$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/898d6e32-f2ea-3c49-a4fd-6ab7850a23a4.roa File: 898d6e32-f2ea-3c49-a4fd-6ab7850a23a4.roa (raw, json) Hash identifier: 26CH9lQ/JxPQJgSdMzvCecARbUQooCuJXVwDXeGtN48= Subject key identifier: 2E:F5:83:37:BA:0E:1C:5B:65:9C:12:19:DB:99:C1:B8:CB:C4:EA:ED Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584AFC1BEE9D6AE5E4601AD42CC0 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/898d6e32-f2ea-3c49-a4fd-6ab7850a23a4.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 14500 IP address blocks: 173.244.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:ee:9d:6a:e5:e4:60:1a:d4:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=42233b68-7e40-49ee-9b0a-b65b55116fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1f:ea:81:7c:eb:98:db:57:7a:ec:03:f6:09: cb:a1:6c:10:4a:54:a5:a1:a1:1c:f1:4e:03:fb:dc: 17:72:a2:57:9c:ad:e8:90:44:25:7a:62:4b:4e:6e: 05:d9:04:93:9e:32:c8:bb:fe:09:c7:c8:71:3d:b9: c4:da:1a:7a:c0:ec:38:55:57:ae:1f:69:77:2d:a2: 5d:84:17:de:0a:ef:0a:ff:05:64:34:97:e7:4b:41: 65:cb:cd:41:1b:c4:79:5f:c3:4a:71:88:af:d4:d3: 8d:86:6f:a1:35:30:54:4e:93:12:ba:88:1f:94:85: 07:b6:13:bf:d9:72:b9:79:4f:53:20:82:15:52:d0: 47:ae:74:4a:9f:f0:88:f4:50:59:9f:88:d0:3c:17: a8:7b:a0:09:2d:a9:38:8e:ad:77:0d:27:06:9b:8a: 25:9c:c4:38:65:b4:8f:e8:1a:2b:d7:11:29:7f:b9: c4:10:11:be:7d:00:7b:43:11:28:cf:95:47:2a:2e: b0:b9:93:b7:bf:b8:6d:05:79:69:fe:1c:71:65:8a: 79:b8:36:fc:9f:7d:a4:f5:cf:5c:d5:77:87:05:a8: 39:ad:fb:7c:72:06:46:92:f9:a2:0c:7e:35:13:b3: 4f:dd:aa:40:23:65:eb:2b:40:27:6f:41:eb:ef:40: 4e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F5:83:37:BA:0E:1C:5B:65:9C:12:19:DB:99:C1:B8:CB:C4:EA:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/898d6e32-f2ea-3c49-a4fd-6ab7850a23a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 173.244.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:79:01:65:d7:91:1e:7c:56:fb:6c:2d:6b:d7:f4:d0:f6:b0: ef:81:62:aa:be:c2:23:fd:6b:a2:a7:e3:f6:c9:e6:56:68:5f: e2:73:f5:b7:ed:41:43:fc:61:30:1b:31:ea:46:3f:06:e8:57: 51:64:36:36:d4:ff:45:30:4c:a6:a1:b4:47:d8:3d:24:0f:68: 9b:e4:17:d2:58:d6:6e:ac:81:c4:cd:e1:c3:08:30:d5:25:47: 54:d0:f4:a7:f3:6e:50:31:5e:c5:1c:0f:49:8b:b2:74:d9:79: e6:c1:c9:6b:62:bd:df:5d:2c:1b:a2:03:12:92:1d:08:3e:f9: 92:e1:41:c7:cc:84:ef:f3:c5:24:82:76:72:b5:22:7d:5c:9d: fb:6b:e2:b8:26:e1:70:5f:cb:5b:c9:2c:19:dd:79:f4:6b:79: 72:42:7b:cd:ce:47:d5:80:b6:8c:b3:62:e0:66:4b:4f:11:3a: 54:1b:c4:69:28:04:df:dd:29:f4:c2:84:82:2b:98:77:3c:ed: e2:b1:ca:b2:3e:64:7a:9b:9a:a2:e2:d6:b0:18:cc:22:99:2e: d3:bd:d1:12:26:86:5c:f9:c1:e4:de:93:ef:c9:bc:7f:c2:a5: 64:56:66:82:56:34:68:5e:18:b1:fe:67:8d:1a:20:59:0c:20: d0:55:95:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G+6dauXkYBrULMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NDIyMzNiNjgtN2U0MC00OWVlLTliMGEtYjY1YjU1MTE2ZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB/qgXzrmNtXeuwD9gnLoWwQSlSloaEc8U4D +9wXcqJXnK3okEQlemJLTm4F2QSTnjLIu/4Jx8hxPbnE2hp6wOw4VVeuH2l3LaJd hBfeCu8K/wVkNJfnS0Fly81BG8R5X8NKcYiv1NONhm+hNTBUTpMSuogflIUHthO/ 2XK5eU9TIIIVUtBHrnRKn/CI9FBZn4jQPBeoe6AJLak4jq13DScGm4olnMQ4ZbSP 6Bor1xEpf7nEEBG+fQB7QxEoz5VHKi6wuZO3v7htBXlp/hxxZYp5uDb8n32k9c9c 1XeHBag5rft8cgZGkvmiDH41E7NP3apAI2XrK0Anb0Hr70BOrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC71gze6DhxbZZwSGduZwbjLxOrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvODk4ZDZlMzItZjJlYS0z YzQ5LWE0ZmQtNmFiNzg1MGEyM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrfRcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJt5AWXXkR58VvtsLWvX9ND2sO+BYqq+wiP9a6Kn4/bJ5lZoX+Jz9bft QUP8YTAbMepGPwboV1FkNjbU/0UwTKahtEfYPSQPaJvkF9JY1m6sgcTN4cMIMNUl R1TQ9KfzblAxXsUcD0mLsnTZeebByWtivd9dLBuiAxKSHQg++ZLhQcfMhO/zxSSC dnK1In1cnftr4rgm4XBfy1vJLBndefRreXJCe83OR9WAtoyzYuBmS08ROlQbxGko BN/dKfTChIIrmHc87eKxyrI+ZHqbmqLi1rAYzCKZLtO90RImhlz5weTek+/JvH/C pWRWZoJWNGheGLH+Z40aIFkMINBVlRI= -----END CERTIFICATE-----Generated at Tue Sep 16 02:35:49 2025 by rpki-client