$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/54986207-7a58-36f6-8e77-f8161fa1649c.roa File: 54986207-7a58-36f6-8e77-f8161fa1649c.roa (raw, json) Hash identifier: okpuRXzFYS5nTmre2EUbeWPpDGAV7ibWPgkWHrvbG78= Subject key identifier: 1E:48:38:E9:60:61:B9:62:C1:EF:FC:11:77:AD:71:11:C9:C5:A1:A0 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584AFC1BEE87BB980F3440DC4070 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/54986207-7a58-36f6-8e77-f8161fa1649c.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 14500 IP address blocks: 173.244.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:ee:87:bb:98:0f:34:40:dc:40:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=7d6930bd-cab8-428c-8b9d-3feb190c1638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9d:46:5f:2d:66:22:5b:79:d6:39:c6:d5:56: 84:f1:2f:c4:e3:34:28:05:2e:16:25:65:46:60:af: ab:5c:d7:99:54:d3:5d:58:78:4e:a1:e3:f8:89:0a: 49:5d:58:47:97:25:4e:50:1b:5b:5f:b1:c4:76:99: 18:f4:e9:05:e5:4a:ca:8c:91:df:05:96:6f:9b:1e: 8f:54:c8:96:57:6b:84:63:17:8c:a3:1f:ba:3b:a0: 83:52:9f:8c:50:8f:d1:d5:07:ba:c0:f0:38:00:e1: 6a:0b:d1:ca:d1:60:ae:5b:50:bd:10:9f:a4:84:80: 07:ba:2d:d9:8a:b4:03:39:d4:3d:6f:37:87:79:0e: a9:75:ec:d7:4f:f1:82:c6:7f:6f:d7:9c:09:f6:88: af:83:ab:44:47:c3:34:da:a3:ac:06:fe:9a:0d:2d: 8b:a6:65:85:5f:ed:44:eb:d7:5b:5c:e1:96:42:bb: 9d:ff:48:82:7c:3d:e2:a9:c7:db:ea:cc:b6:b1:e2: 46:64:de:02:4f:b8:19:62:91:99:e8:2d:04:36:a5: 2d:57:2b:71:f4:9e:a7:c4:0e:f2:c9:bb:3e:2a:01: 84:9e:67:e5:15:62:17:57:71:02:e1:6b:04:df:d9: c8:33:4b:eb:68:de:0a:7b:bc:36:f8:1a:c6:c9:df: 25:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:48:38:E9:60:61:B9:62:C1:EF:FC:11:77:AD:71:11:C9:C5:A1:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/54986207-7a58-36f6-8e77-f8161fa1649c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 173.244.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c3:c4:ab:93:c4:21:6c:6d:1d:c0:a9:69:2a:74:53:ca:0e: 5c:76:24:dc:d5:af:ea:0f:d3:0d:4a:b7:1a:19:b9:b8:22:c4: ec:1f:d9:fa:47:3d:81:72:b3:0b:58:fe:43:54:59:e9:70:b1: f4:5a:52:b5:1e:2d:cb:aa:b2:f5:30:1c:91:60:c7:f3:b5:26: 31:7d:cd:f9:99:1a:69:18:6b:33:63:29:a4:fd:90:91:66:3d: 94:53:7b:92:55:e8:82:f2:52:db:1f:48:68:81:95:c3:2f:f5: a1:c2:3b:d6:68:29:e4:b3:2b:51:b0:de:21:c6:53:f5:bb:37: 90:c9:4b:29:c3:99:0d:20:c0:29:cd:07:49:fc:5a:aa:37:0f: 91:97:9a:c3:ec:71:50:7c:17:e4:e5:4c:18:4e:f6:5f:2e:34: 6c:48:83:36:46:b0:91:e1:66:37:13:1b:94:f7:a9:84:1c:c6: c7:70:22:6d:ae:95:ac:c8:92:7b:1a:af:49:5b:b3:8a:e3:d7: 21:13:c3:e3:e6:b0:b0:16:7b:dd:17:d3:29:9f:51:ae:4c:56: 43:e8:eb:dc:c2:42:ee:32:03:3e:3f:5e:a8:16:aa:f1:56:1d: 53:70:51:ab:02:c3:9c:ff:5f:aa:b9:ce:97:75:e3:56:3f:b2: 3f:bd:34:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G+6Hu5gPNEDcQHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk N2Q2OTMwYmQtY2FiOC00MjhjLThiOWQtM2ZlYjE5MGMxNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl51GXy1mIlt51jnG1VaE8S/E4zQoBS4WJWVG YK+rXNeZVNNdWHhOoeP4iQpJXVhHlyVOUBtbX7HEdpkY9OkF5UrKjJHfBZZvmx6P VMiWV2uEYxeMox+6O6CDUp+MUI/R1Qe6wPA4AOFqC9HK0WCuW1C9EJ+khIAHui3Z irQDOdQ9bzeHeQ6pdezXT/GCxn9v15wJ9oivg6tER8M02qOsBv6aDS2LpmWFX+1E 69dbXOGWQrud/0iCfD3iqcfb6sy2seJGZN4CT7gZYpGZ6C0ENqUtVytx9J6nxA7y ybs+KgGEnmflFWIXV3EC4WsE39nIM0vraN4Ke7w2+BrGyd8lbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5IOOlgYbliwe/8EXetcRHJxaGgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvNTQ5ODYyMDctN2E1OC0z NmY2LThlNzctZjgxNjFmYTE2NDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzDxKuTxCFsbR3AqWkqdFPKDlx2JNzVr+oP0w1KtxoZubgixOwf2fpH PYFyswtY/kNUWelwsfRaUrUeLcuqsvUwHJFgx/O1JjF9zfmZGmkYazNjKaT9kJFm PZRTe5JV6ILyUtsfSGiBlcMv9aHCO9ZoKeSzK1Gw3iHGU/W7N5DJSynDmQ0gwCnN B0n8Wqo3D5GXmsPscVB8F+TlTBhO9l8uNGxIgzZGsJHhZjcTG5T3qYQcxsdwIm2u lazIknsar0lbs4rj1yETw+PmsLAWe90X0ymfUa5MVkPo69zCQu4yAz4/XqgWqvFW HVNwUasCw5z/X6q5zpd141Y/sj+9NIA= -----END CERTIFICATE-----Generated at Tue Sep 16 02:36:28 2025 by rpki-client