$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38259f4d-7364-3cd4-b1b5-0b1a3b5620dc.roa File: 38259f4d-7364-3cd4-b1b5-0b1a3b5620dc.roa (raw, json) Hash identifier: ornYBWixMw9g6vXhcIcJOQ9zXlogR0ILQxXWCu/bBY4= Subject key identifier: 4E:7D:DD:56:7B:9F:CD:C5:C5:B4:8A:46:B5:40:AE:27:4B:56:C4:D3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB91BB852F616A2E33C31FE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38259f4d-7364-3cd4-b1b5-0b1a3b5620dc.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 36183 IP address blocks: 172.224.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:b8:52:f6:16:a2:e3:3c:31:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=b7e97b0a-6582-4d4c-ab70-b1ba121f51aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:10:bd:d5:14:cf:cb:fd:93:13:7a:b8:07:b1: 2a:e1:60:28:17:16:e6:5b:ee:9a:79:dd:4b:a8:2b: ce:1a:1e:5a:8e:c0:a4:54:81:af:5e:a5:2d:7c:8d: a2:bc:70:d5:5a:2f:ac:3d:3c:f3:35:64:b9:f2:9a: bd:65:c6:da:9a:64:a1:16:70:89:c5:4e:dc:ef:8b: 9e:eb:d6:bb:25:e3:1c:85:9b:6c:9c:ff:b2:ff:a8: fe:2b:83:c7:45:e9:ac:bc:99:8e:8f:f4:ac:bf:89: 68:b9:45:53:95:f8:93:09:ba:a9:96:3d:74:9f:6f: 56:c8:ff:f0:d6:9a:32:83:77:00:cb:86:cf:ba:cd: 70:df:6b:79:a0:96:73:11:82:a8:f9:83:91:38:b3: ba:2c:55:ae:de:ff:bb:3c:da:44:d8:85:16:ba:32: 33:f8:0e:d9:c7:4c:d7:e3:ed:6a:99:a7:a2:c5:4f: 75:f4:be:3a:5f:e3:90:30:bf:b1:68:3b:cf:ff:02: d0:8e:05:13:33:76:ae:38:86:31:64:5f:23:5c:5b: e9:d6:98:8c:46:5e:6f:95:5b:00:ad:29:6f:93:26: 07:3d:26:fc:17:e7:6f:2a:b1:8b:cd:e9:ac:73:78: e7:8a:6c:34:dd:19:03:e6:d3:75:e7:20:93:99:eb: 74:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7D:DD:56:7B:9F:CD:C5:C5:B4:8A:46:B5:40:AE:27:4B:56:C4:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38259f4d-7364-3cd4-b1b5-0b1a3b5620dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:16:9a:d7:2d:3c:34:49:b8:5d:4e:66:9e:c5:cd:64:20:cc: 1b:57:79:16:b6:66:d7:51:30:a5:e7:57:77:e6:b0:89:73:7b: b6:ad:e2:45:cf:07:bb:a7:30:9e:0e:7d:d6:8d:f8:bd:e5:8c: 33:40:d6:86:b6:31:66:36:81:be:54:7b:cf:83:42:13:5a:8a: 41:64:48:d0:16:fb:a4:4d:fc:e7:e0:cd:f4:a1:99:c5:e3:72: ae:a7:d2:a9:5c:f4:82:17:da:84:32:48:e2:d9:96:14:7d:ab: 35:c5:13:84:62:21:b8:44:fa:07:4e:fe:9c:3b:d5:74:5e:ff: ce:20:01:1f:90:89:f7:e8:d6:d5:0b:e5:4f:00:d3:b0:dc:39: 16:0c:8b:8c:b6:35:d6:bb:a9:8d:ec:97:be:59:bb:5b:a7:be: b6:5d:c3:d4:c7:98:06:db:68:45:d6:9f:82:5d:7c:bb:69:fe: 35:b8:fa:c3:46:3f:d4:8b:e0:54:a7:85:81:21:61:d0:fe:4c: 15:10:c6:03:02:8e:9a:e7:d0:dc:01:7e:ee:e6:8b:5a:a9:f5: 41:7d:e3:35:72:b5:4d:d8:a7:26:ec:99:dc:7b:5f:e4:56:91: f0:62:58:99:70:c8:a9:31:7f:37:ea:d4:64:d2:92:14:1a:c3: 90:bf:68:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G7hS9hai4zwx/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YjdlOTdiMGEtNjU4Mi00ZDRjLWFiNzAtYjFiYTEyMWY1MWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhC91RTPy/2TE3q4B7Eq4WAoFxbmW+6aed1L qCvOGh5ajsCkVIGvXqUtfI2ivHDVWi+sPTzzNWS58pq9ZcbammShFnCJxU7c74ue 69a7JeMchZtsnP+y/6j+K4PHRemsvJmOj/Ssv4louUVTlfiTCbqplj10n29WyP/w 1poyg3cAy4bPus1w32t5oJZzEYKo+YOROLO6LFWu3v+7PNpE2IUWujIz+A7Zx0zX 4+1qmaeixU919L46X+OQML+xaDvP/wLQjgUTM3auOIYxZF8jXFvp1piMRl5vlVsA rSlvkyYHPSb8F+dvKrGLzemsc3jnimw03RkD5tN15yCTmet0GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE593VZ7n83FxbSKRrVAridLVsTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzgyNTlmNGQtNzM2NC0z Y2Q0LWIxYjUtMGIxYTNiNTYyMGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOA7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUWmtctPDRJuF1OZp7FzWQgzBtXeRa2ZtdRMKXnV3fmsIlze7at4kXP B7unMJ4OfdaN+L3ljDNA1oa2MWY2gb5Ue8+DQhNaikFkSNAW+6RN/OfgzfShmcXj cq6n0qlc9IIX2oQySOLZlhR9qzXFE4RiIbhE+gdO/pw71XRe/84gAR+Qiffo1tUL 5U8A07DcORYMi4y2Nda7qY3sl75Zu1unvrZdw9THmAbbaEXWn4JdfLtp/jW4+sNG P9SL4FSnhYEhYdD+TBUQxgMCjprn0NwBfu7mi1qp9UF94zVytU3Ypybsmdx7X+RW kfBiWJlwyKkxfzfq1GTSkhQaw5C/aDs= -----END CERTIFICATE-----Generated at Tue Aug 5 17:13:04 2025 by rpki-client