$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a77e582-a25b-3deb-82c7-35a938a9f125.roa File: 9a77e582-a25b-3deb-82c7-35a938a9f125.roa (raw, json) Hash identifier: ySXMxmnqbnsmiph45CFf45qMF34bK7S34DivT5sPnoo= Subject key identifier: C5:44:D1:36:8D:AD:6F:47:20:8B:63:00:70:4F:DB:52:F6:2F:2C:F2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ADD667644A445CEF6820227C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a77e582-a25b-3deb-82c7-35a938a9f125.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 63949 IP address blocks: 172.235.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:76:44:a4:45:ce:f6:82:02:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=4abd3c43-0f70-4f0c-bd80-21b4f6dba9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e6:05:3c:5e:b8:75:9b:cd:f1:6b:e9:70:28: 53:c9:3e:40:03:58:d7:61:ff:61:25:9b:4e:b7:5b: e7:23:f1:7e:22:fc:a2:c7:c0:eb:8e:14:6b:2f:e2: 02:28:06:6b:b4:e0:68:ab:e5:c2:21:a7:f7:91:68: 8c:25:5f:3b:7c:c3:34:a6:fb:6e:06:de:01:23:6e: ee:74:45:ec:1f:0f:ed:25:e9:35:01:e5:8b:3b:86: 7f:fd:98:d4:91:94:22:d7:9d:dd:68:9c:f9:8c:f8: b0:c4:7f:10:33:45:75:b5:49:75:68:1d:8d:c6:10: ab:d5:fd:d6:75:0d:65:95:56:dc:57:51:38:af:15: dd:7e:dc:e0:47:4c:16:e5:bf:2f:5f:43:58:a5:df: 0c:47:e4:e1:a7:d6:10:f0:21:85:a2:06:2f:20:6b: 53:9f:67:7b:45:a9:c8:08:6d:bb:af:79:04:9f:b9: b4:40:25:fb:8a:e8:76:ad:80:35:89:98:bb:7f:3f: 2f:bf:0d:39:0e:1d:61:7e:81:bd:e2:f3:e1:26:b1: c0:d6:e8:e5:b5:ab:a3:b4:18:c0:23:86:17:d7:0b: d9:19:e7:d4:f5:d9:99:b4:71:9c:7d:cb:e2:65:31: e9:31:48:d2:2f:a5:9f:c5:22:e4:7e:e1:f9:88:cb: 20:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:44:D1:36:8D:AD:6F:47:20:8B:63:00:70:4F:DB:52:F6:2F:2C:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a77e582-a25b-3deb-82c7-35a938a9f125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:db:1b:8b:9b:c9:6e:49:41:be:ee:20:a4:96:b6:89:c9:92: d0:60:61:0a:17:64:59:0e:d6:04:27:39:2d:3b:29:32:3a:a7: 1b:95:91:72:5c:80:10:9a:a8:e9:9a:eb:0b:76:4c:7b:c2:6a: 04:00:18:5e:3a:11:ba:e3:4f:f7:0f:9c:9b:ae:ec:f1:d4:f5: 51:b3:5e:33:cd:b4:63:18:98:a7:e7:0c:4a:7a:6f:62:4c:d4: e3:b8:22:05:a1:3c:c3:4b:40:8b:2e:60:c2:06:d9:c0:0e:b2: 70:f8:44:e3:ca:a5:1a:97:4c:e9:7f:6f:6a:94:48:60:96:e3: 4f:e1:c4:39:2b:35:25:4e:4a:91:d4:37:0a:1d:36:20:ad:95: 5d:eb:ab:ba:b0:f1:cf:0f:07:27:8e:cc:1b:e3:32:dd:f7:3e: 32:28:92:d4:35:c8:06:2f:10:89:34:79:e4:24:42:f6:10:ae: 8e:3d:73:78:cd:f0:fa:5f:34:d9:34:73:16:2c:eb:54:f7:73: 98:af:48:2e:97:04:64:b6:5b:35:3b:31:e8:3d:6f:27:f7:b6: 98:a5:ef:32:33:6e:3c:75:6a:8b:20:88:6b:67:e1:f5:ec:6c: db:3e:aa:c7:ed:61:20:30:dd:c6:4e:4f:45:cb:fa:b5:4f:d6: 82:99:77:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZnZEpEXO9oICJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NGFiZDNjNDMtMGY3MC00ZjBjLWJkODAtMjFiNGY2ZGJhOWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOYFPF64dZvN8WvpcChTyT5AA1jXYf9hJZtO t1vnI/F+Ivyix8DrjhRrL+ICKAZrtOBoq+XCIaf3kWiMJV87fMM0pvtuBt4BI27u dEXsHw/tJek1AeWLO4Z//ZjUkZQi153daJz5jPiwxH8QM0V1tUl1aB2NxhCr1f3W dQ1llVbcV1E4rxXdftzgR0wW5b8vX0NYpd8MR+Thp9YQ8CGFogYvIGtTn2d7RanI CG27r3kEn7m0QCX7iuh2rYA1iZi7fz8vvw05Dh1hfoG94vPhJrHA1ujltaujtBjA I4YX1wvZGefU9dmZtHGcfcviZTHpMUjSL6WfxSLkfuH5iMsgGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVE0TaNrW9HIItjAHBP21L2LyzyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWE3N2U1ODItYTI1Yi0z ZGViLTgyYzctMzVhOTM4YTlmMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOt2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrbG4ubyW5JQb7uIKSWtonJktBgYQoXZFkO1gQnOS07KTI6pxuVkXJc gBCaqOma6wt2THvCagQAGF46EbrjT/cPnJuu7PHU9VGzXjPNtGMYmKfnDEp6b2JM 1OO4IgWhPMNLQIsuYMIG2cAOsnD4ROPKpRqXTOl/b2qUSGCW40/hxDkrNSVOSpHU NwodNiCtlV3rq7qw8c8PByeOzBvjMt33PjIoktQ1yAYvEIk0eeQkQvYQro49c3jN 8PpfNNk0cxYs61T3c5ivSC6XBGS2WzU7Meg9byf3tpil7zIzbjx1aosgiGtn4fXs bNs+qsftYSAw3cZOT0XL+rVP1oKZdxM= -----END CERTIFICATE-----Generated at Wed Oct 22 06:58:48 2025 by rpki-client