$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfa97400-21ee-3e62-92dc-1dacd2c23ae2.roa File: dfa97400-21ee-3e62-92dc-1dacd2c23ae2.roa (raw, json) Hash identifier: I+ze7eQjsGMBxfFYwJWYeKkowewvzvm/5gH4UMEn/sQ= Subject key identifier: 12:18:F0:8C:38:A2:5D:C1:41:3D:FF:81:CB:2D:3A:A7:E0:06:4A:4A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2FC196DABE409B7CF65D1DC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfa97400-21ee-3e62-92dc-1dacd2c23ae2.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 4775 IP address blocks: 173.223.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:96:da:be:40:9b:7c:f6:5d:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=6b6b3ed5-466f-4e01-91fc-aab44d39df8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7d:91:c9:5b:31:14:a8:7b:1c:44:db:79:11: c6:28:c1:2d:94:3d:a7:d9:5c:9a:46:d2:93:92:76: 6c:55:10:e3:82:66:29:af:be:6f:4f:3d:a4:44:07: 27:4d:1e:e2:85:41:fd:1c:6b:23:47:68:eb:ad:9a: 8a:de:d1:ed:eb:31:10:9f:ed:32:c6:64:1d:26:60: 56:2b:df:0c:ed:94:65:45:ad:59:be:92:b1:f9:43: f9:28:75:a1:b1:9e:7d:21:1d:6b:a7:93:5c:97:58: 86:e0:d6:7f:09:32:d1:07:c2:e4:7d:2f:15:11:07: 93:73:9d:55:10:6c:61:c3:2d:f0:54:a4:2c:21:9a: 95:f5:ea:bc:61:57:64:eb:68:a9:33:4f:fc:87:95: 93:8a:a9:61:bd:ed:a1:2a:a7:6c:18:38:52:b3:3a: 3d:d4:6c:3e:e0:e3:68:45:46:4d:2e:b5:ed:86:3c: 60:78:0a:9d:56:77:74:dd:ec:6f:44:6b:58:4d:2a: ea:7e:26:26:94:40:96:46:c7:73:b2:28:2d:38:ac: 8a:bf:72:61:50:d3:bf:db:b2:3f:fe:a2:03:c9:5d: 3e:fd:27:4c:ee:d7:67:f7:94:8f:0f:25:15:03:5f: f4:40:4f:de:6c:da:a4:75:52:8a:23:3b:3d:58:26: 0f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:18:F0:8C:38:A2:5D:C1:41:3D:FF:81:CB:2D:3A:A7:E0:06:4A:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfa97400-21ee-3e62-92dc-1dacd2c23ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:56:5b:2c:ef:3d:e8:7b:11:94:17:61:66:eb:95:27:4b:ad: 0b:9e:a2:87:6d:c0:ea:48:e4:58:3b:39:a6:fc:2f:67:34:34: 1e:e9:76:f8:a5:b5:61:e1:c2:35:1f:22:7a:0f:a7:9c:b9:d9: 20:ee:ed:49:1a:d9:0c:52:84:0c:06:37:64:0a:22:7e:24:d9: 86:03:89:d4:6c:39:be:92:b3:9c:4c:23:91:ea:30:2a:47:75: f3:ad:e0:79:22:93:15:24:72:f8:d0:56:3e:cd:8f:d4:10:32: ed:c1:89:6d:0c:75:27:57:d0:bf:56:2e:c0:84:27:7c:12:76: 74:4f:08:4b:34:d6:f9:95:49:01:4c:c7:71:00:63:ff:03:91: 9d:41:57:67:01:c1:01:58:35:23:81:29:69:53:62:00:97:11: 68:94:41:25:b2:bd:f3:ad:f0:94:07:7a:07:f8:2f:22:f6:83: 19:0d:62:6e:b2:3d:25:36:95:50:5b:6c:07:91:da:f1:64:9d: 97:60:70:4e:01:65:c8:4a:45:f3:7a:5c:33:48:31:54:37:89: e3:12:da:54:dd:a2:4a:25:76:25:c0:99:9a:93:7a:06:b2:dc: 77:52:99:1a:a8:4d:29:ad:d8:ce:de:0a:57:8d:52:83:8a:11: 64:ff:3f:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZbavkCbfPZdHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk NmI2YjNlZDUtNDY2Zi00ZTAxLTkxZmMtYWFiNDRkMzlkZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx32RyVsxFKh7HETbeRHGKMEtlD2n2VyaRtKT knZsVRDjgmYpr75vTz2kRAcnTR7ihUH9HGsjR2jrrZqK3tHt6zEQn+0yxmQdJmBW K98M7ZRlRa1ZvpKx+UP5KHWhsZ59IR1rp5Ncl1iG4NZ/CTLRB8LkfS8VEQeTc51V EGxhwy3wVKQsIZqV9eq8YVdk62ipM0/8h5WTiqlhve2hKqdsGDhSszo91Gw+4ONo RUZNLrXthjxgeAqdVnd03exvRGtYTSrqfiYmlECWRsdzsigtOKyKv3JhUNO/27I/ /qIDyV0+/SdM7tdn95SPDyUVA1/0QE/ebNqkdVKKIzs9WCYPQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIY8Iw4ol3BQT3/gcstOqfgBkpKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZhOTc0MDAtMjFlZS0z ZTYyLTkyZGMtMWRhY2QyYzIzYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARWWyzvPeh7EZQXYWbrlSdLrQueoodtwOpI5Fg7Oab8L2c0NB7pdvil tWHhwjUfInoPp5y52SDu7Uka2QxShAwGN2QKIn4k2YYDidRsOb6Ss5xMI5HqMCpH dfOt4HkikxUkcvjQVj7Nj9QQMu3BiW0MdSdX0L9WLsCEJ3wSdnRPCEs01vmVSQFM x3EAY/8DkZ1BV2cBwQFYNSOBKWlTYgCXEWiUQSWyvfOt8JQHegf4LyL2gxkNYm6y PSU2lVBbbAeR2vFknZdgcE4BZchKRfN6XDNIMVQ3ieMS2lTdokoldiXAmZqTegay 3HdSmRqoTSmt2M7eCleNUoOKEWT/P+g= -----END CERTIFICATE-----Generated at Mon Oct 20 02:33:54 2025 by rpki-client