$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c08f7c4b-ac5b-3fc3-a309-b0eb506f9f16.roa File: c08f7c4b-ac5b-3fc3-a309-b0eb506f9f16.roa (raw, json) Hash identifier: IoCAmXUTFn15Sd/9+72Qezq6YrR+bhHrjJLKKxQ66MM= Subject key identifier: DF:10:98:8E:BB:8E:FE:CA:36:1D:BF:AB:A2:EA:E0:42:1E:91:70:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB91BDEDB8A850C18FC383500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c08f7c4b-ac5b-3fc3-a309-b0eb506f9f16.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 36183 IP address blocks: 172.224.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:de:db:8a:85:0c:18:fc:38:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=e81d213e-ec69-41ab-8227-078fa56fa0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ee:e1:9e:f9:b7:93:a3:e0:fd:c2:d5:5d:0c: a5:b3:88:4b:d1:0c:c0:30:44:c0:ea:85:12:f5:1a: e9:b4:14:4d:8f:7a:3e:43:68:99:26:8a:7b:76:17: f2:c2:7e:ba:f3:f9:b9:b9:13:03:5f:93:65:e8:8d: 5e:23:d0:cd:18:d5:de:79:c9:14:a0:23:0f:2c:7f: 4f:2e:b4:a6:13:45:fd:04:16:80:56:08:7e:b8:3e: 01:1c:d2:33:ae:f1:74:76:55:81:fb:61:f2:ab:31: c1:8a:33:e9:36:34:54:8c:4b:33:58:ab:e4:89:a9: 02:a5:5a:eb:fb:f4:08:3a:68:4c:21:d8:98:13:ce: 12:77:83:1a:54:7a:36:77:cc:23:11:87:16:4e:9f: 2d:a1:74:77:9d:9b:3b:52:17:be:9a:43:23:44:aa: f8:24:be:2b:70:fb:0c:03:46:c4:f2:71:75:96:fc: ca:ec:69:26:6d:68:72:51:84:c4:57:04:0a:aa:92: fd:42:67:e4:74:df:66:cb:6c:a3:cd:c2:7b:5f:e7: f5:ff:88:66:e5:5d:92:32:33:be:97:be:05:9b:34: ee:94:9b:7e:2e:bd:fa:bd:2a:ba:bb:ce:86:9b:f6: fc:28:12:5c:af:31:01:0c:33:9c:00:e2:52:3f:b3: 14:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:10:98:8E:BB:8E:FE:CA:36:1D:BF:AB:A2:EA:E0:42:1E:91:70:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c08f7c4b-ac5b-3fc3-a309-b0eb506f9f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:5e:30:85:44:4f:88:93:76:9f:81:9a:46:45:35:f4:ce:09: 09:cf:df:09:e1:fc:ae:0f:57:ce:18:35:5a:59:8b:63:9a:4f: 8a:ae:4f:0f:a2:3d:1c:db:36:af:43:29:d9:c8:51:47:19:61: ff:25:08:73:03:ad:b1:3b:a2:93:69:cc:1a:62:50:eb:38:9f: 60:a4:e0:46:cf:01:81:13:74:a2:ea:75:fe:a5:06:70:45:e1: 1d:82:01:86:4f:d5:99:37:a8:5e:bd:a6:4a:71:48:12:69:69: 61:3a:72:96:62:41:04:c1:2c:89:39:8b:10:53:6d:be:c3:ca: f5:65:ad:da:c9:23:8b:e3:1b:1a:1d:fa:28:89:39:15:d3:8a: 8e:c9:ce:fc:ff:9e:cb:a8:a1:d4:e9:81:72:9f:66:28:f5:9a: bc:0b:89:d6:a1:68:af:63:09:8e:68:12:79:ce:5a:a5:2a:58: 08:f1:86:9b:ee:8f:3f:d3:95:b0:53:cb:f2:e9:fc:3f:9f:29: b3:5d:aa:6e:6b:6b:9e:7e:64:a9:40:60:2c:d6:58:2b:4b:14: 32:91:8d:15:d2:6c:d0:ea:84:03:af:05:21:34:71:63:32:89: d2:c1:44:10:eb:1d:ab:25:7f:3f:60:f7:a9:a3:87:d4:cd:1f: 8e:52:7b:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G97bioUMGPw4NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZTgxZDIxM2UtZWM2OS00MWFiLTgyMjctMDc4ZmE1NmZhMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO7hnvm3k6Pg/cLVXQyls4hL0QzAMETA6oUS 9RrptBRNj3o+Q2iZJop7dhfywn668/m5uRMDX5Nl6I1eI9DNGNXeeckUoCMPLH9P LrSmE0X9BBaAVgh+uD4BHNIzrvF0dlWB+2HyqzHBijPpNjRUjEszWKvkiakCpVrr +/QIOmhMIdiYE84Sd4MaVHo2d8wjEYcWTp8toXR3nZs7Uhe+mkMjRKr4JL4rcPsM A0bE8nF1lvzK7GkmbWhyUYTEVwQKqpL9QmfkdN9my2yjzcJ7X+f1/4hm5V2SMjO+ l74FmzTulJt+Lr36vSq6u86Gm/b8KBJcrzEBDDOcAOJSP7MUUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8QmI67jv7KNh2/q6Lq4EIekXB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzA4ZjdjNGItYWM1Yi0z ZmMzLWEzMDktYjBlYjUwNmY5ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdeMIVET4iTdp+BmkZFNfTOCQnP3wnh/K4PV84YNVpZi2OaT4quTw+i PRzbNq9DKdnIUUcZYf8lCHMDrbE7opNpzBpiUOs4n2Ck4EbPAYETdKLqdf6lBnBF 4R2CAYZP1Zk3qF69pkpxSBJpaWE6cpZiQQTBLIk5ixBTbb7DyvVlrdrJI4vjGxod +iiJORXTio7Jzvz/nsuoodTpgXKfZij1mrwLidahaK9jCY5oEnnOWqUqWAjxhpvu jz/TlbBTy/Lp/D+fKbNdqm5ra55+ZKlAYCzWWCtLFDKRjRXSbNDqhAOvBSE0cWMy idLBRBDrHaslfz9g96mjh9TNH45Se4g= -----END CERTIFICATE-----Generated at Mon Aug 4 18:35:24 2025 by rpki-client