$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc7a44d2-e805-316f-bd67-ca0db5aa4717.roa File: bc7a44d2-e805-316f-bd67-ca0db5aa4717.roa (raw, json) Hash identifier: 72eOaoAyxrAqoTMug/HKksBsKUuPm48D+7blifHVcSs= Subject key identifier: 8F:01:F4:E1:B2:B5:64:6F:FB:9F:51:46:2F:33:92:15:B3:54:FD:DD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9FFBAEDA3E1F8BA7E3329B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc7a44d2-e805-316f-bd67-ca0db5aa4717.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 36183 IP address blocks: 172.225.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:ae:da:3e:1f:8b:a7:e3:32:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=c0559a28-6fbe-4d3c-a52f-1768226e35e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:cc:61:98:4a:34:24:4c:cf:ac:25:45:00: e6:03:28:3b:9f:30:6d:4f:6c:e8:39:b3:98:75:01: 79:c8:fb:82:14:10:48:a6:b5:d1:99:f6:2c:51:fa: 6b:58:e6:f0:d8:3b:e3:28:cb:81:fd:61:d8:e3:97: 9c:0e:d1:b2:8a:64:20:c5:37:3a:98:e7:40:43:56: d6:07:d3:7f:11:54:c3:4c:b1:2a:80:a2:a9:01:9e: 1c:42:e1:b4:79:0f:f5:8b:e7:2d:bd:9d:6e:4a:ab: 46:7f:5e:12:5b:52:1f:fe:34:bd:59:b7:bf:0d:e4: 37:9d:86:c5:05:92:2a:ae:c5:27:fc:4d:ab:59:92: 56:24:d7:93:84:c2:f2:87:bc:4b:5b:f2:cf:52:ea: 04:74:05:aa:d8:d4:e7:3b:89:d8:8b:e7:da:5f:d3: 37:08:52:85:bf:17:c8:3c:68:7f:9e:13:5a:77:dc: 69:a3:7f:fd:26:1b:ae:a8:29:ff:ce:f6:0a:7f:14: d9:20:ff:08:1f:a2:c9:43:d3:cc:60:45:e7:0b:e9: 86:0d:4a:f6:98:c1:e2:c6:dd:c5:ed:a5:4b:b6:bd: 2d:f9:e3:bf:32:6f:6c:39:0e:3b:a8:cb:72:3d:27: d7:28:e5:6c:f9:e9:c7:38:b4:a1:1e:b3:24:7f:7a: 75:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:01:F4:E1:B2:B5:64:6F:FB:9F:51:46:2F:33:92:15:B3:54:FD:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc7a44d2-e805-316f-bd67-ca0db5aa4717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:75:5c:53:08:d1:a8:19:2b:49:99:e3:13:9e:66:5d:e7:b8: f8:81:80:b9:a8:49:9e:65:1c:28:10:1b:50:8a:f2:24:fd:01: 2c:57:e1:06:90:05:4d:03:c2:75:d3:5a:36:8a:02:d3:ae:0d: 9a:39:86:44:ec:df:c2:27:e0:4f:40:5e:27:a5:a4:0a:83:4b: 99:b5:32:8b:ac:7f:03:9d:ff:52:6c:ce:68:b2:c7:19:9d:04: 32:16:57:62:2d:60:54:72:fe:79:b6:cf:78:57:d7:47:fa:88: 25:b9:ec:b8:5d:3b:2b:53:d3:16:80:b2:46:c5:7a:30:47:03: 89:7b:02:00:96:a8:01:b0:b7:3c:4f:01:a5:dc:8d:40:f8:80: 2c:54:f5:5a:6c:98:5c:c7:20:4b:04:ec:ab:bf:14:d1:d0:64: c3:fc:3c:2a:3b:1e:8d:68:6b:f8:10:57:b4:44:d3:25:c2:17: 5c:48:5c:ae:25:da:31:74:0b:b4:c6:dc:e4:a8:2d:98:61:2f: d4:ab:9f:92:85:fd:6a:ac:c5:67:0f:aa:76:11:11:7c:c0:f1: 66:e1:b0:3a:18:47:a1:6c:04:63:41:40:93:b7:1b:89:0d:c0: 81:a3:e5:aa:55:1b:c7:a4:da:39:ce:f3:31:bb:98:e4:00:95: 56:53:49:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+67aPh+Lp+MymwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk YzA1NTlhMjgtNmZiZS00ZDNjLWE1MmYtMTc2ODIyNmUzNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2/MYZhKNCRMz6wlRQDmAyg7nzBtT2zoObOY dQF5yPuCFBBIprXRmfYsUfprWObw2DvjKMuB/WHY45ecDtGyimQgxTc6mOdAQ1bW B9N/EVTDTLEqgKKpAZ4cQuG0eQ/1i+ctvZ1uSqtGf14SW1If/jS9Wbe/DeQ3nYbF BZIqrsUn/E2rWZJWJNeThMLyh7xLW/LPUuoEdAWq2NTnO4nYi+faX9M3CFKFvxfI PGh/nhNad9xpo3/9JhuuqCn/zvYKfxTZIP8IH6LJQ9PMYEXnC+mGDUr2mMHixt3F 7aVLtr0t+eO/Mm9sOQ47qMtyPSfXKOVs+enHOLShHrMkf3p1OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8B9OGytWRv+59RRi8zkhWzVP3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmM3YTQ0ZDItZTgwNS0z MTZmLWJkNjctY2EwZGI1YWE0NzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV1XFMI0agZK0mZ4xOeZl3nuPiBgLmoSZ5lHCgQG1CK8iT9ASxX4QaQ BU0DwnXTWjaKAtOuDZo5hkTs38In4E9AXielpAqDS5m1MousfwOd/1Jszmiyxxmd BDIWV2ItYFRy/nm2z3hX10f6iCW57LhdOytT0xaAskbFejBHA4l7AgCWqAGwtzxP AaXcjUD4gCxU9VpsmFzHIEsE7Ku/FNHQZMP8PCo7Ho1oa/gQV7RE0yXCF1xIXK4l 2jF0C7TG3OSoLZhhL9Srn5KF/WqsxWcPqnYREXzA8WbhsDoYR6FsBGNBQJO3G4kN wIGj5apVG8ek2jnO8zG7mOQAlVZTSd8= -----END CERTIFICATE-----Generated at Wed Aug 6 04:15:08 2025 by rpki-client