$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e59784a-723f-311f-a0fe-cf83b9c9b200.roa File: 2e59784a-723f-311f-a0fe-cf83b9c9b200.roa (raw, json) Hash identifier: oi9VR0gKR940pZiT6Sjnay9ngKwIzjYNhy3SZIR5d/4= Subject key identifier: 31:5A:4A:E8:A7:64:DA:DF:66:C5:97:4A:DB:D5:93:44:4A:15:7A:5D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ACB40FADB1D322E063EA9DC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e59784a-723f-311f-a0fe-cf83b9c9b200.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 72.246.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:fa:db:1d:32:2e:06:3e:a9:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=e985af46-54e4-4b70-90e5-e5d3d4cdf4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:12:92:24:0b:29:a6:5b:42:2b:bf:89:0a:87: bd:50:47:ce:d7:0d:96:2b:fa:19:d3:8b:d2:3f:d7: a6:a3:54:2f:8a:8e:b5:28:22:12:dd:c8:b8:3e:67: b4:e8:1c:3a:ea:8f:70:00:e7:6a:0a:f8:cc:a3:94: 77:42:ac:67:5e:f6:20:02:9f:ac:a7:8e:71:6d:d4: db:0c:e5:25:60:bf:df:c2:25:51:69:fe:56:1d:b4: b5:e6:b2:ca:f2:a6:ab:45:14:66:61:96:ff:d5:63: 76:70:36:1d:32:1b:b0:2f:aa:91:0e:8c:5d:47:e8: 5c:d6:d6:43:c1:83:49:15:0b:9c:40:b4:a1:81:e8: 84:67:11:5e:2d:7a:51:0e:55:9b:b1:31:c0:33:a6: 8a:ce:fe:75:af:f8:78:0f:d6:52:de:fe:33:e7:05: 06:2e:bf:55:7d:1d:2a:b8:a5:c1:0d:c9:4c:7e:f9: 05:49:c9:8b:fc:62:61:ff:cf:5b:b8:c1:e1:9b:d2: 40:97:ab:4f:ed:f6:3e:f2:d8:67:ed:d8:e8:d4:69: 43:16:e0:17:e7:37:ef:9a:a1:2a:71:09:6e:e7:97: 73:e5:02:b9:8d:77:06:30:f6:a4:fa:2f:31:e9:3c: ef:c5:ae:ca:b9:74:f8:a3:60:df:ed:bb:02:7e:ee: 12:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5A:4A:E8:A7:64:DA:DF:66:C5:97:4A:DB:D5:93:44:4A:15:7A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e59784a-723f-311f-a0fe-cf83b9c9b200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:19:e3:38:1a:03:a1:46:1d:40:85:bd:22:07:2c:de:e5:2e: cf:1d:62:d6:b7:26:c2:49:c3:2b:99:e3:e8:de:d0:a1:f8:74: 2c:9b:78:d3:a0:0d:7f:5e:7d:c9:d7:97:33:d2:c0:32:3b:63: 74:54:71:9c:d5:df:5d:e0:d4:bb:7e:27:c1:b8:f6:e2:d0:e8: 9c:0f:7f:ac:e1:84:87:59:db:e2:7b:c9:d7:e4:ba:a6:bc:59: 15:b5:e7:94:8b:f0:c0:1f:bb:f7:37:c1:64:c6:83:6f:f8:f7: 6f:ca:e9:5d:05:62:87:f4:50:b8:c9:ae:75:30:51:57:8b:7e: 60:7a:5f:b1:7a:2b:a0:94:e7:25:a2:3b:86:d4:2d:9b:90:ce: 66:18:d1:76:4f:af:6d:f7:27:20:95:93:0b:cc:7c:d0:5d:d1: 28:14:4a:32:2e:a5:b4:3d:cd:67:4f:d1:3e:22:35:90:6f:2d: 3e:95:a4:c7:80:0e:8f:ce:42:7d:17:f3:56:87:df:75:32:76: 94:ab:b8:65:e3:e1:9e:fb:21:93:4b:35:1f:55:b5:91:c4:2d: 54:3e:da:9e:86:c9:9a:04:c4:dc:96:9e:a5:17:52:ab:01:0f: d8:3b:0b:23:e5:94:61:45:e3:cc:3a:70:da:90:0f:21:e8:3d: 9c:72:c9:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQPrbHTIuBj6p3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZTk4NWFmNDYtNTRlNC00YjcwLTkwZTUtZTVkM2Q0Y2RmNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRKSJAsppltCK7+JCoe9UEfO1w2WK/oZ04vS P9emo1Qvio61KCIS3ci4Pme06Bw66o9wAOdqCvjMo5R3QqxnXvYgAp+sp45xbdTb DOUlYL/fwiVRaf5WHbS15rLK8qarRRRmYZb/1WN2cDYdMhuwL6qRDoxdR+hc1tZD wYNJFQucQLShgeiEZxFeLXpRDlWbsTHAM6aKzv51r/h4D9ZS3v4z5wUGLr9VfR0q uKXBDclMfvkFScmL/GJh/89buMHhm9JAl6tP7fY+8thn7djo1GlDFuAX5zfvmqEq cQlu55dz5QK5jXcGMPak+i8x6Tzvxa7KuXT4o2Df7bsCfu4SGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFaSuinZNrfZsWXStvVk0RKFXpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmU1OTc4NGEtNzIzZi0z MTFmLWEwZmUtY2Y4M2I5YzliMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQZ4zgaA6FGHUCFvSIHLN7lLs8dYta3JsJJwyuZ4+je0KH4dCybeNOg DX9efcnXlzPSwDI7Y3RUcZzV313g1Lt+J8G49uLQ6JwPf6zhhIdZ2+J7ydfkuqa8 WRW155SL8MAfu/c3wWTGg2/492/K6V0FYof0ULjJrnUwUVeLfmB6X7F6K6CU5yWi O4bULZuQzmYY0XZPr233JyCVkwvMfNBd0SgUSjIupbQ9zWdP0T4iNZBvLT6VpMeA Do/OQn0X81aH33UydpSruGXj4Z77IZNLNR9VtZHELVQ+2p6GyZoExNyWnqUXUqsB D9g7CyPllGFF48w6cNqQDyHoPZxyyfM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:37:58 2025 by rpki-client