$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99345b81-9f5c-3fe2-965e-c89931753d9c.roa File: 99345b81-9f5c-3fe2-965e-c89931753d9c.roa (raw, json) Hash identifier: BQczBeq1X9vXSy4B+QrtXI+s10NkQFKhfmVYY5fXlvs= Subject key identifier: A5:76:CF:61:F3:D8:B3:63:DE:02:FC:A3:CE:AF:24:0D:18:B3:9A:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB91BB91247F31D37A31E88D8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99345b81-9f5c-3fe2-965e-c89931753d9c.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 36183 IP address blocks: 172.224.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:b9:12:47:f3:1d:37:a3:1e:88:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=8d9756eb-828e-41bc-9a96-6804009c451f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8d:cd:f6:b8:21:71:27:b4:12:32:bd:dc:30: 1a:2c:6d:13:ea:a2:f7:aa:71:3e:d5:02:d5:b1:7b: 35:99:80:f2:43:a4:aa:7a:95:b7:58:14:6d:4b:71: 77:a9:3d:0b:4f:13:aa:6b:c3:68:db:8e:35:ab:e2: 53:b1:b5:92:a4:84:b5:74:37:5b:5b:83:dc:58:dc: fa:37:6d:88:10:03:56:97:20:87:98:64:ad:18:bd: 4b:bd:a0:3e:ef:a5:53:d1:2d:72:88:81:7b:ea:35: d5:99:30:68:98:63:b9:e0:63:e4:f2:a2:e3:6d:1d: 95:91:74:fe:8d:1c:c7:ba:32:7a:63:c7:c8:03:42: 55:a3:79:91:ea:8e:14:09:42:af:da:ed:74:2d:76: ec:97:57:a4:d9:b5:2c:b2:da:94:9f:0e:1a:66:60: 40:e0:9e:bd:e9:22:5e:8c:83:44:70:35:e5:e8:4d: dd:b7:aa:2c:f6:ab:0a:fb:10:90:9b:03:ea:bb:c5: 43:6c:b9:96:36:c7:1a:7e:06:49:77:62:57:48:2d: 95:c8:0e:48:63:fb:2b:d1:4e:54:33:40:78:85:7f: 03:09:81:51:28:c6:45:82:0b:22:ae:d8:c3:83:1d: 34:ef:d2:45:a8:74:a8:54:6c:66:39:43:84:73:b9: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:76:CF:61:F3:D8:B3:63:DE:02:FC:A3:CE:AF:24:0D:18:B3:9A:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99345b81-9f5c-3fe2-965e-c89931753d9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:91:55:93:40:dd:ee:c9:26:67:cc:a2:c4:e5:30:f6:ef:0a: e9:05:1b:f9:26:d0:16:cb:88:b5:28:9d:82:c2:06:c7:6c:b9: ac:42:1a:d8:69:b3:3a:c1:8c:f1:f4:12:a1:3a:45:a2:8c:28: 1f:9d:57:db:3d:34:1b:10:1f:f0:25:ab:3b:bb:d8:72:6c:5a: 3c:ec:b2:07:c3:f8:f6:46:14:31:8f:fb:10:8c:07:c6:7c:e8: fc:5e:a6:fb:d1:7d:20:4f:98:82:89:b9:91:9d:42:0e:f7:ed: 87:fa:5c:d1:1d:e8:d7:11:a1:4c:a6:a4:69:53:74:3c:dd:35: 1e:ee:9b:12:8c:8f:17:4a:29:a9:91:48:f0:00:81:46:a5:34: 04:a6:69:7a:c7:43:54:7b:2f:7e:50:aa:1c:36:92:44:73:34: d3:d1:3f:e8:8c:b4:dc:ca:20:6f:3a:b7:8c:a5:59:65:1f:cb: f1:56:6c:3b:77:48:63:bc:47:00:95:45:be:02:f9:77:91:e9: 8e:c4:da:3e:48:11:ec:be:ce:0b:ba:e9:3f:99:ee:57:eb:d4: 0d:60:d6:75:98:05:61:e4:7e:ca:2a:20:35:01:8e:b8:a4:6c: cf:24:70:8b:84:f1:08:3b:4c:fe:ec:df:c4:63:da:58:2f:3f: f5:28:aa:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G7kSR/MdN6MeiNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk OGQ5NzU2ZWItODI4ZS00MWJjLTlhOTYtNjgwNDAwOWM0NTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY3N9rghcSe0EjK93DAaLG0T6qL3qnE+1QLV sXs1mYDyQ6SqepW3WBRtS3F3qT0LTxOqa8No2441q+JTsbWSpIS1dDdbW4PcWNz6 N22IEANWlyCHmGStGL1LvaA+76VT0S1yiIF76jXVmTBomGO54GPk8qLjbR2VkXT+ jRzHujJ6Y8fIA0JVo3mR6o4UCUKv2u10LXbsl1ek2bUsstqUnw4aZmBA4J696SJe jINEcDXl6E3dt6os9qsK+xCQmwPqu8VDbLmWNscafgZJd2JXSC2VyA5IY/sr0U5U M0B4hX8DCYFRKMZFggsirtjDgx0079JFqHSoVGxmOUOEc7lTIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV2z2Hz2LNj3gL8o86vJA0Ys5qRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTkzNDViODEtOWY1Yy0z ZmUyLTk2NWUtYzg5OTMxNzUzZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6RVZNA3e7JJmfMosTlMPbvCukFG/km0BbLiLUonYLCBsdsuaxCGthp szrBjPH0EqE6RaKMKB+dV9s9NBsQH/Alqzu72HJsWjzssgfD+PZGFDGP+xCMB8Z8 6PxepvvRfSBPmIKJuZGdQg737Yf6XNEd6NcRoUympGlTdDzdNR7umxKMjxdKKamR SPAAgUalNASmaXrHQ1R7L35Qqhw2kkRzNNPRP+iMtNzKIG86t4ylWWUfy/FWbDt3 SGO8RwCVRb4C+XeR6Y7E2j5IEey+zgu66T+Z7lfr1A1g1nWYBWHkfsoqIDUBjrik bM8kcIuE8Qg7TP7s38Rj2lgvP/Uoqo8= -----END CERTIFICATE-----Generated at Mon Aug 4 21:54:55 2025 by rpki-client