$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a8cd323-a290-3a22-a235-5a005df6ad59.roa File: 5a8cd323-a290-3a22-a235-5a005df6ad59.roa (raw, json) Hash identifier: rvQSfEsfFskjYJHsBp/tMtKlG1mm8fyURbWicx9lYCY= Subject key identifier: 5A:63:9C:BD:CE:FB:EF:4D:1C:64:5F:60:CC:B3:8A:85:AF:0E:14:51 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD0D658C60799E100B4B72680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a8cd323-a290-3a22-a235-5a005df6ad59.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 16625 IP address blocks: 173.223.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:58:c6:07:99:e1:00:b4:b7:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=f1a8989b-c64a-4f5b-bf91-8f7bac9550bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9e:ae:59:c4:68:ae:f2:8c:e1:43:4e:5f:f0: 16:3e:01:79:f2:af:b9:bf:33:ff:9d:96:68:0e:ef: 3b:77:69:b6:2b:64:1e:5b:10:b9:08:67:dd:86:5f: d1:1f:41:b0:c6:60:79:3b:37:51:a6:8a:c1:ce:06: fd:f4:eb:4f:bf:9d:74:a7:b9:89:02:8c:72:34:fa: 2b:9a:10:7c:4d:b2:0c:ac:25:09:ad:86:21:88:57: ce:02:b9:69:83:9a:63:1a:76:fb:f1:09:59:20:85: c3:22:d8:8b:fa:4e:6a:9a:df:e2:72:a9:62:8a:04: 6e:70:17:ef:0b:7d:e1:84:d9:e1:17:b4:bc:fe:c8: 7f:45:41:7f:3b:c9:cc:43:71:59:a0:1e:2e:ab:8a: bb:79:10:4e:8d:50:41:f6:ca:08:41:40:a9:43:0b: 09:e4:13:c7:04:42:73:c1:f2:3a:c2:30:b9:8b:e8: 3d:ed:11:b1:97:c4:66:40:83:f7:06:a6:43:7b:78: 05:79:5d:c7:0b:fb:c0:26:f6:cd:72:d8:00:d1:2c: db:00:12:73:97:f7:e7:1f:a6:11:bb:6f:8d:4c:3c: bf:f1:07:57:1a:69:5c:bc:0a:ea:40:07:59:04:30: 17:0c:1d:20:95:01:95:bb:c3:31:c2:33:b5:06:ef: 64:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:63:9C:BD:CE:FB:EF:4D:1C:64:5F:60:CC:B3:8A:85:AF:0E:14:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a8cd323-a290-3a22-a235-5a005df6ad59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:98:b2:cd:93:ef:2b:57:5f:72:8d:85:34:75:57:86:18:b2: 78:06:a4:5a:25:14:f6:e8:c0:03:a4:d4:57:c7:1f:a5:99:2d: 23:45:27:e5:80:2f:20:b7:3c:ce:47:b1:a5:bb:9e:11:c4:f8: 4b:7b:76:47:ad:5c:a0:b5:ee:ac:7c:49:b2:3a:86:43:e2:86: 93:03:5d:3e:86:78:11:dc:a9:16:4a:91:dd:6d:b4:99:ca:82: 36:60:8a:e5:3f:61:af:05:39:78:fa:ea:99:33:8d:a1:bf:b6: 69:ff:16:f6:10:6a:c5:08:e6:85:8d:5f:dd:cb:3a:8f:18:b5: 4b:89:e7:7b:b1:9a:42:14:db:cb:11:03:b3:46:71:27:43:a0: 9e:d7:75:3a:50:94:a2:9e:6f:0d:d1:15:d4:cb:19:60:f9:32: 0e:34:f6:d1:21:6a:26:36:12:fe:b9:0e:85:7a:ef:07:4f:62: b4:3d:64:e8:cf:6e:32:13:86:a2:6c:61:16:27:43:8c:4c:46: 51:e0:bf:8d:29:a5:41:a9:bd:3c:3a:e4:8e:61:b1:8c:56:ce: a0:87:42:8e:34:b2:97:e6:ae:16:1a:c5:6a:87:09:7e:23:f0: 35:c4:28:f8:32:69:7b:9c:8a:fa:aa:e7:c0:0f:c8:96:6a:b8: 5e:0b:37:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1ljGB5nhALS3JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ZjFhODk4OWItYzY0YS00ZjViLWJmOTEtOGY3YmFjOTU1MGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Z6uWcRorvKM4UNOX/AWPgF58q+5vzP/nZZo Du87d2m2K2QeWxC5CGfdhl/RH0GwxmB5OzdRporBzgb99OtPv510p7mJAoxyNPor mhB8TbIMrCUJrYYhiFfOArlpg5pjGnb78QlZIIXDItiL+k5qmt/icqliigRucBfv C33hhNnhF7S8/sh/RUF/O8nMQ3FZoB4uq4q7eRBOjVBB9soIQUCpQwsJ5BPHBEJz wfI6wjC5i+g97RGxl8RmQIP3BqZDe3gFeV3HC/vAJvbNctgA0SzbABJzl/fnH6YR u2+NTDy/8QdXGmlcvArqQAdZBDAXDB0glQGVu8MxwjO1Bu9kuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpjnL3O++9NHGRfYMyzioWvDhRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWE4Y2QzMjMtYTI5MC0z YTIyLWEyMzUtNWEwMDVkZjZhZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiYss2T7ytXX3KNhTR1V4YYsngGpFolFPbowAOk1FfHH6WZLSNFJ+WA LyC3PM5HsaW7nhHE+Et7dketXKC17qx8SbI6hkPihpMDXT6GeBHcqRZKkd1ttJnK gjZgiuU/Ya8FOXj66pkzjaG/tmn/FvYQasUI5oWNX93LOo8YtUuJ53uxmkIU28sR A7NGcSdDoJ7XdTpQlKKebw3RFdTLGWD5Mg409tEhaiY2Ev65DoV67wdPYrQ9ZOjP bjIThqJsYRYnQ4xMRlHgv40ppUGpvTw65I5hsYxWzqCHQo40spfmrhYaxWqHCX4j 8DXEKPgyaXucivqq58APyJZquF4LN1w= -----END CERTIFICATE-----Generated at Sat Aug 23 13:06:59 2025 by rpki-client