$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f552b7e-d0da-3542-8e30-9e187384c23c.roa File: 5f552b7e-d0da-3542-8e30-9e187384c23c.roa (raw, json) Hash identifier: 2h8xUzqZCTheuu2w9KM8ypMkH//1GI4iqUOrsXNrQjw= Subject key identifier: 04:79:1E:1E:79:FD:F7:44:0B:6F:B2:4F:DC:E3:9A:9A:22:83:61:46 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB650FBABF9C94BC6F2E0EEC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f552b7e-d0da-3542-8e30-9e187384c23c.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 36183 IP address blocks: 172.224.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:fb:ab:f9:c9:4b:c6:f2:e0:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=e6e60af5-7c28-4f7e-8b4f-21273481b883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e0:73:c8:7d:74:10:09:c8:0d:3b:be:15:f6: 0f:a2:db:85:2b:3b:7f:30:8d:d3:bd:79:bc:a5:1e: bf:25:a6:b4:67:03:a1:a5:e5:3e:dc:c2:3d:f9:94: af:0c:96:2e:14:c7:b5:23:31:e7:1c:31:e8:be:9f: 85:95:12:5e:c1:1d:d4:67:6e:12:b4:42:8f:93:ce: 67:24:f8:b5:4a:c1:3b:ee:ee:cb:26:15:90:84:03: 5f:cb:2e:0d:23:b5:f8:1d:94:11:2c:46:18:3c:a3: 08:d9:21:7d:eb:60:11:74:60:16:a0:69:04:1c:8b: 94:06:08:ca:ff:47:4c:13:7e:8e:3b:f6:18:60:1f: 07:be:89:51:fd:5e:cb:b4:b2:49:38:50:55:4d:a9: 9f:b7:c3:9a:ae:63:fb:cc:e6:98:ed:90:3c:d1:4f: 81:18:75:b8:f6:77:42:e6:29:20:62:56:02:12:e5: 06:a4:2c:eb:5e:cb:1f:6f:1b:d0:8f:e9:5e:94:aa: 25:f0:51:58:63:7d:50:a6:c1:87:e2:dd:a4:03:58: 30:5a:57:5a:f7:af:49:55:00:11:6e:f9:e1:04:22: f8:37:37:7a:81:a6:6a:d8:b8:d0:61:26:06:e6:5e: 20:c3:ad:cf:fa:1f:f6:83:aa:1a:e5:3a:f1:0d:3b: ed:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:79:1E:1E:79:FD:F7:44:0B:6F:B2:4F:DC:E3:9A:9A:22:83:61:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f552b7e-d0da-3542-8e30-9e187384c23c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:3e:fa:24:de:02:c1:2b:bf:4b:8b:af:1b:80:c3:2a:28:e6: 77:2d:59:b7:9f:ba:3a:1b:d5:3b:d4:a4:70:77:ba:4c:cb:b0: dd:3f:3d:14:3e:99:3b:5c:d1:5c:3b:90:25:c2:44:9b:59:6f: c6:e9:34:01:e7:41:9f:a7:da:c2:83:29:37:81:7d:a8:75:cd: 11:e1:4b:6f:6c:fa:ef:48:54:0d:b1:ff:ab:75:a4:b5:c9:a0: 0f:cf:88:7b:7a:c4:9e:14:78:71:2b:0d:3c:1d:e1:f5:33:61: 96:fd:4a:79:e2:a5:8a:b1:b9:83:be:10:aa:a3:97:00:63:23: d5:12:af:e9:a4:fb:ab:ec:ec:63:78:96:86:c5:cd:28:0c:04: de:2c:34:1a:e9:67:6f:39:93:02:29:24:b4:d7:a1:a2:ff:5f: eb:58:84:43:cb:e6:36:4a:0f:e2:89:40:18:1e:b2:b6:22:e5: 1e:4c:3c:c7:68:59:18:d1:9d:aa:f6:cc:08:e4:27:6a:fb:29: 8c:e8:5f:0b:41:b9:15:c4:b1:20:ff:b7:da:be:73:5e:32:17: 73:48:2e:37:39:d7:78:39:b6:7c:86:b6:f1:da:da:74:9e:e4: e5:0e:61:06:84:91:c8:49:43:5f:d0:e3:00:dc:03:33:ff:8c: 4b:a4:de:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPur+clLxvLg7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZTZlNjBhZjUtN2MyOC00ZjdlLThiNGYtMjEyNzM0ODFiODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuBzyH10EAnIDTu+FfYPotuFKzt/MI3TvXm8 pR6/Jaa0ZwOhpeU+3MI9+ZSvDJYuFMe1IzHnHDHovp+FlRJewR3UZ24StEKPk85n JPi1SsE77u7LJhWQhANfyy4NI7X4HZQRLEYYPKMI2SF962ARdGAWoGkEHIuUBgjK /0dME36OO/YYYB8HvolR/V7LtLJJOFBVTamft8OarmP7zOaY7ZA80U+BGHW49ndC 5ikgYlYCEuUGpCzrXssfbxvQj+lelKol8FFYY31QpsGH4t2kA1gwWlda969JVQAR bvnhBCL4Nzd6gaZq2LjQYSYG5l4gw63P+h/2g6oa5TrxDTvtCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAR5Hh55/fdEC2+yT9zjmpoig2FGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWY1NTJiN2UtZDBkYS0z NTQyLThlMzAtOWUxODczODRjMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8++iTeAsErv0uLrxuAwyoo5nctWbefujob1TvUpHB3ukzLsN0/PRQ+ mTtc0Vw7kCXCRJtZb8bpNAHnQZ+n2sKDKTeBfah1zRHhS29s+u9IVA2x/6t1pLXJ oA/PiHt6xJ4UeHErDTwd4fUzYZb9SnnipYqxuYO+EKqjlwBjI9USr+mk+6vs7GN4 lobFzSgMBN4sNBrpZ285kwIpJLTXoaL/X+tYhEPL5jZKD+KJQBgesrYi5R5MPMdo WRjRnar2zAjkJ2r7KYzoXwtBuRXEsSD/t9q+c14yF3NILjc513g5tnyGtvHa2nSe 5OUOYQaEkchJQ1/Q4wDcAzP/jEuk3oc= -----END CERTIFICATE-----Generated at Tue Aug 5 23:02:24 2025 by rpki-client