$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34ffdcf7-cae7-3ca5-8b8b-58eaac5ea16f.roa File: 34ffdcf7-cae7-3ca5-8b8b-58eaac5ea16f.roa (raw, json) Hash identifier: POqP8vPw/VUeFa0B8KS/P/Hiqkt6lh1K/njy/hGLhKI= Subject key identifier: D9:32:CB:C7:62:FE:64:C6:A3:A7:72:5E:F9:2A:4B:25:04:D9:34:59 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AADF13215A61F5896D761A160 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34ffdcf7-cae7-3ca5-8b8b-58eaac5ea16f.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 36183 IP address blocks: 172.225.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:32:15:a6:1f:58:96:d7:61:a1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=1ab4b58f-ac53-4313-847c-d124227ce41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b2:25:2b:7f:bf:fe:f7:d2:f3:16:3a:94:fb: eb:cf:18:b2:66:87:c5:96:0b:f1:fc:5f:42:ae:9f: 3e:cc:1b:2b:fe:57:c6:32:2e:09:e6:92:f2:92:77: 84:25:be:da:20:3a:a5:99:37:17:69:d9:0f:d4:4b: cf:9b:ae:c6:29:72:db:e1:35:aa:dd:bf:bf:f1:95: b0:e1:bc:1a:3a:86:2f:85:c5:5e:86:f0:e3:14:af: 0f:8c:6d:d6:32:87:0d:67:e0:34:8f:37:c6:83:03: 21:6b:3c:70:38:a3:96:6b:be:cd:a0:f8:45:22:1d: 9d:ea:a8:b9:9f:3e:51:30:ed:8d:73:f1:fb:a7:6d: 0a:bb:7c:df:0e:f8:a6:d7:59:4b:ab:a9:74:23:c0: d3:28:74:d9:42:c6:0a:00:ee:ff:8a:31:d1:84:d3: f2:a8:20:08:6b:5d:a3:15:b9:06:c1:0b:24:ed:48: 2c:88:7a:c5:c4:90:49:ef:7c:47:0f:a1:05:78:74: 49:03:bd:98:47:7f:76:99:18:fb:c7:33:91:35:66: 1d:ab:14:a3:c6:cf:49:72:87:0e:3a:cf:55:5e:c6: 0c:3d:15:8b:c2:6a:28:b8:ed:47:1c:30:1f:a0:9b: 7c:80:a1:47:88:6f:14:12:7f:6c:14:a1:7b:b0:72: ac:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:32:CB:C7:62:FE:64:C6:A3:A7:72:5E:F9:2A:4B:25:04:D9:34:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34ffdcf7-cae7-3ca5-8b8b-58eaac5ea16f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:da:dd:33:ce:a8:48:6e:68:c4:af:1f:1a:f1:3f:fb:e5:08: 24:f9:13:f0:c2:53:6f:79:4c:ae:b0:a6:4f:a9:4e:42:69:f7: 9f:f9:a9:bf:17:6e:d5:75:34:e3:40:e4:18:4c:89:e0:3a:f3: 30:26:c7:51:3a:dd:90:a6:27:3e:6f:36:0e:f1:b4:f1:e0:ad: bf:a9:2f:cc:c6:e2:0c:30:82:0b:ea:6f:78:c0:40:3e:0a:76: 38:ed:00:c9:a6:c1:da:4b:41:4e:87:4d:e9:14:2b:f2:c2:5c: 13:01:04:49:74:fa:10:e7:c7:a4:df:fb:33:31:f1:6d:5b:4b: e0:bb:d3:a0:5b:dd:b7:f1:f3:2c:30:55:45:46:bb:5c:39:a0: 12:10:05:ca:e6:4b:d2:92:69:f6:bf:f9:5b:41:e0:66:b7:64: 16:dd:6e:85:bf:7c:b2:20:d4:e5:9a:5a:86:da:c3:9c:ca:28: c5:34:79:75:21:ba:fa:be:00:c2:b5:18:65:41:a4:e3:20:ad: 40:da:3b:5e:28:fe:ea:4c:f0:fb:ce:5f:a9:2d:40:90:79:c3: 11:f2:d6:54:cc:0c:35:d4:49:55:d6:ca:f9:5d:eb:a1:d3:02: 91:37:be:bd:d2:28:5b:f3:45:84:72:37:bd:2c:81:80:39:31: cb:17:99:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8TIVph9YltdhoWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MWFiNGI1OGYtYWM1My00MzEzLTg0N2MtZDEyNDIyN2NlNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7IlK3+//vfS8xY6lPvrzxiyZofFlgvx/F9C rp8+zBsr/lfGMi4J5pLykneEJb7aIDqlmTcXadkP1EvPm67GKXLb4TWq3b+/8ZWw 4bwaOoYvhcVehvDjFK8PjG3WMocNZ+A0jzfGgwMhazxwOKOWa77NoPhFIh2d6qi5 nz5RMO2Nc/H7p20Ku3zfDvim11lLq6l0I8DTKHTZQsYKAO7/ijHRhNPyqCAIa12j FbkGwQsk7UgsiHrFxJBJ73xHD6EFeHRJA72YR392mRj7xzORNWYdqxSjxs9JcocO Os9VXsYMPRWLwmoouO1HHDAfoJt8gKFHiG8UEn9sFKF7sHKsxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkyy8di/mTGo6dyXvkqSyUE2TRZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzRmZmRjZjctY2FlNy0z Y2E1LThiOGItNThlYWFjNWVhMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7a3TPOqEhuaMSvHxrxP/vlCCT5E/DCU295TK6wpk+pTkJp95/5qb8X btV1NONA5BhMieA68zAmx1E63ZCmJz5vNg7xtPHgrb+pL8zG4gwwggvqb3jAQD4K djjtAMmmwdpLQU6HTekUK/LCXBMBBEl0+hDnx6Tf+zMx8W1bS+C706Bb3bfx8yww VUVGu1w5oBIQBcrmS9KSafa/+VtB4Ga3ZBbdboW/fLIg1OWaWobaw5zKKMU0eXUh uvq+AMK1GGVBpOMgrUDaO14o/upM8PvOX6ktQJB5wxHy1lTMDDXUSVXWyvld66HT ApE3vr3SKFvzRYRyN70sgYA5McsXmQQ= -----END CERTIFICATE-----Generated at Mon Aug 4 18:26:50 2025 by rpki-client