$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0355147-df73-3b03-8594-bb233ca6a468.roa File: b0355147-df73-3b03-8594-bb233ca6a468.roa (raw, json) Hash identifier: YV8hXb97aQyQFSy0VTa0cUJvWRIopZMgDqeGlNdWf4k= Subject key identifier: 87:7A:66:B0:3F:4B:88:C8:C9:23:26:26:53:04:90:7B:0C:B6:86:E6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9D30F42AE4A0E583092ADA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0355147-df73-3b03-8594-bb233ca6a468.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 36183 IP address blocks: 172.225.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f4:2a:e4:a0:e5:83:09:2a:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=9a59f165-6031-4cbd-8050-0abfffe6dece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:77:dc:75:c3:a4:ae:e3:80:3c:23:7f:5b:93: 8d:53:1e:4f:d7:44:9f:65:73:78:33:94:ad:c3:01: a2:87:ea:30:52:5b:97:50:ab:73:49:49:dc:b3:a3: 8f:f0:7a:6a:50:9c:2b:2a:9b:d5:d7:64:77:f1:22: 2d:1d:e9:bd:45:0c:44:01:87:b2:c9:b7:4b:3e:11: 5e:c8:03:e8:5e:89:a1:f6:06:b0:38:01:91:79:25: 72:c7:63:d7:aa:87:54:cb:99:f8:0b:95:8a:fe:06: 2a:a2:db:af:ab:59:88:d5:6a:22:24:fa:47:e4:d3: 75:05:9a:8d:9e:e5:3c:73:a2:32:1f:f7:61:51:f1: e0:e7:1c:be:54:4f:ce:1c:58:99:fb:26:9b:8c:21: 46:7b:8c:da:a4:80:c3:bf:e8:0d:4b:93:95:cf:99: 2c:a5:98:88:58:12:23:8a:4d:d7:a5:48:f3:fc:20: 42:2a:3d:e5:a5:63:45:30:25:1a:9d:e8:78:92:8b: d5:28:ac:51:30:5d:88:99:a7:f6:e2:c4:ca:db:0f: b4:d3:ce:95:37:18:d6:a8:cf:55:af:39:16:a6:1b: 0d:34:1d:cf:82:21:a6:b7:27:dd:50:1e:02:3a:d9: 08:c8:49:05:b7:8f:d8:85:2b:73:d6:89:53:03:9d: c8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7A:66:B0:3F:4B:88:C8:C9:23:26:26:53:04:90:7B:0C:B6:86:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0355147-df73-3b03-8594-bb233ca6a468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:f2:64:90:42:ad:7b:47:e8:e7:17:f2:34:19:aa:ac:4c:8a: ce:e0:6b:d5:9e:d6:13:ed:16:48:77:c7:5b:10:fc:56:bb:53: de:16:da:bd:f5:45:c1:97:47:c7:6b:eb:b5:8f:bb:16:01:d5: 67:1d:f6:c8:81:ed:6b:d8:19:46:21:11:07:2c:62:fd:be:58: 24:f4:bd:6e:54:2c:fc:2b:fd:b2:6a:1d:4e:82:bd:c8:d0:10: 8a:5d:ae:3d:28:87:cc:9e:ee:5d:19:5b:87:a9:85:c2:57:2c: 47:4a:40:9d:5e:d7:2e:61:be:f0:3a:22:5e:22:1c:0c:e0:ac: c0:5a:38:92:7e:d5:5e:83:df:9c:1e:74:9b:af:0b:e6:73:d8: 60:6b:a0:00:db:99:ba:70:08:c6:c0:bb:fe:d8:e7:45:3f:de: 8a:dc:d1:d0:76:1d:b7:b7:32:7e:81:47:3b:1f:ef:cd:83:b5: 1f:01:3c:be:63:e1:6f:ec:8e:8d:73:d9:e1:29:6e:9a:37:77: 1a:51:80:7d:6d:c7:39:58:2f:a3:6e:39:1e:33:18:ae:dc:f4: 14:8d:45:a9:77:78:ea:7d:7f:8f:f9:6f:7d:66:8a:08:96:31: a3:8a:ed:4d:cc:00:49:3f:76:95:21:6b:6d:06:a9:62:3a:e8: 9e:20:4e:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPQq5KDlgwkq2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk OWE1OWYxNjUtNjAzMS00Y2JkLTgwNTAtMGFiZmZmZTZkZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73fcdcOkruOAPCN/W5ONUx5P10SfZXN4M5St wwGih+owUluXUKtzSUncs6OP8HpqUJwrKpvV12R38SItHem9RQxEAYeyybdLPhFe yAPoXomh9gawOAGReSVyx2PXqodUy5n4C5WK/gYqotuvq1mI1WoiJPpH5NN1BZqN nuU8c6IyH/dhUfHg5xy+VE/OHFiZ+yabjCFGe4zapIDDv+gNS5OVz5kspZiIWBIj ik3XpUjz/CBCKj3lpWNFMCUaneh4kovVKKxRMF2Imaf24sTK2w+0086VNxjWqM9V rzkWphsNNB3PgiGmtyfdUB4COtkIyEkFt4/YhStz1olTA53IZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId6ZrA/S4jIySMmJlMEkHsMtobmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjAzNTUxNDctZGY3My0z YjAzLTg1OTQtYmIyMzNjYTZhNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/yZJBCrXtH6OcX8jQZqqxMis7ga9We1hPtFkh3x1sQ/Fa7U94W2r31 RcGXR8dr67WPuxYB1Wcd9siB7WvYGUYhEQcsYv2+WCT0vW5ULPwr/bJqHU6CvcjQ EIpdrj0oh8ye7l0ZW4ephcJXLEdKQJ1e1y5hvvA6Il4iHAzgrMBaOJJ+1V6D35we dJuvC+Zz2GBroADbmbpwCMbAu/7Y50U/3orc0dB2Hbe3Mn6BRzsf782DtR8BPL5j 4W/sjo1z2eEpbpo3dxpRgH1txzlYL6NuOR4zGK7c9BSNRal3eOp9f4/5b31migiW MaOK7U3MAEk/dpUha20GqWI66J4gTkU= -----END CERTIFICATE-----Generated at Tue Aug 5 17:26:16 2025 by rpki-client