$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9cb8e87-47e5-357d-8c31-e985ff45619e.roa File: c9cb8e87-47e5-357d-8c31-e985ff45619e.roa (raw, json) Hash identifier: kqe6o12dOsL7y+5rVQZnPj/mEwIiiswjvSokL3E4rcA= Subject key identifier: 4E:62:BA:B1:83:14:41:B0:23:E1:03:E4:E5:07:E7:3A:48:91:98:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9D30F43A108EB4FC37D56700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9cb8e87-47e5-357d-8c31-e985ff45619e.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 36183 IP address blocks: 172.225.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f4:3a:10:8e:b4:fc:37:d5:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=234f6cf9-c973-4284-bb6b-8f57938d232f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:e4:c4:8c:83:30:11:aa:f6:bb:22:bf:ad: f9:5e:b8:dc:c2:c9:99:2b:18:cc:ce:3b:00:7a:89: 1e:61:46:eb:b5:5a:68:0f:fe:f7:fa:8f:a9:3d:22: dd:14:fb:2f:52:96:41:2c:b9:95:a6:23:29:ac:6b: da:38:9e:d7:65:d7:f8:0e:93:ba:5b:70:46:0b:75: 6a:a8:09:1e:b8:c4:de:1d:8f:fe:53:9c:c9:4a:81: eb:b3:00:77:5d:66:8c:25:78:b5:35:77:16:95:a0: 49:46:c8:3b:bb:bf:f0:f3:ce:b6:0e:54:f4:12:9b: 39:82:f4:7b:06:9e:27:c5:3f:2e:25:c9:c5:26:fd: ca:d1:0c:88:1b:25:37:48:b8:7f:ca:8f:5a:93:da: 73:f2:d8:5a:12:f9:15:bf:fb:ff:a0:34:36:5b:3c: 4b:33:a1:68:39:71:25:25:48:05:9c:92:35:e6:4d: c8:26:16:26:81:ba:93:40:f8:a5:9c:b5:94:b2:05: 78:75:d2:a3:ca:09:a7:41:de:d6:bc:a9:aa:ce:50: 75:21:f1:5c:9d:c9:46:5c:8e:af:80:31:16:c3:82: e2:70:3c:12:29:40:af:d4:e3:5f:45:df:3e:f5:f4: 3b:93:10:78:4e:9e:2f:9c:99:f0:4f:39:e1:4a:6b: 6b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:62:BA:B1:83:14:41:B0:23:E1:03:E4:E5:07:E7:3A:48:91:98:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9cb8e87-47e5-357d-8c31-e985ff45619e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:72:29:e8:42:53:5d:55:05:cd:23:02:87:5c:d4:44:59:c4: d6:02:e3:23:b2:68:74:79:db:87:3b:3b:07:e6:e1:d2:8e:8a: 14:14:28:d8:2c:74:c3:4e:0f:86:f0:74:9c:2c:90:ce:0c:c7: d0:76:bd:47:54:e0:06:e0:7c:76:07:71:2f:03:56:74:8c:1b: 6e:57:80:8b:80:8a:66:df:76:c6:0b:42:64:f8:e0:11:50:9a: 77:2f:62:5f:fd:8c:d5:42:94:0d:08:69:1a:c0:f8:34:90:6e: 93:7a:18:a4:12:5c:93:b3:ff:33:73:fc:d4:7e:2d:bf:d0:a4: 6a:50:15:0c:14:3c:99:f2:f7:81:ab:68:46:e3:b1:19:9e:b5: 1f:6e:b5:5f:8a:b4:96:70:6e:aa:0c:9f:74:b2:17:f4:c7:96: 70:05:12:49:8b:b0:8a:11:0f:f3:71:76:97:0b:73:d4:58:01: e0:f8:36:18:c7:74:7c:87:7e:0a:2d:d0:a6:28:10:7e:44:f4: e6:04:3d:6f:34:2a:38:48:f4:5d:c8:10:90:e4:12:b5:9a:b7: fa:48:c8:30:15:fd:5a:87:6f:ad:61:a0:18:66:d7:85:8d:ae: e7:5c:1d:51:df:6b:40:08:e0:69:15:1b:02:e0:53:63:96:bc: 9c:67:56:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPQ6EI60/DfVZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MjM0ZjZjZjktYzk3My00Mjg0LWJiNmItOGY1NzkzOGQyMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQvkxIyDMBGq9rsiv635XrjcwsmZKxjMzjsA eokeYUbrtVpoD/73+o+pPSLdFPsvUpZBLLmVpiMprGvaOJ7XZdf4DpO6W3BGC3Vq qAkeuMTeHY/+U5zJSoHrswB3XWaMJXi1NXcWlaBJRsg7u7/w8862DlT0Eps5gvR7 Bp4nxT8uJcnFJv3K0QyIGyU3SLh/yo9ak9pz8thaEvkVv/v/oDQ2WzxLM6FoOXEl JUgFnJI15k3IJhYmgbqTQPilnLWUsgV4ddKjygmnQd7WvKmqzlB1IfFcnclGXI6v gDEWw4LicDwSKUCv1ONfRd8+9fQ7kxB4Tp4vnJnwTznhSmtrswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5iurGDFEGwI+ED5OUH5zpIkZj7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzljYjhlODctNDdlNS0z NTdkLThjMzEtZTk4NWZmNDU2MTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRyKehCU11VBc0jAodc1ERZxNYC4yOyaHR524c7Owfm4dKOihQUKNgs dMNOD4bwdJwskM4Mx9B2vUdU4AbgfHYHcS8DVnSMG25XgIuAimbfdsYLQmT44BFQ mncvYl/9jNVClA0IaRrA+DSQbpN6GKQSXJOz/zNz/NR+Lb/QpGpQFQwUPJny94Gr aEbjsRmetR9utV+KtJZwbqoMn3SyF/THlnAFEkmLsIoRD/NxdpcLc9RYAeD4NhjH dHyHfgot0KYoEH5E9OYEPW80KjhI9F3IEJDkErWat/pIyDAV/VqHb61hoBhm14WN rudcHVHfa0AI4GkVGwLgU2OWvJxnVr0= -----END CERTIFICATE-----Generated at Sat Aug 23 13:04:09 2025 by rpki-client