$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e2f5bc5-49f2-37aa-9b6a-b184841e0b9e.roa File: 2e2f5bc5-49f2-37aa-9b6a-b184841e0b9e.roa (raw, json) Hash identifier: Vk8F6EVAPmZgSrJLy8vKuWrLB8VKsZjDB7TU0ck4yuo= Subject key identifier: 99:00:89:F2:5B:1E:2B:5C:54:C5:BF:61:F3:1B:7A:F2:7F:2B:6E:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AADF1350B001B789523B6F480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e2f5bc5-49f2-37aa-9b6a-b184841e0b9e.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 36183 IP address blocks: 172.226.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:35:0b:00:1b:78:95:23:b6:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=0d7dac92-7855-4672-ad2c-17a7e93b6f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fd:da:cb:03:90:7f:fd:16:39:1b:65:b9:e0: 33:91:ab:6b:f6:78:65:28:b5:4b:25:5a:11:52:bb: 12:e3:04:fd:ad:e2:43:d3:99:b5:25:0b:ee:39:d4: 65:cb:ac:1e:3e:e9:1a:65:c7:e6:96:a2:9a:1e:ee: 1b:a2:ec:f6:5a:b1:4c:80:7b:c9:52:a3:1f:6a:d8: fd:03:44:34:0c:78:a7:db:14:08:b3:bd:28:dc:7c: e2:c1:47:ef:67:bd:91:4e:60:23:0c:70:69:3d:ca: ec:6e:2a:b7:8b:0b:e3:a6:c2:d6:15:4e:ce:77:0d: 92:2a:1b:6d:5d:1b:6c:22:18:be:3e:51:23:fd:97: c5:5a:de:45:bd:76:10:86:22:a2:62:57:77:8a:fc: 52:01:17:07:5b:03:fb:73:60:27:43:12:05:55:68: 30:9e:40:fd:46:f2:f7:6f:73:12:be:1c:00:f5:00: dd:38:ec:ef:15:3a:33:03:b7:fa:b3:12:90:b6:8e: aa:ca:3f:23:32:89:6d:77:b7:84:5a:dc:37:27:48: 47:40:1d:51:80:34:df:63:27:27:0d:03:1c:77:b6: 53:af:9d:0d:1c:e2:cf:e0:48:6e:91:e4:67:31:a1: 14:28:da:62:30:b8:37:2c:da:79:fc:ac:66:71:55: b5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:00:89:F2:5B:1E:2B:5C:54:C5:BF:61:F3:1B:7A:F2:7F:2B:6E:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e2f5bc5-49f2-37aa-9b6a-b184841e0b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:bf:29:70:7b:85:8a:2d:38:07:8e:4a:0f:e3:16:ad:c2:4b: c6:ef:bd:fb:19:fc:e7:f5:f3:39:fc:d3:ed:3f:34:69:8a:cf: 97:66:52:20:ae:a0:6d:d4:72:d8:f4:50:12:0c:6a:23:7a:ee: d0:f9:fe:fc:c0:04:60:fd:a8:e3:e3:0f:c3:74:76:ec:7d:bd: dd:4d:a3:19:07:08:e4:99:81:21:77:4e:73:92:98:98:2a:9e: 65:b6:f1:ca:89:01:91:b4:65:f0:81:02:4e:05:36:04:02:8d: bc:ba:61:e2:93:3f:66:60:6d:20:76:54:ab:9f:64:54:4e:ff: 7d:fc:b5:21:04:07:d7:a0:5c:63:3e:82:a8:8f:38:39:8f:57: 4f:e8:e3:d1:6f:15:d7:0f:a1:f4:8b:30:6a:66:b2:52:80:5c: 01:24:62:31:00:db:88:f6:77:eb:95:91:85:19:e6:44:68:08: 86:4d:2e:25:09:98:38:ad:1e:cc:03:6e:30:e4:07:d7:cd:69: f8:97:8c:a6:83:8a:0b:1e:e1:7f:84:1d:c5:0e:1f:77:c9:36: 72:cc:72:7b:0e:0c:02:06:42:6d:e6:a1:c5:10:8d:24:85:3c: 2a:37:c8:0e:35:cb:76:9d:93:d2:f2:dd:c9:47:5c:5f:07:94: 45:29:41:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8TULABt4lSO29IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MGQ3ZGFjOTItNzg1NS00NjcyLWFkMmMtMTdhN2U5M2I2ZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/3aywOQf/0WORtlueAzkatr9nhlKLVLJVoR UrsS4wT9reJD05m1JQvuOdRly6wePukaZcfmlqKaHu4bouz2WrFMgHvJUqMfatj9 A0Q0DHin2xQIs70o3HziwUfvZ72RTmAjDHBpPcrsbiq3iwvjpsLWFU7Odw2SKhtt XRtsIhi+PlEj/ZfFWt5FvXYQhiKiYld3ivxSARcHWwP7c2AnQxIFVWgwnkD9RvL3 b3MSvhwA9QDdOOzvFTozA7f6sxKQto6qyj8jMoltd7eEWtw3J0hHQB1RgDTfYycn DQMcd7ZTr50NHOLP4EhukeRnMaEUKNpiMLg3LNp5/KxmcVW1qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkAifJbHitcVMW/YfMbevJ/K26RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmUyZjViYzUtNDlmMi0z N2FhLTliNmEtYjE4NDg0MWUwYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOLaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS/KXB7hYotOAeOSg/jFq3CS8bvvfsZ/Of18zn80+0/NGmKz5dmUiCu oG3Uctj0UBIMaiN67tD5/vzABGD9qOPjD8N0dux9vd1NoxkHCOSZgSF3TnOSmJgq nmW28cqJAZG0ZfCBAk4FNgQCjby6YeKTP2ZgbSB2VKufZFRO/338tSEEB9egXGM+ gqiPODmPV0/o49FvFdcPofSLMGpmslKAXAEkYjEA24j2d+uVkYUZ5kRoCIZNLiUJ mDitHswDbjDkB9fNafiXjKaDigse4X+EHcUOH3fJNnLMcnsODAIGQm3mocUQjSSF PCo3yA41y3adk9Ly3clHXF8HlEUpQWA= -----END CERTIFICATE-----Generated at Tue Aug 5 17:17:52 2025 by rpki-client