1:6e:4f:b1:4c:8e:94:9e:45:1b:ce:9d:dc: 1e:1c:f1:15:28:8e:87:1b:cf:c3:01:92:4c:e9:03: b8:33:f4:e2:df:76:ec:39:fc:41:06:c5:f7:82:40: 53:82:73:72:da:c3:48:d1:5c:4f:78:47:6f:39:dd: 9a:3f:e0:94:59:57:7d:74:74:bd:21:61:e7:23:a0: 0f:22:02:aa:54:45:ca:43:fa:56:45:a6:91:c5:b4: 23:8f:ab:10:c4:db:57:9b:34:4b:2a:30:d9:e1:0f: 3a:e9:49:47:39:7a:43:dc:64:4f:b3:2d:78:b0:04: cb:b0:05:56:d6:4a:26:ea:be:68:86:eb:62:c3:9f: 86:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3F:81:18:77:C9:D5:CF:74:39:11:10:C3:BE:ED:1E:5D:A0:2E:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16987aa2-d008-3aa1-808f-cfde9c5ff8d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:80:83:4c:d2:05:71:34:dc:0d:0a:e4:11:6f:47:13:13:56: 4b:f6:09:e0:b6:90:32:9f:c8:fd:fb:b7:fa:05:3e:92:78:04: d1:90:d0:56:03:79:49:ca:bd:c1:41:b6:c0:e5:5d:a1:b9:db: 5e:ee:37:85:04:3a:81:c6:9e:82:fc:b5:cb:d4:46:b9:08:84: da:48:cf:f1:60:5a:a1:3a:9d:30:94:e6:89:5b:72:3a:5e:62: cf:cd:e2:66:20:22:3d:aa:5a:11:ef:fe:e7:ce:3b:d3:6f:18: 77:13:6b:35:3e:6e:73:3e:73:02:bd:d8:32:2a:ab:fd:7c:67: 2a:f5:ac:51:9c:7f:da:3a:58:18:2e:46:8f:65:d9:d4:9e:48: 7d:c5:66:06:05:de:a1:36:f6:4b:fe:57:b9:82:2d:c9:f2:ee: 00:d0:db:bb:33:86:20:1c:2b:cd:63:86:75:29:4c:3c:1d:05: b2:27:a7:8b:49:37:e5:60:74:a7:64:74:b8:6a:99:1d:69:f0: 6b:a8:c0:18:a0:34:3c:18:42:b2:f7:3a:3b:82:c5:85:7a:f7: b4:79:02:35:da:83:0b:fc:cc:d6:84:47:79:02:ba:a8:b4:8e: 25:b8:23:c9:08:c5:21:4c:09:a7:48:b4:93:9b:f3:1c:f3:64: d6:39:75:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPq5qAuScu8kFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ODZmMzhiNDktMWQxOC00OTVmLWFmMTUtMWRlMjFmZGE0YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEUsg6xDoJr3czcT4vkPr64RgTmbydD35h8W Ds0ZdtBLU6dkXP/+Ihh37uS71KvdogMErwQYmftHId61o3W9d1R4uCd11Fz2Xdzt n4cnDAIzHOtfdrWxuNngjk6IfkVL7yU34vpN+fCraJRRwJKOltCDXOMgMLdzXtFu T7FMjpSeRRvOndweHPEVKI6HG8/DAZJM6QO4M/Ti33bsOfxBBsX3gkBTgnNy2sNI 0VxPeEdvOd2aP+CUWVd9dHS9IWHnI6APIgKqVEXKQ/pWRaaRxbQjj6sQxNtXmzRL KjDZ4Q866UlHOXpD3GRPsy14sATLsAVW1kom6r5ohutiw5+GdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ/gRh3ydXPdDkREMO+7R5doC77MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTY5ODdhYTItZDAwOC0z YWExLTgwOGYtY2ZkZTljNWZmOGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuAg0zSBXE03A0K5BFvRxMTVkv2CeC2kDKfyP37t/oFPpJ4BNGQ0FYD eUnKvcFBtsDlXaG5217uN4UEOoHGnoL8tcvURrkIhNpIz/FgWqE6nTCU5olbcjpe Ys/N4mYgIj2qWhHv/ufOO9NvGHcTazU+bnM+cwK92DIqq/18Zyr1rFGcf9o6WBgu Ro9l2dSeSH3FZgYF3qE29kv+V7mCLcny7gDQ27szhiAcK81jhnUpTDwdBbInp4tJ N+VgdKdkdLhqmR1p8GuowBigNDwYQrL3OjuCxYV697R5AjXagwv8zNaER3kCuqi0 jiW4I8kIxSFMCadItJOb8xzzZNY5dXM= -----END CERTIFICATE-----Generated at Mon Aug 4 18:35:24 2025 by rpki-client