$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d57e82b-04de-3948-8a71-e541289a09a9.roa File: 4d57e82b-04de-3948-8a71-e541289a09a9.roa (raw, json) Hash identifier: RkSJoRj2URzwoYuQgYVlvmKgUJjEaKKbG6cGUpu2lKY= Subject key identifier: 9D:00:FE:20:CB:EE:55:2B:66:B6:F2:0A:58:C5:28:69:4C:B1:66:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AADF13526A3A8530B17027F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d57e82b-04de-3948-8a71-e541289a09a9.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 36183 IP address blocks: 172.226.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:35:26:a3:a8:53:0b:17:02:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=4a487785-538c-4fe2-b9ce-371af4b19cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9d:9d:c0:dd:3d:e9:52:92:ee:3f:aa:a8:cd: 2a:d1:94:f5:93:cc:6e:50:f4:03:ed:9e:67:db:91: 33:a6:05:05:35:39:08:21:37:ae:64:31:96:f9:d4: 83:86:6b:71:f7:aa:e9:49:b6:27:e7:45:cd:1f:0f: c3:4d:f2:84:0f:9f:c7:15:f3:25:a1:fa:c6:00:90: 2a:f0:35:ce:d1:8f:dd:08:6e:4e:5e:a1:2e:e4:cf: 8c:87:68:9c:95:58:d1:ae:3b:74:88:6e:fd:51:5d: a7:4c:dc:b0:ae:79:cc:36:ee:da:ec:1c:ff:57:83: a1:88:14:ba:9a:20:7f:89:28:3f:d6:a8:bd:74:3e: ff:12:ba:c2:a6:25:64:9c:5d:75:ad:b9:d9:53:4c: 9a:aa:31:b9:cd:cf:6e:4f:de:aa:e5:5d:35:69:2c: 1b:79:36:88:bb:72:c9:ea:cc:1e:6e:a4:65:77:38: 30:78:e5:b0:0d:ab:17:b5:5a:1a:ac:0b:23:4d:2b: 5c:29:75:16:1b:cb:3b:bb:18:f5:1e:2e:ba:d7:ef: b1:c6:c5:f1:dc:e6:e4:56:2d:4e:5d:8e:42:38:ca: bc:88:f5:94:a9:c4:7e:c7:81:94:9d:d3:33:67:85: c1:4f:20:05:48:2a:f9:99:d5:9e:05:88:2f:ab:63: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:00:FE:20:CB:EE:55:2B:66:B6:F2:0A:58:C5:28:69:4C:B1:66:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d57e82b-04de-3948-8a71-e541289a09a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ec:99:7d:da:65:74:2e:47:c7:62:8f:a5:5a:00:9e:c0:92: ed:ec:4c:79:65:ce:c7:0e:e4:f2:96:b0:ed:a5:cd:14:b8:89: 3e:40:0e:71:90:3b:e9:9d:82:cb:0c:d6:f4:d6:56:84:9b:25: 1a:49:49:a0:98:19:c2:b6:0f:12:19:8a:87:ef:c9:3d:52:88: 6d:59:45:21:43:47:b6:32:48:49:30:97:55:86:4b:58:1c:09: 2f:1c:f2:7e:f4:c3:fa:2a:65:76:03:c1:b9:b6:e8:d4:c8:ff: b7:65:c8:ee:6a:1f:2a:79:b8:fa:1b:7c:07:c9:5a:3e:ef:8f: ac:f8:7d:89:2c:cd:24:ca:84:9b:bf:04:d9:08:81:45:0f:d1: 51:dc:1b:00:8a:59:82:61:93:ba:93:7c:ed:2e:57:e7:20:0d: 74:45:b8:ef:62:58:a7:cb:e9:e4:c7:47:e0:4a:46:f0:fe:c1: ad:33:b3:69:b0:13:11:6c:dc:f0:d7:e4:0b:84:5b:26:85:92: d9:e7:a6:8d:75:6b:07:7f:b7:53:ac:39:37:aa:e6:a3:f1:da: 8f:f2:02:b1:aa:ad:0a:53:02:25:43:c0:a4:69:2b:cc:c0:d8: 63:bb:f6:25:03:25:dc:da:56:37:c3:06:83:2c:95:d6:44:9f: 0f:68:3b:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8TUmo6hTCxcCfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NGE0ODc3ODUtNTM4Yy00ZmUyLWI5Y2UtMzcxYWY0YjE5Y2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ2dwN096VKS7j+qqM0q0ZT1k8xuUPQD7Z5n 25EzpgUFNTkIITeuZDGW+dSDhmtx96rpSbYn50XNHw/DTfKED5/HFfMlofrGAJAq 8DXO0Y/dCG5OXqEu5M+Mh2iclVjRrjt0iG79UV2nTNywrnnMNu7a7Bz/V4OhiBS6 miB/iSg/1qi9dD7/ErrCpiVknF11rbnZU0yaqjG5zc9uT96q5V01aSwbeTaIu3LJ 6swebqRldzgweOWwDasXtVoarAsjTStcKXUWG8s7uxj1Hi661++xxsXx3ObkVi1O XY5COMq8iPWUqcR+x4GUndMzZ4XBTyAFSCr5mdWeBYgvq2NN9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0A/iDL7lUrZrbyCljFKGlMsWYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGQ1N2U4MmItMDRkZS0z OTQ4LThhNzEtZTU0MTI4OWEwOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXsmX3aZXQuR8dij6VaAJ7Aku3sTHllzscO5PKWsO2lzRS4iT5ADnGQ O+mdgssM1vTWVoSbJRpJSaCYGcK2DxIZiofvyT1SiG1ZRSFDR7YySEkwl1WGS1gc CS8c8n70w/oqZXYDwbm26NTI/7dlyO5qHyp5uPobfAfJWj7vj6z4fYkszSTKhJu/ BNkIgUUP0VHcGwCKWYJhk7qTfO0uV+cgDXRFuO9iWKfL6eTHR+BKRvD+wa0zs2mw ExFs3PDX5AuEWyaFktnnpo11awd/t1OsOTeq5qPx2o/yArGqrQpTAiVDwKRpK8zA 2GO79iUDJdzaVjfDBoMsldZEnw9oO1c= -----END CERTIFICATE-----Generated at Mon Aug 4 19:09:40 2025 by rpki-client