$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bade499-00c8-3a16-86fa-c3afa5d22691.roa File: 0bade499-00c8-3a16-86fa-c3afa5d22691.roa (raw, json) Hash identifier: mqT9ZwZRKKLy76uMs6vUQVN82aER7Z77j7CA3bsDlzY= Subject key identifier: B0:89:CA:0A:78:30:B6:A1:65:5D:90:36:BC:F4:90:9B:15:B8:4B:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ADECBC1D9FCFD3D51B9CF3B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bade499-00c8-3a16-86fa-c3afa5d22691.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 63949 IP address blocks: 172.234.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c1:d9:fc:fd:3d:51:b9:cf:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=62d25229-0232-4136-8821-0dab75b7f4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cf:e8:5d:67:f3:8e:90:3a:92:a5:20:79:1d: 33:d0:e6:ee:48:0f:ad:de:d4:48:4d:7d:8b:ac:c4: 65:18:43:23:d1:4e:7d:8f:5e:9d:1e:85:7c:b9:42: b6:7f:35:1d:71:fc:25:d2:07:35:a9:60:34:6b:fe: 59:3f:66:f6:b8:d4:79:a8:56:25:e7:a1:e9:91:80: 5a:82:e1:4a:c7:77:23:c8:ce:36:4f:23:ed:55:23: e8:8a:57:6f:e6:f7:c2:da:10:97:18:31:6e:37:5e: 32:f5:c1:62:e9:52:06:f9:b1:b6:2b:97:8b:3f:59: 60:dd:22:14:f1:b3:65:73:8a:9f:83:4d:96:a6:74: db:9b:db:6c:06:af:c7:d0:c6:01:09:95:d7:bc:42: bb:8e:36:79:20:3c:33:a4:34:98:47:b4:91:b6:2b: e0:05:63:a6:4c:0e:4f:1f:cc:50:de:f1:95:d7:af: fa:43:03:34:a2:3a:3f:0e:85:0f:43:a4:c4:d3:eb: 6a:f0:a0:60:b9:28:1e:d4:d3:bc:5f:08:65:ae:34: 36:2d:91:f6:fc:7e:0f:e8:a2:e9:74:2e:00:37:0e: e2:01:9b:3a:cc:5c:d7:4e:fd:65:91:60:e0:c2:50: 4d:cb:c3:e1:dd:87:d0:e5:14:56:d1:77:6c:05:b6: 65:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:89:CA:0A:78:30:B6:A1:65:5D:90:36:BC:F4:90:9B:15:B8:4B:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bade499-00c8-3a16-86fa-c3afa5d22691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.234.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:43:87:2f:3c:6e:66:8f:d8:68:a2:61:f4:be:8e:b5:cd:b4: 8d:5c:c8:c8:b8:05:15:0a:fa:75:93:fa:4f:86:8c:1c:33:3f: a4:14:38:29:6e:4a:39:93:5b:37:62:5a:23:1d:2e:35:0f:8b: d2:cc:2f:12:b9:60:bf:62:43:1f:d4:f4:f5:e5:78:c7:44:a7: f7:e9:d8:6f:15:ff:ca:7c:4d:64:cd:ce:15:7f:3d:31:e4:75: b7:bf:a0:da:64:af:3f:e4:34:f2:8c:bc:8c:cb:45:b4:9b:76: 6a:67:32:d7:ac:b5:66:2f:cc:7d:19:09:29:ad:94:94:de:b5: c1:7d:46:f4:fb:d2:48:b3:3b:34:6b:41:a4:ab:03:43:20:be: b2:db:d9:50:61:94:86:f3:ef:07:aa:98:f2:6b:dc:cb:2a:50: d5:b1:6d:e6:32:0f:06:dc:d5:86:0b:7c:20:72:1a:aa:af:5d: ee:b3:ba:76:a8:e5:17:58:77:7d:88:f5:2d:7b:c7:68:ec:3f: 0c:e6:00:5e:5b:42:29:6d:18:19:7c:64:90:7b:6f:92:e7:6c: d5:32:af:d7:62:6d:31:58:83:8e:7c:f6:9e:b3:4e:e9:b1:33: b5:a4:0e:6b:03:cb:81:9f:80:68:c6:44:5b:b7:e5:15:c6:f8: 45:0a:e0:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8HZ/P09UbnPOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NjJkMjUyMjktMDIzMi00MTM2LTg4MjEtMGRhYjc1YjdmNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM/oXWfzjpA6kqUgeR0z0ObuSA+t3tRITX2L rMRlGEMj0U59j16dHoV8uUK2fzUdcfwl0gc1qWA0a/5ZP2b2uNR5qFYl56HpkYBa guFKx3cjyM42TyPtVSPoildv5vfC2hCXGDFuN14y9cFi6VIG+bG2K5eLP1lg3SIU 8bNlc4qfg02WpnTbm9tsBq/H0MYBCZXXvEK7jjZ5IDwzpDSYR7SRtivgBWOmTA5P H8xQ3vGV16/6QwM0ojo/DoUPQ6TE0+tq8KBguSge1NO8XwhlrjQ2LZH2/H4P6KLp dC4ANw7iAZs6zFzXTv1lkWDgwlBNy8Ph3YfQ5RRW0XdsBbZl4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCJygp4MLahZV2QNrz0kJsVuEvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGJhZGU0OTktMDBjOC0z YTE2LTg2ZmEtYzNhZmE1ZDIyNjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErOpQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNDhy88bmaP2GiiYfS+jrXNtI1cyMi4BRUK+nWT+k+GjBwzP6QUOClu SjmTWzdiWiMdLjUPi9LMLxK5YL9iQx/U9PXleMdEp/fp2G8V/8p8TWTNzhV/PTHk dbe/oNpkrz/kNPKMvIzLRbSbdmpnMtestWYvzH0ZCSmtlJTetcF9RvT70kizOzRr QaSrA0MgvrLb2VBhlIbz7weqmPJr3MsqUNWxbeYyDwbc1YYLfCByGqqvXe6zunao 5RdYd32I9S17x2jsPwzmAF5bQiltGBl8ZJB7b5LnbNUyr9dibTFYg4589p6zTumx M7WkDmsDy4GfgGjGRFu35RXG+EUK4Hc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:54:02 2025 by rpki-client