$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58a59632-de6e-39db-9964-66d276f0b8d1.roa File: 58a59632-de6e-39db-9964-66d276f0b8d1.roa (raw, json) Hash identifier: 4/iJEDNR/S6lxFPKSqFcaTDpODRvOvyCLorelgN6Vhw= Subject key identifier: BC:21:33:FC:63:BC:26:35:FD:85:3F:9F:44:04:12:25:C3:3C:1F:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C0BF6F95E666974D98B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58a59632-de6e-39db-9964-66d276f0b8d1.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 172.235.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0b:f6:f9:5e:66:69:74:d9:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=3dcb38fa-5474-43aa-bb0d-3034258c97f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:15:1c:5e:f2:fe:1b:22:6c:5a:b0:6a:af: 29:f0:a3:ad:88:85:98:67:b9:bb:c7:6e:a7:18:75: 9b:16:0d:8e:77:ac:d7:ee:48:85:ec:81:c2:c4:38: 5d:9a:64:6a:3c:de:69:6f:cc:d2:95:0a:b3:50:e2: d7:a4:b2:d1:b4:4e:d6:61:50:8f:37:a9:ba:19:3b: eb:12:10:56:0d:84:1a:47:11:17:22:07:1f:d2:57: 52:d2:d2:08:2b:89:ea:95:28:d1:7d:10:24:85:64: de:67:cc:b0:df:c1:e5:ff:ad:18:e7:bb:46:44:c3: 24:1e:0a:2e:11:c7:5c:49:bf:61:55:62:73:22:5b: 29:ae:22:4c:c1:b4:db:9e:0a:64:d6:86:32:b2:06: 2e:0c:e4:86:9d:86:2a:c0:0a:9b:03:94:85:ac:b1: b5:5d:66:82:38:33:ba:d8:c6:c5:bc:69:d5:c1:a2: fe:4c:6d:30:f0:c7:ae:8b:89:bf:72:74:82:af:fe: 60:cc:4e:a0:ae:ff:24:45:d9:62:f9:73:11:73:cf: 05:9d:87:75:9e:a1:e2:a8:54:4a:3f:31:b3:00:c7: 46:f3:b2:aa:7d:09:ec:c0:1c:57:ac:52:65:9f:4d: d0:a3:3e:e1:55:71:57:11:43:71:8c:e1:bf:eb:07: 66:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:21:33:FC:63:BC:26:35:FD:85:3F:9F:44:04:12:25:C3:3C:1F:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58a59632-de6e-39db-9964-66d276f0b8d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f4:7e:dc:99:36:92:68:26:0a:b7:bc:de:0c:6c:13:fc:69: 02:a4:e5:d8:2b:4a:64:b7:9c:bb:38:ea:f0:e5:17:49:2d:d7: f5:92:4d:39:87:4a:58:aa:d2:57:c6:31:72:1f:b3:44:3b:f2: 28:a9:e9:ec:44:d3:4f:ef:88:6e:e9:9e:a5:75:9c:d5:fd:cb: 03:58:11:8c:dc:d6:e7:63:a0:4b:ff:e1:e8:0d:6b:1a:55:b7: 6e:e9:b7:c6:52:f2:17:b5:c9:e7:b2:ee:b4:d8:b8:7e:4e:64: a7:10:93:81:07:14:f1:f7:7c:da:e5:54:65:d9:90:3a:05:80: 26:5e:33:f4:a9:3b:77:d7:96:50:c4:d5:e1:67:80:14:a2:7b: 44:6f:62:02:1f:f2:61:1f:05:64:7c:f1:9e:cc:d2:3d:6d:84: c5:4a:fb:76:3e:8b:8b:e3:66:91:f0:4d:40:11:a1:50:66:7f: f8:a1:5b:0d:77:ea:ce:3e:e1:15:77:dc:db:69:9c:04:c3:30: e7:22:67:45:5c:e6:06:2c:78:18:d2:05:12:64:76:b7:3b:c1: 14:56:99:86:36:90:06:a8:bd:9d:a6:7e:33:6e:a4:29:16:69: 86:9f:df:54:b2:95:e1:c5:99:cf:4e:88:41:81:dd:d0:f2:c7: 13:eb:c5:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAv2+V5maXTZi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk M2RjYjM4ZmEtNTQ3NC00M2FhLWJiMGQtMzAzNDI1OGM5N2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1wVHF7y/hsibFqwaq8p8KOtiIWYZ7m7x26n GHWbFg2Od6zX7kiF7IHCxDhdmmRqPN5pb8zSlQqzUOLXpLLRtE7WYVCPN6m6GTvr EhBWDYQaRxEXIgcf0ldS0tIIK4nqlSjRfRAkhWTeZ8yw38Hl/60Y57tGRMMkHgou EcdcSb9hVWJzIlspriJMwbTbngpk1oYysgYuDOSGnYYqwAqbA5SFrLG1XWaCODO6 2MbFvGnVwaL+TG0w8Meui4m/cnSCr/5gzE6grv8kRdli+XMRc88FnYd1nqHiqFRK PzGzAMdG87KqfQnswBxXrFJln03Qoz7hVXFXEUNxjOG/6wdmEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwhM/xjvCY1/YU/n0QEEiXDPB9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNThhNTk2MzItZGU2ZS0z OWRiLTk5NjQtNjZkMjc2ZjBiOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf0ftyZNpJoJgq3vN4MbBP8aQKk5dgrSmS3nLs46vDlF0kt1/WSTTmH Sliq0lfGMXIfs0Q78iip6exE00/viG7pnqV1nNX9ywNYEYzc1udjoEv/4egNaxpV t27pt8ZS8he1yeey7rTYuH5OZKcQk4EHFPH3fNrlVGXZkDoFgCZeM/SpO3fXllDE 1eFngBSie0RvYgIf8mEfBWR88Z7M0j1thMVK+3Y+i4vjZpHwTUARoVBmf/ihWw13 6s4+4RV33NtpnATDMOciZ0Vc5gYseBjSBRJkdrc7wRRWmYY2kAaovZ2mfjNupCkW aYaf31SyleHFmc9OiEGB3dDyxxPrxb8= -----END CERTIFICATE-----Generated at Sat Sep 6 01:13:57 2025 by rpki-client