$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa File: c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa (raw, json) Hash identifier: lvS4cLo/Z5S7yb3o1gGoALqi8aaeyv1hjU8wwfotws8= Subject key identifier: 4D:AA:92:AD:54:72:6E:27:8D:BE:EA:D1:32:F3:4D:47:9F:32:D0:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE9F67CC9756A2BB451663D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 63949 IP address blocks: 172.235.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:7c:c9:75:6a:2b:b4:51:66:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=e59423c3-f20b-4027-b9c0-b23e3877811c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ed:ff:de:3a:78:cc:66:b5:f6:15:cb:a2:55: 0b:b8:84:f1:24:e3:34:b6:8a:4d:58:fc:b9:25:51: 3c:c8:c4:9e:ec:75:f4:d1:ad:a5:17:b5:de:b1:8a: 30:73:06:c3:a3:cd:04:13:a8:34:7b:5a:95:21:b3: 48:1c:bb:98:b1:e9:e6:f0:db:6f:cf:f2:6d:03:87: fc:4e:ea:52:e1:25:97:54:be:fd:41:a9:9c:41:e7: 82:2f:5b:0e:bd:57:43:7d:a7:b0:36:8c:69:0b:1e: 1d:d7:e7:8f:c4:d6:2f:57:b4:35:ed:23:f7:e8:05: 50:c9:53:ff:25:d4:12:a8:96:44:12:67:25:88:5e: 70:e1:9c:cc:b9:b4:1c:aa:60:ff:2f:b3:80:7a:40: 81:42:b1:47:07:8e:42:8f:f5:3d:67:6d:bc:46:f7: cc:47:3e:c6:0a:7f:ef:3b:7f:ac:99:41:66:80:50: e0:64:13:39:51:3a:e5:cd:02:3c:1d:aa:bf:a2:95: d1:c8:ec:83:40:5a:a1:3e:f0:89:e1:81:a5:41:da: 40:f4:1d:34:eb:9f:52:66:2a:9a:ab:57:37:87:07: e9:22:ee:16:24:f4:78:6d:6b:22:52:c7:26:2b:46: 3f:df:4e:81:d9:98:f8:62:bc:63:bd:45:2b:bf:9e: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AA:92:AD:54:72:6E:27:8D:BE:EA:D1:32:F3:4D:47:9F:32:D0:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:bf:14:9b:c4:24:b8:61:0a:48:8d:38:61:2d:87:18:e8:b6: 35:c3:7f:4a:9f:aa:79:93:14:20:61:4a:73:32:12:cd:60:c7: 09:ba:92:ff:9f:83:23:a3:76:01:48:78:06:e8:f2:0d:88:85: a5:f4:e4:af:ce:ee:64:b9:77:a3:e3:10:05:3a:5e:76:a2:35: 87:94:6b:81:e8:ce:e4:24:b8:bb:d2:fc:8b:bf:c8:6b:4b:ea: 63:5c:28:7d:17:1c:64:1f:70:bf:1f:ab:b8:bd:2a:d9:33:28: 6e:24:da:05:20:3d:d7:e3:31:a2:f3:e9:e4:54:e4:06:bb:5d: 80:20:97:bd:20:d8:ef:6f:ce:e2:e6:72:ae:b3:c3:d0:d0:ac: d2:84:c3:cd:22:4c:e5:b2:70:14:a5:7d:73:53:76:44:48:41: 2a:4f:21:0e:9a:c9:54:31:46:e2:88:fe:6b:d9:4a:ed:e8:b7: ef:20:b4:5f:b1:83:c7:f0:50:d2:d3:0d:8d:59:6e:00:fa:7b: 28:eb:2c:f5:e0:aa:43:7f:22:83:7a:06:b7:9f:a0:51:6c:69: fb:30:70:c3:fc:56:2c:15:a3:b7:96:5b:1f:d7:51:36:d5:4a: 51:bb:3d:f7:95:0b:5f:33:c6:2f:97:4b:b5:b7:3b:f7:e0:21: 5f:04:f0:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9nzJdWortFFmPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk ZTU5NDIzYzMtZjIwYi00MDI3LWI5YzAtYjIzZTM4Nzc4MTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO3/3jp4zGa19hXLolULuITxJOM0topNWPy5 JVE8yMSe7HX00a2lF7XesYowcwbDo80EE6g0e1qVIbNIHLuYsenm8Ntvz/JtA4f8 TupS4SWXVL79QamcQeeCL1sOvVdDfaewNoxpCx4d1+ePxNYvV7Q17SP36AVQyVP/ JdQSqJZEEmcliF5w4ZzMubQcqmD/L7OAekCBQrFHB45Cj/U9Z228RvfMRz7GCn/v O3+smUFmgFDgZBM5UTrlzQI8Haq/opXRyOyDQFqhPvCJ4YGlQdpA9B00659SZiqa q1c3hwfpIu4WJPR4bWsiUscmK0Y/306B2Zj4YrxjvUUrv55ASwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2qkq1Ucm4njb7q0TLzTUefMtCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzMzM2FiYzMtN2ZmMi0z YWZiLTgwZmYtNmY1ZjlmMjU3NzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6/FJvEJLhhCkiNOGEthxjotjXDf0qfqnmTFCBhSnMyEs1gxwm6kv+f gyOjdgFIeAbo8g2IhaX05K/O7mS5d6PjEAU6XnaiNYeUa4HozuQkuLvS/Iu/yGtL 6mNcKH0XHGQfcL8fq7i9KtkzKG4k2gUgPdfjMaLz6eRU5Aa7XYAgl70g2O9vzuLm cq6zw9DQrNKEw80iTOWycBSlfXNTdkRIQSpPIQ6ayVQxRuKI/mvZSu3ot+8gtF+x g8fwUNLTDY1ZbgD6eyjrLPXgqkN/IoN6BrefoFFsafswcMP8ViwVo7eWWx/XUTbV SlG7PfeVC18zxi+XS7W3O/fgIV8E8Ec= -----END CERTIFICATE-----Generated at Sat Aug 23 14:56:01 2025 by rpki-client