$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f899bb61-75dc-3120-8fed-7338fd88ed69.roa File: f899bb61-75dc-3120-8fed-7338fd88ed69.roa (raw, json) Hash identifier: l2Nz5RQugRQ2Qmr36VK6OaBXOFErg7jn1MSMj1xh2mU= Subject key identifier: 51:AC:88:E4:45:8E:43:DE:8D:58:30:CC:6A:CD:5A:BB:1A:CE:79:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AADF13115456C3AC4D2651F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f899bb61-75dc-3120-8fed-7338fd88ed69.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 63949 IP address blocks: 172.235.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:31:15:45:6c:3a:c4:d2:65:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=ee2f4fe4-db71-4dab-b915-3e71d11a424b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b9:e5:16:02:bc:cb:f2:2a:d1:f5:8a:d9:dd: 32:f5:c8:55:7e:17:05:e2:4e:bd:08:bf:35:ce:90: 04:91:eb:34:84:d9:c0:e6:92:0b:c2:00:f6:1b:14: 2d:ce:bd:a4:5b:13:bf:e3:99:89:cc:34:64:15:8d: 68:06:e6:e8:e9:65:99:09:07:79:64:45:31:e8:a6: 68:a2:14:b7:8b:c3:64:5b:45:e6:1f:ca:22:9c:b5: 49:a0:dd:69:3a:90:44:77:e4:10:7d:cc:e3:f8:d4: 64:2f:b1:26:6b:cc:52:fc:f4:5d:e8:eb:7f:05:95: f4:61:39:c4:52:6d:84:fe:ca:e8:12:3d:b3:ad:34: 34:cd:61:19:d7:1d:14:f5:ae:1e:9d:5c:65:0f:e4: 77:f0:9a:ae:5f:af:bf:6e:3e:ae:53:c3:d8:51:87: 1b:cc:a6:5a:cc:b1:fb:52:e9:f4:3a:d3:db:9d:1b: 70:50:b0:f7:59:65:93:f6:4b:02:a4:6f:3b:e3:45: d4:88:93:eb:1d:f0:f0:12:fa:f9:d1:40:be:b9:9a: 35:73:ea:1c:a3:ce:a1:69:23:53:75:b3:70:7b:13: 76:9d:75:d6:35:7e:0e:08:c6:22:4f:4d:c7:70:f6: d0:ce:e5:fe:82:ff:ac:03:e2:ad:45:44:6b:d7:6c: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AC:88:E4:45:8E:43:DE:8D:58:30:CC:6A:CD:5A:BB:1A:CE:79:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f899bb61-75dc-3120-8fed-7338fd88ed69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:57:ab:b3:de:36:6a:d7:f6:e9:ca:77:7e:e5:3d:91:61:41: eb:67:3e:d9:6e:92:0e:f5:e4:f1:7d:d5:00:03:3f:7a:75:3d: fc:1f:14:07:cf:5d:7e:78:da:f2:42:a2:2d:c2:bf:a0:ba:e3: c0:6f:05:3d:1d:ce:75:a5:12:e9:e0:79:7b:65:b3:5b:6a:4e: 11:41:67:81:99:d4:51:3d:64:7b:2b:67:d9:10:15:a8:a2:12: 2e:4c:5f:54:22:aa:51:3c:4b:85:53:09:a6:d8:cb:32:a0:9f: 44:89:75:a4:22:e1:2c:52:46:ef:e3:51:35:79:e9:ff:1f:43: 5e:79:e3:9f:85:5b:58:a6:29:f0:7f:b5:5c:e2:00:a6:14:3d: 48:24:44:91:55:50:2f:ab:96:2d:50:99:90:2d:21:e7:d5:73: d2:75:77:f2:cb:a8:dd:e6:0b:9c:4c:47:9c:68:bd:4d:52:cc: 22:06:21:f4:0d:d0:04:ce:58:5e:62:4d:a1:73:6c:96:f0:ac: 12:51:9c:64:ca:34:b5:49:e2:a0:4f:ab:42:70:af:ce:e6:d3: 30:0d:14:2c:f8:1c:b2:a0:a9:0e:06:ed:0f:33:e6:18:09:a2: 9a:6d:7f:d3:47:33:f6:d6:81:29:8b:69:97:e5:46:c7:96:41: e7:82:2b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8TEVRWw6xNJlH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZWUyZjRmZTQtZGI3MS00ZGFiLWI5MTUtM2U3MWQxMWE0MjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbnlFgK8y/Iq0fWK2d0y9chVfhcF4k69CL81 zpAEkes0hNnA5pILwgD2GxQtzr2kWxO/45mJzDRkFY1oBubo6WWZCQd5ZEUx6KZo ohS3i8NkW0XmH8oinLVJoN1pOpBEd+QQfczj+NRkL7Ema8xS/PRd6Ot/BZX0YTnE Um2E/sroEj2zrTQ0zWEZ1x0U9a4enVxlD+R38JquX6+/bj6uU8PYUYcbzKZazLH7 Uun0OtPbnRtwULD3WWWT9ksCpG8740XUiJPrHfDwEvr50UC+uZo1c+oco86haSNT dbNwexN2nXXWNX4OCMYiT03HcPbQzuX+gv+sA+KtRURr12xBcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGsiORFjkPejVgwzGrNWrsaznnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjg5OWJiNjEtNzVkYy0z MTIwLThmZWQtNzMzOGZkODhlZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9Xq7PeNmrX9unKd37lPZFhQetnPtlukg715PF91QADP3p1PfwfFAfP XX542vJCoi3Cv6C648BvBT0dznWlEungeXtls1tqThFBZ4GZ1FE9ZHsrZ9kQFaii Ei5MX1QiqlE8S4VTCabYyzKgn0SJdaQi4SxSRu/jUTV56f8fQ15545+FW1imKfB/ tVziAKYUPUgkRJFVUC+rli1QmZAtIefVc9J1d/LLqN3mC5xMR5xovU1SzCIGIfQN 0ATOWF5iTaFzbJbwrBJRnGTKNLVJ4qBPq0Jwr87m0zANFCz4HLKgqQ4G7Q8z5hgJ opptf9NHM/bWgSmLaZflRseWQeeCK1Y= -----END CERTIFICATE-----Generated at Wed Aug 6 10:59:16 2025 by rpki-client