$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c57870d-1148-344a-840e-d0c0263d5867.roa File: 2c57870d-1148-344a-840e-d0c0263d5867.roa (raw, json) Hash identifier: 8WLCElGxr2DSahg+WJZgnZ6LGNf7T+SOkN1lVGWn9ks= Subject key identifier: 5C:B0:6B:9C:01:81:0C:2E:0F:0E:A8:3F:C0:DF:57:DA:9D:23:BF:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9FFBAE027437734BA0E88C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c57870d-1148-344a-840e-d0c0263d5867.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 36183 IP address blocks: 172.225.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:ae:02:74:37:73:4b:a0:e8:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=e215cf29-483a-4942-9485-b36ee4428e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e4:d5:dd:f4:88:ce:50:1c:61:96:1b:78:29: 9f:14:0e:f7:af:25:38:16:a7:94:e1:97:1b:01:3f: f9:1d:48:ed:27:12:44:55:6c:67:8e:0b:e1:21:bb: f8:88:7b:84:7c:62:73:ff:97:2b:32:1e:51:81:94: 40:9e:52:c8:48:28:4f:e2:30:3b:11:d5:6d:dc:fc: 21:47:83:f6:96:94:8d:e5:75:0c:4b:3f:c8:ed:90: 58:bd:3d:3b:6d:19:c0:d1:2e:4b:02:eb:39:1b:43: 98:bc:60:69:37:92:fe:9b:6d:12:38:51:d6:ab:3d: bc:63:79:2f:83:18:86:ae:73:cf:fa:b5:14:ca:98: 37:98:1b:97:24:ba:1f:5b:11:a7:6c:26:66:8c:3b: e3:bf:56:a4:81:20:86:cf:11:ec:51:b1:6c:99:6a: a0:ae:4f:a1:bd:3b:99:be:2b:74:4b:a5:74:ca:3a: 2d:21:4c:68:73:57:a9:de:b3:7a:32:c7:23:e7:0d: 58:50:bb:60:f8:cf:1d:99:dd:ec:ad:63:39:15:0a: 1e:5c:a3:f4:6f:09:39:52:82:d9:63:90:59:23:bb: 43:26:22:1f:7b:ba:c5:27:da:77:d1:25:71:c6:59: 94:0c:8a:d5:a7:af:e0:18:fd:8d:4f:d7:b3:ae:05: bd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B0:6B:9C:01:81:0C:2E:0F:0E:A8:3F:C0:DF:57:DA:9D:23:BF:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c57870d-1148-344a-840e-d0c0263d5867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f5:c1:11:b0:fc:9f:f5:31:3d:66:07:36:58:70:a2:fd:35: fd:08:08:6b:f3:39:61:49:82:86:55:fa:37:c2:11:03:9b:b9: 5d:9b:37:90:68:2f:01:06:62:25:3b:ad:46:9a:e0:01:fc:06: 4e:77:7d:f6:17:92:6b:5e:fa:d5:45:d6:5b:e0:13:d1:e0:df: 41:07:86:0e:df:de:e5:9b:79:d7:43:ac:79:44:43:3e:1a:55: 29:fc:37:c7:ea:e1:c6:80:9b:2b:08:ee:54:90:a6:a2:62:34: 05:af:4e:37:c3:74:c1:db:13:5f:49:56:81:ce:c0:f9:ad:9d: 16:43:fd:54:c5:a4:4e:23:df:6b:7d:bf:33:cc:7c:89:7d:ac: b7:eb:23:49:c9:40:ea:6f:1d:b2:aa:8c:5b:36:6b:a0:f5:33: bd:73:a9:3f:d6:18:3f:12:9a:60:d9:12:59:04:e8:d7:a4:a3: 38:29:0c:9c:4c:6f:d0:ec:0b:f0:0c:36:5e:7d:d1:3d:8c:d7: ef:9e:e7:01:4c:2f:c7:e7:7f:05:c7:61:e3:c0:12:b9:ad:87: c3:f5:84:cd:25:5c:5a:7e:f9:7d:fc:4c:60:bb:22:f6:3c:5a: af:de:1d:43:6f:91:63:ee:44:ab:82:3f:64:9c:4a:f2:32:9a: f3:28:c1:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+64CdDdzS6DojAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZTIxNWNmMjktNDgzYS00OTQyLTk0ODUtYjM2ZWU0NDI4ZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuTV3fSIzlAcYZYbeCmfFA73ryU4FqeU4Zcb AT/5HUjtJxJEVWxnjgvhIbv4iHuEfGJz/5crMh5RgZRAnlLISChP4jA7EdVt3Pwh R4P2lpSN5XUMSz/I7ZBYvT07bRnA0S5LAus5G0OYvGBpN5L+m20SOFHWqz28Y3kv gxiGrnPP+rUUypg3mBuXJLofWxGnbCZmjDvjv1akgSCGzxHsUbFsmWqgrk+hvTuZ vit0S6V0yjotIUxoc1ep3rN6Mscj5w1YULtg+M8dmd3srWM5FQoeXKP0bwk5UoLZ Y5BZI7tDJiIfe7rFJ9p30SVxxlmUDIrVp6/gGP2NT9ezrgW9zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFywa5wBgQwuDw6oP8DfV9qdI7+nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmM1Nzg3MGQtMTE0OC0z NDRhLTg0MGUtZDBjMDI2M2Q1ODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv1wRGw/J/1MT1mBzZYcKL9Nf0ICGvzOWFJgoZV+jfCEQObuV2bN5Bo LwEGYiU7rUaa4AH8Bk53ffYXkmte+tVF1lvgE9Hg30EHhg7f3uWbeddDrHlEQz4a VSn8N8fq4caAmysI7lSQpqJiNAWvTjfDdMHbE19JVoHOwPmtnRZD/VTFpE4j32t9 vzPMfIl9rLfrI0nJQOpvHbKqjFs2a6D1M71zqT/WGD8SmmDZElkE6NekozgpDJxM b9DsC/AMNl590T2M1++e5wFML8fnfwXHYePAErmth8P1hM0lXFp++X38TGC7IvY8 Wq/eHUNvkWPuRKuCP2ScSvIymvMowWM= -----END CERTIFICATE-----Generated at Wed Aug 6 07:52:33 2025 by rpki-client