$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48e306b5-ba01-34d3-9ccd-de90ee34e24e.roa File: 48e306b5-ba01-34d3-9ccd-de90ee34e24e.roa (raw, json) Hash identifier: DItlqCyyglnyjNsP1LrEcNs7zxS7+am1EIQbKpQDYNs= Subject key identifier: D2:F6:12:A2:19:81:79:66:81:FE:E6:C0:30:38:D4:DB:DD:81:78:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB650FBB903A5F69F69910C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48e306b5-ba01-34d3-9ccd-de90ee34e24e.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 36183 IP address blocks: 172.224.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:fb:b9:03:a5:f6:9f:69:91:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=e21c4c2e-1dd8-4915-ac60-387b27010448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cc:61:34:ea:44:b2:c3:ec:3e:82:8a:87:ae: 09:16:1a:d0:0a:75:84:40:5a:c9:0d:d8:42:bd:ef: 27:7b:52:a9:78:80:53:48:88:eb:48:52:ff:53:6e: ac:ab:58:5d:e4:a9:84:31:46:ac:cd:a8:5c:f7:c9: b8:29:3f:43:d5:47:e2:48:71:08:ad:4d:44:69:a7: 62:64:26:1b:d2:ba:d2:5c:6d:ab:57:5e:27:1d:7c: c5:f4:48:52:de:52:26:fd:d6:ca:bf:56:19:e3:08: b6:c7:05:a4:89:a0:92:86:c4:f1:b6:2b:9b:c6:a7: a0:18:d8:e5:a5:52:4b:4d:53:36:8a:42:80:ad:68: fc:d6:9d:5f:93:cf:fd:eb:c5:fd:9f:61:54:3a:8f: 77:dc:d3:0c:63:d9:78:b6:7f:20:ef:39:ac:8c:98: 60:ca:f4:29:7c:4d:90:15:ed:5a:5c:d8:87:67:0b: a8:7f:c2:f4:c7:0e:ec:21:53:4d:1e:9b:3b:3c:02: 5f:81:16:95:f1:72:33:08:29:40:65:22:b1:84:e2: 0c:96:dd:c7:0a:f5:90:f8:df:17:77:f6:38:b5:04: 2d:55:e9:a1:9b:e7:b9:f3:eb:10:6c:d3:4a:a9:53: a5:42:36:45:c5:2d:aa:ff:cb:cd:38:87:d7:b6:c5: 78:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F6:12:A2:19:81:79:66:81:FE:E6:C0:30:38:D4:DB:DD:81:78:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48e306b5-ba01-34d3-9ccd-de90ee34e24e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:95:84:e5:82:f6:be:29:b8:21:e7:78:e7:50:28:9e:d2:6d: f3:f3:64:e1:36:fd:a1:b6:47:59:2d:d6:68:40:a5:69:56:d2: 8b:b3:47:39:fe:46:0e:56:39:2f:de:5d:ce:f1:a5:d6:39:d7: f9:a7:7b:91:39:46:f9:df:63:a3:93:6b:6f:4f:a0:ac:50:8a: 95:11:08:fd:0b:41:3f:d9:12:bf:f2:87:d2:60:03:98:08:f5: ac:c9:9f:8b:e5:7f:ff:fe:d7:85:90:d1:3a:01:bc:c4:7e:a1: 06:24:b6:84:64:58:a6:16:92:9f:8c:0d:23:dd:66:99:54:86: 80:fc:52:82:13:50:4a:45:12:37:24:70:28:42:18:78:85:18: 50:3a:3d:af:a6:30:c5:26:e3:7e:1c:1c:25:3f:2b:40:05:87: 31:f6:97:44:9a:75:07:6a:9e:d2:d9:a0:0b:e7:e6:63:4f:bb: 12:e9:91:04:30:2b:d5:76:52:48:ca:6d:fe:86:0b:5c:c1:87: 57:31:20:97:0d:53:51:74:35:59:8a:36:b4:0e:fe:50:64:0a: e7:3e:4c:b8:33:f1:36:59:36:96:4c:25:92:f1:36:c7:f1:10: d7:09:ab:e0:41:51:83:e6:a4:4a:48:39:6d:d6:0f:87:15:03: 89:33:33:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPu5A6X2n2mRDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZTIxYzRjMmUtMWRkOC00OTE1LWFjNjAtMzg3YjI3MDEwNDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMxhNOpEssPsPoKKh64JFhrQCnWEQFrJDdhC ve8ne1KpeIBTSIjrSFL/U26sq1hd5KmEMUaszahc98m4KT9D1UfiSHEIrU1Eaadi ZCYb0rrSXG2rV14nHXzF9EhS3lIm/dbKv1YZ4wi2xwWkiaCShsTxtiubxqegGNjl pVJLTVM2ikKArWj81p1fk8/968X9n2FUOo933NMMY9l4tn8g7zmsjJhgyvQpfE2Q Fe1aXNiHZwuof8L0xw7sIVNNHps7PAJfgRaV8XIzCClAZSKxhOIMlt3HCvWQ+N8X d/Y4tQQtVemhm+e58+sQbNNKqVOlQjZFxS2q/8vNOIfXtsV4dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL2EqIZgXlmgf7mwDA41NvdgXh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDhlMzA2YjUtYmEwMS0z NGQzLTljY2QtZGU5MGVlMzRlMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmVhOWC9r4puCHneOdQKJ7SbfPzZOE2/aG2R1kt1mhApWlW0ouzRzn+ Rg5WOS/eXc7xpdY51/mne5E5RvnfY6OTa29PoKxQipURCP0LQT/ZEr/yh9JgA5gI 9azJn4vlf//+14WQ0ToBvMR+oQYktoRkWKYWkp+MDSPdZplUhoD8UoITUEpFEjck cChCGHiFGFA6Pa+mMMUm434cHCU/K0AFhzH2l0SadQdqntLZoAvn5mNPuxLpkQQw K9V2UkjKbf6GC1zBh1cxIJcNU1F0NVmKNrQO/lBkCuc+TLgz8TZZNpZMJZLxNsfx ENcJq+BBUYPmpEpIOW3WD4cVA4kzM3c= -----END CERTIFICATE-----Generated at Mon Aug 4 19:05:22 2025 by rpki-client