$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d602e03-ebc6-3294-a16a-1bb8e42cc7b9.roa File: 2d602e03-ebc6-3294-a16a-1bb8e42cc7b9.roa (raw, json) Hash identifier: NSy00l2Np4F7ER15HIovep9RWaUgQ5kJ0Y4TaCqP23o= Subject key identifier: D1:89:2F:2A:A2:78:26:15:25:48:05:32:55:08:28:FF:20:C3:04:EF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB4ED47D9A5E759F6E95A9700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d602e03-ebc6-3294-a16a-1bb8e42cc7b9.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 36183 IP address blocks: 172.224.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:47:d9:a5:e7:59:f6:e9:5a:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=af748eff-9e61-445a-be8d-dd56f58c5715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:f8:82:64:6f:1a:36:7a:de:81:d1:e7:e1: cd:65:8e:d5:e2:96:6e:ef:e1:f7:54:26:16:e6:5d: 2a:bb:3e:5f:ab:02:a4:d1:00:db:72:dc:39:1e:73: 39:f8:ca:31:1e:c8:8d:40:f0:b6:3c:a0:10:f6:c5: 11:c3:50:59:45:4f:63:8a:9d:4d:6b:50:63:e1:86: de:6d:6f:f9:9a:1a:67:35:fc:5a:5d:d7:8f:4f:73: 14:7b:27:8e:83:c9:09:f4:6b:a9:3c:d5:16:27:17: 8b:b7:31:34:cc:2f:0a:be:d1:cb:02:ae:67:96:0b: ed:a6:37:ec:19:5b:3a:85:95:c6:5e:df:9d:7e:5d: e4:c5:ba:31:29:0f:45:18:76:85:35:29:74:d0:3c: 9d:40:95:29:44:76:20:0c:04:4d:9f:1f:38:2d:c2: 20:4d:1c:32:a9:b2:a1:73:93:b4:f9:6a:d7:29:fd: 16:7a:0d:3b:58:28:1c:fc:5f:c2:ef:8e:46:1b:2b: e3:4a:cb:48:6e:ff:19:eb:f2:bb:3c:d9:82:4c:85: 4f:fa:ca:b1:03:67:a4:ed:89:c3:f3:93:45:ba:ca: f0:35:3f:48:a2:e8:40:dc:4a:0e:ce:cd:34:d2:de: e9:cb:be:3d:60:9f:29:94:5d:2e:4c:cc:67:ed:d9: ea:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:89:2F:2A:A2:78:26:15:25:48:05:32:55:08:28:FF:20:C3:04:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d602e03-ebc6-3294-a16a-1bb8e42cc7b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:06:9b:22:0f:33:14:14:19:e6:9f:90:ce:14:a8:16:be:ee: 42:d3:c8:78:ca:8d:43:8f:60:2e:45:ef:39:ed:5a:c2:15:bb: bf:50:dd:d8:85:4d:51:dc:83:e8:7d:cb:f0:95:7d:24:4e:51: 5d:c4:1e:2c:ae:91:5e:27:45:4c:6e:70:c6:26:6c:11:ba:09: de:0f:44:d7:e1:20:f2:e3:12:7d:f9:f2:54:94:cf:2e:36:c2: e2:ee:6f:97:c4:03:70:f9:f9:01:d9:91:22:53:5f:53:98:11: 98:46:33:87:3e:82:2a:ee:0c:86:a3:df:e5:00:c8:4e:5e:57: 73:be:4b:56:b6:39:bd:27:ca:c2:7c:a3:cf:c8:34:97:de:9f: 04:e4:9f:eb:c5:ab:6d:34:f1:81:db:7e:66:bc:76:19:74:8a: 42:7d:13:01:da:c6:2c:c8:78:66:50:80:f2:61:b8:17:7b:be: 68:04:f2:14:15:5f:0d:d6:3b:28:10:bd:b1:1c:17:bd:28:87: 82:de:33:b4:14:88:2c:1c:e4:4d:8f:8c:98:1c:8e:03:58:17: 95:f7:95:78:b3:00:88:8c:31:bc:f1:ba:fc:f0:eb:0e:54:eb: f9:e3:49:4b:b7:b8:37:d3:d4:01:48:57:0a:0b:db:ef:f6:4c: 23:5f:9a:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07UfZpedZ9ulalwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YWY3NDhlZmYtOWU2MS00NDVhLWJlOGQtZGQ1NmY1OGM1NzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueX4gmRvGjZ63oHR5+HNZY7V4pZu7+H3VCYW 5l0quz5fqwKk0QDbctw5HnM5+MoxHsiNQPC2PKAQ9sURw1BZRU9jip1Na1Bj4Ybe bW/5mhpnNfxaXdePT3MUeyeOg8kJ9GupPNUWJxeLtzE0zC8KvtHLAq5nlgvtpjfs GVs6hZXGXt+dfl3kxboxKQ9FGHaFNSl00DydQJUpRHYgDARNnx84LcIgTRwyqbKh c5O0+WrXKf0Weg07WCgc/F/C745GGyvjSstIbv8Z6/K7PNmCTIVP+sqxA2ek7YnD 85NFusrwNT9IouhA3EoOzs000t7py749YJ8plF0uTMxn7dnqnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGJLyqieCYVJUgFMlUIKP8gwwTvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmQ2MDJlMDMtZWJjNi0z Mjk0LWExNmEtMWJiOGU0MmNjN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8GmyIPMxQUGeafkM4UqBa+7kLTyHjKjUOPYC5F7zntWsIVu79Q3diF TVHcg+h9y/CVfSROUV3EHiyukV4nRUxucMYmbBG6Cd4PRNfhIPLjEn358lSUzy42 wuLub5fEA3D5+QHZkSJTX1OYEZhGM4c+giruDIaj3+UAyE5eV3O+S1a2Ob0nysJ8 o8/INJfenwTkn+vFq2008YHbfma8dhl0ikJ9EwHaxizIeGZQgPJhuBd7vmgE8hQV Xw3WOygQvbEcF70oh4LeM7QUiCwc5E2PjJgcjgNYF5X3lXizAIiMMbzxuvzw6w5U 6/njSUu3uDfT1AFIVwoL2+/2TCNfmn8= -----END CERTIFICATE-----Generated at Mon Aug 4 18:57:22 2025 by rpki-client