$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65136af7-a5bb-376e-8faf-bb3b8a7dc3ea.roa File: 65136af7-a5bb-376e-8faf-bb3b8a7dc3ea.roa (raw, json) Hash identifier: 2IS+/ffRaBaxocaq5fwMxPKuf8TjJBrkLbCd2BC0aHU= Subject key identifier: 6D:BC:C9:D2:21:AB:D3:DE:DB:13:FA:8C:B1:F7:3A:D3:E1:88:18:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD0D65889DA815C446958AD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65136af7-a5bb-376e-8faf-bb3b8a7dc3ea.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 16625 IP address blocks: 173.223.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:58:89:da:81:5c:44:69:58:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=25ba3f23-7314-44a8-8ea7-f266a758452b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:42:29:40:d4:34:17:9b:68:e0:36:23:e2:9b: 14:ca:e3:c0:5c:e1:71:3f:d3:ae:f2:88:40:d0:b2: 2e:f5:4b:cb:f4:b4:c0:5d:84:3a:ba:40:ac:21:e7: 60:b4:60:b4:65:51:aa:3a:50:2e:43:d5:55:f9:60: c7:f9:14:39:df:13:3a:b5:e6:0e:5a:d1:fa:57:5e: b0:b4:df:8e:b9:41:fb:0d:91:b8:02:77:91:ab:03: 54:e1:b1:ed:70:9b:00:ff:6c:26:57:1a:1f:55:5b: f2:b3:7c:0c:53:6e:09:aa:f5:8c:71:bf:40:07:4d: e9:de:1b:26:d4:17:3e:52:84:5a:65:2b:fe:a9:75: a0:40:a3:10:97:81:08:f5:9a:ac:9d:55:9d:27:ae: 91:7a:8c:bd:21:56:fe:46:36:3d:67:e4:a2:f3:f9: 98:24:a4:bc:67:e7:a6:86:c0:09:0f:48:97:d6:7f: 81:78:c3:82:dc:84:b5:ea:db:a0:1e:9d:13:7c:57: b2:6f:28:97:93:19:8d:dd:68:39:66:e2:4f:f9:78: ed:a6:b0:3c:37:be:82:4c:b8:dc:0b:eb:5a:c6:6b: db:ff:f5:87:65:81:68:52:80:77:c5:93:63:94:55: c1:73:db:bd:4e:f3:63:f0:6c:41:ae:ff:6b:df:03: 51:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BC:C9:D2:21:AB:D3:DE:DB:13:FA:8C:B1:F7:3A:D3:E1:88:18:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65136af7-a5bb-376e-8faf-bb3b8a7dc3ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ad:12:23:93:f9:bc:01:f2:e8:a5:89:2f:44:e0:dd:fb:1b: 28:ca:1d:a8:28:80:ec:9e:7e:39:ee:5d:f6:7e:1b:f5:94:9c: 11:74:60:2c:db:6e:4e:99:43:0f:ca:b3:af:0d:ec:4d:0d:63: 52:77:0c:ac:00:09:cf:d1:1a:b6:3f:c9:c3:c5:b4:75:63:95: 46:a4:d8:d6:95:58:7b:2b:93:13:9e:ee:0b:d8:50:04:c6:7f: 0e:08:57:85:9b:d3:b0:aa:28:1c:50:de:ed:8e:67:76:6e:dd: b9:c0:99:22:38:1a:f1:c0:a3:69:18:d5:41:a6:f1:e9:96:a5: 6a:2d:72:4c:62:23:b5:3f:33:9a:42:e1:da:6b:a5:91:28:79: aa:ed:43:3f:3b:c0:bf:2b:5c:1a:06:95:87:e2:51:9e:4c:39: 13:00:60:f2:43:54:1a:7a:df:9d:fe:5d:63:6e:94:0a:75:8f: b3:85:74:e1:22:28:8d:c0:a5:11:1d:02:10:ff:a9:91:0c:50: 9d:fa:0c:f2:42:71:7e:63:cd:06:c9:5e:85:1d:7e:7e:f7:cc: f6:2b:e8:d8:aa:82:4d:45:ab:ee:10:47:d9:95:a2:8f:44:b4: a3:58:b4:fa:16:c6:92:88:ad:2a:53:bf:a8:83:d1:3c:c1:5c: 67:e1:be:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1liJ2oFcRGlYrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MjViYTNmMjMtNzMxNC00NGE4LThlYTctZjI2NmE3NTg0NTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkIpQNQ0F5to4DYj4psUyuPAXOFxP9Ou8ohA 0LIu9UvL9LTAXYQ6ukCsIedgtGC0ZVGqOlAuQ9VV+WDH+RQ53xM6teYOWtH6V16w tN+OuUH7DZG4AneRqwNU4bHtcJsA/2wmVxofVVvys3wMU24JqvWMcb9AB03p3hsm 1Bc+UoRaZSv+qXWgQKMQl4EI9ZqsnVWdJ66Reoy9IVb+RjY9Z+Si8/mYJKS8Z+em hsAJD0iX1n+BeMOC3IS16tugHp0TfFeybyiXkxmN3Wg5ZuJP+XjtprA8N76CTLjc C+taxmvb//WHZYFoUoB3xZNjlFXBc9u9TvNj8GxBrv9r3wNRfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG28ydIhq9Pe2xP6jLH3OtPhiBg/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjUxMzZhZjctYTViYi0z NzZlLThmYWYtYmIzYjhhN2RjM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCtEiOT+bwB8uiliS9E4N37GyjKHagogOyefjnuXfZ+G/WUnBF0YCzb bk6ZQw/Ks68N7E0NY1J3DKwACc/RGrY/ycPFtHVjlUak2NaVWHsrkxOe7gvYUATG fw4IV4Wb07CqKBxQ3u2OZ3Zu3bnAmSI4GvHAo2kY1UGm8emWpWotckxiI7U/M5pC 4dprpZEoeartQz87wL8rXBoGlYfiUZ5MORMAYPJDVBp6353+XWNulAp1j7OFdOEi KI3ApREdAhD/qZEMUJ36DPJCcX5jzQbJXoUdfn73zPYr6Niqgk1Fq+4QR9mVoo9E tKNYtPoWxpKIrSpTv6iD0TzBXGfhvv4= -----END CERTIFICATE-----Generated at Sat Aug 23 13:11:01 2025 by rpki-client