$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/484198b4-c93a-356d-9319-e78872749424.roa File: 484198b4-c93a-356d-9319-e78872749424.roa (raw, json) Hash identifier: 80MQHlh6TtdonP0Jdehwf+H/NXuT345+CMMQZWlgj0E= Subject key identifier: E3:74:68:3A:65:E3:82:5E:F4:A7:A6:34:17:FE:52:ED:AD:A9:6E:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0FA6C4E6CF7F2A27B716AD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/484198b4-c93a-356d-9319-e78872749424.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.217.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:c4:e6:cf:7f:2a:27:b7:16:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=0359cb99-639e-4aa9-9d27-3cdd52f9acba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:32:16:2e:73:3c:4b:fc:40:1f:7d:38:a8:f6: 27:59:ca:fb:b0:03:43:e8:64:fc:6e:0c:78:42:50: 33:10:14:52:58:d5:7c:df:85:8f:d5:ff:c6:67:64: c2:aa:c3:f3:27:ad:5c:2a:9a:09:50:25:2e:93:2b: cf:d6:1a:dc:44:ee:70:61:d1:75:cd:fe:db:70:1b: 4e:ca:52:39:25:f3:20:d2:bb:bc:88:2e:50:49:75: 6b:7e:67:63:21:42:8a:01:3a:36:fa:2f:0d:64:03: 0d:ff:7e:2a:e5:e6:50:9e:66:94:7e:7a:d4:eb:12: 82:a5:0e:8a:2a:d1:c7:e7:57:85:7d:d1:b8:83:dc: ce:e5:64:e6:ad:86:b5:34:b7:02:63:52:21:4c:30: 61:fd:96:ac:67:95:79:3c:43:c3:3c:25:93:15:ab: 61:60:36:b6:ed:fc:59:c8:29:ef:21:62:81:c1:cf: da:ee:87:f2:81:7a:95:ca:f9:b4:3a:4a:0b:fe:fa: 07:34:98:29:64:54:d6:c0:32:ed:ed:54:02:3d:69: ca:6d:70:b4:a8:50:67:80:f7:f4:00:25:ea:1d:20: a0:ca:96:42:0f:06:a3:b2:b5:1a:c1:80:04:c6:d1: 1f:98:c4:53:2e:eb:44:e5:b3:19:1e:bf:82:31:78: 93:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:74:68:3A:65:E3:82:5E:F4:A7:A6:34:17:FE:52:ED:AD:A9:6E:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/484198b4-c93a-356d-9319-e78872749424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5c:3f:c9:64:e3:cb:4f:f7:3f:22:96:fb:89:29:b0:65:54: e7:03:e9:47:01:3d:56:34:e3:d2:73:19:34:3d:8b:3f:95:3c: aa:e0:f7:65:2b:2f:ce:54:86:0f:05:cd:ab:24:00:f8:4b:18: b7:12:2b:43:32:28:d0:47:c3:cd:98:30:24:8c:60:04:5d:5a: 4d:0b:0a:3a:52:d4:ee:c0:05:fa:1f:74:b4:f6:48:c4:7e:5d: 79:7d:d6:e3:39:f1:61:ef:67:46:66:78:39:50:79:a7:8f:cd: d4:2d:c4:c0:24:bd:ce:97:e7:e9:8f:d0:df:2d:5b:71:bd:68: 1d:e7:22:4e:39:b9:d0:bd:4a:ea:49:d9:15:a4:51:6e:7c:0d: 9f:5a:d8:51:6d:61:e7:62:87:f5:b9:94:c4:3e:55:46:0f:26: d7:5d:13:3c:df:77:06:2a:85:e0:be:04:12:63:9f:41:67:29: 58:34:61:91:b3:b5:ed:3c:ab:cb:71:e4:d9:7c:ac:78:1f:b5: 6f:16:5a:64:65:1f:3e:d3:df:3e:24:5b:bd:09:43:59:c2:38: 71:5d:b1:ed:20:68:ed:61:3a:b4:a5:4b:4a:f5:d7:41:80:44: 3d:0f:bb:d1:af:e8:e8:91:d3:1d:33:20:44:73:3f:19:36:30: 29:5d:4a:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpsTmz38qJ7cWrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk MDM1OWNiOTktNjM5ZS00YWE5LTlkMjctM2NkZDUyZjlhY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DIWLnM8S/xAH304qPYnWcr7sAND6GT8bgx4 QlAzEBRSWNV834WP1f/GZ2TCqsPzJ61cKpoJUCUukyvP1hrcRO5wYdF1zf7bcBtO ylI5JfMg0ru8iC5QSXVrfmdjIUKKATo2+i8NZAMN/34q5eZQnmaUfnrU6xKCpQ6K KtHH51eFfdG4g9zO5WTmrYa1NLcCY1IhTDBh/ZasZ5V5PEPDPCWTFathYDa27fxZ yCnvIWKBwc/a7ofygXqVyvm0OkoL/voHNJgpZFTWwDLt7VQCPWnKbXC0qFBngPf0 ACXqHSCgypZCDwajsrUawYAExtEfmMRTLutE5bMZHr+CMXiTewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFON0aDpl44Je9KemNBf+Uu2tqW46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDg0MTk4YjQtYzkzYS0z NTZkLTkzMTktZTc4ODcyNzQ5NDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9lYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9cP8lk48tP9z8ilvuJKbBlVOcD6UcBPVY049JzGTQ9iz+VPKrg92Ur L85Uhg8FzaskAPhLGLcSK0MyKNBHw82YMCSMYARdWk0LCjpS1O7ABfofdLT2SMR+ XXl91uM58WHvZ0ZmeDlQeaePzdQtxMAkvc6X5+mP0N8tW3G9aB3nIk45udC9SupJ 2RWkUW58DZ9a2FFtYedih/W5lMQ+VUYPJtddEzzfdwYqheC+BBJjn0FnKVg0YZGz te08q8tx5Nl8rHgftW8WWmRlHz7T3z4kW70JQ1nCOHFdse0gaO1hOrSlS0r110GA RD0Pu9Gv6OiR0x0zIERzPxk2MCldSmw= -----END CERTIFICATE-----Generated at Sat Sep 6 05:21:19 2025 by rpki-client