$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ab0ffd-5817-3a20-b2aa-227a1039d063.roa File: d9ab0ffd-5817-3a20-b2aa-227a1039d063.roa (raw, json) Hash identifier: OnyBkMMD2D0hjFcFTZMb8M0IAel/qFNt96qK/9wV390= Subject key identifier: 36:3B:8C:34:A6:DE:1A:19:0A:00:FD:B3:09:27:17:4A:CD:18:F0:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AA1621AC97DC24341FAEB1100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ab0ffd-5817-3a20-b2aa-227a1039d063.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 36183 IP address blocks: 172.225.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:62:1a:c9:7d:c2:43:41:fa:eb:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=b8ddc979-30a7-4942-86e9-41d457efdbb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:69:6d:30:9c:6f:dc:72:09:bf:3d:69:28:83: a9:52:27:84:42:3b:86:f5:50:53:0c:a6:92:b1:19: b0:75:46:43:55:88:83:54:b0:57:67:8f:e6:b8:3b: d2:86:4b:36:d6:c9:4f:78:45:d7:8b:e9:18:75:f9: a1:27:f2:47:6f:39:5f:40:14:b1:f6:81:16:af:bb: 5e:f9:c8:3d:19:ee:a7:81:86:b6:49:dc:44:1f:27: 15:26:51:1c:25:ec:62:d0:c5:6e:8b:c7:55:9d:d7: 18:c2:b9:e6:36:1e:54:d6:54:5b:a6:cf:a3:c2:09: c8:7d:f6:67:53:9c:ac:9c:1a:03:6b:e4:76:ed:2d: bf:71:9a:da:da:a5:91:e3:8e:2c:6b:74:d6:4a:45: 48:48:86:54:bf:76:f9:67:59:f4:98:6b:7c:e5:de: 9b:d1:1d:ed:75:6d:ab:06:1f:f5:93:79:df:6a:a4: a7:07:b0:98:16:d5:26:38:37:dd:1b:4b:30:50:a5: 68:c1:f7:22:28:34:4b:cc:67:e5:00:46:55:88:c5: 68:df:fb:38:fd:de:0e:c8:61:47:b0:eb:a8:4c:47: 61:8e:f0:01:e8:df:cd:79:b4:8f:38:3a:b9:19:d1: d0:38:85:32:c1:9f:96:1d:9b:29:41:ed:8f:96:d3: 59:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3B:8C:34:A6:DE:1A:19:0A:00:FD:B3:09:27:17:4A:CD:18:F0:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ab0ffd-5817-3a20-b2aa-227a1039d063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ed:c2:f6:f6:c8:1d:95:1a:c1:01:9e:38:1d:77:ab:6f:2e: f9:ce:1a:2c:d4:d4:c7:b9:e1:ff:00:2b:c3:e2:80:0d:9f:15: 61:28:33:0e:3c:be:14:62:b6:48:d8:c4:18:fa:a2:24:0b:d1: 61:9b:41:e1:bf:5e:44:a3:51:00:3c:cc:59:6b:74:0d:f4:4c: 4a:15:0b:10:11:df:26:05:1d:2a:af:d2:97:ea:69:4c:fb:96: 16:18:c9:0e:52:e6:2a:7e:8a:a9:87:9d:cc:0d:85:06:30:49: e1:9f:76:d6:7e:6c:06:b9:39:66:e0:0c:c6:d1:5f:33:94:4e: 70:13:5c:18:8d:65:92:8f:e1:bc:6d:12:70:8f:01:b4:33:e1: a3:e8:39:6f:a8:14:d7:b9:4c:8f:96:9e:72:ba:f7:ea:0a:57: 6b:ae:7d:f1:76:6d:7e:88:cc:19:6e:6f:ad:43:aa:fb:f0:36: f1:a2:4f:af:26:59:7d:f1:3b:35:80:86:b9:80:ee:a5:06:07: 7e:13:fd:78:f9:40:cf:c8:4a:d2:86:33:ac:b0:d3:b1:5b:bc: f9:24:bc:50:16:30:60:26:8d:4c:1d:e9:94:07:55:b1:83:eb: f1:18:f0:7f:70:af:39:3b:09:2e:6d:bc:19:00:8d:61:84:5b: d0:46:3b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYhrJfcJDQfrrEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YjhkZGM5NzktMzBhNy00OTQyLTg2ZTktNDFkNDU3ZWZkYmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02ltMJxv3HIJvz1pKIOpUieEQjuG9VBTDKaS sRmwdUZDVYiDVLBXZ4/muDvShks21slPeEXXi+kYdfmhJ/JHbzlfQBSx9oEWr7te +cg9Ge6ngYa2SdxEHycVJlEcJexi0MVui8dVndcYwrnmNh5U1lRbps+jwgnIffZn U5ysnBoDa+R27S2/cZra2qWR444sa3TWSkVISIZUv3b5Z1n0mGt85d6b0R3tdW2r Bh/1k3nfaqSnB7CYFtUmODfdG0swUKVowfciKDRLzGflAEZViMVo3/s4/d4OyGFH sOuoTEdhjvAB6N/NebSPODq5GdHQOIUywZ+WHZspQe2PltNZPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDY7jDSm3hoZCgD9swknF0rNGPDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDlhYjBmZmQtNTgxNy0z YTIwLWIyYWEtMjI3YTEwMzlkMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLtwvb2yB2VGsEBnjgdd6tvLvnOGizU1Me54f8AK8PigA2fFWEoMw48 vhRitkjYxBj6oiQL0WGbQeG/XkSjUQA8zFlrdA30TEoVCxAR3yYFHSqv0pfqaUz7 lhYYyQ5S5ip+iqmHncwNhQYwSeGfdtZ+bAa5OWbgDMbRXzOUTnATXBiNZZKP4bxt EnCPAbQz4aPoOW+oFNe5TI+WnnK69+oKV2uuffF2bX6IzBlub61DqvvwNvGiT68m WX3xOzWAhrmA7qUGB34T/Xj5QM/IStKGM6yw07FbvPkkvFAWMGAmjUwd6ZQHVbGD 6/EY8H9wrzk7CS5tvBkAjWGEW9BGO5Q= -----END CERTIFICATE-----Generated at Tue Aug 5 17:26:14 2025 by rpki-client