$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/808d7af0-0fa0-333f-8a80-251a8d03aa33.roa File: 808d7af0-0fa0-333f-8a80-251a8d03aa33.roa (raw, json) Hash identifier: ZhH22qDcymXUaqq5g7xyq3ovU27rSABtc9uBFiJOlcE= Subject key identifier: 9E:C6:D5:0C:C5:51:98:E5:4F:16:57:51:07:75:11:A9:40:35:B6:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD0D658258C9179DB6CDF3DC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/808d7af0-0fa0-333f-8a80-251a8d03aa33.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 16625 IP address blocks: 173.223.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:58:25:8c:91:79:db:6c:df:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=56dd7a27-589e-448c-a056-cad3b10ba6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:41:0a:ae:28:00:45:74:6f:61:fc:00:9e:29: 85:14:76:6a:78:b0:6b:23:c6:cf:11:1e:86:87:03: 27:c4:36:1d:47:f6:13:5b:b1:fa:f9:ea:5b:5b:52: 0f:8a:8e:18:02:07:d6:2f:51:24:b1:8d:c3:bf:7e: b9:be:c4:ba:28:8f:ff:85:fe:02:f5:43:65:76:5e: 0f:de:62:5d:34:57:42:63:37:9f:2f:1f:5b:f2:7b: 9a:f5:36:3d:e0:31:2b:10:e3:bf:85:cf:9f:aa:9e: 98:a5:37:a5:b0:cd:38:0b:c1:7d:63:20:5f:e0:49: 0e:7c:c1:4a:3e:11:9c:97:b2:25:76:c8:b5:18:b6: 99:06:04:32:5a:ff:3d:40:68:9c:d9:58:01:72:f7: 2f:c1:2e:6b:98:ad:d4:44:23:6c:28:92:16:07:45: 29:dd:7e:2c:bb:c2:9e:de:c6:3d:0d:4b:db:bd:00: 5e:30:99:a8:2d:cf:61:f0:47:58:70:2a:cd:24:f0: 8e:e1:5a:cb:17:57:f9:bd:65:6b:f5:e1:c5:05:72: aa:78:3d:3c:48:c6:32:79:7c:34:96:55:54:44:30: 84:9d:37:da:0b:10:92:6f:fe:aa:af:1a:1b:d3:b4: c4:31:70:ac:18:55:67:6e:16:16:a3:6f:83:0e:52: b7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C6:D5:0C:C5:51:98:E5:4F:16:57:51:07:75:11:A9:40:35:B6:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/808d7af0-0fa0-333f-8a80-251a8d03aa33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e3:b6:0c:28:08:5a:2f:56:65:21:97:fe:05:ff:ec:c4:5a: f8:74:03:d2:c4:b1:39:e7:b5:9d:8e:95:2d:05:c2:ae:70:16: 9b:11:b0:21:ab:ae:30:86:06:9a:4d:3b:4c:0a:0d:1f:12:8c: a6:1b:31:b1:bc:8b:61:6c:0b:e7:08:82:b6:ac:7a:80:24:72: 57:62:5b:ca:c2:e7:8d:86:2b:b1:ae:8f:3e:1c:1b:6a:32:0a: b4:94:22:f1:dd:29:55:91:06:48:15:71:59:30:34:72:d3:6a: 3b:49:cf:40:c5:17:f4:2a:1b:23:5b:8c:21:86:51:66:ee:25: 25:7d:6e:0b:8e:ea:16:f9:ac:ff:4e:87:07:f2:f4:39:15:25: d6:51:cc:52:a8:5c:3c:68:01:b3:14:08:be:d2:51:8e:6e:5f: b0:d9:6c:e0:08:bf:2d:f8:74:dd:15:01:f7:3e:d8:b4:0a:77: 4c:15:93:a5:31:82:2e:17:95:92:1d:1b:c7:c4:4f:f7:89:81: 73:4b:2d:97:61:46:40:83:16:4d:2c:2d:27:61:c6:c9:b4:0f: bd:8e:6e:18:52:0f:73:15:ac:0d:31:59:b3:15:49:81:83:3b: e1:76:6e:7d:2e:d0:62:06:01:56:9b:1a:4e:ae:ae:ed:dc:ec: ae:6b:e0:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lgljJF522zfPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NTZkZDdhMjctNTg5ZS00NDhjLWEwNTYtY2FkM2IxMGJhNmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkEKrigARXRvYfwAnimFFHZqeLBrI8bPER6G hwMnxDYdR/YTW7H6+epbW1IPio4YAgfWL1EksY3Dv365vsS6KI//hf4C9UNldl4P 3mJdNFdCYzefLx9b8nua9TY94DErEOO/hc+fqp6YpTelsM04C8F9YyBf4EkOfMFK PhGcl7Ildsi1GLaZBgQyWv89QGic2VgBcvcvwS5rmK3URCNsKJIWB0Up3X4su8Ke 3sY9DUvbvQBeMJmoLc9h8EdYcCrNJPCO4VrLF1f5vWVr9eHFBXKqeD08SMYyeXw0 llVURDCEnTfaCxCSb/6qrxob07TEMXCsGFVnbhYWo2+DDlK3TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7G1QzFUZjlTxZXUQd1EalANbYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODA4ZDdhZjAtMGZhMC0z MzNmLThhODAtMjUxYThkMDNhYTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd8kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjjtgwoCFovVmUhl/4F/+zEWvh0A9LEsTnntZ2OlS0Fwq5wFpsRsCGr rjCGBppNO0wKDR8SjKYbMbG8i2FsC+cIgraseoAkcldiW8rC542GK7Gujz4cG2oy CrSUIvHdKVWRBkgVcVkwNHLTajtJz0DFF/QqGyNbjCGGUWbuJSV9bguO6hb5rP9O hwfy9DkVJdZRzFKoXDxoAbMUCL7SUY5uX7DZbOAIvy34dN0VAfc+2LQKd0wVk6Ux gi4XlZIdG8fET/eJgXNLLZdhRkCDFk0sLSdhxsm0D72ObhhSD3MVrA0xWbMVSYGD O+F2bn0u0GIGAVabGk6uru3c7K5r4Pc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:55:18 2025 by rpki-client