$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03a85d06-b1ed-33c4-9696-f8d7c9143480.roa File: 03a85d06-b1ed-33c4-9696-f8d7c9143480.roa (raw, json) Hash identifier: 0mS2Su3lBFHyN/x+neA1sIqA0/f8miWSC8k9HfMT/ng= Subject key identifier: D5:47:FD:F4:54:71:C0:89:D4:09:F9:5C:52:3A:0E:E2:E0:75:78:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ACB4113483E8C77BE7C35ED80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03a85d06-b1ed-33c4-9696-f8d7c9143480.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 72.246.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:13:48:3e:8c:77:be:7c:35:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=f71690aa-856a-4269-bd36-fb3f8def060a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:59:b9:96:29:97:38:e4:9f:58:bb:f6:97:4e: 07:9e:5c:61:e4:66:03:bf:18:87:23:1c:6f:8b:1b: 0b:ad:24:3a:4c:be:f7:1e:6f:19:dd:7c:bb:b7:7c: 94:0d:7a:32:0f:52:c0:7a:56:63:ae:28:60:7c:5c: fb:c2:a2:8c:4a:0a:ad:23:17:ca:fa:5c:e9:d6:89: 66:e5:aa:78:0f:88:3c:3d:b6:ab:5a:ab:04:44:e7: 9e:69:76:4b:b5:10:21:ea:6c:7d:47:92:62:97:3e: 81:be:1b:2c:cf:6e:b0:1e:12:18:4a:8f:61:79:fc: d3:1a:73:37:8d:d3:89:38:8b:f6:5f:91:f3:b6:e6: a2:99:53:3d:7e:77:b3:ba:d6:a6:29:f8:93:92:c4: cb:3e:9e:30:58:1c:61:f9:9d:26:95:03:25:7a:5e: 71:24:71:d3:f4:af:76:9c:e5:67:c7:3b:bd:83:42: 6e:48:e1:9f:e7:3d:7a:16:db:55:3b:8e:53:81:6a: 96:c1:c2:a2:49:7a:79:aa:16:82:92:da:fe:4e:38: 69:e6:39:10:69:46:9f:49:01:f2:17:f6:ec:7d:02: 02:1c:2d:df:36:6a:22:d1:55:11:94:4e:8a:d7:e3: 84:00:83:f5:8a:a8:31:23:cf:8a:01:25:81:cb:52: 17:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:47:FD:F4:54:71:C0:89:D4:09:F9:5C:52:3A:0E:E2:E0:75:78:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03a85d06-b1ed-33c4-9696-f8d7c9143480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:3e:5f:c4:1a:ec:60:f8:0c:8b:d5:00:c0:2f:3f:11:be:7c: 3d:36:a3:ef:d4:ba:04:8e:43:94:5b:62:3e:a5:3d:51:8b:9a: ac:c7:9d:84:c6:73:9f:6e:09:5b:53:a1:56:60:66:85:05:6d: 1c:ab:27:33:18:88:a4:5c:c9:4f:eb:02:92:df:40:31:4e:83: f0:f6:60:12:10:22:a9:0a:ed:55:18:ec:93:bc:7c:cc:0e:1c: 12:8b:44:cd:93:41:1d:d0:2d:06:1e:91:0d:1f:91:b8:a1:16: 38:18:2c:15:62:03:66:dc:08:52:6b:a8:e1:6b:2e:c7:cf:0c: a4:1a:62:05:d6:f1:8a:d8:5f:d4:a4:7b:e3:bb:9b:98:6d:78: 0a:27:52:b8:2b:d5:71:d6:2a:81:4b:30:8f:b3:82:38:59:4f: e5:df:89:b7:40:89:29:c4:35:b9:61:4d:b3:a1:22:0a:80:14: 6c:7a:c0:f2:f1:42:68:4e:28:df:a6:2d:85:8a:1c:50:8b:6e: 22:01:72:48:b8:eb:3d:a1:56:1e:0d:3c:20:3d:47:17:9d:60: 4c:8a:61:9c:56:0c:09:f1:13:62:98:b5:4f:c8:69:c4:69:6c: fd:7e:9b:0e:3d:77:6b:b5:c3:1d:50:49:ae:c4:7f:96:b1:6b: 04:e2:e6:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRNIPox3vnw17YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZjcxNjkwYWEtODU2YS00MjY5LWJkMzYtZmIzZjhkZWYwNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVm5limXOOSfWLv2l04Hnlxh5GYDvxiHIxxv ixsLrSQ6TL73Hm8Z3Xy7t3yUDXoyD1LAelZjrihgfFz7wqKMSgqtIxfK+lzp1olm 5ap4D4g8PbarWqsEROeeaXZLtRAh6mx9R5Jilz6Bvhssz26wHhIYSo9hefzTGnM3 jdOJOIv2X5HztuaimVM9fnezutamKfiTksTLPp4wWBxh+Z0mlQMlel5xJHHT9K92 nOVnxzu9g0JuSOGf5z16FttVO45TgWqWwcKiSXp5qhaCktr+Tjhp5jkQaUafSQHy F/bsfQICHC3fNmoi0VURlE6K1+OEAIP1iqgxI8+KASWBy1IXjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVH/fRUccCJ1An5XFI6DuLgdXiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDNhODVkMDYtYjFlZC0z M2M0LTk2OTYtZjhkN2M5MTQzNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk+X8Qa7GD4DIvVAMAvPxG+fD02o+/UugSOQ5RbYj6lPVGLmqzHnYTG c59uCVtToVZgZoUFbRyrJzMYiKRcyU/rApLfQDFOg/D2YBIQIqkK7VUY7JO8fMwO HBKLRM2TQR3QLQYekQ0fkbihFjgYLBViA2bcCFJrqOFrLsfPDKQaYgXW8YrYX9Sk e+O7m5hteAonUrgr1XHWKoFLMI+zgjhZT+XfibdAiSnENblhTbOhIgqAFGx6wPLx QmhOKN+mLYWKHFCLbiIBcki46z2hVh4NPCA9RxedYEyKYZxWDAnxE2KYtU/IacRp bP1+mw49d2u1wx1QSa7Ef5axawTi5hE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:46:34 2025 by rpki-client