$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/902227eb-6c48-3b5a-99c1-f3ef54fc1cca.roa File: 902227eb-6c48-3b5a-99c1-f3ef54fc1cca.roa (raw, json) Hash identifier: sKXW8rhpvEFoEBX2PpAxasFnhXpSPerwmVvI7yPc5Ao= Subject key identifier: BD:1D:A6:21:CF:19:19:E9:C5:B3:7D:3B:18:EA:B7:26:78:0C:0F:16 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD0D647461CCABC3A8D14F1C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/902227eb-6c48-3b5a-99c1-f3ef54fc1cca.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 16625 IP address blocks: 173.223.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:47:46:1c:ca:bc:3a:8d:14:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=2c4660b8-2b93-4b16-aacf-6a29770e1fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7d:42:42:7c:65:83:fc:14:0c:9d:e4:d3:e7: ce:d4:18:d4:54:05:6f:d7:af:ce:31:36:7a:ed:ed: 9b:7e:00:ac:08:91:61:07:d6:4a:94:e3:95:39:4c: 46:e9:b8:ea:bd:e9:24:21:00:ea:ea:02:ee:2b:bc: 0a:51:fe:26:30:97:44:ef:a2:2a:09:fb:45:2c:88: 38:3a:a8:5e:0b:f9:0c:cd:8d:00:61:c8:62:8f:5a: 4d:ab:21:fe:e3:57:e4:6d:ef:b9:5f:25:af:50:bd: 6e:ac:b4:2f:ba:b5:db:a1:fa:b7:95:4f:4d:4c:91: 89:cf:c9:eb:ca:77:35:fb:55:8d:40:28:4e:2e:84: ec:c0:95:95:3f:96:6f:72:57:df:ae:91:bb:89:a5: 9a:a4:5a:02:01:a8:ed:f4:43:7f:7e:1e:74:c5:b8: ec:0e:a8:6c:77:34:03:3f:df:94:5d:e3:36:f9:eb: b3:6f:c8:74:f5:c9:33:56:df:47:7b:4d:77:60:91: 6d:9b:cc:5b:7c:1f:3f:50:c8:20:96:f8:06:4e:12: 04:67:c4:b5:bb:ad:51:a8:9e:92:d4:24:cb:af:4d: 12:29:b3:42:0d:f3:60:f5:0d:06:ef:ba:61:59:94: f7:fb:83:ce:7a:c8:9e:46:04:24:5c:db:d6:6f:c1: a8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1D:A6:21:CF:19:19:E9:C5:B3:7D:3B:18:EA:B7:26:78:0C:0F:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/902227eb-6c48-3b5a-99c1-f3ef54fc1cca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ba:cd:86:62:71:2e:f1:66:1c:ba:d0:50:c8:c1:6d:6d:e1: a7:02:17:5d:3f:8b:08:4a:0a:fd:f4:c5:7f:35:fb:fc:d6:57: 60:7f:ac:75:98:c1:62:90:15:0d:71:b4:5d:a7:e2:76:96:f2: 9c:4c:54:c9:5a:e3:b0:13:8f:a2:a2:40:b0:07:90:ca:af:23: 57:1b:d0:13:30:5a:d6:67:2c:2e:eb:12:f0:92:fa:0d:d5:99: bc:50:ef:6d:cc:72:4d:e6:b5:67:6c:8f:b9:f3:c3:af:ac:66: 63:02:ac:43:0b:c1:85:e4:28:0b:01:f6:bf:d8:68:8e:d5:39: 50:83:eb:0e:e1:06:fc:6a:93:3e:b2:2c:d8:d0:ac:3a:2a:4a: e8:2a:99:e3:23:d4:b5:5d:70:54:72:e0:e3:2d:86:31:bf:03: b4:3d:05:32:c7:93:8d:69:1d:a3:b2:2a:3d:6b:d6:fa:53:bf: cd:0a:c7:a5:3d:0a:8b:54:01:ec:14:0e:a6:0c:73:61:1d:8a: 8d:db:85:7b:24:b8:ae:cb:bf:6f:88:72:a7:42:cf:08:fa:d4: 83:47:97:38:9f:ca:0c:95:9f:8d:cf:86:bd:90:e8:cd:7c:3b: 43:69:51:30:9a:e3:eb:81:c3:95:9d:01:5c:70:33:1c:87:b8: 37:01:8d:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kdGHMq8Oo0U8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MmM0NjYwYjgtMmI5My00YjE2LWFhY2YtNmEyOTc3MGUxZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH1CQnxlg/wUDJ3k0+fO1BjUVAVv16/OMTZ6 7e2bfgCsCJFhB9ZKlOOVOUxG6bjqvekkIQDq6gLuK7wKUf4mMJdE76IqCftFLIg4 OqheC/kMzY0AYchij1pNqyH+41fkbe+5XyWvUL1urLQvurXbofq3lU9NTJGJz8nr ync1+1WNQChOLoTswJWVP5ZvclffrpG7iaWapFoCAajt9EN/fh50xbjsDqhsdzQD P9+UXeM2+euzb8h09ckzVt9He013YJFtm8xbfB8/UMgglvgGThIEZ8S1u61RqJ6S 1CTLr00SKbNCDfNg9Q0G77phWZT3+4POesieRgQkXNvWb8GocQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0dpiHPGRnpxbN9OxjqtyZ4DA8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTAyMjI3ZWItNmM0OC0z YjVhLTk5YzEtZjNlZjU0ZmMxY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrd+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi6zYZicS7xZhy60FDIwW1t4acCF10/iwhKCv30xX81+/zWV2B/rHWY wWKQFQ1xtF2n4naW8pxMVMla47ATj6KiQLAHkMqvI1cb0BMwWtZnLC7rEvCS+g3V mbxQ723Mck3mtWdsj7nzw6+sZmMCrEMLwYXkKAsB9r/YaI7VOVCD6w7hBvxqkz6y LNjQrDoqSugqmeMj1LVdcFRy4OMthjG/A7Q9BTLHk41pHaOyKj1r1vpTv80Kx6U9 CotUAewUDqYMc2Edio3bhXskuK7Lv2+IcqdCzwj61INHlzifygyVn43Phr2Q6M18 O0NpUTCa4+uBw5WdAVxwMxyHuDcBjSg= -----END CERTIFICATE-----Generated at Sat Aug 23 13:07:24 2025 by rpki-client