$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77b8dc77-6fa5-3826-a468-db68e51165b7.roa File: 77b8dc77-6fa5-3826-a468-db68e51165b7.roa (raw, json) Hash identifier: hNQh3cjx6geHtFOGAygIZercgh6cU8Nt/M6tkIYrv/E= Subject key identifier: A3:FA:7B:0A:63:DF:EF:D1:30:74:BA:5C:F3:39:D4:49:AD:E8:C2:02 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB4EB81ACE450569439CCCD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77b8dc77-6fa5-3826-a468-db68e51165b7.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 36183 IP address blocks: 172.224.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:81:ac:e4:50:56:94:39:cc:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=4bbe4641-7e75-43a8-b852-5bbb1c8240bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a6:25:03:90:13:a0:0e:03:a3:46:08:fc:21: af:d1:1f:71:22:4c:a9:49:3e:9e:2b:21:d9:b7:8b: bc:3c:aa:4a:7b:16:2d:a2:ff:da:50:8f:10:82:e1: 58:11:49:e4:8d:b8:d2:89:d4:ad:a8:64:fa:60:53: d6:2d:cd:86:4b:fe:e2:80:23:1f:21:77:6b:ac:6a: f6:b8:75:fa:62:8d:a6:51:5a:16:59:28:e4:38:bd: 28:7d:7e:f6:b3:8f:bf:34:18:50:88:20:8d:f4:98: 9a:23:78:b1:1f:2e:1b:3f:6b:d8:1f:fe:19:9b:ec: e1:52:66:9a:d2:82:f3:9a:53:f4:6a:c5:d0:dc:10: c1:39:9b:8d:41:8e:21:ca:1c:8b:e1:51:4f:c3:d9: 93:3b:0c:65:f2:bb:9e:e3:df:3b:74:d2:25:24:53: b4:b3:39:d6:10:35:66:46:ef:bd:14:65:43:46:f2: 86:34:ae:82:d3:33:07:f8:a0:c6:b8:2b:c1:4e:ca: 67:c6:42:8a:56:41:47:21:1e:86:ad:8e:7b:0d:91: 1e:07:bb:b8:69:4d:fd:f2:21:01:d6:ea:7a:f0:5e: 3c:bd:58:0b:37:6a:9c:e7:83:77:34:d4:30:5a:59: b7:fa:a4:28:26:3a:77:55:46:6e:b6:32:41:d1:a1: 29:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FA:7B:0A:63:DF:EF:D1:30:74:BA:5C:F3:39:D4:49:AD:E8:C2:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77b8dc77-6fa5-3826-a468-db68e51165b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b4:5a:ce:ec:40:c7:fb:76:f8:a0:95:c6:39:3d:79:86:25: 16:91:2d:fd:5d:1a:d9:e4:ad:0b:f7:fc:2f:76:44:38:0b:b0: a1:60:dd:28:9c:6d:36:30:85:7e:0c:15:58:fa:05:59:01:ae: b3:42:a7:f5:11:81:a4:2d:40:90:16:62:07:56:be:8b:2e:50: 85:18:96:90:34:7f:82:67:8f:f2:d6:df:f0:3c:61:70:65:98: 89:75:ce:22:79:a1:a1:61:a3:66:8e:36:63:ec:13:2c:06:e5: 55:9d:c7:54:be:1e:b1:73:49:98:39:8c:12:32:fd:a3:d1:fc: c4:61:04:43:fa:5d:64:18:1a:cf:6d:bd:69:03:bd:fd:4f:ce: 33:80:82:75:f7:3f:e0:92:ed:b5:78:27:d1:10:1c:01:5c:5d: cf:a5:00:86:a7:03:49:61:61:d4:6a:21:9a:d8:0d:ea:0c:ac: d5:8d:a0:16:d3:7b:db:d0:3e:26:4a:64:8f:69:43:f5:bf:b9: b8:2d:86:17:e2:36:d4:0a:14:6d:59:0e:d5:bc:e7:54:52:62: d6:63:00:99:47:38:7e:37:58:f2:22:b3:1f:08:24:e8:77:45: 22:c1:40:47:b5:88:82:30:36:83:21:63:35:87:45:5e:e4:6c: bd:d1:0a:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq064Gs5FBWlDnMzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NGJiZTQ2NDEtN2U3NS00M2E4LWI4NTItNWJiYjFjODI0MGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qYlA5AToA4Do0YI/CGv0R9xIkypST6eKyHZ t4u8PKpKexYtov/aUI8QguFYEUnkjbjSidStqGT6YFPWLc2GS/7igCMfIXdrrGr2 uHX6Yo2mUVoWWSjkOL0ofX72s4+/NBhQiCCN9JiaI3ixHy4bP2vYH/4Zm+zhUmaa 0oLzmlP0asXQ3BDBOZuNQY4hyhyL4VFPw9mTOwxl8rue4987dNIlJFO0sznWEDVm Ru+9FGVDRvKGNK6C0zMH+KDGuCvBTspnxkKKVkFHIR6GrY57DZEeB7u4aU398iEB 1up68F48vVgLN2qc54N3NNQwWlm3+qQoJjp3VUZutjJB0aEpAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP6ewpj3+/RMHS6XPM51Emt6MICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzdiOGRjNzctNmZhNS0z ODI2LWE0NjgtZGI2OGU1MTE2NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS0Ws7sQMf7dviglcY5PXmGJRaRLf1dGtnkrQv3/C92RDgLsKFg3Sic bTYwhX4MFVj6BVkBrrNCp/URgaQtQJAWYgdWvosuUIUYlpA0f4Jnj/LW3/A8YXBl mIl1ziJ5oaFho2aONmPsEywG5VWdx1S+HrFzSZg5jBIy/aPR/MRhBEP6XWQYGs9t vWkDvf1PzjOAgnX3P+CS7bV4J9EQHAFcXc+lAIanA0lhYdRqIZrYDeoMrNWNoBbT e9vQPiZKZI9pQ/W/ubgthhfiNtQKFG1ZDtW851RSYtZjAJlHOH43WPIisx8IJOh3 RSLBQEe1iIIwNoMhYzWHRV7kbL3RCi8= -----END CERTIFICATE-----Generated at Mon Aug 4 18:28:19 2025 by rpki-client