$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/65241b29-76b1-3e66-abd9-723a5dd2f0c2.roa File: 65241b29-76b1-3e66-abd9-723a5dd2f0c2.roa (raw, json) Hash identifier: TH7UYHNLzxSTCEr4AH8Yp1K3h953sZirJP2HC7nCuEQ= Subject key identifier: 1B:CB:60:4F:51:7C:AF:A1:FF:A0:CB:30:7A:3E:23:55:E7:15:36:2A Certificate issuer: /CN=f243c5da-1962-405d-9607-4c295bcb5015 Certificate serial: 010D0C9F4328584AAB264D7D92A62BB629AA6F00 Authority key identifier: DE:5B:EC:37:4F:D9:9F:51:D9:BD:97:72:05:65:08:5A:8B:10:B3:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/65241b29-76b1-3e66-abd9-723a5dd2f0c2.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 396535 IP address blocks: 173.208.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/f243c5da-1962-405d-9607-4c295bcb5015.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/f243c5da-1962-405d-9607-4c295bcb5015.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:4d:7d:92:a6:2b:b6:29:aa:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f243c5da-1962-405d-9607-4c295bcb5015 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=4746bdf0-6030-4354-bf16-606ceb365d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3e:0b:fb:48:4a:21:24:03:04:9a:1c:97:91: bb:d3:90:b8:c9:bf:75:c9:b8:04:1a:3a:57:a7:80: 4e:45:e3:2c:12:8b:db:b2:cf:90:45:9d:68:18:84: 12:0d:a9:33:12:97:82:e9:17:6e:26:a9:85:72:a2: c5:79:74:31:0b:28:c2:6d:5f:f9:91:71:c3:5a:40: ef:99:86:e2:13:b7:53:15:56:78:1a:27:60:cb:28: ad:28:d0:21:e7:01:73:5f:62:16:81:24:37:a5:0f: 03:80:89:a4:58:a8:99:ed:20:b3:44:7e:94:c6:be: 69:e7:7a:6e:66:5e:f9:c1:3a:68:dc:4f:5b:f9:24: 1a:7a:49:11:ef:11:f9:bf:91:3e:4e:fc:a1:0d:37: 70:2a:89:ac:f1:e6:18:11:e5:18:3e:11:8a:6b:24: 91:8a:a5:b7:92:9d:fb:5d:b5:f7:cb:47:1f:6b:24: 24:35:21:3b:a0:13:79:33:99:57:d6:8a:0c:ac:f3: 49:db:b2:9f:e1:12:d0:11:be:8a:55:d2:5b:6b:4a: 7f:db:62:6f:cb:59:d3:24:18:7a:53:65:ba:96:d8: 17:e0:b2:0b:e2:f7:97:11:cb:27:39:34:94:36:9c: c0:dd:ee:58:0d:b9:fe:ce:fb:cf:1c:36:f4:5e:21: a1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CB:60:4F:51:7C:AF:A1:FF:A0:CB:30:7A:3E:23:55:E7:15:36:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/65241b29-76b1-3e66-abd9-723a5dd2f0c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/f243c5da-1962-405d-9607-4c295bcb5015.crl X509v3 Authority Key Identifier: keyid:DE:5B:EC:37:4F:D9:9F:51:D9:BD:97:72:05:65:08:5A:8B:10:B3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015.cer sbgp-ipAddrBlock: critical IPv4: 173.208.