$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfc2c419-6951-3d7c-be04-a2af92afaeb9.roa File: cfc2c419-6951-3d7c-be04-a2af92afaeb9.roa (raw, json) Hash identifier: h9C6X9/bpba/jErH3Ykn9ggLPEv+SmvtArZSQcHHESI= Subject key identifier: 6E:17:E6:A0:91:91:AA:90:02:3D:0E:77:E0:C8:B7:21:8E:BB:A6:2D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AADF136BA81F9982B73874980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfc2c419-6951-3d7c-be04-a2af92afaeb9.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 36183 IP address blocks: 172.226.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:36:ba:81:f9:98:2b:73:87:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=5b87aea0-0779-487b-95be-116a85d688c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7c:28:58:24:80:17:09:ea:f8:b6:ec:8c:eb: f0:d4:51:8f:ac:65:e1:46:e5:c1:be:8b:88:06:13: da:05:65:53:c6:78:57:11:e2:07:59:12:a4:98:1b: d7:ce:15:87:76:45:66:ab:d1:0d:6c:4b:39:ab:a1: 9d:c5:a8:0c:29:f4:c9:50:5c:8a:67:3f:60:23:28: 06:3e:1c:20:8a:d6:4d:23:33:19:24:e6:4e:e9:12: 83:55:26:b0:74:7f:1e:ba:0e:e6:72:d1:cf:41:77: 39:15:ff:8f:fe:60:fd:2a:a2:3b:80:b0:58:35:33: 54:cf:eb:96:14:91:d2:67:56:cc:7b:d0:fb:93:61: 1d:88:57:de:6b:51:0b:9b:0a:81:17:25:ae:c7:35: 75:8d:0b:ff:70:ec:d8:92:c7:f1:36:40:05:2d:4d: 72:ba:f4:70:82:8f:94:84:2c:ec:c2:9a:ca:4d:9f: 55:4e:ae:9f:4f:e4:a9:e7:b6:85:1d:6d:c8:82:28: 88:a8:94:bf:f6:ef:bf:73:2c:ca:22:d3:69:07:03: ce:33:4f:ab:a4:ff:ef:b5:04:e1:5c:b2:92:9e:68: 8a:cf:c2:15:77:e2:1d:a4:83:a5:56:24:4f:3f:42: eb:02:fd:a9:15:34:a1:83:f3:19:8a:21:5a:b5:c5: ee:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:17:E6:A0:91:91:AA:90:02:3D:0E:77:E0:C8:B7:21:8E:BB:A6:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfc2c419-6951-3d7c-be04-a2af92afaeb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a2:85:68:66:a2:80:19:f4:91:eb:14:a8:a5:28:2f:5c:10: dd:bf:a9:6c:f4:5f:16:b3:b3:b6:f0:0d:2d:ef:6c:30:de:70: 7c:cc:bd:fe:3a:86:05:5d:a1:8e:5b:5b:a9:6f:15:82:1a:2e: 7b:6a:e2:17:6e:49:14:94:b3:88:4c:5b:d0:fe:b0:34:de:cd: 49:ee:1b:43:b3:6d:d6:78:14:8a:37:cf:e5:82:2a:6d:1f:92: d7:cb:75:e2:99:87:8f:82:73:b7:8e:0d:3f:6f:83:12:5a:24: 2b:63:6a:d4:4d:2a:0d:9c:5c:90:b3:2e:36:f3:de:aa:8c:9c: 5c:6b:a5:9d:45:07:2f:88:97:da:c5:1f:b2:18:b0:52:3d:6b: 22:7d:fe:1e:fa:73:27:b5:62:02:4f:54:a3:36:76:17:28:cd: 1c:b3:38:70:dd:7e:ef:ef:85:a9:76:e2:8e:b2:7e:a8:bc:c3: 4b:87:43:5d:4e:4e:09:ce:1d:c1:2a:8f:2b:24:9c:c9:f7:9f: 7f:bf:68:0e:b4:c7:9c:38:a1:68:c3:c7:1e:be:82:04:ca:c2: 3a:78:ab:53:27:67:b5:bd:e0:76:aa:0d:eb:55:bd:07:64:71: 60:ca:f7:56:52:2e:d6:98:9a:42:fb:ce:43:cc:ae:2d:27:4c: fc:ad:2b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8Ta6gfmYK3OHSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NWI4N2FlYTAtMDc3OS00ODdiLTk1YmUtMTE2YTg1ZDY4OGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHwoWCSAFwnq+LbsjOvw1FGPrGXhRuXBvouI BhPaBWVTxnhXEeIHWRKkmBvXzhWHdkVmq9ENbEs5q6GdxagMKfTJUFyKZz9gIygG PhwgitZNIzMZJOZO6RKDVSawdH8eug7mctHPQXc5Ff+P/mD9KqI7gLBYNTNUz+uW FJHSZ1bMe9D7k2EdiFfea1ELmwqBFyWuxzV1jQv/cOzYksfxNkAFLU1yuvRwgo+U hCzswprKTZ9VTq6fT+Sp57aFHW3IgiiIqJS/9u+/cyzKItNpBwPOM0+rpP/vtQTh XLKSnmiKz8IVd+IdpIOlViRPP0LrAv2pFTShg/MZiiFatcXuUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4X5qCRkaqQAj0Od+DItyGOu6YtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ZjMmM0MTktNjk1MS0z ZDdjLWJlMDQtYTJhZjkyYWZhZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOJDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyihWhmooAZ9JHrFKilKC9cEN2/qWz0Xxazs7bwDS3vbDDecHzMvf46 hgVdoY5bW6lvFYIaLntq4hduSRSUs4hMW9D+sDTezUnuG0OzbdZ4FIo3z+WCKm0f ktfLdeKZh4+Cc7eODT9vgxJaJCtjatRNKg2cXJCzLjbz3qqMnFxrpZ1FBy+Il9rF H7IYsFI9ayJ9/h76cye1YgJPVKM2dhcozRyzOHDdfu/vhal24o6yfqi8w0uHQ11O TgnOHcEqjysknMn3n3+/aA60x5w4oWjDxx6+ggTKwjp4q1MnZ7W94HaqDetVvQdk cWDK91ZSLtaYmkL7zkPMri0nTPytK6M= -----END CERTIFICATE-----Generated at Mon Aug 4 19:16:40 2025 by rpki-client