$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21b2e951-d6b0-34ba-bed0-f11e7c63dc5e.roa File: 21b2e951-d6b0-34ba-bed0-f11e7c63dc5e.roa (raw, json) Hash identifier: A093jPJqsIOl0HXfO2YWn0ZWSe3OIGTdxR6UbmEtMOs= Subject key identifier: 5E:01:AA:AC:48:C9:51:B5:17:2F:4E:D6:57:BC:7C:20:48:F2:A0:F4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AADF12C214580A385D119A240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21b2e951-d6b0-34ba-bed0-f11e7c63dc5e.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 36183 IP address blocks: 172.226.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:2c:21:45:80:a3:85:d1:19:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=c87ba4b2-bba8-43eb-8183-319f4b081638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:70:6c:3b:4e:07:cf:1a:c1:14:f5:05:3a: d7:90:59:d1:60:b6:22:0c:03:a9:bd:ed:83:ad:73: 99:89:ee:36:e9:1d:bc:e0:3a:0c:51:4d:42:26:ec: b5:be:47:ae:ad:be:29:4d:84:c2:ef:9e:7e:6b:a5: 5c:b7:7d:e2:11:6d:ee:69:36:b8:ec:47:be:88:1c: 8d:6b:bc:59:fd:3c:69:b0:75:3b:54:cb:d4:4a:93: d4:35:8b:e3:11:f6:49:e6:e7:b9:74:cb:ad:61:c8: c3:e8:07:18:74:bb:45:79:59:c2:3c:08:31:91:b3: 55:a6:9a:c9:33:ef:d4:7b:f3:2e:22:7a:1b:6a:8d: b8:e2:ea:7f:ac:75:5c:ed:ca:ef:5e:db:6d:b6:84: ae:3a:3e:72:d7:49:1c:b7:6d:ca:8e:2f:d2:69:98: d5:d8:9a:fe:dc:ff:0b:a9:53:83:9b:06:7c:9f:3e: 8f:d5:e8:c4:6c:00:01:f1:d0:1a:34:6c:7f:9a:f7: 92:d4:23:9d:58:e7:4e:55:d9:b2:c4:6a:54:a8:f9: b8:23:7c:9a:40:a4:3d:f8:f6:bd:ed:4f:85:a0:3d: 19:ad:0a:59:dc:ac:44:14:b3:61:41:36:1f:d5:92: d9:f0:85:bb:3d:a5:75:5c:45:bb:ca:4e:e2:8a:cf: 06:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:01:AA:AC:48:C9:51:B5:17:2F:4E:D6:57:BC:7C:20:48:F2:A0:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21b2e951-d6b0-34ba-bed0-f11e7c63dc5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:22:2c:0d:a3:6b:64:42:81:e9:95:0b:8b:80:62:9e:75:21: 52:7c:d0:7a:cc:bf:8a:fe:60:f6:70:86:d0:9f:75:fd:ef:c0: 23:de:c3:07:16:ad:1d:43:f3:22:55:79:53:e6:f1:53:d0:7c: ed:e4:c1:71:09:cb:57:c2:bd:15:d9:f9:a3:44:82:69:99:4d: 23:1e:93:e5:d3:1a:81:41:de:3c:a4:84:11:92:b2:bf:40:fc: be:93:b8:c9:d7:c3:e0:7b:68:38:4c:3a:ad:f3:7a:b6:6e:ba: 48:fa:14:30:98:ad:3f:1e:b8:40:3c:59:27:5c:93:ca:aa:ec: 57:b4:7a:ce:db:9b:52:5e:47:40:91:bf:e5:63:3f:89:54:91: 34:8c:69:0d:ee:0c:9b:3a:ec:b5:0c:c6:8f:9f:ac:e4:2f:ee: 86:0d:49:12:11:f9:48:72:19:56:d5:db:8f:05:e7:83:40:29: 75:d1:6e:bc:7c:4e:11:05:39:70:d4:18:a0:48:b0:f6:97:cf: 57:d6:8c:66:fb:e4:5a:3b:69:9c:e6:b7:e7:e3:dc:10:ca:14: 59:d5:71:1e:1e:57:d9:c4:92:80:72:3a:0b:0e:e0:39:54:f5: eb:90:f6:76:65:db:d9:14:a9:5c:f9:00:a8:6b:f8:40:8f:dc: 44:0a:ca:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8SwhRYCjhdEZokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk Yzg3YmE0YjItYmJhOC00M2ViLTgxODMtMzE5ZjRiMDgxNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+lwbDtOB88awRT1BTrXkFnRYLYiDAOpve2D rXOZie426R284DoMUU1CJuy1vkeurb4pTYTC755+a6Vct33iEW3uaTa47Ee+iByN a7xZ/TxpsHU7VMvUSpPUNYvjEfZJ5ue5dMutYcjD6AcYdLtFeVnCPAgxkbNVpprJ M+/Ue/MuInobao244up/rHVc7crvXttttoSuOj5y10kct23Kji/SaZjV2Jr+3P8L qVODmwZ8nz6P1ejEbAAB8dAaNGx/mveS1COdWOdOVdmyxGpUqPm4I3yaQKQ9+Pa9 7U+FoD0ZrQpZ3KxEFLNhQTYf1ZLZ8IW7PaV1XEW7yk7iis8GJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4BqqxIyVG1Fy9O1le8fCBI8qD0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjFiMmU5NTEtZDZiMC0z NGJhLWJlZDAtZjExZTdjNjNkYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIiLA2ja2RCgemVC4uAYp51IVJ80HrMv4r+YPZwhtCfdf3vwCPewwcW rR1D8yJVeVPm8VPQfO3kwXEJy1fCvRXZ+aNEgmmZTSMek+XTGoFB3jykhBGSsr9A /L6TuMnXw+B7aDhMOq3zerZuukj6FDCYrT8euEA8WSdck8qq7Fe0es7bm1JeR0CR v+VjP4lUkTSMaQ3uDJs67LUMxo+frOQv7oYNSRIR+UhyGVbV248F54NAKXXRbrx8 ThEFOXDUGKBIsPaXz1fWjGb75Fo7aZzmt+fj3BDKFFnVcR4eV9nEkoByOgsO4DlU 9euQ9nZl29kUqVz5AKhr+ECP3EQKyvY= -----END CERTIFICATE-----Generated at Mon Aug 4 22:21:37 2025 by rpki-client