$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de33e11b-3b44-35e1-a0b2-dd0afd7ee4ac.roa File: de33e11b-3b44-35e1-a0b2-dd0afd7ee4ac.roa (raw, json) Hash identifier: 0EKvuDgBFdrpaH9rjV9i4TYG50gnKse7unTOIxiVbpg= Subject key identifier: A9:25:7B:23:5F:3F:07:FD:D2:25:7C:17:85:FC:CD:19:65:8A:96:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB650FAC61BD02DC6D1E20360 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de33e11b-3b44-35e1-a0b2-dd0afd7ee4ac.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 36183 IP address blocks: 172.224.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:fa:c6:1b:d0:2d:c6:d1:e2:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=3fca02f2-de7d-472c-acfb-8c5e2e743f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fc:d1:ca:da:e2:0e:82:a4:b3:8a:4f:2f:47: ec:fd:a4:c6:84:82:65:08:0c:68:73:72:1e:e9:41: 50:c9:7c:1a:de:7f:cc:89:17:c8:24:c9:29:6f:5f: ad:f6:16:de:8b:88:80:95:e9:ff:fb:a7:42:3f:76: 14:79:96:08:14:2e:32:a6:42:1a:5f:45:20:ca:a9: 6a:3c:54:c7:f2:92:cd:69:5d:dc:c1:ec:55:a9:98: 02:40:c2:6d:4e:72:5e:05:1e:0a:ed:61:6f:30:e6: 1c:de:bf:32:14:50:e4:9d:41:38:c0:4d:5d:aa:da: d5:29:fc:af:ab:b0:61:02:9f:98:9f:06:2b:35:71: 70:39:a4:d9:70:10:d9:ae:fe:92:04:89:4d:63:c1: a0:89:60:3d:9e:da:6f:90:b1:1b:d6:57:f0:05:66: 7d:f3:72:4c:02:9f:7d:ce:df:4a:54:56:c4:5b:3c: 52:74:d9:c8:93:51:33:69:a8:40:b0:3d:37:97:73: ee:97:40:2e:ac:30:e7:55:90:04:20:24:f8:dd:77: 38:af:7f:69:21:ce:23:2b:4c:22:ea:8f:ba:c5:7f: e4:72:0f:87:a8:7d:d4:35:f7:c9:25:51:e6:01:79: 04:6a:23:66:b9:ed:7d:13:75:c8:8c:e7:a9:9e:57: 61:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:25:7B:23:5F:3F:07:FD:D2:25:7C:17:85:FC:CD:19:65:8A:96:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de33e11b-3b44-35e1-a0b2-dd0afd7ee4ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:9f:93:bb:94:0f:04:08:7d:f8:95:83:66:83:06:93:47:64: ef:a3:19:89:04:2e:ce:a6:88:4d:d3:40:7c:dd:7e:72:f5:14: 04:36:e0:5f:d3:f7:6f:8a:82:e9:19:38:e7:37:9c:ce:51:a0: db:03:24:2c:9a:fe:40:37:65:02:b1:34:94:fd:b0:48:79:ed: 6a:46:de:27:50:59:6a:a1:85:ea:05:67:4e:d4:68:67:69:18: 40:1a:89:eb:64:ce:d9:9e:a0:88:2f:a2:18:9d:e5:f0:1f:fc: 37:37:f0:73:0a:73:3a:fa:d4:61:e1:71:84:b4:d1:7b:61:ee: 4f:d9:76:c8:e6:07:eb:1f:2e:d8:d0:30:19:07:43:8a:76:f0: 55:4c:d9:19:32:92:2f:2f:d8:46:80:43:de:35:2e:46:03:78: c3:68:85:a2:99:cf:98:d3:2b:bd:16:e7:5a:b0:e3:9b:d3:db: 49:06:5e:dd:c6:f5:ba:b5:46:de:ee:e2:53:48:42:37:b9:a7: f0:07:fa:bf:11:f8:e2:cc:3b:f2:56:1c:b0:94:78:ca:22:5c: 8d:cf:79:35:17:19:87:62:4d:fa:94:56:98:29:10:9c:75:33: 31:3a:29:c7:f7:35:4a:65:c6:aa:3d:aa:53:07:90:b1:31:0f: e5:93:4a:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPrGG9AtxtHiA2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk M2ZjYTAyZjItZGU3ZC00NzJjLWFjZmItOGM1ZTJlNzQzZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPzRytriDoKks4pPL0fs/aTGhIJlCAxoc3Ie 6UFQyXwa3n/MiRfIJMkpb1+t9hbei4iAlen/+6dCP3YUeZYIFC4ypkIaX0Ugyqlq PFTH8pLNaV3cwexVqZgCQMJtTnJeBR4K7WFvMOYc3r8yFFDknUE4wE1dqtrVKfyv q7BhAp+YnwYrNXFwOaTZcBDZrv6SBIlNY8GgiWA9ntpvkLEb1lfwBWZ983JMAp99 zt9KVFbEWzxSdNnIk1EzaahAsD03l3Pul0AurDDnVZAEICT43Xc4r39pIc4jK0wi 6o+6xX/kcg+HqH3UNffJJVHmAXkEaiNmue19E3XIjOepnldhmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkleyNfPwf90iV8F4X8zRllipb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGUzM2UxMWItM2I0NC0z NWUxLWEwYjItZGQwYWZkN2VlNGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCfk7uUDwQIffiVg2aDBpNHZO+jGYkELs6miE3TQHzdfnL1FAQ24F/T 92+KgukZOOc3nM5RoNsDJCya/kA3ZQKxNJT9sEh57WpG3idQWWqhheoFZ07UaGdp GEAaietkztmeoIgvohid5fAf/Dc38HMKczr61GHhcYS00Xth7k/ZdsjmB+sfLtjQ MBkHQ4p28FVM2Rkyki8v2EaAQ941LkYDeMNohaKZz5jTK70W51qw45vT20kGXt3G 9bq1Rt7u4lNIQje5p/AH+r8R+OLMO/JWHLCUeMoiXI3PeTUXGYdiTfqUVpgpEJx1 MzE6Kcf3NUplxqo9qlMHkLExD+WTSpY= -----END CERTIFICATE-----Generated at Mon Aug 4 18:38:03 2025 by rpki-client