$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a01e854e-0714-3adf-a2e1-80c6fa00f1a5.roa File: a01e854e-0714-3adf-a2e1-80c6fa00f1a5.roa (raw, json) Hash identifier: yqpUMF3QiGY1vsSTrz0ZPRjTZ7rfHV5VRFKUZRvo6SQ= Subject key identifier: 13:E8:3A:E6:FD:3F:D8:1D:92:07:79:76:8C:C1:2E:7D:8C:E8:A5:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ACB411ED19A27DD2231EE5940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a01e854e-0714-3adf-a2e1-80c6fa00f1a5.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 36183 IP address blocks: 172.225.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:1e:d1:9a:27:dd:22:31:ee:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=eba3eb88-0b4a-4251-a424-b427bfd74722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ee:53:b0:3a:81:4f:7f:ed:b5:1c:07:76:bc: 0f:06:88:2a:df:b6:cf:40:19:c1:7b:fa:05:ea:de: 05:79:35:85:60:6c:d6:84:21:23:d9:60:b6:d2:c9: fe:d3:5f:9e:28:06:a3:d6:e2:1e:68:c2:30:0b:ba: 33:ae:c0:3a:39:74:3a:d9:a6:95:c3:53:1a:4b:2d: cc:ea:20:41:6c:6e:20:19:04:e2:f9:4f:50:da:28: e5:a2:76:08:ee:cf:2b:da:c0:4d:92:88:04:fc:6a: 83:10:2d:d4:9e:17:1e:f0:e5:02:81:58:61:a6:42: c1:17:a8:e0:c3:88:22:1c:c1:8c:88:d2:10:d3:36: 31:ae:ec:55:a7:a6:61:73:a1:93:88:cd:d1:27:02: af:04:f5:ca:28:a2:28:0e:d5:ff:3e:94:52:bd:81: 3c:31:be:39:f0:ac:79:dd:e2:73:ce:6d:7b:97:0f: 55:f3:53:21:eb:80:b5:c6:5d:c9:7c:cd:7c:0d:71: ff:58:e9:f9:d0:3d:21:01:c5:3d:21:4d:9c:54:d7: 3a:31:82:99:5a:6d:61:6a:56:d5:e7:16:00:0c:63: 2a:39:8c:c2:e2:33:4c:d9:dd:33:48:e1:3d:52:e8: c4:5c:1d:b3:ce:94:9f:b6:d3:2a:44:4c:39:24:be: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E8:3A:E6:FD:3F:D8:1D:92:07:79:76:8C:C1:2E:7D:8C:E8:A5:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a01e854e-0714-3adf-a2e1-80c6fa00f1a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:52:41:a4:06:26:2d:62:54:60:27:e1:78:95:9e:11:93:b7: b6:b7:3a:ec:db:3f:0f:c6:84:37:10:e4:98:2c:44:76:dd:37: 1c:b1:2d:e3:ad:f0:c8:27:a0:2b:7d:2a:c2:c0:f4:1c:71:9d: 72:9a:07:ef:ed:e8:05:2d:66:7d:bf:72:27:a0:d2:a2:fd:a3: b4:8d:89:4c:c3:c0:6f:d8:39:cb:7e:a9:68:e4:81:4e:82:1e: 93:0a:7b:23:4c:57:9e:e6:08:98:01:1e:ba:86:af:6e:53:32: 11:8c:37:58:b8:ce:6a:2e:ae:73:06:4c:2e:b0:cd:86:4c:25: d1:69:0e:4d:26:77:b9:c7:87:74:b9:ba:20:4d:7c:ce:dd:0c: bd:79:03:7b:22:50:24:07:5d:6c:0a:00:9c:12:14:71:c1:69: d9:ee:50:cd:f8:a1:e8:25:36:ef:c4:63:0c:2d:7d:ae:66:56: 43:1a:4c:1b:54:06:fd:0b:98:77:90:ea:f6:2a:31:f7:08:43: c2:8e:e8:30:ae:a4:45:a9:a2:35:c0:89:2c:e4:3c:7d:32:70: 1f:5f:9d:41:3c:3a:84:28:43:70:eb:ad:47:4e:19:82:8b:ec: b5:08:d8:57:d6:37:7d:65:b9:5b:e5:02:b3:e0:96:d3:bd:25: ec:99:ca:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQR7RmifdIjHuWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZWJhM2ViODgtMGI0YS00MjUxLWE0MjQtYjQyN2JmZDc0NzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+5TsDqBT3/ttRwHdrwPBogq37bPQBnBe/oF 6t4FeTWFYGzWhCEj2WC20sn+01+eKAaj1uIeaMIwC7ozrsA6OXQ62aaVw1MaSy3M 6iBBbG4gGQTi+U9Q2ijlonYI7s8r2sBNkogE/GqDEC3Unhce8OUCgVhhpkLBF6jg w4giHMGMiNIQ0zYxruxVp6Zhc6GTiM3RJwKvBPXKKKIoDtX/PpRSvYE8Mb458Kx5 3eJzzm17lw9V81Mh64C1xl3JfM18DXH/WOn50D0hAcU9IU2cVNc6MYKZWm1halbV 5xYADGMqOYzC4jNM2d0zSOE9UujEXB2zzpSfttMqREw5JL7cgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPoOub9P9gdkgd5dozBLn2M6KXCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTAxZTg1NGUtMDcxNC0z YWRmLWEyZTEtODBjNmZhMDBmMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENSQaQGJi1iVGAn4XiVnhGTt7a3OuzbPw/GhDcQ5JgsRHbdNxyxLeOt 8MgnoCt9KsLA9BxxnXKaB+/t6AUtZn2/cieg0qL9o7SNiUzDwG/YOct+qWjkgU6C HpMKeyNMV57mCJgBHrqGr25TMhGMN1i4zmournMGTC6wzYZMJdFpDk0md7nHh3S5 uiBNfM7dDL15A3siUCQHXWwKAJwSFHHBadnuUM34oeglNu/EYwwtfa5mVkMaTBtU Bv0LmHeQ6vYqMfcIQ8KO6DCupEWpojXAiSzkPH0ycB9fnUE8OoQoQ3DrrUdOGYKL 7LUI2FfWN31luVvlArPgltO9JeyZyq4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:51:45 2025 by rpki-client