$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86c115a8-a259-3026-ad5d-3e896c9dae00.roa File: 86c115a8-a259-3026-ad5d-3e896c9dae00.roa (raw, json) Hash identifier: WKrzm6rLz4Aprz3l4uDJXEqTVCA0mWmjlsLKIDBOLm0= Subject key identifier: 84:7D:0E:8A:FE:55:C0:50:E0:26:2F:4A:D8:72:FD:F2:C4:30:DA:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9E961E5FA3D1674CD718A900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86c115a8-a259-3026-ad5d-3e896c9dae00.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 63949 IP address blocks: 172.236.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:1e:5f:a3:d1:67:4c:d7:18:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=f9985d70-b41b-41f1-9b9f-de4a39f82093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:f4:21:9a:33:ee:84:15:9f:32:30:93:bd: e8:76:2d:8c:52:9e:52:4a:c7:2f:0b:8a:17:bf:2c: 1d:5b:08:7c:f7:2e:6d:5a:7f:19:46:36:f6:73:51: 4c:9b:8a:12:a1:88:f0:c9:c3:55:01:d0:d0:de:64: 13:2a:6e:0d:7b:c5:04:45:e2:47:36:b2:49:b4:4a: 0c:64:9e:81:7e:75:d7:10:74:99:e9:3b:2d:5d:f5: 71:86:9e:02:0a:75:80:e5:4c:74:73:3f:0c:53:af: cf:a3:83:b7:5e:3b:6e:7e:4d:f4:53:a1:47:e7:cb: 7f:b2:7c:98:7a:87:30:b4:7c:54:bf:d8:06:a1:f7: eb:24:ee:35:62:4b:87:91:83:0c:b8:27:6c:b9:41: 6e:ab:9a:a3:67:37:7f:26:1b:0e:54:7e:57:2b:d5: 72:01:92:b9:5d:72:d8:73:61:eb:fe:f7:18:ba:e2: 07:bd:00:7a:8e:a9:3a:89:92:5f:1e:58:81:80:db: 34:66:cf:9f:63:96:1a:40:fc:a7:9c:85:67:f1:d0: c3:db:4d:d0:eb:df:ff:04:e1:75:d9:de:a9:e8:38: d3:35:4c:a1:f3:bc:0f:13:b4:af:97:1f:2f:f6:81: 47:3c:79:ce:bf:91:2c:1e:44:09:24:b3:e8:83:96: 62:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7D:0E:8A:FE:55:C0:50:E0:26:2F:4A:D8:72:FD:F2:C4:30:DA:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86c115a8-a259-3026-ad5d-3e896c9dae00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.236.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6e:e9:5e:15:da:51:0a:ab:75:98:5f:18:60:40:c4:73:97: 8c:5e:54:44:68:c5:88:f5:dc:9b:88:ac:de:62:bc:9c:a2:a5: 00:bc:4b:21:92:e7:75:43:9c:81:c9:d6:f6:62:c1:fb:6b:9d: ce:85:3c:09:9c:62:67:9a:83:78:7e:9e:7e:bc:f7:1a:61:15: 7b:d2:de:30:24:e8:5e:1a:87:f9:bc:ba:90:76:ba:b5:d8:84: 44:e5:0a:ad:a4:01:cf:ef:fa:b8:60:4f:e4:39:ee:2e:ff:c3: ef:24:8a:9e:9f:de:6d:7a:4e:a8:91:32:2f:64:af:54:17:3d: 1a:cf:f8:1f:c3:e8:d1:ae:c3:ad:7a:bc:9a:16:3d:32:2c:ea: a8:9e:25:92:7b:a1:7d:df:5c:45:8e:1f:cf:21:00:f3:2f:d8: 8b:77:43:31:f8:ca:65:fb:b3:bc:c9:8f:be:e5:4b:c1:e2:ee: 54:4e:39:62:53:47:2b:5e:5a:3e:73:9e:e8:17:a7:45:c6:da: 10:37:b6:52:9a:9e:01:6c:18:87:1a:33:45:ad:01:c8:f9:a8: a8:8d:e5:8f:c5:69:2d:04:a5:ab:1d:d3:47:32:ee:ea:01:e9: 82:23:43:ff:dc:2f:8a:9d:03:f4:df:23:c9:f7:cd:db:91:b4: 42:55:0c:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelh5fo9FnTNcYqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk Zjk5ODVkNzAtYjQxYi00MWYxLTliOWYtZGU0YTM5ZjgyMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD70IZoz7oQVnzIwk73odi2MUp5SSscvC4oX vywdWwh89y5tWn8ZRjb2c1FMm4oSoYjwycNVAdDQ3mQTKm4Ne8UEReJHNrJJtEoM ZJ6BfnXXEHSZ6TstXfVxhp4CCnWA5Ux0cz8MU6/Po4O3Xjtufk30U6FH58t/snyY eocwtHxUv9gGoffrJO41YkuHkYMMuCdsuUFuq5qjZzd/JhsOVH5XK9VyAZK5XXLY c2Hr/vcYuuIHvQB6jqk6iZJfHliBgNs0Zs+fY5YaQPynnIVn8dDD203Q69//BOF1 2d6p6DjTNUyh87wPE7Svlx8v9oFHPHnOv5EsHkQJJLPog5ZibwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIR9Dor+VcBQ4CYvSthy/fLEMNqkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZjMTE1YTgtYTI1OS0z MDI2LWFkNWQtM2U4OTZjOWRhZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9u6V4V2lEKq3WYXxhgQMRzl4xeVERoxYj13JuIrN5ivJyipQC8SyGS 53VDnIHJ1vZiwftrnc6FPAmcYmeag3h+nn689xphFXvS3jAk6F4ah/m8upB2urXY hETlCq2kAc/v+rhgT+Q57i7/w+8kip6f3m16TqiRMi9kr1QXPRrP+B/D6NGuw616 vJoWPTIs6qieJZJ7oX3fXEWOH88hAPMv2It3QzH4ymX7s7zJj77lS8Hi7lROOWJT RyteWj5znugXp0XG2hA3tlKangFsGIcaM0WtAcj5qKiN5Y/FaS0Epasd00cy7uoB 6YIjQ//cL4qdA/TfI8n3zduRtEJVDKE= -----END CERTIFICATE-----Generated at Mon Aug 4 19:00:17 2025 by rpki-client