$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa0bb262-6abc-3b2b-b7d7-ff0162b97211.roa File: aa0bb262-6abc-3b2b-b7d7-ff0162b97211.roa (raw, json) Hash identifier: Z9qBZjD1LCc+hbQrbLqjrv3wRhMXuavBvAzkjNILmoo= Subject key identifier: 64:BA:48:F4:8F:36:C3:1A:6E:63:D1:90:90:31:C1:CC:66:0E:71:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AA1617B76DAE673D4CBE73540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa0bb262-6abc-3b2b-b7d7-ff0162b97211.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 36183 IP address blocks: 172.225.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:7b:76:da:e6:73:d4:cb:e7:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=52ee530e-4afa-4236-b14d-e029267008eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:98:d0:45:86:35:ce:60:38:08:6e:cf:b3:62: f7:93:6d:11:30:cc:1b:27:2a:c9:b9:5f:06:44:f3: f8:01:39:3f:7d:e0:ed:f9:d6:77:9e:c8:43:9c:47: ca:f7:bb:6b:d5:dc:0b:00:5c:83:4f:49:4a:c2:37: 1a:57:11:6d:64:d3:f9:b2:49:d7:70:48:b5:f5:75: 9d:9a:3a:95:ce:6e:19:e4:8e:f1:98:4a:54:03:a0: c5:ec:d3:d9:dc:ee:fc:71:2c:4c:3b:8c:91:1b:61: b0:d9:5a:bc:77:99:b1:e5:70:33:a4:25:35:ea:2e: 85:4d:e9:b9:ad:a5:7f:06:4b:d6:fd:c8:b2:c7:17: ea:8a:27:a2:c4:e9:44:61:cb:6a:8a:5f:2c:35:35: 79:33:3b:c4:1d:43:06:83:ce:32:e1:6d:d6:05:10: 1f:32:d9:98:55:0a:2f:98:7f:c8:d6:f2:60:04:ca: 91:34:50:30:b1:5f:38:d8:97:23:d0:fe:2c:a8:20: 76:e6:8f:47:e1:83:be:11:8a:85:d0:b7:9e:55:13: 36:38:65:53:64:8c:84:4c:fc:5b:17:a5:65:87:32: af:23:16:e4:7c:04:96:bc:a8:46:0f:1e:ef:4e:f6: 2c:1e:7c:12:f2:c7:68:84:03:ab:a4:0a:18:d6:d8: f0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BA:48:F4:8F:36:C3:1A:6E:63:D1:90:90:31:C1:CC:66:0E:71:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa0bb262-6abc-3b2b-b7d7-ff0162b97211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:f3:81:5c:10:a9:69:e3:3d:73:cb:91:04:65:c7:cc:9b:df: 36:b8:a5:7d:f8:bf:b1:7b:38:4c:ed:b1:a0:77:6b:ce:33:00: 46:33:8d:35:1f:ca:00:c1:53:a0:77:e9:e0:aa:38:3a:5c:5c: 3e:a2:2f:01:5b:f0:16:29:97:08:09:a9:95:39:1f:e9:74:c2: fa:74:d6:3b:02:47:e9:fe:a8:92:f8:be:c0:58:32:57:56:36: 3a:30:0e:db:e1:70:28:73:e1:d4:cc:09:9e:84:d2:85:80:2d: 3a:5a:0b:c0:ba:33:58:ce:e3:a6:b5:59:78:14:ef:54:82:8d: e7:1b:b5:1c:0a:d5:d9:4e:e6:69:ea:4a:37:37:12:e7:2b:af: 3e:b3:55:50:1c:8e:f2:a7:fd:43:0b:c2:35:4e:d2:02:00:1a: ab:5c:ed:6f:97:57:1c:00:23:f3:5d:3e:65:a4:84:f3:cb:3d: 3b:b1:29:e0:3d:64:d5:fa:92:47:d5:0a:2f:73:4d:1f:df:b5: 1f:3a:ce:26:5f:cc:6b:e4:09:fe:5d:05:5e:fe:28:fb:eb:63: 49:88:c8:73:cd:61:cc:04:f6:14:5c:d3:ad:93:49:15:b3:84: e3:0b:70:e6:82:c0:38:e3:a3:bb:44:71:90:47:ef:2a:cc:fa: c3:2f:6e:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYXt22uZz1MvnNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NTJlZTUzMGUtNGFmYS00MjM2LWIxNGQtZTAyOTI2NzAwOGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZjQRYY1zmA4CG7Ps2L3k20RMMwbJyrJuV8G RPP4ATk/feDt+dZ3nshDnEfK97tr1dwLAFyDT0lKwjcaVxFtZNP5sknXcEi19XWd mjqVzm4Z5I7xmEpUA6DF7NPZ3O78cSxMO4yRG2Gw2Vq8d5mx5XAzpCU16i6FTem5 raV/BkvW/ciyxxfqiieixOlEYctqil8sNTV5MzvEHUMGg84y4W3WBRAfMtmYVQov mH/I1vJgBMqRNFAwsV842Jcj0P4sqCB25o9H4YO+EYqF0LeeVRM2OGVTZIyETPxb F6VlhzKvIxbkfASWvKhGDx7vTvYsHnwS8sdohAOrpAoY1tjwKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGS6SPSPNsMabmPRkJAxwcxmDnGqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWEwYmIyNjItNmFiYy0z YjJiLWI3ZDctZmYwMTYyYjk3MjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3zgVwQqWnjPXPLkQRlx8yb3za4pX34v7F7OEztsaB3a84zAEYzjTUf ygDBU6B36eCqODpcXD6iLwFb8BYplwgJqZU5H+l0wvp01jsCR+n+qJL4vsBYMldW NjowDtvhcChz4dTMCZ6E0oWALTpaC8C6M1jO46a1WXgU71SCjecbtRwK1dlO5mnq Sjc3Eucrrz6zVVAcjvKn/UMLwjVO0gIAGqtc7W+XVxwAI/NdPmWkhPPLPTuxKeA9 ZNX6kkfVCi9zTR/ftR86ziZfzGvkCf5dBV7+KPvrY0mIyHPNYcwE9hRc062TSRWz hOMLcOaCwDjjo7tEcZBH7yrM+sMvblg= -----END CERTIFICATE-----Generated at Mon Aug 4 19:01:19 2025 by rpki-client