$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e4f692b-e175-3a61-92ef-5f35a13d5e21.roa File: 9e4f692b-e175-3a61-92ef-5f35a13d5e21.roa (raw, json) Hash identifier: tMJmgtR0IqZIv/toOrJZ6JBZgbv1A/Am/q8H4VU0EAI= Subject key identifier: FF:CD:07:40:50:11:BF:01:31:B2:99:D7:DE:27:08:8E:E9:10:19:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD23C32FC971058467DA99880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e4f692b-e175-3a61-92ef-5f35a13d5e21.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 63949 IP address blocks: 172.238.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:32:fc:97:10:58:46:7d:a9:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=f4438206-38c0-4bfc-811f-24318d0ae95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b1:ea:b9:e6:ca:13:2f:3a:62:6b:39:74:b0: 3c:91:82:7a:cc:65:b6:b5:98:ef:a9:49:bc:42:95: f6:9e:02:f9:36:57:6b:b6:95:fe:3c:b8:1f:1a:d0: 2c:d5:c8:57:6b:de:07:4d:cf:5c:cf:8b:6f:61:8d: 34:c7:2e:63:4b:83:3a:e7:b2:44:a8:de:8b:09:11: 22:6a:6e:bf:66:03:c5:eb:c4:4a:40:05:fd:fa:89: 70:bb:5a:e8:a9:41:c6:51:54:4c:56:05:c3:b9:22: 00:a9:e8:dd:b1:45:2a:1a:58:a4:79:8f:0b:dc:9d: b3:9e:1a:44:2b:6b:4e:d7:02:a9:3f:b8:8f:1c:81: bb:24:f6:bc:b0:b3:8f:5d:80:49:ca:8c:02:ea:5d: 06:10:97:25:2b:32:61:ee:99:b2:7d:e4:9a:93:3f: f7:aa:a8:17:f8:00:55:ed:99:78:bb:0f:03:a4:b8: b2:75:f1:f1:06:ba:92:02:ca:05:e6:bf:ce:e7:21: 3e:da:d7:d6:23:9b:03:45:a3:3f:49:8f:70:f3:63: dd:7b:19:0a:b3:aa:57:e5:b9:ff:75:8f:70:29:fe: 4c:1d:11:9d:00:ca:87:04:6b:04:cc:ff:9b:b1:d3: aa:60:25:ce:20:d8:a6:0d:0a:01:55:b0:3d:12:e4: 64:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CD:07:40:50:11:BF:01:31:B2:99:D7:DE:27:08:8E:E9:10:19:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e4f692b-e175-3a61-92ef-5f35a13d5e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.238.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:45:89:a5:cf:1b:d2:4b:36:88:d0:e7:aa:49:0f:f4:cd:a8: df:e8:8d:58:01:1b:09:29:f5:65:e5:b6:a0:f8:ad:59:f9:37: c5:1c:33:63:50:f8:0e:21:82:75:1e:65:67:eb:3c:80:12:65: 41:04:f5:2b:20:96:6e:61:c3:c7:4d:b7:8c:61:97:7c:09:a4: 5e:21:56:be:33:4c:32:ba:42:94:91:06:90:9d:0e:3a:cf:e2: fe:08:6e:52:90:96:13:b4:3b:f9:b7:ed:54:b6:34:9e:49:85: b8:fc:44:cd:55:1a:83:98:5b:e3:95:6e:6f:59:5c:61:46:66: c0:db:45:96:2d:88:7e:09:4e:db:98:db:8c:f6:3d:6f:4b:3b: 46:4e:5f:e7:eb:1a:89:34:a2:c3:6a:46:99:8f:60:2b:57:46: 41:83:bc:88:68:07:29:a5:9e:68:e0:c4:c6:99:f2:2f:fa:c5: d8:4e:17:5c:96:a5:16:c4:a2:71:34:88:d3:bf:00:1f:54:f4: 9f:bc:00:0e:2e:c4:69:85:a9:16:ea:ac:da:fe:f3:1b:46:41: 43:58:6c:a5:4b:8e:2f:2f:61:04:72:be:f7:0a:f8:ba:64:e3: 7f:e2:13:e5:bb:21:2a:8d:5d:47:2e:24:1b:4a:3d:47:83:69: 66:e8:30:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPDL8lxBYRn2pmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZjQ0MzgyMDYtMzhjMC00YmZjLTgxMWYtMjQzMThkMGFlOTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLHquebKEy86Yms5dLA8kYJ6zGW2tZjvqUm8 QpX2ngL5NldrtpX+PLgfGtAs1chXa94HTc9cz4tvYY00xy5jS4M657JEqN6LCREi am6/ZgPF68RKQAX9+olwu1roqUHGUVRMVgXDuSIAqejdsUUqGlikeY8L3J2znhpE K2tO1wKpP7iPHIG7JPa8sLOPXYBJyowC6l0GEJclKzJh7pmyfeSakz/3qqgX+ABV 7Zl4uw8DpLiydfHxBrqSAsoF5r/O5yE+2tfWI5sDRaM/SY9w82PdexkKs6pX5bn/ dY9wKf5MHRGdAMqHBGsEzP+bsdOqYCXOINimDQoBVbA9EuRk7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/NB0BQEb8BMbKZ194nCI7pEBmSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWU0ZjY5MmItZTE3NS0z YTYxLTkyZWYtNWYzNWExM2Q1ZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrO6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpFiaXPG9JLNojQ56pJD/TNqN/ojVgBGwkp9WXltqD4rVn5N8UcM2NQ +A4hgnUeZWfrPIASZUEE9Ssglm5hw8dNt4xhl3wJpF4hVr4zTDK6QpSRBpCdDjrP 4v4IblKQlhO0O/m37VS2NJ5Jhbj8RM1VGoOYW+OVbm9ZXGFGZsDbRZYtiH4JTtuY 24z2PW9LO0ZOX+frGok0osNqRpmPYCtXRkGDvIhoBymlnmjgxMaZ8i/6xdhOF1yW pRbEonE0iNO/AB9U9J+8AA4uxGmFqRbqrNr+8xtGQUNYbKVLji8vYQRyvvcK+Lpk 43/iE+W7ISqNXUcuJBtKPUeDaWboMDg= -----END CERTIFICATE-----Generated at Sat Aug 23 13:01:06 2025 by rpki-client