$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9eeef5a-e40e-3aa0-95f6-52f3abea6999.roa File: b9eeef5a-e40e-3aa0-95f6-52f3abea6999.roa (raw, json) Hash identifier: gUYXzJaTMTeMBgZY6ahB1WGHztFWLqENpAIUk5h+CvA= Subject key identifier: 2A:5A:4C:7B:8F:15:DA:E5:6F:B1:D2:47:C1:CC:9F:6C:1D:1A:C1:F9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9D30F4BBA304FFD4D387A680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9eeef5a-e40e-3aa0-95f6-52f3abea6999.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 36183 IP address blocks: 172.225.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f4:bb:a3:04:ff:d4:d3:87:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=267b3cfb-4a1c-44de-ae01-cd8aea1a5915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:55:9f:be:e2:a5:90:7f:de:37:ea:bb:00: fc:08:c5:9b:69:22:39:7b:98:6c:79:ec:db:15:a4: 46:00:9d:e0:c9:d0:03:41:32:02:c0:ff:67:6c:ad: 32:5e:32:3d:ad:0a:5f:1b:91:7b:86:66:d4:fe:cf: 08:a3:be:56:04:93:0c:8c:9a:27:06:b8:95:20:69: e0:dc:c4:4b:77:a3:3d:ec:44:5d:1d:95:37:3e:dc: 95:fe:03:b7:1b:49:ff:c1:c1:10:84:0f:f5:b9:09: c4:10:9e:0b:e3:dc:56:cf:cb:dc:bc:10:c1:0e:5c: de:35:e1:49:e5:2c:af:d2:5e:65:a8:61:04:ea:ec: d2:95:df:f4:ea:60:7e:cd:54:f1:23:d8:47:aa:af: ae:a4:cd:37:5c:2f:ea:f6:2f:a7:f1:a8:bc:26:b7: 53:43:d6:94:0f:15:a3:28:c0:db:8b:69:7e:34:41: b3:b4:50:e4:da:49:e6:e8:41:fc:cf:ad:9e:cb:99: b7:f3:6b:79:8e:66:ae:d4:3d:31:72:e7:e2:bf:94: b9:21:cd:1e:83:6d:e1:6b:89:ec:cc:b9:1b:80:7b: 8a:09:2e:17:36:c4:9b:b1:ba:7a:54:6c:82:e4:0d: 17:69:94:a8:38:4c:9d:16:42:23:3c:f3:a6:39:86: 77:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5A:4C:7B:8F:15:DA:E5:6F:B1:D2:47:C1:CC:9F:6C:1D:1A:C1:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9eeef5a-e40e-3aa0-95f6-52f3abea6999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2b:c4:69:99:24:1a:3f:f1:c7:33:b7:6a:04:bf:44:11:81: 07:8d:79:76:7e:df:ee:0c:77:20:1a:08:99:63:70:b8:2d:91: f2:ff:71:58:35:34:b4:9e:a7:9d:ab:74:1b:05:8f:8c:89:01: 0c:7c:c2:be:35:6f:be:b9:c0:6c:67:af:8d:09:fb:19:63:ce: 29:8b:99:4d:f9:e1:c3:06:33:29:cf:1e:76:68:1a:6d:be:af: 88:9c:c5:81:94:e4:33:7f:7c:47:46:48:40:67:e3:63:ec:b4: 42:94:cb:bf:e4:12:e2:df:36:36:56:b5:a1:f3:43:df:64:08: a9:24:ad:ae:8d:f9:ef:03:72:79:7a:80:ad:25:3c:d6:fd:2d: 3f:2e:2e:21:10:b5:af:7f:dd:e6:fb:94:26:3d:23:fd:fc:cf: af:c1:a5:c9:34:f7:f0:ef:eb:ec:87:47:62:4a:49:f7:33:71: 04:4c:d6:d6:f1:5c:84:b0:57:bc:11:79:69:21:42:ab:0a:80: a5:33:33:ef:93:9b:aa:29:38:1f:b4:e7:d2:3a:89:8c:44:54: 52:42:1d:27:8e:24:e6:01:87:ab:db:d8:34:44:4e:3d:6e:ee: fa:d0:e6:ec:66:e9:c3:b0:a6:65:53:7f:07:d3:54:d7:a9:17: 31:f8:50:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPS7owT/1NOHpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MjY3YjNjZmItNGExYy00NGRlLWFlMDEtY2Q4YWVhMWE1OTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshxVn77ipZB/3jfquwD8CMWbaSI5e5hseezb FaRGAJ3gydADQTICwP9nbK0yXjI9rQpfG5F7hmbU/s8Io75WBJMMjJonBriVIGng 3MRLd6M97ERdHZU3PtyV/gO3G0n/wcEQhA/1uQnEEJ4L49xWz8vcvBDBDlzeNeFJ 5Syv0l5lqGEE6uzSld/06mB+zVTxI9hHqq+upM03XC/q9i+n8ai8JrdTQ9aUDxWj KMDbi2l+NEGztFDk2knm6EH8z62ey5m382t5jmau1D0xcufiv5S5Ic0eg23ha4ns zLkbgHuKCS4XNsSbsbp6VGyC5A0XaZSoOEydFkIjPPOmOYZ3BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpaTHuPFdrlb7HSR8HMn2wdGsH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjllZWVmNWEtZTQwZS0z YWEwLTk1ZjYtNTJmM2FiZWE2OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIrxGmZJBo/8cczt2oEv0QRgQeNeXZ+3+4MdyAaCJljcLgtkfL/cVg1 NLSep52rdBsFj4yJAQx8wr41b765wGxnr40J+xljzimLmU354cMGMynPHnZoGm2+ r4icxYGU5DN/fEdGSEBn42PstEKUy7/kEuLfNjZWtaHzQ99kCKkkra6N+e8Dcnl6 gK0lPNb9LT8uLiEQta9/3eb7lCY9I/38z6/Bpck09/Dv6+yHR2JKSfczcQRM1tbx XISwV7wReWkhQqsKgKUzM++Tm6opOB+059I6iYxEVFJCHSeOJOYBh6vb2DRETj1u 7vrQ5uxm6cOwpmVTfwfTVNepFzH4UJQ= -----END CERTIFICATE-----Generated at Mon Aug 4 21:52:44 2025 by rpki-client