$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/581286f5-982f-3e98-9972-2bd8924b6f41.roa File: 581286f5-982f-3e98-9972-2bd8924b6f41.roa (raw, json) Hash identifier: fgbZDxCztH2GgRK8gKLR271U5Z3zCjK2974OPmSv5Q4= Subject key identifier: 34:A3:2F:FB:0C:52:C0:8A:CC:D2:9F:D5:2F:8D:93:6C:9A:FE:64:62 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ACB411EE49173E173BDCD9500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/581286f5-982f-3e98-9972-2bd8924b6f41.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 36183 IP address blocks: 172.225.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:1e:e4:91:73:e1:73:bd:cd:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=1c309bcf-2033-4a53-b388-fb1cca0713b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:b5:3b:1e:35:98:96:44:42:30:c5:92:ee: 06:b8:10:98:0b:bf:62:22:2f:62:4c:63:c8:76:55: 29:bc:86:4d:08:d6:38:bd:73:73:53:17:98:36:16: 6b:8a:dc:fb:e3:11:dd:b6:d3:7f:62:c0:9b:44:8a: b7:b0:a4:22:ba:42:85:af:f1:07:a9:e2:21:7b:8c: f8:14:ce:8b:ca:08:c0:3b:71:13:a8:29:df:16:6d: 08:87:12:74:7f:f5:b6:9f:06:37:90:0f:41:01:e3: c6:f1:33:23:50:5e:35:9b:33:0a:c8:c8:26:3e:cb: d4:c1:fa:e3:59:0f:44:c3:19:ac:d9:74:c9:49:ef: 5d:a6:41:cc:4a:ae:e0:e1:9b:87:fb:be:58:1d:78: 82:b5:cb:af:f0:35:c5:ed:25:77:e1:c7:41:e6:b4: da:5b:c6:b6:1e:b7:ba:96:b8:a7:d6:ea:22:0e:76: 2b:26:73:39:0b:bc:d5:e0:c7:75:3f:aa:a3:1d:33: b9:50:c6:40:09:8f:a1:7f:6b:2e:f1:a9:1c:af:6f: 80:3f:15:9a:9e:59:49:f6:c2:55:a8:bb:e6:d9:a4: 5b:30:10:80:ac:64:dd:88:fd:54:94:6a:ac:d2:20: 79:ab:30:a5:27:fa:70:fe:98:35:35:ef:72:49:2a: 2a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A3:2F:FB:0C:52:C0:8A:CC:D2:9F:D5:2F:8D:93:6C:9A:FE:64:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/581286f5-982f-3e98-9972-2bd8924b6f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ec:11:2f:e0:34:e0:31:3e:be:fd:97:a2:5d:c0:a1:fe:72: 0c:90:34:67:d7:a2:bc:e1:85:c6:60:bb:f4:95:f0:ab:82:79: 04:6c:f1:84:97:5f:b4:28:b9:d3:ed:54:f4:05:f1:7e:92:00: a2:65:8e:56:b8:15:57:1e:17:2c:9f:5d:85:ca:11:d3:de:d8: 3c:50:ff:0a:a5:fa:a5:6b:f1:aa:6c:e6:04:a8:42:62:13:53: c6:5b:09:2b:44:51:38:16:5c:97:b9:9f:a9:24:a9:7f:00:34: a1:9b:1f:e9:d7:7d:be:6e:6f:7d:bf:72:3d:33:57:e9:84:1c: ec:64:4f:8a:63:94:b7:8d:88:11:3e:17:31:82:a0:a4:11:cc: 39:13:a5:86:6c:83:c4:88:be:78:0d:e4:f9:a3:fe:65:22:74: 0f:ef:3b:3a:53:fb:68:8a:bb:03:c5:4d:0e:3c:5b:86:6c:67: 22:7e:66:a8:5a:77:8c:ac:27:3b:64:02:53:ea:a3:a6:bd:c4: 81:76:d2:20:a0:e0:a9:b4:5e:6d:b9:ec:a9:bd:31:81:e4:ca: 34:9b:f8:70:61:a0:38:cb:4d:94:36:fe:d3:0e:74:10:64:a8: c3:0b:6f:fd:50:06:f6:f1:c5:88:04:da:95:56:9d:aa:35:7d: 9a:3d:f1:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQR7kkXPhc73NlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MWMzMDliY2YtMjAzMy00YTUzLWIzODgtZmIxY2NhMDcxM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOy1Ox41mJZEQjDFku4GuBCYC79iIi9iTGPI dlUpvIZNCNY4vXNzUxeYNhZritz74xHdttN/YsCbRIq3sKQiukKFr/EHqeIhe4z4 FM6LygjAO3ETqCnfFm0IhxJ0f/W2nwY3kA9BAePG8TMjUF41mzMKyMgmPsvUwfrj WQ9Ewxms2XTJSe9dpkHMSq7g4ZuH+75YHXiCtcuv8DXF7SV34cdB5rTaW8a2Hre6 lrin1uoiDnYrJnM5C7zV4Md1P6qjHTO5UMZACY+hf2su8akcr2+APxWanllJ9sJV qLvm2aRbMBCArGTdiP1UlGqs0iB5qzClJ/pw/pg1Ne9ySSoqtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSjL/sMUsCKzNKf1S+Nk2ya/mRiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTgxMjg2ZjUtOTgyZi0z ZTk4LTk5NzItMmJkODkyNGI2ZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELsES/gNOAxPr79l6JdwKH+cgyQNGfXorzhhcZgu/SV8KuCeQRs8YSX X7QoudPtVPQF8X6SAKJljla4FVceFyyfXYXKEdPe2DxQ/wql+qVr8aps5gSoQmIT U8ZbCStEUTgWXJe5n6kkqX8ANKGbH+nXfb5ub32/cj0zV+mEHOxkT4pjlLeNiBE+ FzGCoKQRzDkTpYZsg8SIvngN5Pmj/mUidA/vOzpT+2iKuwPFTQ48W4ZsZyJ+Zqha d4ysJztkAlPqo6a9xIF20iCg4Km0Xm257Km9MYHkyjSb+HBhoDjLTZQ2/tMOdBBk qMMLb/1QBvbxxYgE2pVWnao1fZo98cc= -----END CERTIFICATE-----Generated at Sat Aug 23 13:02:26 2025 by rpki-client