$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3483dad-ea74-32d3-87d2-a7348ba2397e.roa File: b3483dad-ea74-32d3-87d2-a7348ba2397e.roa (raw, json) Hash identifier: UJgOfacie9wonItviE7GIu5kwLfX+KLzsTGtuPS5hqg= Subject key identifier: 14:0F:B0:68:80:DC:C5:FE:ED:90:57:56:6F:E3:A1:AB:AA:41:DD:AB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AADF1309890C77D4D05C21840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3483dad-ea74-32d3-87d2-a7348ba2397e.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 63949 IP address blocks: 172.235.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:30:98:90:c7:7d:4d:05:c2:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=b845c333-bd49-43a1-8e43-9e217ccaf4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8c:79:d6:10:66:e7:e7:41:fd:0b:41:3d:f7: 26:94:a5:c4:35:4a:c7:db:ae:c3:b1:bc:b7:6f:b8: 99:01:e9:19:b6:98:08:0e:a2:78:47:31:82:f6:11: 3c:e5:d1:b9:59:c6:ba:60:ad:0a:b2:ee:de:e1:b0: fc:78:d4:24:5c:e5:eb:e2:11:89:49:62:31:db:8d: d9:bd:12:e3:4e:2d:37:d8:a1:a2:94:33:1b:f9:3d: 8b:c4:53:03:cf:d0:e3:fd:7c:8a:19:e7:9c:27:57: be:52:b3:6c:9f:50:56:85:69:81:33:a5:3d:fc:4a: 72:fa:b0:9b:0e:84:9c:2d:84:9f:ed:b3:6f:b0:cf: 63:1e:14:51:34:48:6d:8a:01:30:e3:91:bb:30:78: 6a:e9:9e:45:20:17:f7:46:b4:f2:74:e3:a1:71:ca: fb:e8:64:e9:39:1d:b7:84:9c:25:2a:b6:f1:cc:28: 6c:fe:00:b0:e5:28:f8:4e:be:91:7d:40:f0:de:b2: ef:ef:99:1b:3d:b2:d1:64:41:4e:88:0b:34:ad:98: 17:cb:36:45:cf:fc:29:0a:d8:7d:a7:06:ef:1a:22: f9:dd:3e:24:6a:b4:62:53:b1:24:c0:b3:6f:38:11: 99:fe:13:8f:f9:75:ed:6c:6d:56:cd:b0:ba:06:d5: d4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0F:B0:68:80:DC:C5:FE:ED:90:57:56:6F:E3:A1:AB:AA:41:DD:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3483dad-ea74-32d3-87d2-a7348ba2397e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:44:40:75:b9:27:91:5f:7a:53:c7:b7:83:9a:7c:d9:21:f0: ed:7d:aa:4f:74:09:35:35:92:bb:99:77:c5:aa:f6:39:d0:35: 44:03:bb:24:5f:b0:7c:96:82:49:ea:d2:36:fd:d8:92:ba:37: 62:92:f8:57:f0:7a:c4:b3:7b:07:04:97:83:03:d5:88:43:e4: b6:e1:e9:b0:b4:e5:9f:67:ab:5a:70:16:66:7a:0a:79:5a:45: c1:4c:fa:a6:f7:ea:19:aa:ff:19:8d:99:2d:18:a8:28:f5:28: 06:39:63:01:60:97:92:28:e1:c0:0e:a6:db:0c:22:ce:47:13: f0:83:ff:86:a7:a3:7b:2a:55:9e:fe:59:6b:48:09:ae:0a:c8: e1:07:a7:68:f4:b7:03:ba:37:d2:65:be:1d:e3:6b:93:ff:58: c8:76:c5:4d:49:10:d9:30:54:b1:a2:3c:5f:6d:f7:f3:1a:76: 1e:9d:4b:3f:77:d2:f7:f4:9b:c4:73:7e:76:1b:5d:d3:29:cd: 3a:2a:c6:ff:d7:41:ad:39:43:48:66:e2:f9:a8:7a:95:f2:03: 80:d9:ae:04:e4:98:71:12:51:07:9c:30:a3:a1:38:31:4e:f3: 46:29:61:e5:4f:43:43:bb:a9:f6:62:12:15:10:47:12:fa:f8: 81:e2:ea:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8TCYkMd9TQXCGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk Yjg0NWMzMzMtYmQ0OS00M2ExLThlNDMtOWUyMTdjY2FmNGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYx51hBm5+dB/QtBPfcmlKXENUrH267Dsby3 b7iZAekZtpgIDqJ4RzGC9hE85dG5Wca6YK0Ksu7e4bD8eNQkXOXr4hGJSWIx243Z vRLjTi032KGilDMb+T2LxFMDz9Dj/XyKGeecJ1e+UrNsn1BWhWmBM6U9/Epy+rCb DoScLYSf7bNvsM9jHhRRNEhtigEw45G7MHhq6Z5FIBf3RrTydOOhccr76GTpOR23 hJwlKrbxzChs/gCw5Sj4Tr6RfUDw3rLv75kbPbLRZEFOiAs0rZgXyzZFz/wpCth9 pwbvGiL53T4karRiU7EkwLNvOBGZ/hOP+XXtbG1WzbC6BtXUGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQPsGiA3MX+7ZBXVm/joauqQd2rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjM0ODNkYWQtZWE3NC0z MmQzLTg3ZDItYTczNDhiYTIzOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFEQHW5J5FfelPHt4OafNkh8O19qk90CTU1kruZd8Wq9jnQNUQDuyRf sHyWgknq0jb92JK6N2KS+FfwesSzewcEl4MD1YhD5Lbh6bC05Z9nq1pwFmZ6Cnla RcFM+qb36hmq/xmNmS0YqCj1KAY5YwFgl5Io4cAOptsMIs5HE/CD/4ano3sqVZ7+ WWtICa4KyOEHp2j0twO6N9Jlvh3ja5P/WMh2xU1JENkwVLGiPF9t9/Madh6dSz93 0vf0m8RzfnYbXdMpzToqxv/XQa05Q0hm4vmoepXyA4DZrgTkmHESUQecMKOhODFO 80YpYeVPQ0O7qfZiEhUQRxL6+IHi6rg= -----END CERTIFICATE-----Generated at Tue Aug 5 17:20:50 2025 by rpki-client