$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c308eb16-887b-3051-b54c-03789471ff36.roa File: c308eb16-887b-3051-b54c-03789471ff36.roa (raw, json) Hash identifier: nmhr6v90v42nqxwoJQNJPbOl22hIM6kwK4g1LNppoxk= Subject key identifier: 6A:08:28:5A:89:58:D9:76:C2:80:28:21:03:AB:23:E1:28:90:3E:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB4ED485E76ACDCEC1A5C2C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c308eb16-887b-3051-b54c-03789471ff36.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 36183 IP address blocks: 172.224.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:48:5e:76:ac:dc:ec:1a:5c:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=9570cca4-f78f-49ba-b2a9-e6df6ee7e5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:80:4c:e3:5a:0b:52:ce:37:08:a9:f1:6b:9f: fa:fe:65:d8:16:4f:15:f5:c6:22:35:20:d5:6a:b9: 17:b9:0b:92:2d:dd:00:0e:85:9e:8f:2e:98:6b:cd: 6a:02:6d:1d:c5:ea:e0:83:16:ea:53:bc:8f:3e:9b: b6:a9:10:46:80:0a:96:8d:8b:3f:09:62:c7:24:3d: 9f:9b:f6:8c:0d:af:9e:bc:c3:ac:20:58:5e:c6:84: c8:71:9a:4c:7c:e0:b4:e6:c9:a1:91:3d:65:8f:a3: 45:25:04:29:3d:76:69:af:7b:60:78:0f:4a:0e:52: 75:49:c1:78:21:c2:51:79:35:5a:5b:18:bf:d0:25: 2b:2e:e7:a8:ca:0f:d3:14:dd:1e:ab:b5:01:d5:c7: bb:91:a7:35:11:82:bb:5c:41:85:19:99:96:e6:93: 8f:32:d1:4d:bb:69:66:29:cc:5f:fd:18:85:2b:24: 99:54:5f:d4:52:63:bf:7a:e4:c1:35:54:a3:0b:94: a7:dd:99:ac:b5:66:02:50:cc:2f:0f:97:d0:5b:23: 10:06:22:60:7b:e9:1e:6e:95:0e:33:4a:a8:ac:42: 69:20:c4:29:7e:41:b6:ff:8d:58:a1:61:75:30:40: 55:1f:f5:00:81:97:b4:c7:26:1a:52:5c:0e:76:a8: fe:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:08:28:5A:89:58:D9:76:C2:80:28:21:03:AB:23:E1:28:90:3E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c308eb16-887b-3051-b54c-03789471ff36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:8d:e1:5c:1c:ba:30:a4:14:04:c0:d3:82:37:c1:f6:00:70: 3f:48:27:f3:18:e2:bb:cd:ad:c7:a3:a4:64:3c:88:87:74:1f: b4:04:cb:e8:e3:75:b8:bd:fe:04:29:a5:53:2a:4f:ac:29:10: 5a:11:c4:60:15:73:df:a4:02:98:b4:35:67:d0:c5:42:83:12: 30:84:ae:e0:cb:01:75:30:7f:fe:67:fb:e4:47:e6:a2:51:b0: 41:e8:8c:b0:86:f2:63:b8:f9:ea:f4:b5:1a:7a:be:36:d4:c8: e9:4a:d3:9e:b0:6d:98:55:bc:bb:46:9b:55:9a:57:a7:d9:d5: 3d:cf:99:09:fb:73:77:69:0a:88:8a:c5:f8:16:0f:f5:8e:5a: 9e:fb:47:e1:be:3c:05:62:87:76:e4:df:69:76:cc:89:a1:c1: 84:aa:2e:83:fd:90:b8:cb:e0:94:2b:d3:1d:d6:db:30:a5:56: 84:fa:e9:69:8e:7c:ff:ac:c1:4e:06:2e:d4:9f:88:0e:cf:68: 5f:8a:e1:0d:04:7c:ab:ff:2c:56:7f:4a:0d:9c:ed:03:12:33: b4:f9:4e:31:2e:82:d7:01:8d:61:50:d1:2a:5c:68:3f:51:f4: 04:58:88:e1:50:46:0f:e1:3f:cd:3d:f4:95:dc:32:36:9d:a9: 2d:35:51:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07Uhedqzc7BpcLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk OTU3MGNjYTQtZjc4Zi00OWJhLWIyYTktZTZkZjZlZTdlNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIBM41oLUs43CKnxa5/6/mXYFk8V9cYiNSDV arkXuQuSLd0ADoWejy6Ya81qAm0dxerggxbqU7yPPpu2qRBGgAqWjYs/CWLHJD2f m/aMDa+evMOsIFhexoTIcZpMfOC05smhkT1lj6NFJQQpPXZpr3tgeA9KDlJ1ScF4 IcJReTVaWxi/0CUrLueoyg/TFN0eq7UB1ce7kac1EYK7XEGFGZmW5pOPMtFNu2lm Kcxf/RiFKySZVF/UUmO/euTBNVSjC5Sn3ZmstWYCUMwvD5fQWyMQBiJge+kebpUO M0qorEJpIMQpfkG2/41YoWF1MEBVH/UAgZe0xyYaUlwOdqj+UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoIKFqJWNl2woAoIQOrI+EokD6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzMwOGViMTYtODg3Yi0z MDUxLWI1NGMtMDM3ODk0NzFmZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWN4VwcujCkFATA04I3wfYAcD9IJ/MY4rvNrcejpGQ8iId0H7QEy+jj dbi9/gQppVMqT6wpEFoRxGAVc9+kApi0NWfQxUKDEjCEruDLAXUwf/5n++RH5qJR sEHojLCG8mO4+er0tRp6vjbUyOlK056wbZhVvLtGm1WaV6fZ1T3PmQn7c3dpCoiK xfgWD/WOWp77R+G+PAVih3bk32l2zImhwYSqLoP9kLjL4JQr0x3W2zClVoT66WmO fP+swU4GLtSfiA7PaF+K4Q0EfKv/LFZ/Sg2c7QMSM7T5TjEugtcBjWFQ0SpcaD9R 9ARYiOFQRg/hP8099JXcMjadqS01Uag= -----END CERTIFICATE-----Generated at Wed Aug 6 05:17:03 2025 by rpki-client