$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bea78163-dd9f-354c-aa8a-5386da92fd6d.roa File: bea78163-dd9f-354c-aa8a-5386da92fd6d.roa (raw, json) Hash identifier: fbvlZjuaoZ8Xyhhip7khJQtNr/F7SjTpMWIuOCWUQWU= Subject key identifier: 7C:DC:D0:2E:62:E1:9E:5D:3C:91:04:13:6A:4B:CB:87:9C:7C:4E:FC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9FFBAEE8D88D4D69FA135240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bea78163-dd9f-354c-aa8a-5386da92fd6d.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 36183 IP address blocks: 172.225.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:ae:e8:d8:8d:4d:69:fa:13:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=65ad3c51-7e13-4079-b2aa-02edff21e867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e6:ba:99:76:4e:f0:23:29:fa:65:e1:58:e5: f5:fa:10:dd:5c:e4:50:c2:94:57:67:81:1e:80:86: d0:cd:71:16:f8:f6:9b:f5:9d:4d:4e:ec:30:74:28: 9a:a6:e3:ad:ba:20:0a:13:a9:5a:b1:4c:05:92:36: c5:6f:23:e1:ea:d5:78:5a:e0:57:61:b2:49:5f:4f: 60:7b:84:85:6b:c8:35:dd:7d:c5:5d:68:7b:91:52: 02:d5:36:ec:71:24:13:74:fb:7d:37:d8:93:23:58: ce:6f:6f:09:88:54:8f:82:7c:68:fc:ac:ed:ac:80: 2e:ab:58:96:00:d3:e5:98:19:24:b8:18:b0:0d:ae: a9:0f:cc:84:cd:6f:8c:b6:3b:2a:a5:2b:44:df:6f: 48:a9:68:69:7a:70:92:68:7d:6f:68:d3:01:6f:85: 52:3e:32:db:5b:8d:9c:64:44:31:f8:a3:3f:f3:3d: 7e:f4:47:9d:70:1b:ed:a0:e9:52:25:06:7d:16:92: 56:fc:3c:9f:fb:ce:e2:13:39:b1:77:ff:96:eb:3f: 8a:29:8f:15:56:2c:fe:51:20:e2:b8:e4:1a:39:dd: e6:57:3d:cf:92:61:32:ef:e1:ae:0a:9a:e4:36:eb: fe:bc:64:a4:85:b9:64:12:77:64:65:88:a4:5b:23: 73:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DC:D0:2E:62:E1:9E:5D:3C:91:04:13:6A:4B:CB:87:9C:7C:4E:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bea78163-dd9f-354c-aa8a-5386da92fd6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:88:89:fe:16:4b:1a:7b:da:21:0a:a5:1a:49:97:1a:c4:93: 9e:20:6b:30:91:d4:94:00:07:99:2e:30:8e:86:9b:34:8d:a9: db:8a:5c:2b:2b:e8:1f:2d:9e:1a:ea:63:cb:f3:78:c2:61:6c: f4:4a:ca:27:f1:6c:ba:83:6f:2f:9c:06:c5:17:fb:06:68:3b: 03:97:b1:c4:7d:c8:56:40:e1:b6:9d:af:27:5d:2d:0a:55:2f: 52:7a:06:6d:a3:05:a9:82:f1:2f:79:59:31:ae:00:de:1d:54: 45:3c:7c:78:ab:3d:ce:c4:25:c9:f7:09:99:57:7b:c0:01:1b: be:cd:44:2d:33:f3:2a:0f:47:e0:7b:47:ea:65:5b:c1:18:a9: f2:6d:a6:30:18:82:68:91:ae:83:49:e3:f3:ff:f6:69:49:6c: db:32:cc:ee:eb:97:0d:bc:d8:77:4a:62:4a:2b:87:24:ee:43: 02:1f:18:58:57:9e:d8:dd:56:24:b6:77:16:2a:32:b6:86:7b: 50:48:92:5e:0c:aa:2a:4a:50:6f:92:8f:84:48:de:38:e1:89: d5:bd:88:df:3c:7a:56:bd:b8:95:65:c1:94:5a:6a:66:f4:b0: 41:07:1f:ae:4c:d3:e2:a0:26:20:0f:48:af:e2:c4:95:b3:6b: dd:20:f7:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+67o2I1NafoTUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk NjVhZDNjNTEtN2UxMy00MDc5LWIyYWEtMDJlZGZmMjFlODY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmea6mXZO8CMp+mXhWOX1+hDdXORQwpRXZ4Ee gIbQzXEW+Pab9Z1NTuwwdCiapuOtuiAKE6lasUwFkjbFbyPh6tV4WuBXYbJJX09g e4SFa8g13X3FXWh7kVIC1TbscSQTdPt9N9iTI1jOb28JiFSPgnxo/KztrIAuq1iW ANPlmBkkuBiwDa6pD8yEzW+MtjsqpStE329IqWhpenCSaH1vaNMBb4VSPjLbW42c ZEQx+KM/8z1+9EedcBvtoOlSJQZ9FpJW/Dyf+87iEzmxd/+W6z+KKY8VViz+USDi uOQaOd3mVz3PkmEy7+GuCprkNuv+vGSkhblkEndkZYikWyNzrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzc0C5i4Z5dPJEEE2pLy4ecfE78MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmVhNzgxNjMtZGQ5Zi0z NTRjLWFhOGEtNTM4NmRhOTJmZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGIif4WSxp72iEKpRpJlxrEk54gazCR1JQAB5kuMI6GmzSNqduKXCsr 6B8tnhrqY8vzeMJhbPRKyifxbLqDby+cBsUX+wZoOwOXscR9yFZA4badryddLQpV L1J6Bm2jBamC8S95WTGuAN4dVEU8fHirPc7EJcn3CZlXe8ABG77NRC0z8yoPR+B7 R+plW8EYqfJtpjAYgmiRroNJ4/P/9mlJbNsyzO7rlw282HdKYkorhyTuQwIfGFhX ntjdViS2dxYqMraGe1BIkl4MqipKUG+Sj4RI3jjhidW9iN88ela9uJVlwZRaamb0 sEEHH65M0+KgJiAPSK/ixJWza90g94A= -----END CERTIFICATE-----Generated at Tue Aug 5 17:16:10 2025 by rpki-client