$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa File: 884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa (raw, json) Hash identifier: 9iZZ7AgDRh9ddSCueEljwIXgTTimvIifYH5jyRQ/2hg= Subject key identifier: 74:7D:12:93:3B:DE:AE:0C:99:65:5F:47:50:22:50:20:D3:68:E9:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB4ED47C8D623D34BDB8D9D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 36183 IP address blocks: 172.224.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:47:c8:d6:23:d3:4b:db:8d:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=fcac6a2d-dcbb-4b68-95b3-35ceeb25ec3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:37:56:6a:8b:d2:3a:55:39:15:6f:af:1d: ae:80:5d:c0:de:a2:79:71:64:ca:9d:27:fb:ae:72: 37:de:43:24:94:07:51:9a:e7:cc:47:6e:34:f9:af: 79:c2:e2:0c:7e:1e:7f:57:e3:ea:17:ed:c5:ee:55: ca:6b:b2:26:ca:20:02:d5:91:4e:28:55:1d:53:20: b0:35:65:7b:81:0d:bf:95:d3:8c:81:a7:fd:f7:fa: 0e:ea:d0:e9:53:24:79:0f:dd:e0:17:01:f0:7f:92: 30:4f:c1:48:87:e1:73:e5:e2:49:68:b3:4c:00:a1: 7e:24:3e:4c:2f:db:0a:48:c3:36:ee:2a:65:1a:e2: 9f:c1:fc:54:e5:ae:f1:71:33:59:d9:d9:0b:0e:36: 17:03:18:b8:df:b2:4d:a5:aa:2e:c6:88:1e:cc:a4: 06:10:b8:4e:d2:0d:2b:99:a2:09:85:9b:d5:bc:8a: ca:d0:a4:40:11:2c:74:ad:af:57:67:43:67:90:6b: 26:69:db:85:15:3f:d6:5c:37:3d:e9:1e:cf:bf:a6: af:f8:58:75:c9:76:14:2d:20:34:b1:46:bb:70:76: c8:a8:ae:0b:09:19:d0:ce:25:5c:d4:a3:6f:60:39: c5:fe:07:5c:c6:74:21:49:5f:0b:f9:b0:c3:35:3c: 67:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7D:12:93:3B:DE:AE:0C:99:65:5F:47:50:22:50:20:D3:68:E9:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b4:6a:b1:ab:5f:85:d7:77:ad:02:47:51:a4:3f:65:d1:3f: 20:ef:60:6b:33:5f:f7:dd:f3:42:45:87:95:71:0c:9d:cf:24: e6:09:bc:3e:d7:1c:fc:14:5e:b6:32:b3:48:29:9e:61:a3:58: 00:ab:f8:a2:c1:e1:8e:d4:2a:5c:58:f8:d0:da:ff:15:00:1f: e8:77:cc:09:a1:95:cc:2e:f7:6b:73:a9:c9:7e:af:e7:b0:6e: 91:12:12:0a:3f:2a:fe:3b:6e:89:11:52:46:dd:a0:cb:c1:99: 89:cf:08:4f:eb:38:d1:4d:8c:a2:e2:e7:a3:c7:c5:83:2a:b3: f4:89:89:d2:56:4d:3e:1e:21:44:40:19:aa:5f:2a:23:81:98: 85:86:02:f0:f4:2a:f7:05:81:75:83:52:a0:6f:4a:c6:ce:56: 91:ef:ee:3a:cf:fe:6c:9e:c0:87:38:de:5e:50:a7:26:91:ae: 0a:64:5c:2e:ee:ea:fa:42:72:87:52:c2:0e:05:82:34:79:33: 27:49:33:6a:4c:ec:a7:a6:7b:5a:9e:fc:32:02:fc:03:95:6b: 4c:fe:0a:de:45:63:42:de:55:ba:57:55:24:70:af:63:36:47: db:f6:c3:2f:21:8b:19:d8:4f:7f:68:c6:cf:bd:a5:57:28:69: d8:4f:9e:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07UfI1iPTS9uNnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZmNhYzZhMmQtZGNiYi00YjY4LTk1YjMtMzVjZWViMjVlYzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpQ3VmqL0jpVORVvrx2ugF3A3qJ5cWTKnSf7 rnI33kMklAdRmufMR240+a95wuIMfh5/V+PqF+3F7lXKa7ImyiAC1ZFOKFUdUyCw NWV7gQ2/ldOMgaf99/oO6tDpUyR5D93gFwHwf5IwT8FIh+Fz5eJJaLNMAKF+JD5M L9sKSMM27iplGuKfwfxU5a7xcTNZ2dkLDjYXAxi437JNpaouxogezKQGELhO0g0r maIJhZvVvIrK0KRAESx0ra9XZ0NnkGsmaduFFT/WXDc96R7Pv6av+Fh1yXYULSA0 sUa7cHbIqK4LCRnQziVc1KNvYDnF/gdcxnQhSV8L+bDDNTxnsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHR9EpM73q4MmWVfR1AiUCDTaOm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODg0ZTFiYjQtZjZlOS0z MDdlLWE0OWUtNTFlN2E2Y2EzZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG0arGrX4XXd60CR1GkP2XRPyDvYGszX/fd80JFh5VxDJ3PJOYJvD7X HPwUXrYys0gpnmGjWACr+KLB4Y7UKlxY+NDa/xUAH+h3zAmhlcwu92tzqcl+r+ew bpESEgo/Kv47bokRUkbdoMvBmYnPCE/rONFNjKLi56PHxYMqs/SJidJWTT4eIURA GapfKiOBmIWGAvD0KvcFgXWDUqBvSsbOVpHv7jrP/myewIc43l5QpyaRrgpkXC7u 6vpCcodSwg4FgjR5MydJM2pM7Keme1qe/DIC/AOVa0z+Ct5FY0LeVbpXVSRwr2M2 R9v2wy8hixnYT39oxs+9pVcoadhPnkw= -----END CERTIFICATE-----Generated at Mon Aug 4 18:26:39 2025 by rpki-client