$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a97e0916-c88c-3f30-9310-664ce6a8b4e6.roa File: a97e0916-c88c-3f30-9310-664ce6a8b4e6.roa (raw, json) Hash identifier: QPEbWogot/H0gBGPtEIxJG0uJXVJU1NK/xjSDCBwvH4= Subject key identifier: 56:1C:7C:B4:37:B4:F9:1D:C2:03:B2:8B:6B:14:EA:FE:E3:A9:FC:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AAB2653DB1EC45C9E96F6F990 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a97e0916-c88c-3f30-9310-664ce6a8b4e6.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 21342 IP address blocks: 173.223.100.0/24 maxlen: 24 173.223.101.0/24 maxlen: 24 2600:14c0:a::/48 maxlen: 48 2600:14c0:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:53:db:1e:c4:5c:9e:96:f6:f9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=274db615-e3a8-4b26-9591-f6a0b1328423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dc:80:fd:da:52:e4:dc:35:92:dc:43:ce:6b: 8b:4c:71:52:68:ec:18:4e:bf:16:70:27:3c:67:36: d4:13:7a:c5:ba:ac:0c:04:8a:e4:49:56:d5:64:29: 64:67:df:91:07:19:e7:2d:b1:12:6b:f1:20:18:3f: f5:b0:07:16:ce:c4:3f:91:2c:5d:d4:2d:ca:24:9f: 82:6b:20:88:c8:87:0c:2d:66:f6:f4:8c:6d:11:3d: 53:6b:7b:e6:39:30:f3:83:2f:1e:24:f3:ff:ec:70: 6c:00:86:d4:77:84:f7:09:2d:3b:af:db:83:ef:c5: d4:ff:7f:29:ff:25:35:95:24:0e:a2:69:9c:21:a2: 6c:7d:39:bc:dd:aa:b0:b2:a2:d9:66:c6:cf:6a:66: 67:83:a1:ac:08:65:30:ec:b5:ac:df:58:34:5d:3f: 60:3f:02:4c:45:d1:d8:d5:36:36:41:93:20:50:a6: b0:b0:c5:19:96:0c:c0:98:a9:1b:fc:72:6e:b0:f1: 18:3b:14:15:a8:21:09:d3:28:c6:ed:2b:08:68:b5: 6a:11:90:94:93:7c:c8:b6:79:6c:c7:da:c7:ef:fa: 1f:8c:93:59:68:c0:b4:be:5c:dc:6e:23:92:f7:cb: 7e:03:b8:a1:82:f2:4f:1c:85:5f:aa:34:cb:9b:0a: ea:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1C:7C:B4:37:B4:F9:1D:C2:03:B2:8B:6B:14:EA:FE:E3:A9:FC:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a97e0916-c88c-3f30-9310-664ce6a8b4e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.100.0/23 IPv6: 2600:14c0:a::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f3:70:84:b6:da:3a:97:2f:cb:84:fa:19:c6:47:a4:01:38: 87:b1:d0:9a:e5:73:08:4c:f2:e3:b3:2f:9c:c5:67:aa:53:50: f6:5f:89:28:a1:01:34:01:34:46:6e:00:d7:26:97:94:1d:20: 58:27:48:6f:65:25:ef:b0:10:e8:5e:be:08:18:89:a0:0c:3f: 6b:9d:8a:15:d7:b6:18:03:fc:b5:cb:d9:42:29:0a:26:55:30: 22:f7:80:5e:ac:85:10:0a:46:5a:31:13:47:60:52:22:09:49: 32:be:09:c3:93:77:82:e1:d6:35:2e:b8:fb:0b:0c:d7:fa:65: 7d:7b:70:ea:74:97:01:63:4c:0a:d9:e4:84:c5:58:f0:6a:38: b1:84:50:0e:64:8e:86:4c:52:4d:e2:99:f3:23:7d:8a:97:1f: ba:c5:7e:6d:d4:a0:fe:8f:60:42:42:52:55:6d:50:a4:b2:c8: 9a:5f:d9:bf:4a:c1:76:2d:a0:da:be:e7:f4:f3:d2:08:48:96: 08:22:93:68:8b:f7:fb:02:c1:7c:45:ac:c8:72:14:b0:1f:bb: c4:f9:c2:02:a8:3a:34:b2:89:59:c0:c0:9b:02:7e:b0:70:90: 4f:5d:35:af:60:13:c3:63:06:10:36:bc:5d:ea:a2:cf:4b:a6: 58:cd:2c:cd -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEqrJlPbHsRcnpb2+ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk Mjc0ZGI2MTUtZTNhOC00YjI2LTk1OTEtZjZhMGIxMzI4NDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdyA/dpS5Nw1ktxDzmuLTHFSaOwYTr8WcCc8 ZzbUE3rFuqwMBIrkSVbVZClkZ9+RBxnnLbESa/EgGD/1sAcWzsQ/kSxd1C3KJJ+C ayCIyIcMLWb29IxtET1Ta3vmOTDzgy8eJPP/7HBsAIbUd4T3CS07r9uD78XU/38p /yU1lSQOommcIaJsfTm83aqwsqLZZsbPamZng6GsCGUw7LWs31g0XT9gPwJMRdHY 1TY2QZMgUKawsMUZlgzAmKkb/HJusPEYOxQVqCEJ0yjG7SsIaLVqEZCUk3zItnls x9rH7/ofjJNZaMC0vlzcbiOS98t+A7ihgvJPHIVfqjTLmwrqwQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFYcfLQ3tPkdwgOyi2sU6v7jqfx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTk3ZTA5MTYtYzg4Yy0z ZjMwLTkzMTAtNjY0Y2U2YThiNGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBrd9kMA8E AgACMAkDBwEmABTAAAowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiPNwhLbaOpcvy4T6GcZHpAE4h7HQmuVz CEzy47MvnMVnqlNQ9l+JKKEBNAE0Rm4A1yaXlB0gWCdIb2Ul77AQ6F6+CBiJoAw/ a52KFde2GAP8tcvZQikKJlUwIveAXqyFEApGWjETR2BSIglJMr4Jw5N3guHWNS64 +wsM1/plfXtw6nSXAWNMCtnkhMVY8Go4sYRQDmSOhkxSTeKZ8yN9ipcfusV+bdSg /o9gQkJSVW1QpLLIml/Zv0rBdi2g2r7n9PPSCEiWCCKTaIv3+wLBfEWsyHIUsB+7 xPnCAqg6NLKJWcDAmwJ+sHCQT101r2ATw2MGEDa8Xeqiz0umWM0szQ== -----END CERTIFICATE-----Generated at Mon Aug 4 18:28:26 2025 by rpki-client