$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2e2e57-ddcf-3aeb-bfe0-ed48b1239e8b.roa File: cf2e2e57-ddcf-3aeb-bfe0-ed48b1239e8b.roa (raw, json) Hash identifier: QjvchSu94dX6y4ZBZ3LjQZGZA7wrWSpyWFPuuogOJjc= Subject key identifier: 39:33:E2:23:12:37:9A:75:F5:FA:FA:BC:D0:84:AF:EA:00:B7:E2:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB91BB9228BCDC55E71B72D90 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2e2e57-ddcf-3aeb-bfe0-ed48b1239e8b.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 36183 IP address blocks: 172.224.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:b9:22:8b:cd:c5:5e:71:b7:2d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=6d0f1077-5111-4c27-bb49-5c4aa06cf65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:20:c0:ac:49:6e:68:5b:0e:12:21:87:be:7f: d7:fc:32:94:41:1b:c8:4d:e9:77:90:30:46:c6:fd: 0c:99:dd:9d:bb:80:23:77:a6:61:ba:e1:9d:92:92: b5:76:82:82:12:eb:6d:2e:d1:4f:cd:c5:72:cc:05: a3:f1:b0:49:11:d1:56:7d:3b:12:78:e7:58:4e:7f: 8a:23:2e:28:9a:26:d9:4d:a2:a4:7f:26:43:18:df: 03:3e:59:11:bb:b7:a4:70:8c:ed:3a:82:7d:a4:e4: 30:f7:00:b3:9e:c5:b4:f6:5e:27:75:4b:5a:f2:21: ca:3c:16:50:79:af:f3:13:ce:a2:50:22:65:d5:0f: 48:47:78:8d:bf:27:85:94:0d:af:c3:c0:2e:5c:bc: 54:9d:ca:40:c0:f1:5e:13:7e:4c:58:dc:df:fb:05: 16:e9:4e:e2:e2:75:d2:e2:43:d7:06:ce:fd:53:d3: 8c:48:58:6f:3e:f2:b0:22:4d:07:ba:2b:2b:23:d9: 89:4b:b2:50:f6:1d:fe:9a:4e:d8:7a:47:55:7e:6f: af:e1:97:11:ae:56:93:90:00:a9:4d:2b:b5:33:94: 77:b0:68:e3:20:33:ec:23:36:f3:de:7e:67:74:24: fe:a2:dc:98:e9:22:ae:11:48:2c:1e:9a:9c:04:05: 29:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:33:E2:23:12:37:9A:75:F5:FA:FA:BC:D0:84:AF:EA:00:B7:E2:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2e2e57-ddcf-3aeb-bfe0-ed48b1239e8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:53:b8:4b:2a:9c:28:d3:30:b2:2e:a5:e4:9e:bc:21:7b:a3: 42:43:4a:0c:c0:96:de:b4:7c:8a:bb:de:81:3e:ad:4e:86:8c: 0e:c6:fc:d7:5d:fc:b7:ce:d4:ea:5c:1d:b0:f1:4b:59:64:72: 5b:ad:98:0b:0d:37:c5:0b:8b:c0:e1:22:06:86:96:fa:20:ae: 60:a1:d6:73:c0:da:b8:10:59:c3:67:86:93:17:a5:97:ca:40: a5:e6:60:17:0f:d6:f1:bb:fb:a9:45:97:bd:99:21:ed:24:84: 90:04:e1:ae:8d:5e:1a:30:cf:af:ef:9c:7b:e7:cd:d1:b4:c0: b7:1e:ea:cd:90:a7:b5:c1:84:69:b3:79:9f:28:c6:37:00:36: 12:0d:80:a8:3f:49:35:20:d7:01:69:5c:0a:ed:aa:dd:9a:a4: ab:5c:ec:47:27:d0:dc:84:c4:5b:ac:b3:9f:f4:d5:8c:f3:01: bd:80:cc:31:a5:71:06:ba:56:80:6a:7c:2f:1a:08:43:5e:f1: 74:6b:f5:32:ef:d6:38:12:e9:58:85:c8:cc:b4:5f:0d:0b:f7: d3:39:5c:67:14:d9:c2:82:7d:84:36:fa:77:16:e2:af:fb:d0: ba:11:c9:2c:4e:5e:2b:9a:24:af:0b:39:2d:a9:49:d8:4e:27: 3e:58:81:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G7kii83FXnG3LZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NmQwZjEwNzctNTExMS00YzI3LWJiNDktNWM0YWEwNmNmNjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyDArEluaFsOEiGHvn/X/DKUQRvITel3kDBG xv0Mmd2du4Ajd6ZhuuGdkpK1doKCEuttLtFPzcVyzAWj8bBJEdFWfTsSeOdYTn+K Iy4omibZTaKkfyZDGN8DPlkRu7ekcIztOoJ9pOQw9wCznsW09l4ndUta8iHKPBZQ ea/zE86iUCJl1Q9IR3iNvyeFlA2vw8AuXLxUncpAwPFeE35MWNzf+wUW6U7i4nXS 4kPXBs79U9OMSFhvPvKwIk0HuisrI9mJS7JQ9h3+mk7YekdVfm+v4ZcRrlaTkACp TSu1M5R3sGjjIDPsIzbz3n5ndCT+otyY6SKuEUgsHpqcBAUpBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkz4iMSN5p19fr6vNCEr+oAt+LQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2YyZTJlNTctZGRjZi0z YWViLWJmZTAtZWQ0OGIxMjM5ZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItTuEsqnCjTMLIupeSevCF7o0JDSgzAlt60fIq73oE+rU6GjA7G/Ndd /LfO1OpcHbDxS1lkclutmAsNN8ULi8DhIgaGlvogrmCh1nPA2rgQWcNnhpMXpZfK QKXmYBcP1vG7+6lFl72ZIe0khJAE4a6NXhowz6/vnHvnzdG0wLce6s2Qp7XBhGmz eZ8oxjcANhINgKg/STUg1wFpXArtqt2apKtc7Ecn0NyExFuss5/01YzzAb2AzDGl cQa6VoBqfC8aCENe8XRr9TLv1jgS6ViFyMy0Xw0L99M5XGcU2cKCfYQ2+ncW4q/7 0LoRySxOXiuaJK8LOS2pSdhOJz5YgYo= -----END CERTIFICATE-----Generated at Mon Aug 4 18:38:46 2025 by rpki-client