$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4cd1ebb-b7a6-39e5-beeb-80c24be36e7b.roa File: e4cd1ebb-b7a6-39e5-beeb-80c24be36e7b.roa (raw, json) Hash identifier: 2nVSUuoa1rAl0X/dgNG0uzS5ry3srKQSIXGevbA3jD8= Subject key identifier: 3F:B4:0E:0C:7B:EE:25:78:59:DA:AF:FD:82:20:72:E0:A7:41:83:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AADF131F03D09D9C617DDE060 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4cd1ebb-b7a6-39e5-beeb-80c24be36e7b.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 36183 IP address blocks: 172.225.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:31:f0:3d:09:d9:c6:17:dd:e0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=747191d7-bdb8-4fa9-a421-20d3011265b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ad:87:59:ba:a8:e4:b3:b0:2c:cc:ee:2f:80: 47:7a:2e:c1:4a:28:4e:4c:a0:07:6f:cf:b7:f1:c8: 54:fc:e1:0e:60:8b:a2:86:ed:39:b7:ee:37:88:33: da:d6:b2:57:a8:46:ac:ea:f7:c8:f9:6b:a9:f8:60: 0c:25:13:57:51:fc:5e:55:77:4a:72:61:96:d1:35: 6f:49:1b:7d:03:04:6d:80:82:28:ed:1e:a2:78:8d: b2:73:58:8c:d1:80:03:cd:68:ea:b4:ae:5f:99:f3: a3:4c:40:34:d3:99:d0:98:b8:81:57:a2:bd:25:fe: 4c:14:7f:c3:c6:ae:83:fb:f8:d6:96:46:14:1b:1e: bb:2f:63:91:76:0d:b8:7d:74:ef:3c:bb:3b:66:cf: 0b:77:ef:59:39:27:84:75:a7:bc:d9:a8:f7:a0:5a: df:c5:87:39:e5:9d:11:88:d2:1f:4a:74:d7:aa:73: 62:41:59:7d:5b:ca:cd:28:a9:e8:56:09:e0:5e:6b: a4:88:05:46:c3:63:e5:fe:1b:dc:98:33:32:da:95: 5b:2e:d0:08:49:73:c0:c4:91:e3:d1:0a:90:9e:3a: 36:be:40:03:19:b6:81:8f:2c:69:50:3d:71:07:90: c0:8e:b7:7c:76:a6:bc:5b:9d:7c:56:0e:26:4c:26: b6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B4:0E:0C:7B:EE:25:78:59:DA:AF:FD:82:20:72:E0:A7:41:83:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4cd1ebb-b7a6-39e5-beeb-80c24be36e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:15:43:0f:f9:53:f6:d6:15:74:8f:c0:7e:86:c6:d8:2b:41: b0:6a:af:0b:51:b6:1a:40:b4:a4:ea:cf:89:35:4b:c4:78:04: 53:87:87:94:63:f6:b1:e4:76:71:23:5b:41:d3:8f:99:fe:de: 0e:b6:b8:99:a2:a2:4a:b6:13:c4:bf:47:a4:75:23:c0:fc:87: 31:92:3d:98:e3:d9:ac:2a:ab:21:9e:a1:07:ed:54:1a:48:9b: b1:71:2b:d2:f0:0a:7c:01:e6:19:68:3c:e1:f8:06:3f:77:53: aa:67:37:6c:86:85:1f:20:75:91:fe:a2:a5:3a:24:dc:31:2f: 3d:eb:a7:75:fd:4d:8d:9b:24:10:e4:8d:64:ec:00:b8:bf:12: d3:68:7b:d3:8b:07:64:dc:9b:e8:10:e5:bc:5d:ca:5a:3c:3c: d2:b0:cc:f1:e1:5b:37:ef:8c:c2:2d:8e:fe:67:76:a0:5e:a1: 57:1f:fb:33:ef:06:ae:89:19:87:d7:2d:a7:ae:55:06:b3:84: 84:29:63:2b:e6:76:76:1b:94:f3:99:21:d8:61:8f:8d:30:22: e6:dc:80:6e:d3:7d:08:0c:72:5b:43:b5:b2:2a:f2:78:a1:a5: 46:76:31:dc:c6:00:d9:1b:03:11:38:15:8e:81:08:be:7b:d0: 63:b6:ce:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8THwPQnZxhfd4GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NzQ3MTkxZDctYmRiOC00ZmE5LWE0MjEtMjBkMzAxMTI2NWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8a2HWbqo5LOwLMzuL4BHei7BSihOTKAHb8+3 8chU/OEOYIuihu05t+43iDPa1rJXqEas6vfI+Wup+GAMJRNXUfxeVXdKcmGW0TVv SRt9AwRtgIIo7R6ieI2yc1iM0YADzWjqtK5fmfOjTEA005nQmLiBV6K9Jf5MFH/D xq6D+/jWlkYUGx67L2ORdg24fXTvPLs7Zs8Ld+9ZOSeEdae82aj3oFrfxYc55Z0R iNIfSnTXqnNiQVl9W8rNKKnoVgngXmukiAVGw2Pl/hvcmDMy2pVbLtAISXPAxJHj 0QqQnjo2vkADGbaBjyxpUD1xB5DAjrd8dqa8W518Vg4mTCa2iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+0Dgx77iV4Wdqv/YIgcuCnQYOEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTRjZDFlYmItYjdhNi0z OWU1LWJlZWItODBjMjRiZTM2ZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0VQw/5U/bWFXSPwH6GxtgrQbBqrwtRthpAtKTqz4k1S8R4BFOHh5Rj 9rHkdnEjW0HTj5n+3g62uJmiokq2E8S/R6R1I8D8hzGSPZjj2awqqyGeoQftVBpI m7FxK9LwCnwB5hloPOH4Bj93U6pnN2yGhR8gdZH+oqU6JNwxLz3rp3X9TY2bJBDk jWTsALi/EtNoe9OLB2Tcm+gQ5bxdylo8PNKwzPHhWzfvjMItjv5ndqBeoVcf+zPv Bq6JGYfXLaeuVQazhIQpYyvmdnYblPOZIdhhj40wIubcgG7TfQgMcltDtbIq8nih pUZ2MdzGANkbAxE4FY6BCL570GO2zk0= -----END CERTIFICATE-----Generated at Mon Aug 4 18:36:01 2025 by rpki-client