$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a879ab5-2573-3107-8725-744a17304cd4.roa File: 0a879ab5-2573-3107-8725-744a17304cd4.roa (raw, json) Hash identifier: p6pvkBcBGHLNaNi9TrvsVHRcvk1EyJah693VAM0owPc= Subject key identifier: D0:77:DE:F4:88:C8:0B:1B:36:36:4C:E0:64:BE:BC:B6:48:89:B5:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ACF71009C122D5C0A418CB000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a879ab5-2573-3107-8725-744a17304cd4.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 173.223.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:00:9c:12:2d:5c:0a:41:8c:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=1c6299a8-c457-4cb7-a7d7-a08079326bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:98:5c:77:ff:4d:83:fa:06:c0:24:62:dc:67: ba:83:85:5b:8b:56:ba:5f:28:4b:2d:43:ee:db:53: 45:2f:90:2c:be:5e:54:6f:5d:e1:c4:ca:ec:7c:cd: 51:49:f1:df:e3:6d:4a:f1:16:93:fa:1d:d7:1d:6f: 01:b7:a2:d7:0b:54:ec:c7:ce:e1:13:f5:d1:a0:3b: 94:45:46:bd:6f:f1:c7:7d:cb:f9:93:2f:a3:48:a8: 48:0b:c9:9d:52:3c:13:d1:f0:25:40:99:0b:73:04: 99:db:c9:fb:79:47:15:0b:ee:fd:36:36:51:d4:67: f2:80:a4:75:88:1b:fa:83:11:1c:8a:9e:b8:8a:3b: 7b:84:bf:02:42:3e:67:af:20:cc:de:ba:99:ba:b4: 9d:24:fd:e2:5b:fd:aa:8b:e3:3e:65:9e:91:ea:80: 64:9a:da:d2:21:82:a8:88:a8:ad:95:53:b9:ee:3c: 36:22:fc:18:9e:cc:4d:b0:4a:b0:be:41:e5:98:e0: 8e:00:7b:fd:01:1d:7f:36:51:f3:b1:99:05:cb:db: ac:e3:c1:87:01:be:ee:8a:58:a4:5c:cb:fc:56:4b: 54:f1:e9:13:15:46:b8:7d:a2:38:72:48:15:a9:eb: 99:53:6d:78:29:9d:aa:3f:44:ad:9d:03:e3:11:f1: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:77:DE:F4:88:C8:0B:1B:36:36:4C:E0:64:BE:BC:B6:48:89:B5:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a879ab5-2573-3107-8725-744a17304cd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:52:f9:2b:1f:0e:89:a9:fd:9b:30:59:bb:ac:42:8b:1b:a6: ae:31:68:94:e4:7d:8b:82:2e:f9:51:74:88:6a:85:fe:0b:8f: 8c:49:7a:6f:d2:58:21:76:ae:ea:ec:25:02:4b:6b:8c:e8:e6: 70:04:cb:b3:a5:15:75:12:23:ac:18:5b:fc:f7:25:82:57:e2: 03:e1:11:af:54:e8:2d:5e:f7:0e:7a:b6:43:e4:22:09:40:14: 22:b3:a1:0b:93:4d:d7:01:f1:68:3e:0e:ea:f3:6c:12:0c:a0: 14:bf:24:8e:73:7a:52:a4:66:e4:b0:07:c7:8c:29:d0:a3:bd: 31:67:ab:56:1a:98:d4:28:b4:e5:64:89:59:45:12:b0:96:78: a3:3b:81:25:95:96:4c:1c:78:6d:ff:50:e8:24:06:d5:54:18: 40:85:7f:22:68:0b:8a:fc:9d:47:b2:2b:28:07:cc:01:a2:77: 39:d1:68:58:6e:27:8b:aa:09:9b:82:e7:a4:d4:d5:cb:16:14: 27:a2:d8:46:0a:e8:e4:4e:19:db:e4:ee:59:f1:fe:22:d0:2e: 69:02:67:51:b8:e4:b7:ea:8e:e0:d3:2e:b3:7e:06:88:77:20: c1:73:91:77:ca:55:91:e6:16:38:57:6b:a7:7d:18:af:52:da: d4:2a:e6:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQCcEi1cCkGMsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk MWM2Mjk5YTgtYzQ1Ny00Y2I3LWE3ZDctYTA4MDc5MzI2YmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5hcd/9Ng/oGwCRi3Ge6g4Vbi1a6XyhLLUPu 21NFL5Asvl5Ub13hxMrsfM1RSfHf421K8RaT+h3XHW8Bt6LXC1Tsx87hE/XRoDuU RUa9b/HHfcv5ky+jSKhIC8mdUjwT0fAlQJkLcwSZ28n7eUcVC+79NjZR1GfygKR1 iBv6gxEcip64ijt7hL8CQj5nryDM3rqZurSdJP3iW/2qi+M+ZZ6R6oBkmtrSIYKo iKitlVO57jw2IvwYnsxNsEqwvkHlmOCOAHv9AR1/NlHzsZkFy9us48GHAb7uilik XMv8VktU8ekTFUa4faI4ckgVqeuZU214KZ2qP0StnQPjEfEBzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNB33vSIyAsbNjZM4GS+vLZIibUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGE4NzlhYjUtMjU3My0z MTA3LTg3MjUtNzQ0YTE3MzA0Y2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErd9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9S+SsfDomp/ZswWbusQosbpq4xaJTkfYuCLvlRdIhqhf4Lj4xJem/S WCF2rursJQJLa4zo5nAEy7OlFXUSI6wYW/z3JYJX4gPhEa9U6C1e9w56tkPkIglA FCKzoQuTTdcB8Wg+DurzbBIMoBS/JI5zelKkZuSwB8eMKdCjvTFnq1YamNQotOVk iVlFErCWeKM7gSWVlkwceG3/UOgkBtVUGECFfyJoC4r8nUeyKygHzAGidznRaFhu J4uqCZuC56TU1csWFCei2EYK6OROGdvk7lnx/iLQLmkCZ1G45LfqjuDTLrN+Boh3 IMFzkXfKVZHmFjhXa6d9GK9S2tQq5s0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:31:34 2025 by rpki-client