$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9d0bf21-231e-34ba-b62e-07f205f3ff8c.roa File: b9d0bf21-231e-34ba-b62e-07f205f3ff8c.roa (raw, json) Hash identifier: YrYZt3EE1wBud48a1RexDUZfXMFglobKt5i5Yiq7Yg0= Subject key identifier: BA:0D:0F:9D:49:72:6C:DF:0C:07:FA:8C:BD:9B:90:DD:F2:DA:70:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB650FAF067DB255E27DD9E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9d0bf21-231e-34ba-b62e-07f205f3ff8c.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 36183 IP address blocks: 172.224.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:fa:f0:67:db:25:5e:27:dd:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=36332498-a006-4100-933c-2a173c0fdfbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c8:3f:5b:32:6a:51:a5:52:6c:5d:52:09:5c: 37:a7:c1:29:db:c7:0a:62:67:b4:f8:6d:28:0d:aa: 87:47:21:ca:99:e5:3e:b5:7f:55:c0:d1:b7:df:d1: 90:02:81:69:68:a1:34:96:d0:43:d4:8e:a9:15:ad: 24:48:be:cb:84:97:48:61:ae:69:dd:c8:c5:d8:79: 6f:ea:13:bb:2e:a0:2a:b9:7d:bf:6a:e8:b7:f0:a6: a0:6b:a9:8d:ee:fe:14:b7:9f:c8:25:b8:2a:6b:3b: 2f:d9:07:31:08:9c:28:54:94:c9:21:87:e5:c3:c4: 75:ec:f4:95:1a:0b:59:91:7f:e5:76:57:03:88:91: 52:fe:96:43:23:e7:e9:07:b9:47:ba:d3:6e:4c:8d: b5:d4:fd:e3:e6:d0:16:c5:ed:b8:0f:ac:fc:b1:86: e0:fe:df:4a:b2:2b:e9:a4:97:9a:be:ab:5b:02:aa: f9:bf:5a:1a:67:7f:ac:8f:a7:37:b1:4b:9b:be:13: 28:90:ef:82:e7:aa:3e:b1:21:da:f3:ca:b1:71:c7: c8:52:1e:d7:df:97:27:6e:6f:82:5f:81:3f:51:7e: 22:76:9f:cf:57:ff:a0:4e:e1:ff:7e:3e:d6:28:58: db:e7:02:d8:02:c5:47:36:f8:1b:a2:cc:35:8c:b3: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0D:0F:9D:49:72:6C:DF:0C:07:FA:8C:BD:9B:90:DD:F2:DA:70:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9d0bf21-231e-34ba-b62e-07f205f3ff8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:1c:0e:cb:92:4a:4c:6f:bc:79:7a:38:dc:e2:fa:81:e5:73: 7e:10:d5:7f:ca:0c:99:2f:87:c6:14:1b:e4:b4:a5:8f:ca:d1: a7:4f:01:55:b3:f2:fa:a9:e8:ae:a8:45:91:a1:3b:8d:48:66: dd:5e:57:00:2f:9e:c8:c8:72:a9:c8:1a:a8:09:40:a8:da:27: 71:05:43:75:44:60:55:df:56:c7:76:51:82:cb:a9:54:50:58: 91:50:8e:45:a5:d8:8b:b2:2d:67:92:d4:df:d4:17:ec:bb:b9: d0:7e:d9:67:1e:28:dd:59:c0:ea:4e:45:83:46:1b:9a:5d:59: 6a:9a:df:cc:b4:d9:25:bb:f5:59:be:ef:a5:93:cf:75:63:dd: 10:e6:6a:75:37:04:de:69:ba:21:41:32:33:0b:c6:e7:5e:93: 25:07:55:ec:35:5d:be:87:d9:57:af:7d:cb:53:fa:7f:7e:a8: d0:2d:e3:b6:ba:cf:e2:6f:d8:7b:88:2f:62:a9:fa:57:89:c2: 09:e2:75:89:a9:ff:50:14:11:86:eb:cf:53:be:d7:da:66:1a: 3a:21:2c:aa:c1:cc:06:e3:fc:59:78:82:38:10:00:24:76:61: 1c:07:d7:49:3d:b5:87:ef:d7:a4:be:23:a6:b0:05:80:79:f9: fc:69:ed:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPrwZ9slXifdnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MzYzMzI0OTgtYTAwNi00MTAwLTkzM2MtMmExNzNjMGZkZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsg/WzJqUaVSbF1SCVw3p8Ep28cKYme0+G0o DaqHRyHKmeU+tX9VwNG339GQAoFpaKE0ltBD1I6pFa0kSL7LhJdIYa5p3cjF2Hlv 6hO7LqAquX2/aui38Kaga6mN7v4Ut5/IJbgqazsv2QcxCJwoVJTJIYflw8R17PSV GgtZkX/ldlcDiJFS/pZDI+fpB7lHutNuTI211P3j5tAWxe24D6z8sYbg/t9Ksivp pJeavqtbAqr5v1oaZ3+sj6c3sUubvhMokO+C56o+sSHa88qxccfIUh7X35cnbm+C X4E/UX4idp/PV/+gTuH/fj7WKFjb5wLYAsVHNvgbosw1jLP/gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoND51JcmzfDAf6jL2bkN3y2nD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjlkMGJmMjEtMjMxZS0z NGJhLWI2MmUtMDdmMjA1ZjNmZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMcDsuSSkxvvHl6ONzi+oHlc34Q1X/KDJkvh8YUG+S0pY/K0adPAVWz 8vqp6K6oRZGhO41IZt1eVwAvnsjIcqnIGqgJQKjaJ3EFQ3VEYFXfVsd2UYLLqVRQ WJFQjkWl2IuyLWeS1N/UF+y7udB+2WceKN1ZwOpORYNGG5pdWWqa38y02SW79Vm+ 76WTz3Vj3RDmanU3BN5puiFBMjMLxudekyUHVew1Xb6H2VevfctT+n9+qNAt47a6 z+Jv2HuIL2Kp+leJwgnidYmp/1AUEYbrz1O+19pmGjohLKrBzAbj/Fl4gjgQACR2 YRwH10k9tYfv16S+I6awBYB5+fxp7ZM= -----END CERTIFICATE-----Generated at Mon Aug 4 18:37:44 2025 by rpki-client