$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e198289-5cdd-3988-86d8-4d728ce1ffb6.roa File: 1e198289-5cdd-3988-86d8-4d728ce1ffb6.roa (raw, json) Hash identifier: eo6x8A9XKgSkuakuSitdzqEUoq0DKLOqXvoWXXeePMg= Subject key identifier: 60:69:28:54:40:10:54:A7:77:1C:48:B8:BF:2D:FE:2E:64:CC:17:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9D30F54F0A0E0D2DE42B3638 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e198289-5cdd-3988-86d8-4d728ce1ffb6.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 36183 IP address blocks: 172.225.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f5:4f:0a:0e:0d:2d:e4:2b:36:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=912bb41e-b76f-4412-a538-7cd316277dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b8:e2:55:49:f4:6b:57:d2:98:2f:cf:26:ee: 2f:60:e1:c3:61:0a:74:93:cf:c8:0f:a5:06:34:96: 78:74:82:88:22:b4:43:1e:3f:de:43:f7:c7:5e:0c: b7:e9:fe:da:64:b1:85:9d:d4:a7:2c:30:08:24:f5: 9c:b4:93:82:ee:81:51:c0:f4:bd:c3:72:b2:0d:69: fd:75:1f:3c:c5:ae:7a:cc:2b:57:dd:09:d6:df:18: d1:43:3c:27:c8:45:2c:3c:78:4f:ed:73:41:2e:96: dc:32:5d:09:ee:1d:96:7f:c7:29:08:c4:c0:24:6f: 9f:78:bf:72:93:f5:74:0c:42:7a:1d:e1:26:cf:96: 78:20:58:ec:d3:fc:d8:53:7c:1a:e6:ea:5b:34:e4: f1:e9:09:24:a1:69:f9:03:d1:26:66:cb:d7:63:16: 9f:42:1b:54:9d:cf:5e:ec:d1:79:98:c7:d4:b4:88: 01:3a:d3:bc:8a:79:4a:c9:bd:20:9d:4d:be:e5:9e: 10:89:82:96:80:4e:62:47:e6:28:99:e2:39:b6:4e: a9:2d:46:3f:f1:79:61:e0:0e:62:15:af:be:8f:6e: ae:23:12:68:a7:9f:ae:0e:de:da:62:d2:63:4c:20: 66:b9:b9:b6:fb:9c:33:55:45:bd:bd:6b:de:f0:58: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:69:28:54:40:10:54:A7:77:1C:48:B8:BF:2D:FE:2E:64:CC:17:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e198289-5cdd-3988-86d8-4d728ce1ffb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:35:dc:aa:21:34:d5:31:8a:55:33:25:cb:4f:e6:29:d9:48: 36:84:15:01:f1:5d:9d:8c:38:df:d0:41:32:32:7b:8f:d3:c4: ca:0a:15:84:be:cb:8c:09:13:2f:bb:91:03:9d:61:17:00:22: 47:3d:83:6a:1c:4e:9b:21:96:2d:eb:e6:dd:4a:82:82:fd:69: 21:e6:41:e8:ee:b0:ec:1d:6a:bf:22:72:00:27:cc:71:8b:f1: 37:fe:bf:97:ae:8a:42:cf:09:73:3c:6f:35:68:8c:2d:7e:3a: e3:92:f3:b3:56:e7:e0:77:37:79:91:08:cc:a4:fa:af:61:15: 02:2f:81:6c:3c:4d:0e:b9:4d:0a:40:cd:5a:23:b0:a4:25:1f: 9e:21:bd:6f:5e:56:e4:90:81:0f:9a:38:f4:92:32:31:63:c4: e4:9d:70:21:ff:71:db:68:0c:bd:55:18:04:77:fb:e3:ed:01: b1:36:ae:81:6a:b2:81:f9:c7:8b:e4:ec:a6:b8:79:3d:16:71: 93:9d:96:0e:19:28:6a:94:3f:d6:3f:8a:12:c5:51:be:a4:e5: 60:e4:0c:63:e3:ff:d2:63:72:3e:3c:30:db:9f:71:cf:e6:87: 8a:c9:21:39:32:7d:1a:a2:f6:6a:dd:65:71:cd:57:0d:53:3a: 0e:11:36:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPVPCg4NLeQrNjgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk OTEyYmI0MWUtYjc2Zi00NDEyLWE1MzgtN2NkMzE2Mjc3ZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibjiVUn0a1fSmC/PJu4vYOHDYQp0k8/ID6UG NJZ4dIKIIrRDHj/eQ/fHXgy36f7aZLGFndSnLDAIJPWctJOC7oFRwPS9w3KyDWn9 dR88xa56zCtX3QnW3xjRQzwnyEUsPHhP7XNBLpbcMl0J7h2Wf8cpCMTAJG+feL9y k/V0DEJ6HeEmz5Z4IFjs0/zYU3wa5upbNOTx6QkkoWn5A9EmZsvXYxafQhtUnc9e 7NF5mMfUtIgBOtO8inlKyb0gnU2+5Z4QiYKWgE5iR+YomeI5tk6pLUY/8Xlh4A5i Fa++j26uIxJop5+uDt7aYtJjTCBmubm2+5wzVUW9vWve8FjR4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBpKFRAEFSndxxIuL8t/i5kzBeVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWUxOTgyODktNWNkZC0z OTg4LTg2ZDgtNGQ3MjhjZTFmZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEo13KohNNUxilUzJctP5inZSDaEFQHxXZ2MON/QQTIye4/TxMoKFYS+ y4wJEy+7kQOdYRcAIkc9g2ocTpshli3r5t1KgoL9aSHmQejusOwdar8icgAnzHGL 8Tf+v5euikLPCXM8bzVojC1+OuOS87NW5+B3N3mRCMyk+q9hFQIvgWw8TQ65TQpA zVojsKQlH54hvW9eVuSQgQ+aOPSSMjFjxOSdcCH/cdtoDL1VGAR3++PtAbE2roFq soH5x4vk7Ka4eT0WcZOdlg4ZKGqUP9Y/ihLFUb6k5WDkDGPj/9Jjcj48MNufcc/m h4rJITkyfRqi9mrdZXHNVw1TOg4RNsQ= -----END CERTIFICATE-----Generated at Tue Aug 5 17:25:30 2025 by rpki-client