$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa File: b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa (raw, json) Hash identifier: LZX0QYjGaIUqIQCU5BWSL1F0PF71ZV39ToYLIwfypUs= Subject key identifier: 14:D0:D7:60:1C:B3:3A:D0:20:80:C4:F0:5E:1C:44:ED:22:1C:3D:EF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB6510044E90311FA323F9A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 36183 IP address blocks: 172.224.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:51:00:44:e9:03:11:fa:32:3f:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=dc9e458f-ef47-4d66-9e71-8a15b34c6c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c0:46:42:87:32:9b:df:f1:da:57:60:4e:36: 92:6a:b3:ec:e8:24:8b:5e:f7:eb:ec:bc:3a:34:f6: 7c:4b:3b:27:45:f8:1b:0e:d9:90:63:08:4b:6b:f1: 2f:15:a8:1f:0c:41:b3:61:1d:55:d6:f1:a6:a4:c7: 4b:8c:ec:19:70:66:60:fc:76:78:e0:3c:3d:55:14: b7:f4:64:c1:99:d5:07:4a:ff:fb:5c:19:c1:cb:dd: b7:11:ff:95:ec:f6:36:f7:54:52:40:86:4c:26:63: 28:a6:78:45:95:eb:2f:16:ac:a9:75:4f:7a:89:9a: 40:90:34:37:35:6e:44:15:e7:95:f5:26:aa:d4:d1: ee:06:41:43:a5:c6:ee:ef:83:62:3a:42:94:60:6c: 49:62:f4:40:3a:54:76:ab:fe:fc:86:b6:44:27:2e: ba:e4:1f:88:77:c9:be:a2:77:7f:b7:6b:5b:46:77: 5f:4b:2c:a7:33:f2:07:4d:6f:7a:35:be:83:02:cc: 8d:04:97:25:3f:91:43:47:c9:87:ac:96:bb:70:ce: ce:31:7b:41:be:a9:c7:20:73:95:21:13:ea:1b:27: a2:24:97:18:67:2c:a9:bf:ca:25:94:7d:e5:c2:8b: 05:9c:ae:52:aa:df:9a:12:e8:6c:db:43:da:ac:e4: 4a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D0:D7:60:1C:B3:3A:D0:20:80:C4:F0:5E:1C:44:ED:22:1C:3D:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:cd:aa:c3:81:ba:73:17:2d:1d:e4:95:50:b6:10:96:3f:45: 4b:85:d3:b2:b5:59:62:d0:b2:ad:8b:48:30:06:04:6e:8d:a1: 94:30:9d:ad:a2:3b:6b:8b:ef:32:23:6b:82:58:c4:24:a4:64: f0:60:01:13:ec:6b:a2:52:7f:b6:7e:a8:e2:21:cc:51:1d:05: 20:46:ae:6a:5a:1f:b6:cf:76:4c:f1:9a:eb:13:b4:61:68:a9: 7d:1c:04:be:81:b7:a2:0b:f1:73:fc:e1:95:0f:0b:68:ff:96: 22:be:1a:c8:15:18:7c:81:b2:82:4e:f8:d8:6f:ce:3f:04:c7: 2c:77:9c:25:cd:8a:a2:81:ac:d4:57:57:a0:48:fc:6a:e6:49: 8e:26:31:65:c0:9d:01:cf:b1:da:43:47:ee:4d:37:0b:40:f7: 35:69:37:c9:37:86:44:d8:24:ed:ea:3d:a2:b0:02:c7:3a:31: 0d:fa:20:9e:10:80:75:60:dd:77:81:49:04:5b:84:62:8e:3a: ce:68:55:6f:1b:03:67:eb:71:27:b0:81:46:bb:a1:48:18:4a: cf:89:3c:82:ac:6c:33:0b:b8:77:53:25:cd:94:76:8c:32:ae: 99:b6:9c:89:36:e0:1e:a6:46:da:54:54:1d:a3:3a:c3:48:50: 61:a4:bd:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UQBE6QMR+jI/moAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZGM5ZTQ1OGYtZWY0Ny00ZDY2LTllNzEtOGExNWIzNGM2Yzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcBGQocym9/x2ldgTjaSarPs6CSLXvfr7Lw6 NPZ8SzsnRfgbDtmQYwhLa/EvFagfDEGzYR1V1vGmpMdLjOwZcGZg/HZ44Dw9VRS3 9GTBmdUHSv/7XBnBy923Ef+V7PY291RSQIZMJmMopnhFlesvFqypdU96iZpAkDQ3 NW5EFeeV9Saq1NHuBkFDpcbu74NiOkKUYGxJYvRAOlR2q/78hrZEJy665B+Id8m+ ond/t2tbRndfSyynM/IHTW96Nb6DAsyNBJclP5FDR8mHrJa7cM7OMXtBvqnHIHOV IRPqGyeiJJcYZyypv8ollH3lwosFnK5Sqt+aEuhs20ParORKQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTQ12AcszrQIIDE8F4cRO0iHD3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjE0YzIzNDYtY2U4NC0z MDgyLTliZDEtZDUzYjY2YzZiMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDNqsOBunMXLR3klVC2EJY/RUuF07K1WWLQsq2LSDAGBG6NoZQwna2i O2uL7zIja4JYxCSkZPBgARPsa6JSf7Z+qOIhzFEdBSBGrmpaH7bPdkzxmusTtGFo qX0cBL6Bt6IL8XP84ZUPC2j/liK+GsgVGHyBsoJO+Nhvzj8Exyx3nCXNiqKBrNRX V6BI/GrmSY4mMWXAnQHPsdpDR+5NNwtA9zVpN8k3hkTYJO3qPaKwAsc6MQ36IJ4Q gHVg3XeBSQRbhGKOOs5oVW8bA2frcSewgUa7oUgYSs+JPIKsbDMLuHdTJc2Udowy rpm2nIk24B6mRtpUVB2jOsNIUGGkvQk= -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:22 2025 by rpki-client