$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b879b6c5-430d-3162-80b5-34b1bd4c3103.roa File: b879b6c5-430d-3162-80b5-34b1bd4c3103.roa (raw, json) Hash identifier: jtXtcRbcKIEdPMqeWwHanoj7Usnx+xVEVXEw6jeRjGc= Subject key identifier: 1E:BE:20:C9:54:06:33:9D:26:A4:B5:73:AB:B6:03:A3:FB:5B:8C:28 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ACB41140CFEF30C1524DCC3C8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b879b6c5-430d-3162-80b5-34b1bd4c3103.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 72.247.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:14:0c:fe:f3:0c:15:24:dc:c3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=306bc2ce-7e00-4677-8dfe-77c4e4fe85c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f1:69:94:d3:7b:f7:87:bf:38:88:ec:00:97: 21:11:17:57:b4:bb:66:0b:b1:bd:6c:83:0b:9f:76: b7:3a:ad:fd:f9:7a:df:15:b3:eb:95:bd:60:60:03: f6:b5:1c:83:52:8c:73:5c:2e:9c:3d:a1:de:e1:0b: bc:b0:6c:8b:09:dd:42:d7:a3:05:8b:0f:50:21:03: 54:16:ad:54:ac:9f:50:b2:c9:05:dd:66:7e:a2:bf: 0d:53:ab:4a:53:58:4f:5e:b4:b6:c4:82:c1:90:5a: 79:61:87:99:a0:d5:cd:04:0b:c1:6b:38:d4:13:5a: f7:20:c7:25:35:20:d9:72:14:59:db:f7:7d:93:7a: 8d:93:0e:06:a4:db:9a:e1:b7:98:1f:f6:8c:e3:9a: 8b:30:56:29:d3:1b:02:05:4f:75:91:73:0d:35:a6: 0e:94:03:02:47:f2:62:a9:7a:d5:d5:d2:c8:af:53: 05:0a:d3:15:18:0e:9f:f7:ba:d2:9d:8c:d2:6d:0c: 2f:52:15:e6:93:c2:ce:e9:52:6a:af:c5:99:d1:69: 8d:d1:6f:2e:5a:2e:a4:05:2b:d3:a3:02:2d:de:e9: ab:b5:f1:f5:1c:9a:e8:15:33:25:9b:da:ef:e5:36: 84:20:c2:97:7a:64:60:ce:58:92:bc:2e:04:1f:8c: 84:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BE:20:C9:54:06:33:9D:26:A4:B5:73:AB:B6:03:A3:FB:5B:8C:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b879b6c5-430d-3162-80b5-34b1bd4c3103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:0c:61:dc:5b:a0:5d:a5:31:df:2f:d5:e7:7c:7c:26:0c:53: 68:69:39:90:e6:41:26:4b:ce:81:80:95:c0:94:10:a6:56:89: 4a:35:9d:7d:6b:a0:8a:13:30:fe:a6:a9:53:15:4c:02:20:94: ac:c1:be:a9:a6:cd:44:9d:13:d6:28:37:02:4c:ea:14:3b:ce: df:a5:2a:26:72:0d:0e:e6:ed:3a:38:dc:26:8d:8a:13:c6:ad: 47:54:16:0d:ce:d5:3c:6a:10:58:b5:61:94:2d:a0:46:f1:11: de:f5:e0:e1:8d:26:0d:d7:06:47:fc:d7:63:c4:5c:62:7b:ee: 43:fc:b6:c3:b5:aa:a4:df:fe:7a:5e:c4:75:d0:3e:cb:3e:68: e1:93:45:a3:f0:1c:40:dd:88:8e:40:94:e0:c5:32:91:07:87: 0f:10:91:f9:95:56:09:40:9f:fb:63:c5:c5:f6:06:f6:28:86: 04:65:e6:73:50:91:34:da:e9:68:6d:95:43:46:db:78:1a:86: fc:86:c9:ce:03:62:27:28:4d:f1:0b:31:0b:31:02:80:42:7f: 10:1f:dc:f5:74:f7:2e:db:11:64:14:a8:5c:44:69:e1:49:8b: d0:28:07:9e:49:c0:ce:d2:6d:86:9f:0c:dd:8b:e5:7e:f8:36: f2:dc:7b:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRQM/vMMFSTcw8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MzA2YmMyY2UtN2UwMC00Njc3LThkZmUtNzdjNGU0ZmU4NWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfFplNN794e/OIjsAJchERdXtLtmC7G9bIML n3a3Oq39+XrfFbPrlb1gYAP2tRyDUoxzXC6cPaHe4Qu8sGyLCd1C16MFiw9QIQNU Fq1UrJ9QsskF3WZ+or8NU6tKU1hPXrS2xILBkFp5YYeZoNXNBAvBazjUE1r3IMcl NSDZchRZ2/d9k3qNkw4GpNua4beYH/aM45qLMFYp0xsCBU91kXMNNaYOlAMCR/Ji qXrV1dLIr1MFCtMVGA6f97rSnYzSbQwvUhXmk8LO6VJqr8WZ0WmN0W8uWi6kBSvT owIt3umrtfH1HJroFTMlm9rv5TaEIMKXemRgzliSvC4EH4yEjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6+IMlUBjOdJqS1c6u2A6P7W4woMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjg3OWI2YzUtNDMwZC0z MTYyLTgwYjUtMzRiMWJkNGMzMTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPe2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsMYdxboF2lMd8v1ed8fCYMU2hpOZDmQSZLzoGAlcCUEKZWiUo1nX1r oIoTMP6mqVMVTAIglKzBvqmmzUSdE9YoNwJM6hQ7zt+lKiZyDQ7m7To43CaNihPG rUdUFg3O1TxqEFi1YZQtoEbxEd714OGNJg3XBkf812PEXGJ77kP8tsO1qqTf/npe xHXQPss+aOGTRaPwHEDdiI5AlODFMpEHhw8QkfmVVglAn/tjxcX2BvYohgRl5nNQ kTTa6WhtlUNG23gahvyGyc4DYicoTfELMQsxAoBCfxAf3PV09y7bEWQUqFxEaeFJ i9AoB55JwM7SbYafDN2L5X74NvLce9M= -----END CERTIFICATE-----Generated at Sat Aug 23 16:56:27 2025 by rpki-client