$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaad9cc4-26e8-3f10-bfb6-f9c515f35977.roa File: aaad9cc4-26e8-3f10-bfb6-f9c515f35977.roa (raw, json) Hash identifier: muu4ICnQQC3NRxWSzi4G0f0/wEoPcX37TlHlvkvBbu0= Subject key identifier: B3:85:0F:C7:63:CC:8A:B2:A5:40:D0:80:48:7B:99:7A:06:62:16:66 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AADF13131F594A14268DECE30 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaad9cc4-26e8-3f10-bfb6-f9c515f35977.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 63949 IP address blocks: 172.235.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:31:31:f5:94:a1:42:68:de:ce:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=edded5a0-56b1-4640-9861-b9809ab84e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:83:a1:e3:bd:fd:2e:5b:bb:30:4b:86:cb:20: 8d:2b:8c:76:c1:b8:63:6c:05:e3:20:dc:65:df:a8: ea:a3:5b:bf:4e:64:c6:7b:fd:da:cf:cf:13:db:77: 2f:a4:5f:04:cd:5d:b2:58:98:c6:bf:13:8f:71:81: a4:71:e7:8f:93:3d:78:d5:b9:84:b9:d7:9f:6a:6d: 63:ef:c6:0a:27:73:7c:a0:74:af:ae:a6:3b:45:40: d4:28:04:98:b9:11:87:ba:2e:20:d9:60:b3:e4:50: 83:98:4e:ee:35:25:ab:32:ca:74:7b:27:8b:17:a5: 12:82:1c:9b:75:38:d6:8d:89:43:a9:fc:71:d8:96: 4a:09:bf:d8:c4:72:ba:ab:8c:b7:aa:ba:cd:d6:d7: 70:02:bc:8f:39:6d:67:a8:9f:1f:55:4b:7b:03:a5: d2:83:8e:18:ec:0b:54:f2:fd:f9:cc:0c:3e:b4:db: a0:16:b6:4d:71:c2:0d:be:57:fc:68:87:ca:67:e5: f5:d0:eb:eb:e3:4b:2e:e9:cf:9c:e6:f5:d3:71:7e: 9d:fd:94:ca:c8:9f:d3:01:b3:6d:4e:1c:6e:a1:d6: 09:a0:29:bc:73:ee:0f:b8:89:9f:68:2b:37:67:31: f2:c2:02:ff:20:0f:87:85:89:94:13:85:5b:a4:33: 1d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:85:0F:C7:63:CC:8A:B2:A5:40:D0:80:48:7B:99:7A:06:62:16:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaad9cc4-26e8-3f10-bfb6-f9c515f35977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:39:ff:b5:0d:f9:6b:55:0f:f3:f3:c7:05:84:7d:a0:6f:60: 1f:17:fd:b2:02:41:b1:70:eb:df:21:0c:b9:39:39:24:77:f1: e1:2b:1b:fa:79:22:72:65:e3:09:5a:36:61:d2:cb:26:ad:f9: 03:6b:6d:e1:b4:d5:5a:dd:7a:e3:32:1a:12:a9:c1:fb:21:5d: 89:e9:07:d0:24:be:d0:22:7d:dd:ac:87:5e:b8:ea:9a:46:77: e8:1f:1f:ac:d4:3b:f0:47:15:ba:e3:4c:c8:db:4e:4f:b1:09: 18:e6:7c:69:a3:37:d9:5b:77:52:cb:19:24:bf:c3:86:61:fb: 17:e2:27:4a:92:13:07:44:81:06:39:c3:68:66:18:e9:2b:1b: db:bd:21:a6:9e:8b:64:de:29:63:92:0a:f6:70:63:9f:ee:17: 7b:ba:55:c8:dd:95:f8:7a:08:d5:d9:12:63:f0:16:20:08:b4: 51:63:34:88:24:27:8a:04:3d:c5:fe:11:c5:b7:fe:74:c7:f0: ff:7c:f2:92:dc:b1:a0:07:8a:0a:a2:0b:9f:4d:9b:09:3d:00: ec:f9:be:9e:82:56:5e:46:f1:c9:cb:7e:98:c5:82:4f:88:3a: f0:a3:fe:f0:57:97:db:e1:d4:b4:04:7d:17:c3:58:95:8c:48: 2e:e8:20:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8TEx9ZShQmjezjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZWRkZWQ1YTAtNTZiMS00NjQwLTk4NjEtYjk4MDlhYjg0ZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIOh4739Llu7MEuGyyCNK4x2wbhjbAXjINxl 36jqo1u/TmTGe/3az88T23cvpF8EzV2yWJjGvxOPcYGkceePkz141bmEudefam1j 78YKJ3N8oHSvrqY7RUDUKASYuRGHui4g2WCz5FCDmE7uNSWrMsp0eyeLF6USghyb dTjWjYlDqfxx2JZKCb/YxHK6q4y3qrrN1tdwAryPOW1nqJ8fVUt7A6XSg44Y7AtU 8v35zAw+tNugFrZNccINvlf8aIfKZ+X10Ovr40su6c+c5vXTcX6d/ZTKyJ/TAbNt ThxuodYJoCm8c+4PuImfaCs3ZzHywgL/IA+HhYmUE4VbpDMdowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOFD8djzIqypUDQgEh7mXoGYhZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWFhZDljYzQtMjZlOC0z ZjEwLWJmYjYtZjljNTE1ZjM1OTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA85/7UN+WtVD/PzxwWEfaBvYB8X/bICQbFw698hDLk5OSR38eErG/p5 InJl4wlaNmHSyyat+QNrbeG01VrdeuMyGhKpwfshXYnpB9AkvtAifd2sh1646ppG d+gfH6zUO/BHFbrjTMjbTk+xCRjmfGmjN9lbd1LLGSS/w4Zh+xfiJ0qSEwdEgQY5 w2hmGOkrG9u9Iaaei2TeKWOSCvZwY5/uF3u6Vcjdlfh6CNXZEmPwFiAItFFjNIgk J4oEPcX+EcW3/nTH8P988pLcsaAHigqiC59Nmwk9AOz5vp6CVl5G8cnLfpjFgk+I OvCj/vBXl9vh1LQEfRfDWJWMSC7oIEM= -----END CERTIFICATE-----Generated at Mon Aug 4 18:26:15 2025 by rpki-client