$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b62217ee-0525-3fce-82e2-9d7b2f27ae9c.roa File: b62217ee-0525-3fce-82e2-9d7b2f27ae9c.roa (raw, json) Hash identifier: oJWHpF2Rk1RDhQw3YAMRTGxT6mRdQ2DOdBOhGupUuhs= Subject key identifier: F7:E1:44:BE:1F:E5:68:8E:37:A2:7F:D9:92:97:01:53:2D:1E:99:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C0C1FA32A3A0A2A8DB180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b62217ee-0525-3fce-82e2-9d7b2f27ae9c.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 172.235.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0c:1f:a3:2a:3a:0a:2a:8d:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=3cb63962-9eb0-4975-bb1d-6be4c4d84ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:66:c4:ba:d1:b6:76:9b:f2:db:28:32:47:38: f0:b5:47:d3:74:69:c6:98:f2:d3:b5:89:a7:a0:eb: b1:4c:36:ae:83:79:4f:de:e0:dc:54:9a:f4:4c:77: 95:3d:d7:25:5e:7c:1b:b7:db:75:37:9e:c4:1e:e0: 9f:b5:f3:81:5b:0c:14:d3:5c:8e:91:e0:d9:fa:bc: 0f:91:22:13:a9:62:76:8d:05:30:2b:38:68:56:f0: d8:20:fe:3d:61:5e:7d:99:c7:cd:27:07:ca:2d:58: 9c:b9:27:d8:e3:e7:43:98:96:54:00:70:1f:f8:e0: ce:fa:e0:44:8e:e8:fa:bd:80:e9:3e:14:9d:37:00: 76:2b:77:d4:7b:36:fd:c7:f0:e3:c5:00:51:8f:db: 1b:1d:ff:b4:e9:6a:94:d3:f0:48:23:62:b1:59:56: 7f:73:19:8e:ef:10:d9:a8:94:ca:88:98:f9:cb:85: 01:e7:f2:d4:49:91:25:5b:92:18:18:e3:54:da:4e: 35:7e:a2:18:ae:a7:6b:7a:57:f7:eb:99:ca:9e:95: 82:bb:3b:9a:95:b3:fe:2e:10:65:f5:3d:23:2a:5f: 9d:a9:b5:70:5f:e4:c9:da:0f:fa:b3:55:6e:87:a6: 04:b2:93:0a:79:fd:02:ce:d1:80:2b:7c:7f:1a:17: 2c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E1:44:BE:1F:E5:68:8E:37:A2:7F:D9:92:97:01:53:2D:1E:99:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b62217ee-0525-3fce-82e2-9d7b2f27ae9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c5:a6:80:d6:4b:ae:2c:a3:d3:86:c6:49:5f:a9:57:b4:d3: 25:2f:11:d7:40:40:af:54:b8:c8:73:38:61:ca:4c:03:57:58: 58:04:cd:0c:86:54:77:3e:11:1a:e2:81:13:e2:06:cb:ca:5c: 91:98:86:4c:ab:9b:8f:22:fb:12:68:c6:ce:11:57:02:07:eb: 84:1c:9e:2a:cb:f8:72:ed:af:a8:ee:d6:9d:ad:8f:c5:2f:d7: 10:b6:a7:78:47:ed:f8:e1:4d:88:ed:8d:07:25:65:0f:ec:62: 73:5b:9e:08:00:0b:18:88:99:ff:05:51:93:c3:77:88:68:17: 17:69:7c:66:f9:a3:35:c1:8a:5f:08:e8:94:90:85:14:76:32: 7c:f0:08:3a:9b:2c:b3:1e:2d:80:ff:14:85:f5:db:43:12:79: d1:dd:92:5f:d4:d4:de:5a:0b:50:5a:2f:ef:d3:58:db:00:08: 22:ba:f6:e1:cf:32:c9:b0:a1:96:3b:fc:d4:32:f7:b1:6b:3a: 99:46:2c:08:94:b6:7b:25:c6:8b:ee:1f:15:1c:9f:76:15:03: 06:d6:91:21:15:34:f6:78:d9:9f:65:dd:fb:03:d3:57:43:b9: 90:b5:14:8e:f6:e2:95:ee:77:3c:02:26:04:83:4f:fe:b1:96: 9c:27:ee:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAwfoyo6CiqNsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk M2NiNjM5NjItOWViMC00OTc1LWJiMWQtNmJlNGM0ZDg0ZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGbEutG2dpvy2ygyRzjwtUfTdGnGmPLTtYmn oOuxTDaug3lP3uDcVJr0THeVPdclXnwbt9t1N57EHuCftfOBWwwU01yOkeDZ+rwP kSITqWJ2jQUwKzhoVvDYIP49YV59mcfNJwfKLVicuSfY4+dDmJZUAHAf+ODO+uBE juj6vYDpPhSdNwB2K3fUezb9x/DjxQBRj9sbHf+06WqU0/BII2KxWVZ/cxmO7xDZ qJTKiJj5y4UB5/LUSZElW5IYGONU2k41fqIYrqdrelf365nKnpWCuzualbP+LhBl 9T0jKl+dqbVwX+TJ2g/6s1Vuh6YEspMKef0CztGAK3x/GhcsuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfhRL4f5WiON6J/2ZKXAVMtHpk5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjYyMjE3ZWUtMDUyNS0z ZmNlLTgyZTItOWQ3YjJmMjdhZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbFpoDWS64so9OGxklfqVe00yUvEddAQK9UuMhzOGHKTANXWFgEzQyG VHc+ERrigRPiBsvKXJGYhkyrm48i+xJoxs4RVwIH64QcnirL+HLtr6ju1p2tj8Uv 1xC2p3hH7fjhTYjtjQclZQ/sYnNbnggACxiImf8FUZPDd4hoFxdpfGb5ozXBil8I 6JSQhRR2MnzwCDqbLLMeLYD/FIX120MSedHdkl/U1N5aC1BaL+/TWNsACCK69uHP MsmwoZY7/NQy97FrOplGLAiUtnslxovuHxUcn3YVAwbWkSEVNPZ42Z9l3fsD01dD uZC1FI724pXudzwCJgSDT/6xlpwn7oE= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:31 2025 by rpki-client