$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c900af37-6896-3434-803d-f9ee24686159.roa File: c900af37-6896-3434-803d-f9ee24686159.roa (raw, json) Hash identifier: DVr00lTXyYqsdIhtGBWxN9i7s3u7LnY+SBMF53GslRQ= Subject key identifier: AB:74:49:9D:FF:BF:DB:42:56:88:59:E5:99:0E:0E:61:63:39:32:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB650FC855E0C5776DCF23B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c900af37-6896-3434-803d-f9ee24686159.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 36183 IP address blocks: 172.224.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:fc:85:5e:0c:57:76:dc:f2:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=308d4f70-2ed4-4709-9611-c59536473a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3b:8c:48:f2:60:00:68:fd:85:c1:f2:7e:7d: 24:78:d3:f1:2f:33:f6:3e:fc:e2:54:01:b3:90:f0: a4:d0:55:48:9c:04:97:22:ae:d1:18:8b:42:f3:98: 73:97:80:29:3c:52:5f:43:5e:73:0e:fb:cb:16:c9: c3:08:44:81:6b:9e:05:86:d1:f0:fb:99:50:be:62: 2f:98:07:9a:f7:84:c2:57:59:08:e4:8c:db:35:23: bd:5e:00:e0:6d:fd:2a:01:2f:10:d8:66:e3:c1:f3: 7c:b1:66:9c:dc:12:c3:a7:c2:32:bd:17:87:3f:bb: 1b:47:ac:f4:4e:a8:d5:21:cc:ba:68:f7:8e:59:3e: a8:9d:26:f2:69:bc:9d:64:a8:1c:0b:86:31:3d:79: 77:46:46:20:8d:a7:3b:05:55:3e:57:86:59:cc:2e: 96:5a:97:3b:d3:6e:da:1e:65:b8:35:03:62:fb:8c: 42:ff:fb:6a:b5:3a:32:c5:e3:39:70:ee:5d:2f:c3: fb:6b:3d:64:cb:c7:0b:f6:9e:99:aa:12:f7:c1:0d: 7d:90:0b:35:2c:34:42:8b:ff:cb:b4:a5:da:2a:55: 5f:c7:f6:56:43:02:21:95:f5:98:9e:21:8d:7b:43: 0e:5a:ab:45:93:37:da:d2:63:55:67:89:43:74:c3: be:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:74:49:9D:FF:BF:DB:42:56:88:59:E5:99:0E:0E:61:63:39:32:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c900af37-6896-3434-803d-f9ee24686159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:0f:17:96:cd:e6:2a:5e:9b:4d:e7:b4:7e:72:9e:cf:98:84: 0e:ad:e0:3a:1e:9c:6f:17:fc:70:0c:c6:91:12:ed:58:eb:be: 87:03:d7:4d:3f:04:db:c4:6f:17:e2:2e:b2:aa:bd:f3:e4:5b: e2:62:5d:7e:51:26:6c:26:cc:81:b5:a5:99:53:04:71:22:57: 15:d9:cd:b1:71:25:90:e1:f1:03:00:06:86:27:5b:9c:ea:4a: d5:b9:50:9b:1c:89:04:35:67:5f:d3:66:82:a8:6a:46:06:86: eb:40:b2:c6:54:46:83:92:1e:5b:54:a4:10:cd:68:0c:15:b0: 2e:1f:9a:7d:35:7d:7b:d0:a5:8d:40:1b:71:4e:c9:c8:d3:07: a5:de:28:8b:82:1b:13:a4:ff:f3:e5:cc:08:f3:01:ac:4f:52: 73:af:e6:c4:6a:3f:fa:b7:87:35:99:16:12:cc:a0:b4:6d:57: ef:01:76:92:7e:1f:94:3f:13:9c:cb:e2:a6:b5:a7:15:34:01: 65:f2:6f:07:ec:05:83:51:22:8f:c2:49:e9:52:75:0c:85:f4: 94:de:1a:d2:29:a8:44:45:0a:34:21:79:83:0c:05:d0:7a:cf: 1b:f4:4e:60:95:e1:3c:48:38:56:a6:fa:c6:71:7b:77:7f:ec: 7b:43:69:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPyFXgxXdtzyO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MzA4ZDRmNzAtMmVkNC00NzA5LTk2MTEtYzU5NTM2NDczYTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzuMSPJgAGj9hcHyfn0keNPxLzP2PvziVAGz kPCk0FVInASXIq7RGItC85hzl4ApPFJfQ15zDvvLFsnDCESBa54FhtHw+5lQvmIv mAea94TCV1kI5IzbNSO9XgDgbf0qAS8Q2GbjwfN8sWac3BLDp8IyvReHP7sbR6z0 TqjVIcy6aPeOWT6onSbyabydZKgcC4YxPXl3RkYgjac7BVU+V4ZZzC6WWpc7027a HmW4NQNi+4xC//tqtToyxeM5cO5dL8P7az1ky8cL9p6ZqhL3wQ19kAs1LDRCi//L tKXaKlVfx/ZWQwIhlfWYniGNe0MOWqtFkzfa0mNVZ4lDdMO+UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKt0SZ3/v9tCVohZ5ZkODmFjOTKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzkwMGFmMzctNjg5Ni0z NDM0LTgwM2QtZjllZTI0Njg2MTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYPF5bN5ipem03ntH5yns+YhA6t4DoenG8X/HAMxpES7VjrvocD100/ BNvEbxfiLrKqvfPkW+JiXX5RJmwmzIG1pZlTBHEiVxXZzbFxJZDh8QMABoYnW5zq StW5UJsciQQ1Z1/TZoKoakYGhutAssZURoOSHltUpBDNaAwVsC4fmn01fXvQpY1A G3FOycjTB6XeKIuCGxOk//PlzAjzAaxPUnOv5sRqP/q3hzWZFhLMoLRtV+8BdpJ+ H5Q/E5zL4qa1pxU0AWXybwfsBYNRIo/CSelSdQyF9JTeGtIpqERFCjQheYMMBdB6 zxv0TmCV4TxIOFam+sZxe3d/7HtDad0= -----END CERTIFICATE-----Generated at Wed Aug 6 13:03:17 2025 by rpki-client