$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0fac626-0300-3084-9ca8-2318aa3d8512.roa File: a0fac626-0300-3084-9ca8-2318aa3d8512.roa (raw, json) Hash identifier: JxHhWReF+oP1MPFiE6DtGHTh2V853+pokcU+dEE//z8= Subject key identifier: 2A:63:E4:27:80:93:CB:69:06:96:68:2C:39:7B:44:5B:0D:D2:8F:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AA1617C22B3F13BD259DDD6C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0fac626-0300-3084-9ca8-2318aa3d8512.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 36183 IP address blocks: 172.225.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:7c:22:b3:f1:3b:d2:59:dd:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=4cc4487b-141f-4b3a-bf6a-9e299f9bc51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:e8:5d:d2:ec:95:f6:ce:3a:d6:62:76:53: 9d:82:79:8b:a3:d6:92:3c:3a:ea:77:2b:dc:7f:cb: 76:86:a0:7b:03:06:93:d2:9f:b1:06:d4:73:f1:51: 41:be:64:fe:dd:00:28:f6:91:e4:49:88:aa:b7:f5: 5a:d3:e7:fe:8f:4f:3d:49:5d:fc:fb:25:2b:bf:3a: 14:31:4d:34:8c:9c:d4:26:bb:31:89:62:31:9d:29: 2c:58:df:64:ab:9f:36:d8:f7:d4:be:d0:03:11:30: d9:41:0f:7c:e4:b0:11:c1:79:d0:1c:34:50:53:1a: f6:f5:b3:3b:43:38:67:47:8b:cc:67:53:43:f8:1d: 8c:11:86:21:91:56:ca:21:3a:28:54:88:67:39:18: 95:e3:05:b8:67:d4:f8:0c:f8:84:93:fa:fc:ed:a6: 1d:d8:cc:32:a1:a2:be:31:04:c7:2d:51:da:35:ec: 9b:06:73:bf:28:d5:47:be:9c:61:95:44:e5:b8:63: 9a:ea:af:83:64:dd:00:14:e1:21:e2:38:69:08:c2: bf:5d:7b:c0:78:e6:38:e4:8b:43:a0:21:1c:78:f8: 49:12:9d:b6:f4:d1:01:c9:29:e2:bb:5a:86:8d:e1: d5:14:1b:8c:93:20:0e:4a:93:79:aa:65:ef:75:7f: 84:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:63:E4:27:80:93:CB:69:06:96:68:2C:39:7B:44:5B:0D:D2:8F:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0fac626-0300-3084-9ca8-2318aa3d8512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:de:94:aa:23:1c:4c:52:d6:74:03:8e:1d:84:67:b0:0a:2f: 94:eb:2f:c7:21:44:35:bd:a2:88:41:26:a0:04:14:f7:9f:f1: 72:01:cf:ee:9a:81:41:e4:5e:19:b3:52:1f:07:6c:78:69:24: 56:a7:cb:d9:cd:65:b3:78:22:ff:0a:d7:4f:5b:cf:fe:27:9a: 44:a6:54:5b:24:35:68:c3:01:5a:cb:fd:88:54:9b:1e:3f:0c: b7:ab:34:41:17:91:42:05:0b:0d:84:56:d3:98:4c:d3:48:77: 5f:d1:dd:2a:e3:94:10:ef:7a:27:2c:bc:3a:af:08:8d:aa:66: 88:dc:4c:9c:1c:32:81:f8:09:26:7f:4b:44:f1:f9:65:71:a9: d8:13:1b:f4:2e:59:93:99:6f:1c:68:21:13:1d:b4:ea:06:ad: 19:e2:e5:6f:22:3b:79:ff:c6:b9:25:db:f8:48:ca:22:ec:42: 6b:4a:08:52:bf:1e:15:a3:f6:35:60:94:fb:6a:82:6c:1f:e7: d9:1c:0d:23:3c:ae:84:d1:f5:4b:8c:9a:62:35:11:d8:30:8a: 05:48:6d:66:e4:ce:be:e4:ac:ff:be:c0:46:36:7d:e7:46:79: 87:da:2a:e1:dc:d0:a4:48:77:78:1e:78:55:5b:27:46:b9:17: 44:44:26:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYXwis/E70lnd1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NGNjNDQ4N2ItMTQxZi00YjNhLWJmNmEtOWUyOTlmOWJjNTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkToXdLslfbOOtZidlOdgnmLo9aSPDrqdyvc f8t2hqB7AwaT0p+xBtRz8VFBvmT+3QAo9pHkSYiqt/Va0+f+j089SV38+yUrvzoU MU00jJzUJrsxiWIxnSksWN9kq5822PfUvtADETDZQQ985LARwXnQHDRQUxr29bM7 QzhnR4vMZ1ND+B2MEYYhkVbKITooVIhnORiV4wW4Z9T4DPiEk/r87aYd2MwyoaK+ MQTHLVHaNeybBnO/KNVHvpxhlUTluGOa6q+DZN0AFOEh4jhpCMK/XXvAeOY45ItD oCEcePhJEp229NEBySniu1qGjeHVFBuMkyAOSpN5qmXvdX+EVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpj5CeAk8tpBpZoLDl7RFsN0o9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTBmYWM2MjYtMDMwMC0z MDg0LTljYTgtMjMxOGFhM2Q4NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHelKojHExS1nQDjh2EZ7AKL5TrL8chRDW9oohBJqAEFPef8XIBz+6a gUHkXhmzUh8HbHhpJFany9nNZbN4Iv8K109bz/4nmkSmVFskNWjDAVrL/YhUmx4/ DLerNEEXkUIFCw2EVtOYTNNId1/R3SrjlBDveicsvDqvCI2qZojcTJwcMoH4CSZ/ S0Tx+WVxqdgTG/QuWZOZbxxoIRMdtOoGrRni5W8iO3n/xrkl2/hIyiLsQmtKCFK/ HhWj9jVglPtqgmwf59kcDSM8roTR9UuMmmI1EdgwigVIbWbkzr7krP++wEY2fedG eYfaKuHc0KRId3geeFVbJ0a5F0REJms= -----END CERTIFICATE-----Generated at Tue Aug 5 16:48:08 2025 by rpki-client