$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/67f9a853-6a8f-3d2a-87bf-a1dd95b56fb8.roa File: 67f9a853-6a8f-3d2a-87bf-a1dd95b56fb8.roa (raw, json) Hash identifier: AJl2W1iBcQl6FJ24Qi7w+ISgGZMAYw2fdLd3RsDTw2I= Subject key identifier: FA:F6:3A:F2:CC:20:3E:6B:A3:C7:6F:00:AD:8E:2F:B8:87:14:0E:7A Certificate issuer: /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970 Certificate serial: 010D0C9F4328584B13D6AFF0A61E7465BB543000 Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/67f9a853-6a8f-3d2a-87bf-a1dd95b56fb8.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 47050 IP address blocks: 173.224.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:af:f0:a6:1e:74:65:bb:54:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=8cd71db9-2826-433c-9176-746dd65c8d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:90:e7:fc:af:95:8b:14:f0:86:80:7e:0c:d6: 1f:08:9e:fb:26:6e:31:2f:93:5f:87:02:98:f2:c9: a1:1c:b5:84:22:32:56:4d:e2:66:1b:65:13:ba:1e: d0:c1:d6:2d:a3:73:60:9d:18:ef:be:d5:2a:e8:01: ad:ff:63:8d:70:03:03:4d:10:3c:8f:d6:76:5b:49: ab:8e:57:fd:31:2c:f9:21:01:97:d7:81:df:91:61: 04:7a:bd:2a:ab:65:fb:4a:c6:5c:e3:28:69:0f:f3: ed:15:42:e3:8f:25:14:0e:4d:36:62:68:cd:0b:31: 44:d9:32:12:1d:2b:d8:20:8b:73:53:9a:13:a4:e6: 4d:d2:f7:99:ee:a9:32:20:36:87:08:be:f0:09:85: 84:5e:1f:5e:79:7e:93:5e:22:93:22:b0:95:b5:88: fc:de:fd:da:3b:1e:3a:c4:fc:1f:a9:73:3e:ed:f5: 8b:0d:b0:08:a2:2d:63:06:2a:6b:42:42:7d:69:23: e1:bd:82:4f:eb:4d:e4:0c:14:37:23:e7:a9:87:bc: ae:ed:77:a6:76:64:51:af:1e:b4:95:37:dd:47:a3: 01:2b:23:db:a7:2b:2d:ef:37:ca:85:6f:99:49:5f: d7:3a:56:15:37:54:2a:18:99:c5:0c:d2:1d:06:07: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F6:3A:F2:CC:20:3E:6B:A3:C7:6F:00:AD:8E:2F:B8:87:14:0E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/67f9a853-6a8f-3d2a-87bf-a1dd95b56fb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl X509v3 Authority Key Identifier: keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer sbgp-ipAddrBlock: critical IPv4: 173.224.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a2:3b:90:a1:18:fb:75:94:03:dc:2a:eb:d3:9e:4a:a3:26: a9:7d:c2:c6:b5:4c:43:04:aa:31:86:ea:d1:9c:78:86:cd:f1: f3:48:e0:4e:b0:89:3d:50:58:bf:70:35:03:09:60:70:c4:18: ce:3a:7b:79:93:42:41:4e:20:ca:94:84:77:7b:c5:22:8b:55: c2:1d:dd:c7:91:d8:c6:64:76:a5:60:fb:70:9a:e6:22:58:cf: 51:e7:97:95:9d:6b:0e:71:d6:fb:34:02:85:bb:48:df:b0:1c: 7b:b5:46:b4:09:3a:82:64:95:83:2c:17:b5:f5:50:52:33:4c: a7:c3:5f:57:b3:97:65:b1:ad:9c:2b:96:7c:ff:d4:ed:82:83: 80:e9:98:bf:40:95:fb:55:a0:0c:63:98:6b:c0:06:c5:43:e8: 12:06:e7:79:9c:9c:52:c7:2d:f0:96:6f:16:81:ee:f5:d5:73: 84:9a:96:8a:08:e9:b6:98:5f:40:70:19:97:36:39:01:29:44: 06:3e:e7:6c:e0:58:76:97:b0:a0:12:28:60:99:a3:30:9f:ca: 74:94:cd:d6:95:35:e6:84:e1:24:0b:7c:7e:c0:cb:88:10:79: ee:58:e5:c9:b2:0b:1a:bb:bf:0c:b0:69:dc:c0:70:0b:d9:92: 9e:bb:2d:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1q/wph50ZbtUMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI1ZjJkYWYtN2Q3YS00ODQ4LWJiZDItMDU1ZjQzYWU4 OTcwMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk OGNkNzFkYjktMjgyNi00MzNjLTkxNzYtNzQ2ZGQ2NWM4ZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5Dn/K+VixTwhoB+DNYfCJ77Jm4xL5NfhwKY 8smhHLWEIjJWTeJmG2UTuh7QwdYto3NgnRjvvtUq6AGt/2ONcAMDTRA8j9Z2W0mr jlf9MSz5IQGX14HfkWEEer0qq2X7SsZc4yhpD/PtFULjjyUUDk02YmjNCzFE2TIS HSvYIItzU5oTpOZN0veZ7qkyIDaHCL7wCYWEXh9eeX6TXiKTIrCVtYj83v3aOx46 xPwfqXM+7fWLDbAIoi1jBiprQkJ9aSPhvYJP603kDBQ3I+eph7yu7XemdmRRrx60 lTfdR6MBKyPbpyst7zfKhW+ZSV/XOlYVN1QqGJnFDNIdBgc1AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPr2OvLMID5ro8dvAK2OL7iHFA56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYjVm MmRhZi03ZDdhLTQ4NDgtYmJkMi0wNTVmNDNhZTg5NzAvNjdmOWE4NTMtNmE4Zi0z ZDJhLTg3YmYtYTFkZDk1YjU2ZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGI1ZjJkYWYtN2Q3YS00ODQ4LWJi ZDItMDU1ZjQzYWU4OTcwLzBiNWYyZGFmLTdkN2EtNDg0OC1iYmQyLTA1NWY0M2Fl ODk3MC5jcmwwHwYDVR0jBBgwFoAUMZIFdzydzonOld5Ql69DAR5Wb+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYjVmMmRhZi03ZDdhLTQ4NDgtYmJkMi0wNTVm NDNhZTg5NzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreBZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6iO5ChGPt1lAPcKuvTnkqjJql9wsa1TEMEqjGG6tGceIbN8fNI4E6w iT1QWL9wNQMJYHDEGM46e3mTQkFOIMqUhHd7xSKLVcId3ceR2MZkdqVg+3Ca5iJY z1Hnl5Wdaw5x1vs0AoW7SN+wHHu1RrQJOoJklYMsF7X1UFIzTKfDX1ezl2WxrZwr lnz/1O2Cg4DpmL9AlftVoAxjmGvABsVD6BIG53mcnFLHLfCWbxaB7vXVc4SalooI 6baYX0BwGZc2OQEpRAY+52zgWHaXsKASKGCZozCfynSUzdaVNeaE4SQLfH7Ay4gQ ee5Y5cmyCxq7vwywadzAcAvZkp67LeQ= -----END CERTIFICATE-----Generated at Thu Oct 9 20:12:08 2025 by rpki-client