$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fd6bc71-c754-3d0d-9333-9280e5b663a6.roa File: 7fd6bc71-c754-3d0d-9333-9280e5b663a6.roa (raw, json) Hash identifier: /eHssU3tXK/mDrnq3Se5JcRCL2OeRN2An56Q2fu2i00= Subject key identifier: 19:5F:32:BF:7D:33:46:7F:A6:D0:14:67:6C:DE:D6:64:39:1E:03:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AA1617BC829A8FCAC7FB151E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fd6bc71-c754-3d0d-9333-9280e5b663a6.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 36183 IP address blocks: 172.225.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:7b:c8:29:a8:fc:ac:7f:b1:51:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=2aa9cf7b-2a7a-463a-b352-8d612d1c4fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:09:2f:4f:30:66:ad:46:2e:6b:ea:81:c7:88: 9a:95:71:c4:65:16:40:df:09:6f:b4:c4:1a:b1:b1: a0:1a:a4:c7:fe:64:f0:9e:d8:25:b9:98:75:8b:51: d0:47:b1:7b:26:05:bd:5e:09:f4:0b:ea:f7:b9:11: 60:a8:3d:cf:88:17:9e:ea:0f:ea:03:37:85:48:3c: db:6c:0c:2a:55:6b:01:2d:84:2a:74:91:d0:1d:02: 93:15:e8:03:46:9f:37:b8:1a:d1:bb:2f:81:30:f0: c7:a0:d5:80:f5:82:de:61:ea:c8:48:24:87:0a:88: f1:71:4d:11:c6:38:e9:92:ba:a9:91:01:ea:d9:fc: eb:0f:68:a0:86:b5:9e:11:cc:36:04:08:c0:45:fe: dc:ad:c8:14:37:9b:fe:83:5d:c6:c8:79:f2:c5:a4: e6:6c:7e:39:08:2e:d4:8a:b1:28:f9:90:c7:45:c7: c5:1c:b6:3c:c4:e9:ba:fe:bb:c2:f2:56:07:6b:b0: c7:f3:99:f1:a2:26:e9:e9:62:9d:99:00:d0:8d:6e: 29:4a:c5:bf:53:6a:ad:62:af:8f:6d:46:1a:4c:b7: 51:c2:ec:d2:76:17:24:bb:44:72:53:c0:17:0a:98: 8d:a8:cd:31:10:ed:ba:8e:b0:f9:28:53:d2:c1:6b: cc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5F:32:BF:7D:33:46:7F:A6:D0:14:67:6C:DE:D6:64:39:1E:03:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fd6bc71-c754-3d0d-9333-9280e5b663a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:6e:1f:e3:22:dd:25:ba:af:83:8d:f1:1f:35:ec:4a:99:03: 7b:7d:35:ab:f2:dd:e0:f8:7a:f4:94:91:4c:26:8f:6c:d2:99: 40:ed:20:47:88:94:99:2f:32:93:cc:0d:72:8f:31:88:d8:86: a4:fe:e1:a2:21:bf:b0:da:ba:fd:ff:65:a2:44:f6:c2:eb:98: c8:be:a0:7b:a8:7b:c0:2e:73:0c:a4:4c:c1:19:85:bd:b4:b5: 58:d2:8a:a8:6e:68:6b:b1:ae:f7:f9:57:88:fd:73:80:67:d2: 5d:68:db:6d:8b:36:9c:27:09:e8:5e:c9:89:a8:80:07:d0:80: 2f:35:dc:2f:16:02:c7:8a:e1:19:46:21:93:47:d6:81:b0:59: bf:04:26:1a:e7:64:f5:41:32:f0:10:a0:a3:1d:de:a9:2d:24: de:65:68:0b:3b:0d:80:b6:66:24:e0:0c:97:06:ac:07:e9:84: 7f:01:92:4a:76:0b:04:46:7f:9c:71:e6:1b:f5:0f:e4:f5:14: c0:28:95:8b:d0:48:46:18:e5:7b:b0:21:7f:ca:0e:a0:95:9f: 92:4e:02:45:e2:0a:86:89:85:80:20:03:d4:e2:79:8f:ce:f9: 49:29:ed:21:c1:a5:c4:ff:28:e8:cc:6a:c5:68:6e:d0:36:96: 0a:53:3e:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYXvIKaj8rH+xUeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MmFhOWNmN2ItMmE3YS00NjNhLWIzNTItOGQ2MTJkMWM0ZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwkvTzBmrUYua+qBx4ialXHEZRZA3wlvtMQa sbGgGqTH/mTwntgluZh1i1HQR7F7JgW9Xgn0C+r3uRFgqD3PiBee6g/qAzeFSDzb bAwqVWsBLYQqdJHQHQKTFegDRp83uBrRuy+BMPDHoNWA9YLeYerISCSHCojxcU0R xjjpkrqpkQHq2fzrD2ighrWeEcw2BAjARf7crcgUN5v+g13GyHnyxaTmbH45CC7U irEo+ZDHRcfFHLY8xOm6/rvC8lYHa7DH85nxoibp6WKdmQDQjW4pSsW/U2qtYq+P bUYaTLdRwuzSdhcku0RyU8AXCpiNqM0xEO26jrD5KFPSwWvMiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlfMr99M0Z/ptAUZ2ze1mQ5HgOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2ZkNmJjNzEtYzc1NC0z ZDBkLTkzMzMtOTI4MGU1YjY2M2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZuH+Mi3SW6r4ON8R817EqZA3t9Navy3eD4evSUkUwmj2zSmUDtIEeI lJkvMpPMDXKPMYjYhqT+4aIhv7Dauv3/ZaJE9sLrmMi+oHuoe8AucwykTMEZhb20 tVjSiqhuaGuxrvf5V4j9c4Bn0l1o222LNpwnCeheyYmogAfQgC813C8WAseK4RlG IZNH1oGwWb8EJhrnZPVBMvAQoKMd3qktJN5laAs7DYC2ZiTgDJcGrAfphH8Bkkp2 CwRGf5xx5hv1D+T1FMAolYvQSEYY5XuwIX/KDqCVn5JOAkXiCoaJhYAgA9TieY/O +Ukp7SHBpcT/KOjMasVobtA2lgpTPn0= -----END CERTIFICATE-----Generated at Tue Aug 5 17:13:25 2025 by rpki-client