$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d10e03ec-a7cb-3363-be03-4c0a5249f4c3.roa File: d10e03ec-a7cb-3363-be03-4c0a5249f4c3.roa (raw, json) Hash identifier: 0OST4yeBczx9ed/NYtWF8eAwMjhLqU/cJXcRr4PlSM0= Subject key identifier: 86:88:FE:7B:54:CF:8F:DE:8A:B9:F1:6C:FB:13:B4:7C:9D:DF:E6:C3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ACB411F4ED3BE05B410010C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d10e03ec-a7cb-3363-be03-4c0a5249f4c3.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 36183 IP address blocks: 172.225.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:1f:4e:d3:be:05:b4:10:01:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=189c2030-c8c6-4d32-8d93-540178f82e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:95:e6:5f:54:20:3a:e0:bc:b7:b0:6f:4c:fb: 3e:3f:cf:20:60:ef:9f:88:41:1e:34:0c:3c:44:60: d2:b9:2b:51:20:75:3d:83:b4:c0:90:a0:77:3c:5b: 06:8d:3c:35:7a:fe:84:9f:da:df:bd:20:8b:5b:c6: 19:fc:7f:2e:e9:cf:51:04:00:8d:8e:b1:93:da:03: 68:6b:8e:61:c1:f9:32:f5:38:a7:2c:ca:29:55:09: ac:4e:9f:74:72:b4:8e:c2:05:0d:86:58:21:d0:cb: 52:2e:ba:f9:42:86:99:57:44:20:d6:12:a7:de:32: ef:e5:83:28:08:c9:68:31:e6:70:90:34:45:c7:2d: a3:9a:ed:79:fd:74:4a:65:c5:de:2f:8c:ff:d3:12: 25:9f:78:8a:e1:cc:bf:5d:7a:d6:b7:d2:c0:5d:da: c8:59:bf:9e:78:e5:ad:ee:84:14:81:8f:0b:d1:81: f4:df:46:55:83:28:7f:83:70:6e:f3:29:35:27:c7: 6a:26:8b:c2:d4:25:23:a0:45:cc:15:73:95:c7:94: 96:eb:7d:ae:2a:31:39:ee:1a:08:9f:75:28:d3:90: c3:fc:8b:2a:8a:11:37:a9:d4:4f:d6:37:4a:a2:a9: 2f:b6:04:c0:29:56:64:25:d0:0a:4f:ec:11:d4:54: 41:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:88:FE:7B:54:CF:8F:DE:8A:B9:F1:6C:FB:13:B4:7C:9D:DF:E6:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d10e03ec-a7cb-3363-be03-4c0a5249f4c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e9:5d:f8:ab:fc:27:97:d2:2c:5a:24:c3:64:2e:47:e6:34: e0:a8:b7:4d:7c:31:54:f0:f8:2b:8b:4d:60:5f:65:fb:40:17: 85:22:6e:44:29:dc:97:5c:36:77:73:80:c5:d7:6d:59:32:eb: e8:f3:40:55:f4:1e:49:e4:70:ed:e9:59:4f:d1:92:74:1a:92: 06:f1:ea:6a:fe:49:19:91:29:74:ed:a7:1c:27:b0:8d:03:2b: e8:a4:6e:78:70:2e:07:cd:bd:9e:e7:80:4c:1c:af:c8:b5:c8: 20:ce:db:0a:05:a2:e1:29:3c:61:e0:14:e0:c1:09:5f:fd:f6: 4f:c4:71:6f:21:b6:93:47:97:cc:b0:19:bb:5f:2c:b7:87:89: 32:60:6c:b4:01:ce:61:74:4f:50:4e:7a:25:df:f7:08:ce:e8: cc:91:14:8d:41:32:10:f5:f3:bc:94:a5:0d:09:8f:58:4b:32: a7:75:40:e3:13:29:7b:ff:81:33:16:6e:7b:0e:0e:b1:a7:99: bf:a2:26:70:f3:c1:69:6d:7e:c3:8a:14:ef:2f:60:2c:9c:74: 42:bd:21:6e:cb:a0:8e:48:9e:dc:28:76:9a:ad:5a:1e:08:c3: 0a:9b:20:ab:de:26:ca:68:98:7b:ec:4b:b8:49:a9:6e:95:c7: e6:c8:65:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQR9O074FtBABDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MTg5YzIwMzAtYzhjNi00ZDMyLThkOTMtNTQwMTc4ZjgyZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZXmX1QgOuC8t7BvTPs+P88gYO+fiEEeNAw8 RGDSuStRIHU9g7TAkKB3PFsGjTw1ev6En9rfvSCLW8YZ/H8u6c9RBACNjrGT2gNo a45hwfky9TinLMopVQmsTp90crSOwgUNhlgh0MtSLrr5QoaZV0Qg1hKn3jLv5YMo CMloMeZwkDRFxy2jmu15/XRKZcXeL4z/0xIln3iK4cy/XXrWt9LAXdrIWb+eeOWt 7oQUgY8L0YH030ZVgyh/g3Bu8yk1J8dqJovC1CUjoEXMFXOVx5SW632uKjE57hoI n3Uo05DD/IsqihE3qdRP1jdKoqkvtgTAKVZkJdAKT+wR1FRBFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaI/ntUz4/eirnxbPsTtHyd3+bDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDEwZTAzZWMtYTdjYi0z MzYzLWJlMDMtNGMwYTUyNDlmNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOG5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTpXfir/CeX0ixaJMNkLkfmNOCot018MVTw+CuLTWBfZftAF4UibkQp 3JdcNndzgMXXbVky6+jzQFX0HknkcO3pWU/RknQakgbx6mr+SRmRKXTtpxwnsI0D K+ikbnhwLgfNvZ7ngEwcr8i1yCDO2woFouEpPGHgFODBCV/99k/EcW8htpNHl8yw GbtfLLeHiTJgbLQBzmF0T1BOeiXf9wjO6MyRFI1BMhD187yUpQ0Jj1hLMqd1QOMT KXv/gTMWbnsODrGnmb+iJnDzwWltfsOKFO8vYCycdEK9IW7LoI5IntwodpqtWh4I wwqbIKveJspomHvsS7hJqW6Vx+bIZfM= -----END CERTIFICATE-----Generated at Sat Aug 23 13:02:58 2025 by rpki-client