$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21121190-c709-304d-9477-0e0a0ca38ccc.roa File: 21121190-c709-304d-9477-0e0a0ca38ccc.roa (raw, json) Hash identifier: 91ilcsjuzSMf2RtXiNpH+g4QXVRgYsbq2yjcf4iksaA= Subject key identifier: C5:70:80:D1:A4:B0:8F:C6:DC:9B:AE:04:6D:74:8A:A9:B3:BC:22:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9FFBB8B7D9D7AB2369E1E380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21121190-c709-304d-9477-0e0a0ca38ccc.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 36183 IP address blocks: 172.225.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b8:b7:d9:d7:ab:23:69:e1:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=ecf5a45d-6a33-4f6e-88dd-b2aa72bced14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:62:af:a3:4c:38:6c:e7:93:84:ab:35:73:9f: 32:e2:88:41:e4:ba:57:a8:4e:74:ff:ca:88:6a:73: 09:f7:5d:42:b4:b6:6f:8b:8c:6e:84:a7:87:e7:3e: f1:3a:44:55:0b:df:66:27:be:6d:80:e0:33:b5:7f: f2:ac:0e:f0:35:e4:b2:7a:0b:a9:8c:ab:3f:36:80: 03:84:96:9c:1e:c3:71:f3:1f:8e:db:92:fb:15:d5: 9d:9f:7f:d3:97:f0:26:bf:fa:23:cb:70:e8:b5:f4: 2f:95:70:d2:a2:38:ff:2d:4b:d3:f5:ba:a1:4d:6f: 83:85:8f:27:fc:39:82:80:94:76:7d:45:8c:7f:53: ad:24:f5:d6:df:87:bd:34:5a:e1:32:05:95:10:80: 65:4f:47:62:ec:1b:40:5f:57:66:1a:5a:f6:2f:11: 18:ad:f5:58:93:35:e5:51:79:7f:2a:a5:68:75:8f: f7:38:84:ed:da:98:53:ae:fd:a6:47:35:78:65:01: cf:5f:d4:65:7d:53:f1:a5:7a:77:26:38:fa:cc:cf: d1:9b:8a:30:4e:a7:27:de:6a:be:a2:b4:c0:0f:9d: 4e:5e:1a:bf:ae:cd:b2:ed:fc:0d:f8:44:9d:c4:11: 76:c2:08:3d:63:d5:7e:4d:e5:35:af:42:f8:b1:0e: 14:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:70:80:D1:A4:B0:8F:C6:DC:9B:AE:04:6D:74:8A:A9:B3:BC:22:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21121190-c709-304d-9477-0e0a0ca38ccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b6:9a:cf:ef:72:6b:41:b7:a6:37:5d:73:1e:5b:de:77:42: 57:33:39:2c:2f:b8:85:02:bc:82:b1:4d:0d:49:fd:4c:e3:6f: 14:66:a0:f7:fb:6c:b1:a1:35:e8:a9:4a:b9:0a:91:a5:ef:d9: 7b:14:87:fb:8b:b0:dd:ca:b0:36:c3:5b:e7:16:63:da:84:f7: db:76:00:53:65:92:f4:54:3d:35:02:26:10:47:39:ca:74:13: 93:ec:0d:e9:5a:0e:fd:1f:37:11:9e:5e:38:04:0d:be:51:da: 25:5e:40:df:bc:a1:68:5d:e9:4b:60:51:94:bc:24:33:17:2b: 93:34:e1:d0:ce:69:d8:c0:13:3b:ac:05:74:3b:4a:86:81:8f: c8:a7:26:70:f5:c0:9d:fd:5b:1d:bc:67:bf:39:cd:be:d6:75: 09:10:9f:9f:0e:ee:04:06:ac:df:d4:e0:21:7b:38:8e:33:11: 5d:21:b3:67:aa:72:1f:39:f2:b5:9f:ec:c4:26:02:ae:d5:c2: 14:6d:7b:39:7d:33:3a:b4:ed:c4:0e:e4:1e:89:ca:b7:0d:42: ac:ae:63:00:66:0e:c9:03:86:c1:d3:96:bc:3a:c8:b0:0a:77: 22:89:96:fd:c4:8a:0e:97:1a:5f:bb:fa:02:0a:ae:71:75:0f: 32:14:2f:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+7i32derI2nh44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZWNmNWE0NWQtNmEzMy00ZjZlLTg4ZGQtYjJhYTcyYmNlZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGKvo0w4bOeThKs1c58y4ohB5LpXqE50/8qI anMJ911CtLZvi4xuhKeH5z7xOkRVC99mJ75tgOAztX/yrA7wNeSyegupjKs/NoAD hJacHsNx8x+O25L7FdWdn3/Tl/Amv/ojy3DotfQvlXDSojj/LUvT9bqhTW+DhY8n /DmCgJR2fUWMf1OtJPXW34e9NFrhMgWVEIBlT0di7BtAX1dmGlr2LxEYrfVYkzXl UXl/KqVodY/3OITt2phTrv2mRzV4ZQHPX9RlfVPxpXp3Jjj6zM/Rm4owTqcn3mq+ orTAD51OXhq/rs2y7fwN+ESdxBF2wgg9Y9V+TeU1r0L4sQ4UpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVwgNGksI/G3JuuBG10iqmzvCK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjExMjExOTAtYzcwOS0z MDRkLTk0NzctMGUwYTBjYTM4Y2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC2ms/vcmtBt6Y3XXMeW953QlczOSwvuIUCvIKxTQ1J/UzjbxRmoPf7 bLGhNeipSrkKkaXv2XsUh/uLsN3KsDbDW+cWY9qE99t2AFNlkvRUPTUCJhBHOcp0 E5PsDelaDv0fNxGeXjgEDb5R2iVeQN+8oWhd6UtgUZS8JDMXK5M04dDOadjAEzus BXQ7SoaBj8inJnD1wJ39Wx28Z785zb7WdQkQn58O7gQGrN/U4CF7OI4zEV0hs2eq ch858rWf7MQmAq7VwhRtezl9Mzq07cQO5B6JyrcNQqyuYwBmDskDhsHTlrw6yLAK dyKJlv3Eig6XGl+7+gIKrnF1DzIUL3w= -----END CERTIFICATE-----Generated at Wed Aug 6 09:40:03 2025 by rpki-client