$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ff5191e-1296-30f7-bc89-5306a21b3264.roa File: 1ff5191e-1296-30f7-bc89-5306a21b3264.roa (raw, json) Hash identifier: XW8JlbKwbSynCU1dGPW+J0/DzREZT2rr9+z6Ok9y1Ec= Subject key identifier: 09:86:88:85:8A:51:ED:3F:45:D6:34:13:28:0D:8F:99:41:0A:17:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AADF1362ADBDE7506BD937F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ff5191e-1296-30f7-bc89-5306a21b3264.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 36183 IP address blocks: 172.226.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:36:2a:db:de:75:06:bd:93:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=0a1bde4f-4515-4fe4-8366-2e99bec52cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0f:c5:a2:dd:17:73:ee:9e:2b:0e:ed:cf:3f: d2:25:ce:61:77:ef:22:b5:7d:b7:f2:db:7b:32:ea: 96:07:e8:9a:f4:04:a9:78:3b:70:65:59:b3:4e:b8: 70:a3:6f:ae:2b:d8:44:a8:70:46:03:2e:3d:9f:3d: 4f:fa:90:d4:47:08:60:22:6a:8d:f1:c6:5e:41:6f: af:38:cb:50:ca:a5:d1:44:97:1a:99:df:59:13:4f: d4:93:41:45:49:8b:75:09:d1:ae:d6:68:42:77:d1: eb:6e:77:c1:3d:40:2b:e6:dc:49:92:0b:40:24:e6: 15:cb:b3:b0:8a:67:26:d4:b3:de:36:a2:9f:a3:aa: 8d:8e:d1:36:a6:25:7c:a3:ba:ce:e6:27:bb:59:58: b2:68:4a:25:c1:e4:4e:fd:c8:83:24:5c:2c:c7:37: e7:4d:08:81:d7:84:d4:7d:6b:00:40:39:8f:a7:7b: 2a:d5:c4:9f:d3:39:77:d2:0e:56:a2:b4:32:08:7c: dc:de:bc:66:61:8e:d9:07:fd:e8:d7:71:a9:35:ff: 47:ad:53:ae:95:3e:d6:e6:b7:5d:42:5c:63:4c:fe: eb:fb:83:bc:b0:7f:f1:92:05:e7:01:3d:a7:ff:be: 2a:c2:c0:16:2b:fb:44:f9:ee:3f:94:43:8a:50:a6: ad:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:86:88:85:8A:51:ED:3F:45:D6:34:13:28:0D:8F:99:41:0A:17:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ff5191e-1296-30f7-bc89-5306a21b3264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:6f:19:4b:3b:95:bc:24:96:d4:0d:bb:c2:da:b9:99:da:0f: ee:e1:69:f8:bc:68:a8:13:dc:b1:d1:e0:c7:90:6c:4d:e4:f2: 42:cc:b8:8b:92:2a:52:f3:f4:b9:00:cd:56:c4:0f:57:ab:ba: ff:ea:81:d5:3b:20:7f:45:62:be:e2:03:67:d6:af:af:8d:9a: ac:b9:58:4a:e8:0d:1c:0b:d2:a0:ab:cf:93:cf:ed:d8:8c:b8: a7:06:6c:f0:73:91:fe:6b:e2:76:c9:f2:ab:2b:37:a3:32:73: dd:4d:98:96:af:07:48:d5:d7:8c:15:a2:89:a9:e3:e7:66:fd: c7:39:71:85:27:b6:3d:a7:dc:a9:9d:0b:17:52:fd:95:4d:c9: ce:0c:70:2f:d5:db:d3:b0:78:2c:d7:2c:7e:81:e2:59:74:7c: 96:cd:80:d6:51:ae:bf:d5:ed:7f:41:85:f3:2d:48:0d:f4:5d: 77:72:d4:32:8a:11:12:dd:e7:dc:48:b4:4d:ee:68:11:57:00: 30:91:aa:67:51:91:8f:03:a0:af:cb:c7:ea:eb:4d:f6:95:4b: dd:c5:30:28:f5:47:9e:13:17:7a:03:f9:78:93:59:6b:83:d0: a1:43:9e:eb:45:d3:22:34:aa:85:7b:16:b9:23:b0:f7:98:37: ef:92:1d:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8TYq2951Br2TfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MGExYmRlNGYtNDUxNS00ZmU0LTgzNjYtMmU5OWJlYzUyY2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg/Fot0Xc+6eKw7tzz/SJc5hd+8itX238tt7 MuqWB+ia9ASpeDtwZVmzTrhwo2+uK9hEqHBGAy49nz1P+pDURwhgImqN8cZeQW+v OMtQyqXRRJcamd9ZE0/Uk0FFSYt1CdGu1mhCd9HrbnfBPUAr5txJkgtAJOYVy7Ow imcm1LPeNqKfo6qNjtE2piV8o7rO5ie7WViyaEolweRO/ciDJFwsxzfnTQiB14TU fWsAQDmPp3sq1cSf0zl30g5WorQyCHzc3rxmYY7ZB/3o13GpNf9HrVOulT7W5rdd QlxjTP7r+4O8sH/xkgXnAT2n/74qwsAWK/tE+e4/lEOKUKatzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmGiIWKUe0/RdY0EygNj5lBChc8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWZmNTE5MWUtMTI5Ni0z MGY3LWJjODktNTMwNmEyMWIzMjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5vGUs7lbwkltQNu8LauZnaD+7hafi8aKgT3LHR4MeQbE3k8kLMuIuS KlLz9LkAzVbED1eruv/qgdU7IH9FYr7iA2fWr6+Nmqy5WEroDRwL0qCrz5PP7diM uKcGbPBzkf5r4nbJ8qsrN6Myc91NmJavB0jV14wVoomp4+dm/cc5cYUntj2n3Kmd CxdS/ZVNyc4McC/V29OweCzXLH6B4ll0fJbNgNZRrr/V7X9BhfMtSA30XXdy1DKK ERLd59xItE3uaBFXADCRqmdRkY8DoK/Lx+rrTfaVS93FMCj1R54TF3oD+XiTWWuD 0KFDnutF0yI0qoV7FrkjsPeYN++SHUU= -----END CERTIFICATE-----Generated at Wed Aug 6 10:16:21 2025 by rpki-client