$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f95ccb6f-254d-3182-878f-a43369ac8750.roa File: f95ccb6f-254d-3182-878f-a43369ac8750.roa (raw, json) Hash identifier: 0qlj8NQrnZUX6KQHLvm9OAf58DVjNyq5nUyn/+fvxls= Subject key identifier: D3:0C:A7:87:6D:FA:45:20:94:0B:FA:9C:7E:FC:80:01:DD:5D:0A:B5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B21CC2248D961DC52D9695A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f95ccb6f-254d-3182-878f-a43369ac8750.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 63949 IP address blocks: 172.233.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:22:48:d9:61:dc:52:d9:69:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=8b4eeec6-fa69-4a30-9773-1bc9a9c6c35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:4c:02:78:2f:f2:6a:25:8b:da:2d:0e:11: cd:6b:aa:7b:51:c4:5b:10:fc:60:2a:c8:68:a8:e9: fe:81:74:5e:34:c3:bf:4e:78:ef:39:91:07:f8:09: 31:8c:d9:03:2d:76:cc:20:8b:e5:90:c1:76:69:fe: 0f:28:40:fc:39:3b:cb:1a:fd:9d:e5:8c:dd:18:11: 7d:4d:51:d1:53:63:94:81:7a:e0:29:9c:b7:73:10: 23:73:87:e6:bc:e4:01:05:31:9a:67:48:9d:e5:21: df:a1:d9:74:20:2c:f4:46:38:5b:f2:9c:9e:d6:dd: 22:5f:68:7f:61:2a:f7:18:f0:39:7f:ec:4c:2b:83: 21:93:8b:da:be:c3:59:1b:bb:b4:0f:0a:d6:f6:84: ea:16:2b:3f:2b:e0:3c:72:fb:6c:71:dc:3c:42:c0: b6:41:50:1b:1e:e9:b2:a3:67:d3:40:6c:07:80:e8: ff:15:99:c8:cf:8e:7c:14:cb:b8:19:4b:b4:5b:69: 80:a9:a9:6c:5d:33:da:cf:65:55:ed:d1:1c:c4:27: 85:9d:c4:c1:18:8a:72:5b:39:7f:69:aa:fd:80:3c: b4:46:c8:56:ec:ce:88:cc:ad:75:11:e9:ce:06:d9: a7:59:33:ee:13:5e:62:9b:53:65:7e:ca:81:2c:99: b5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0C:A7:87:6D:FA:45:20:94:0B:FA:9C:7E:FC:80:01:DD:5D:0A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f95ccb6f-254d-3182-878f-a43369ac8750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.233.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:08:06:a0:95:ee:34:88:5e:58:7d:9b:ca:22:83:46:c2:fc: 8b:d2:a9:e3:43:ac:61:34:c2:bb:d3:e6:ea:b5:08:e7:83:5f: bf:2a:6d:b3:28:41:c5:41:9a:e7:96:cd:49:1a:e4:29:89:4b: 35:47:68:dc:2c:92:f6:dc:cd:9a:30:b6:c1:ee:f1:3b:50:d3: 03:19:a4:67:bd:fc:f9:19:72:28:c3:2c:a7:ed:0b:a2:a2:4d: fb:6d:ea:a0:49:85:fc:2e:d1:7b:e1:09:46:8c:64:65:d0:1b: 60:ad:0c:25:9f:3f:55:13:5d:39:69:fe:71:70:2b:55:71:63: 5f:f4:cb:a3:58:d8:9f:64:fe:06:81:f1:b5:61:2e:27:c8:05: 47:09:7e:de:40:f1:c0:e3:eb:fb:45:32:40:03:42:a8:c2:57: 9c:40:b3:9f:a6:e0:ed:29:bc:91:e0:bd:90:fa:87:ca:73:88: 83:39:41:77:e6:c6:ba:07:d7:14:03:05:5b:f5:f6:4d:3e:1c: 46:24:2e:57:83:57:9f:7a:38:d0:8c:fd:6a:a0:20:01:e2:b5: 62:bf:fc:f1:26:50:df:2d:58:bc:40:c0:70:c6:54:c4:b8:6d: 10:73:69:98:f2:53:4c:5d:bb:6e:22:d3:71:27:9b:51:08:49: 38:c1:56:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCJI2WHcUtlpWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk OGI0ZWVlYzYtZmE2OS00YTMwLTk3NzMtMWJjOWE5YzZjMzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUJMAngv8moli9otDhHNa6p7UcRbEPxgKsho qOn+gXReNMO/TnjvOZEH+AkxjNkDLXbMIIvlkMF2af4PKED8OTvLGv2d5YzdGBF9 TVHRU2OUgXrgKZy3cxAjc4fmvOQBBTGaZ0id5SHfodl0ICz0Rjhb8pye1t0iX2h/ YSr3GPA5f+xMK4Mhk4vavsNZG7u0DwrW9oTqFis/K+A8cvtscdw8QsC2QVAbHumy o2fTQGwHgOj/FZnIz458FMu4GUu0W2mAqalsXTPaz2VV7dEcxCeFncTBGIpyWzl/ aar9gDy0RshW7M6IzK11EenOBtmnWTPuE15im1NlfsqBLJm1fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMMp4dt+kUglAv6nH78gAHdXQq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjk1Y2NiNmYtMjU0ZC0z MTgyLTg3OGYtYTQzMzY5YWM4NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErOnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkIBqCV7jSIXlh9m8oig0bC/IvSqeNDrGE0wrvT5uq1COeDX78qbbMo QcVBmueWzUka5CmJSzVHaNwskvbczZowtsHu8TtQ0wMZpGe9/PkZcijDLKftC6Ki Tftt6qBJhfwu0XvhCUaMZGXQG2CtDCWfP1UTXTlp/nFwK1VxY1/0y6NY2J9k/gaB 8bVhLifIBUcJft5A8cDj6/tFMkADQqjCV5xAs5+m4O0pvJHgvZD6h8pziIM5QXfm xroH1xQDBVv19k0+HEYkLleDV596ONCM/WqgIAHitWK//PEmUN8tWLxAwHDGVMS4 bRBzaZjyU0xdu24i03Enm1EISTjBVmA= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:32 2025 by rpki-client