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:f3:8c:72:6b:97:4c:21:39:71:a2:0d:cc:71:ad:26:0d:0e: 0f:dd:b7:83:8f:fe:3d:83:11:95:18:11:6e:9e:cf:3b:e3:df: 83:95:05:e4:08:99:a3:35:e9:79:6f:14:10:00:d5:07:93:c1: 88:e5:64:7a:9d:e6:58:84:1a:83:c1:3e:03:11:8c:81:6d:6c: 41:6d:69:21:4b:6a:8f:ca:07:7e:b1:b4:52:34:63:42:23:57: 65:65:29:4c:91:8c:ac:a8:a9:64:97:03:06:22:23:d5:11:d1: 77:62:aa:43:35:f6:69:0a:c4:5d:07:b7:3f:fa:12:fe:50:54: 16:d3:b6:7d:fe:6d:4b:5a:ac:33:fd:21:e5:b8:c4:ec:eb:ed: 14:fb:1c:d7:f6:12:e8:db:e0:ea:44:26:26:ed:7e:07:3c:82: d0:b8:bc:87:6d:8d:3b:cb:3e:dc:4b:56:a8:d7:ad:4d:fa:20: 97:82:de:0b:e5:8f:53:29:27:30:39:21:76:33:b8:d4:e6:0f: 47:85:99:7b:3c:3c:a6:8e:cf:50:f6:de:72:90:4f:f1:fb:29: 6d:81:64:e7:6b:f9:65:77:5d:b0:3e:96:7c:05:89:70:9b:5d: ab:f5:0b:38:fd:03:1b:35:73:0d:6f:dd:66:01:f3:6e:fa:81: 30:5b:f3:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJk19kqYrtimqbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0M2M1ZGEtMTk2Mi00MDVkLTk2MDctNGMyOTViY2I1 MDE1MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NDc0NmJkZjAtNjAzMC00MzU0LWJmMTYtNjA2Y2ViMzY1ZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj4L+0hKISQDBJocl5G705C4yb91ybgEGjpX p4BOReMsEovbss+QRZ1oGIQSDakzEpeC6RduJqmFcqLFeXQxCyjCbV/5kXHDWkDv mYbiE7dTFVZ4GidgyyitKNAh5wFzX2IWgSQ3pQ8DgImkWKiZ7SCzRH6Uxr5p53pu Zl75wTpo3E9b+SQaekkR7xH5v5E+TvyhDTdwKoms8eYYEeUYPhGKaySRiqW3kp37 XbX3y0cfayQkNSE7oBN5M5lX1ooMrPNJ27Kf4RLQEb6KVdJba0p/22Jvy1nTJBh6 U2W6ltgX4LIL4veXEcsnOTSUNpzA3e5YDbn+zvvPHDb0XiGh6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvLYE9RfK+h/6DLMHo+I1XnFTYqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMjQz YzVkYS0xOTYyLTQwNWQtOTYwNy00YzI5NWJjYjUwMTUvNjUyNDFiMjktNzZiMS0z ZTY2LWFiZDktNzIzYTVkZDJmMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjI0M2M1ZGEtMTk2Mi00MDVkLTk2 MDctNGMyOTViY2I1MDE1L2YyNDNjNWRhLTE5NjItNDA1ZC05NjA3LTRjMjk1YmNi NTAxNS5jcmwwHwYDVR0jBBgwFoAU3lvsN0/Zn1HZvZdyBWUIWosQsxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMjQzYzVkYS0xOTYyLTQwNWQtOTYwNy00YzI5 NWJjYjUwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHzjHJrl0whOXGiDcxxrSYNDg/dt4OP/j2DEZUYEW6ezzvj34OVBeQI maM16XlvFBAA1QeTwYjlZHqd5liEGoPBPgMRjIFtbEFtaSFLao/KB36xtFI0Y0Ij V2VlKUyRjKyoqWSXAwYiI9UR0XdiqkM19mkKxF0Htz/6Ev5QVBbTtn3+bUtarDP9 IeW4xOzr7RT7HNf2Eujb4OpEJibtfgc8gtC4vIdtjTvLPtxLVqjXrU36IJeC3gvl j1MpJzA5IXYzuNTmD0eFmXs8PKaOz1D23nKQT/H7KW2BZOdr+WV3XbA+lnwFiXCb Xav1Czj9Axs1cw1v3WYB8276gTBb87U= -----END CERTIFICATE-----Generated at Sat Aug 9 22:35:17 2025 by rpki-client