$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/983fcd04-dae3-31c8-a6bf-5bc82161069a.roa File: 983fcd04-dae3-31c8-a6bf-5bc82161069a.roa (raw, json) Hash identifier: 78cxDAd9T9Yt7+4Nl8j7pWwH0mCbz2kqWWlqxEcUM3Q= Subject key identifier: B1:CC:AE:02:67:8F:04:84:00:C1:90:0B:98:91:9A:22:B3:C3:29:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AA1617C5A00154A56401FFA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/983fcd04-dae3-31c8-a6bf-5bc82161069a.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 36183 IP address blocks: 172.225.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:7c:5a:00:15:4a:56:40:1f:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=e7174991-51c6-4daa-9813-7fcf22521c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:46:c7:9f:87:a0:f4:5f:8e:b2:d8:62:a5: 0d:77:a0:57:dd:90:16:de:4f:df:df:d0:24:f7:49: 99:5f:1f:37:3c:84:4c:98:b3:2b:73:95:6a:1f:c4: e4:33:dd:d9:e8:f0:57:0d:49:3f:27:91:b0:96:c5: 6a:0d:0a:04:c0:ff:57:b0:7e:f3:39:14:34:71:54: f8:e2:99:db:3a:9a:61:72:20:2b:92:de:41:18:b7: 6e:e5:e5:96:56:7d:30:9e:6a:35:e6:9b:12:23:0e: 98:bc:38:9d:a0:24:5d:36:2f:76:9c:cb:99:cc:20: 9d:cd:74:22:f2:74:5d:6e:50:3b:a0:fa:00:41:32: 93:94:ca:af:df:59:34:82:7f:b2:d0:e0:d9:6f:f4: 89:58:86:f5:4b:92:06:d7:5a:40:93:9f:b9:a9:11: e6:bd:2d:0c:c4:80:9e:ec:97:1d:c6:39:cb:4a:73: 77:56:10:60:2a:34:6a:cd:17:5f:9f:98:2f:b6:29: 0e:f0:c1:1e:21:60:a1:e8:7e:56:33:75:a1:d9:98: d2:b9:39:ad:a8:ba:c1:95:88:2e:91:48:24:73:86: e0:ce:49:5a:d9:56:b3:46:70:99:9c:f2:f8:da:07: 81:e1:47:74:93:c7:cc:3a:a6:98:bb:f1:95:c9:33: 10:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CC:AE:02:67:8F:04:84:00:C1:90:0B:98:91:9A:22:B3:C3:29:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/983fcd04-dae3-31c8-a6bf-5bc82161069a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9f:6e:5e:b9:3d:37:c6:0f:a9:6d:c8:be:46:2c:76:47:16: c9:0c:fd:05:8c:72:b9:26:66:a1:33:6f:3b:9d:f2:66:e2:eb: 7c:62:0d:c4:08:8e:41:5d:ae:b3:20:d4:2c:ed:cf:09:28:66: 95:62:9a:25:d0:af:4f:cd:c6:75:72:0a:0b:a7:37:e9:98:05: 5d:38:57:26:e9:64:e0:08:ca:0f:93:c5:aa:db:33:15:1c:3d: 3d:65:3c:55:c0:3d:95:15:53:7f:02:43:0a:90:d6:e5:5f:0b: d6:7c:df:95:28:c6:45:f9:70:cd:60:30:1c:3d:c2:06:60:89: 5c:65:e2:3d:39:b0:0b:19:5e:2f:e9:e8:10:b7:9d:c5:e5:ec: 44:7f:02:7d:f6:53:a8:fd:c6:cb:83:32:2e:c1:65:88:b2:00: 72:25:5e:af:f0:f2:95:d9:b8:dd:6d:65:b9:47:fc:8d:94:76: 0e:58:78:7d:4d:8b:f6:bf:0f:3a:7d:7a:58:e1:24:28:1a:a4: d4:c4:bb:85:e1:a1:a3:ec:e7:53:46:fb:a9:02:11:6f:d6:e8: 08:05:dc:e0:93:35:40:45:fb:6e:01:ab:d2:6c:2d:a7:6b:b2: 5b:9b:27:b9:09:d7:73:8f:d4:4b:da:2f:c9:23:2e:ea:69:35: fd:97:8f:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYXxaABVKVkAf+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ZTcxNzQ5OTEtNTFjNi00ZGFhLTk4MTMtN2ZjZjIyNTIxYzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUtGx5+HoPRfjrLYYqUNd6BX3ZAW3k/f39Ak 90mZXx83PIRMmLMrc5VqH8TkM93Z6PBXDUk/J5GwlsVqDQoEwP9XsH7zORQ0cVT4 4pnbOpphciArkt5BGLdu5eWWVn0wnmo15psSIw6YvDidoCRdNi92nMuZzCCdzXQi 8nRdblA7oPoAQTKTlMqv31k0gn+y0ODZb/SJWIb1S5IG11pAk5+5qRHmvS0MxICe 7JcdxjnLSnN3VhBgKjRqzRdfn5gvtikO8MEeIWCh6H5WM3Wh2ZjSuTmtqLrBlYgu kUgkc4bgzkla2VazRnCZnPL42geB4Ud0k8fMOqaYu/GVyTMQ+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHMrgJnjwSEAMGQC5iRmiKzwylxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTgzZmNkMDQtZGFlMy0z MWM4LWE2YmYtNWJjODIxNjEwNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmfbl65PTfGD6ltyL5GLHZHFskM/QWMcrkmZqEzbzud8mbi63xiDcQI jkFdrrMg1CztzwkoZpVimiXQr0/NxnVyCgunN+mYBV04VybpZOAIyg+TxarbMxUc PT1lPFXAPZUVU38CQwqQ1uVfC9Z835UoxkX5cM1gMBw9wgZgiVxl4j05sAsZXi/p 6BC3ncXl7ER/An32U6j9xsuDMi7BZYiyAHIlXq/w8pXZuN1tZblH/I2Udg5YeH1N i/a/Dzp9eljhJCgapNTEu4XhoaPs51NG+6kCEW/W6AgF3OCTNUBF+24Bq9JsLadr slubJ7kJ13OP1EvaL8kjLuppNf2Xj9g= -----END CERTIFICATE-----Generated at Wed Aug 6 07:49:49 2025 by rpki-client