$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a839e1c-d4c5-378e-ade0-0118e2a672da.roa File: 6a839e1c-d4c5-378e-ade0-0118e2a672da.roa (raw, json) Hash identifier: QEQJnfmScGubaZUKlFEHIcwWjeHEE7kSaUXxIs2TAjk= Subject key identifier: 95:9C:33:A0:AF:63:03:49:88:21:C3:00:D2:57:37:3F:68:F5:21:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AA1617C6FB58D1318796E9500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a839e1c-d4c5-378e-ade0-0118e2a672da.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 36183 IP address blocks: 172.225.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:7c:6f:b5:8d:13:18:79:6e:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=d2f3c5f3-d4a4-4247-a641-bb989525eb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:07:ff:02:b5:d2:fd:31:34:48:e8:14:dc:01: ec:9f:a1:82:90:6e:38:62:1c:b0:49:96:46:e2:b1: 8f:b0:21:49:3c:79:25:b8:6a:26:61:27:8f:8e:38: 4e:bb:24:08:2d:9e:4d:a5:5b:d7:7b:8b:ce:9b:62: 01:1b:f7:6f:fb:0e:20:61:04:d2:70:6c:5c:0e:7c: fc:63:bc:30:b5:5e:ec:24:7d:5a:aa:58:7a:11:18: 28:f4:63:c5:ef:78:4c:34:6d:a4:35:33:48:78:c7: 5b:82:7b:32:79:d8:24:48:5e:e0:ff:cf:d6:a4:11: 81:8d:15:4c:04:33:eb:5b:c7:85:4e:a1:6f:c4:c2: 81:93:f3:8d:ed:ba:44:12:7f:dc:b1:1d:c8:4b:3f: 02:6f:ed:61:12:9f:2f:1f:b1:25:fa:5e:c7:8b:90: 4e:3e:4d:2f:54:aa:0e:08:81:78:ee:76:4a:18:d1: 90:93:b4:78:7d:ff:6e:1c:45:65:d0:67:88:0b:9a: cd:e2:47:bb:06:45:f9:73:11:6d:4c:80:bc:d0:fc: 69:b2:fc:e8:ea:96:1b:0e:98:7e:50:aa:65:95:38: 14:3b:d9:73:5f:22:f9:5c:a4:92:50:00:6c:22:6e: 4d:9f:e9:9c:d6:e5:a6:a0:16:9a:74:c2:e7:15:6f: 2c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9C:33:A0:AF:63:03:49:88:21:C3:00:D2:57:37:3F:68:F5:21:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a839e1c-d4c5-378e-ade0-0118e2a672da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:25:bd:2a:d4:ab:40:62:8a:bf:12:73:4f:26:c2:95:9d:4b: 32:5a:cc:fb:8d:98:89:95:07:4f:b1:bf:8f:60:e7:c7:cc:48: 64:19:0c:4f:50:2e:25:87:92:6e:79:bc:b0:d7:4f:e3:7d:9b: f9:44:9d:60:3d:4b:42:d7:a3:cb:1e:ed:6e:f4:16:14:05:38: a6:f9:19:a3:01:78:9b:c1:7f:48:31:aa:fd:87:a8:c3:03:f2: 36:20:7f:23:51:e3:d4:36:50:af:55:c1:6c:86:48:8e:35:6c: b2:ec:ba:bc:8f:e3:b6:c0:62:a2:b7:d8:45:e9:d8:b5:46:eb: 0f:11:a2:2b:f3:0c:68:fd:57:f8:44:29:8d:28:a4:cf:13:42: e8:c3:ac:7e:ef:6e:29:32:f4:fa:5d:da:ba:93:e3:41:61:8a: d3:f8:20:58:8f:5c:2a:4a:3e:b8:25:f0:4f:03:4c:8d:04:b3: 45:1f:da:97:70:1f:37:aa:9a:37:43:3c:21:9f:2f:1e:1a:2c: 1d:42:83:0e:d9:1a:66:ca:31:a8:46:8d:bc:2f:2c:d0:bd:28: 5d:ed:23:32:65:3f:6b:8a:0a:d7:74:0b:d6:b7:cf:56:6c:5e: 47:eb:f4:86:e0:c9:3b:90:a4:18:b5:c2:78:85:dc:44:44:4b: db:fd:9e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYXxvtY0TGHlulQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ZDJmM2M1ZjMtZDRhNC00MjQ3LWE2NDEtYmI5ODk1MjVlYjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wf/ArXS/TE0SOgU3AHsn6GCkG44YhywSZZG 4rGPsCFJPHkluGomYSePjjhOuyQILZ5NpVvXe4vOm2IBG/dv+w4gYQTScGxcDnz8 Y7wwtV7sJH1aqlh6ERgo9GPF73hMNG2kNTNIeMdbgnsyedgkSF7g/8/WpBGBjRVM BDPrW8eFTqFvxMKBk/ON7bpEEn/csR3ISz8Cb+1hEp8vH7El+l7Hi5BOPk0vVKoO CIF47nZKGNGQk7R4ff9uHEVl0GeIC5rN4ke7BkX5cxFtTIC80Pxpsvzo6pYbDph+ UKpllTgUO9lzXyL5XKSSUABsIm5Nn+mc1uWmoBaadMLnFW8szQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWcM6CvYwNJiCHDANJXNz9o9SFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmE4MzllMWMtZDRjNS0z NzhlLWFkZTAtMDExOGUyYTY3MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUlvSrUq0Biir8Sc08mwpWdSzJazPuNmImVB0+xv49g58fMSGQZDE9Q LiWHkm55vLDXT+N9m/lEnWA9S0LXo8se7W70FhQFOKb5GaMBeJvBf0gxqv2HqMMD 8jYgfyNR49Q2UK9VwWyGSI41bLLsuryP47bAYqK32EXp2LVG6w8RoivzDGj9V/hE KY0opM8TQujDrH7vbiky9Ppd2rqT40FhitP4IFiPXCpKPrgl8E8DTI0Es0Uf2pdw HzeqmjdDPCGfLx4aLB1Cgw7ZGmbKMahGjbwvLNC9KF3tIzJlP2uKCtd0C9a3z1Zs Xkfr9IbgyTuQpBi1wniF3ERES9v9nlM= -----END CERTIFICATE-----Generated at Mon Aug 4 18:34:41 2025 by rpki-client