$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/f03ed9e3-4880-37ed-8a56-b1feec022ff2.roa File: f03ed9e3-4880-37ed-8a56-b1feec022ff2.roa (raw, json) Hash identifier: KknHf1885p9EebvwQvGSpxD2Tb3CgQt2jp439dBXvlc= Subject key identifier: 7A:8C:57:85:18:FB:E7:4B:87:71:14:B8:1A:70:AF:76:23:65:1B:57 Certificate issuer: /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a Certificate serial: 010D0C9F4328584BB88D289F8EDCD77598E19E80 Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/f03ed9e3-4880-37ed-8a56-b1feec022ff2.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 29169 IP address blocks: 173.246.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:28:9f:8e:dc:d7:75:98:e1:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=deff05e7-439a-4a11-8048-a36780273bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:22:69:3f:ed:a1:8c:9a:8b:cd:95:3d:d5:14: 05:b5:88:ef:50:ba:c5:01:d7:05:b8:26:36:45:f1: 43:6c:49:f5:cd:4d:71:31:ef:40:3d:92:09:f0:eb: a9:7a:72:97:47:43:87:ee:8b:f2:df:8d:f2:34:bf: b7:cf:a2:82:25:f4:5f:7a:a4:08:6c:84:19:45:36: f3:46:4f:60:ba:e6:6a:3e:7f:0e:ed:59:9a:c6:24: df:a5:0a:a5:c2:d7:e1:cf:1e:cb:e1:08:ed:e5:2b: da:1a:ae:35:22:44:7e:e4:3a:3a:4e:b0:6d:9f:06: 82:82:1a:0e:63:e8:8d:cb:40:86:5c:75:7d:48:f3: 86:6e:8f:a9:b4:e0:1d:f0:e5:8d:67:fb:2d:1f:f7: fe:b9:b5:65:02:5b:35:ad:26:9b:67:dc:d8:19:bb: c0:fa:7d:18:5d:6a:9c:ec:cf:94:52:b7:2b:34:bf: 2d:0b:5e:0d:60:96:f9:42:3a:21:ad:19:8e:5e:85: 8a:a0:35:60:82:8b:f6:eb:8c:91:3d:90:28:5a:c7: 74:ad:97:86:23:be:34:50:52:5d:53:e8:28:58:8e: ae:bd:bd:be:05:fd:70:6d:ea:75:e1:76:56:9f:82: 40:05:a3:11:0e:af:5d:50:07:39:b8:aa:86:1a:d2: b3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8C:57:85:18:FB:E7:4B:87:71:14:B8:1A:70:AF:76:23:65:1B:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/f03ed9e3-4880-37ed-8a56-b1feec022ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl X509v3 Authority Key Identifier: keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer sbgp-ipAddrBlock: critical IPv4: 173.246.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:05:e3:05:20:74:ca:e9:c3:0a:82:0a:f2:de:a1:2b:aa:66: 3c:7b:95:0a:b8:f5:52:c4:e7:a1:30:e1:7c:69:05:c7:ea:a8: 6f:26:fe:da:a2:0f:e6:9e:d6:eb:47:16:95:97:ce:bc:1f:57: be:2c:72:c4:c9:70:6d:11:15:52:c8:cb:8b:e0:f2:1e:84:05: 70:df:ca:53:d7:2b:a4:37:8c:dd:61:61:47:d8:0f:a0:d8:3c: 44:97:f5:30:1a:51:97:d0:4b:ca:90:ed:01:3f:87:d5:1f:8f: a6:97:9a:05:23:94:df:4b:b6:ca:3f:a1:ec:4e:97:94:90:ab: 5f:47:05:7a:e8:ea:18:fe:1b:98:81:a0:82:35:ed:bb:49:4f: 08:76:2e:7a:c5:00:b6:86:5c:89:e0:4e:7c:74:91:86:62:0a: 9a:fe:b1:a1:bb:fb:d0:c9:6f:56:07:41:c6:a6:df:33:83:4f: c2:68:a8:be:83:ba:62:2b:56:b0:3d:16:05:0a:2d:13:89:8b: 6d:5e:b3:37:85:3b:1e:5e:28:83:34:0e:c6:84:3d:f4:a6:b6: 4a:1b:6d:b6:cc:4c:aa:cb:f4:b4:b7:26:bf:63:fe:a0:50:de: b7:57:13:12:1c:90:af:c6:17:d6:b6:7e:cc:65:9c:74:4b:6e: d1:9c:7e:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSifjtzXdZjhnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTRlZTMyOWYtNmE5Ni00NGNiLThjYzUtMjIyZTBmZWM4 YzNhMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZGVmZjA1ZTctNDM5YS00YTExLTgwNDgtYTM2NzgwMjczYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yJpP+2hjJqLzZU91RQFtYjvULrFAdcFuCY2 RfFDbEn1zU1xMe9APZIJ8OupenKXR0OH7ovy343yNL+3z6KCJfRfeqQIbIQZRTbz Rk9guuZqPn8O7VmaxiTfpQqlwtfhzx7L4Qjt5SvaGq41IkR+5Do6TrBtnwaCghoO Y+iNy0CGXHV9SPOGbo+ptOAd8OWNZ/stH/f+ubVlAls1rSabZ9zYGbvA+n0YXWqc 7M+UUrcrNL8tC14NYJb5QjohrRmOXoWKoDVggov264yRPZAoWsd0rZeGI740UFJd U+goWI6uvb2+Bf1wbep14XZWn4JABaMRDq9dUAc5uKqGGtKzxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqMV4UY++dLh3EUuBpwr3YjZRtXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNGVl MzI5Zi02YTk2LTQ0Y2ItOGNjNS0yMjJlMGZlYzhjM2EvZjAzZWQ5ZTMtNDg4MC0z N2VkLThhNTYtYjFmZWVjMDIyZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTRlZTMyOWYtNmE5Ni00NGNiLThj YzUtMjIyZTBmZWM4YzNhLzE0ZWUzMjlmLTZhOTYtNDRjYi04Y2M1LTIyMmUwZmVj OGMzYS5jcmwwHwYDVR0jBBgwFoAUrkgj+aHqwwoeetBYqtTqeK/B7BowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNGVlMzI5Zi02YTk2LTQ0Y2ItOGNjNS0yMjJl MGZlYzhjM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkF4wUgdMrpwwqCCvLeoSuqZjx7lQq49VLE56Ew4XxpBcfqqG8m/tqi D+ae1utHFpWXzrwfV74scsTJcG0RFVLIy4vg8h6EBXDfylPXK6Q3jN1hYUfYD6DY PESX9TAaUZfQS8qQ7QE/h9Ufj6aXmgUjlN9Ltso/oexOl5SQq19HBXro6hj+G5iB oII17btJTwh2LnrFALaGXIngTnx0kYZiCpr+saG7+9DJb1YHQcam3zODT8JoqL6D umIrVrA9FgUKLROJi21eszeFOx5eKIM0DsaEPfSmtkobbbbMTKrL9LS3Jr9j/qBQ 3rdXExIckK/GF9a2fsxlnHRLbtGcfhI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:43:50 2025 by rpki-client