$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ae8c5265-f51f-3965-a944-3fba52756e00.roa File: ae8c5265-f51f-3965-a944-3fba52756e00.roa (raw, json) Hash identifier: WSoNMyy0oPc28QwcBiVyZh+QHHS+q21PAIgx2iq1AYY= Subject key identifier: CE:5E:62:8D:1C:AF:F6:47:B5:15:8D:F3:11:F8:8B:16:C6:F3:E0:A8 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B5571DC5168ECBF9C52A81F6C Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ae8c5265-f51f-3965-a944-3fba52756e00.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 64286 IP address blocks: 173.244.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:dc:51:68:ec:bf:9c:52:a8:1f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=f11e85f8-081a-4acc-9c28-b562bc1f7317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:04:0b:ba:e5:4f:64:62:c3:e8:76:44:88:04: 71:51:98:cc:4a:98:90:72:9e:d7:65:dd:ca:ee:da: da:e9:c1:77:a6:0e:50:66:70:04:6e:19:ba:0b:6d: e8:b7:94:1f:36:76:f3:d5:6d:42:57:00:c6:d4:08: 35:a9:68:aa:dc:4c:c0:3d:63:7f:c8:c4:df:9f:01: c5:80:0c:24:42:1b:e2:e4:34:1f:ac:ec:cd:b6:99: d0:ba:52:09:f5:05:e5:c7:f9:e4:20:c7:3e:60:db: 01:a4:2e:07:eb:5d:51:ad:97:77:0d:e5:e8:e1:1b: 49:38:ca:a5:6b:a8:98:54:e8:88:33:3f:c0:ed:f7: 64:bb:32:0c:6f:fa:55:9e:db:4e:0c:e4:59:37:79: 68:96:e6:b2:d9:24:34:19:30:cc:87:c2:d3:7b:37: ac:6c:0b:3c:cb:44:03:96:a4:93:89:8b:b8:89:67: c9:ef:6f:b5:3e:74:37:f2:60:1e:32:aa:33:7e:11: 5a:78:7b:a6:dd:dc:28:30:d5:48:89:e4:85:ac:45: b2:cc:f3:eb:89:8b:27:78:59:25:cd:93:38:7d:29: 23:6c:55:d5:c8:a8:30:d8:c9:e1:47:4e:4f:ae:46: b0:27:68:ca:d4:95:62:0f:79:eb:00:25:d8:77:12: 1d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5E:62:8D:1C:AF:F6:47:B5:15:8D:F3:11:F8:8B:16:C6:F3:E0:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ae8c5265-f51f-3965-a944-3fba52756e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.244.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:29:29:dd:5f:6a:d4:7f:e6:bc:6b:ae:d9:73:1b:ef:66:94: d2:30:75:63:ae:96:15:ee:e5:65:01:cb:13:df:30:43:f8:de: 18:fa:ea:74:1c:82:c2:0c:68:a4:78:e9:a4:c8:4a:fe:81:fb: fc:52:22:8b:8b:db:21:3d:49:45:9a:7c:d1:a1:51:ca:46:f7: 96:ec:84:df:bb:bf:b7:32:86:3a:db:e4:35:d1:de:a9:7c:2f: 7a:ea:36:1c:8d:b2:d1:bf:54:1d:75:e7:13:47:9b:85:fa:70: 3e:3e:b5:a4:7c:19:de:ae:e2:86:7f:cd:a3:81:af:0e:d8:c0: 6e:8f:fb:10:c9:b4:27:ae:a4:aa:2f:22:88:38:54:28:54:7d: 50:e8:55:00:75:0b:ed:e3:93:1f:52:47:f7:78:51:01:11:0e: 95:f4:81:7a:77:d0:1a:b7:b9:1c:3c:11:ef:58:c3:4b:ca:4a: 02:5d:0e:69:dc:2e:d0:b0:fa:b8:3f:e4:66:9e:3a:1a:24:83: ac:01:5a:5c:62:73:5e:b6:23:da:19:0f:7c:ef:0f:31:31:58: f4:e0:4a:28:ed:68:34:33:0c:3d:7e:44:5a:03:de:37:3b:a6: 6b:e2:49:90:f3:31:8d:2d:ce:06:59:9a:c9:09:f1:f8:5b:9d: 06:6e:46:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdxRaOy/nFKoH2wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZjExZTg1ZjgtMDgxYS00YWNjLTljMjgtYjU2MmJjMWY3MzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQQLuuVPZGLD6HZEiARxUZjMSpiQcp7XZd3K 7tra6cF3pg5QZnAEbhm6C23ot5QfNnbz1W1CVwDG1Ag1qWiq3EzAPWN/yMTfnwHF gAwkQhvi5DQfrOzNtpnQulIJ9QXlx/nkIMc+YNsBpC4H611RrZd3DeXo4RtJOMql a6iYVOiIMz/A7fdkuzIMb/pVnttODORZN3loluay2SQ0GTDMh8LTezesbAs8y0QD lqSTiYu4iWfJ72+1PnQ38mAeMqozfhFaeHum3dwoMNVIieSFrEWyzPPriYsneFkl zZM4fSkjbFXVyKgw2MnhR05PrkawJ2jK1JViD3nrACXYdxIdfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5eYo0cr/ZHtRWN8xH4ixbG8+CoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYWU4YzUyNjUtZjUxZi0z OTY1LWE5NDQtM2ZiYTUyNzU2ZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfQrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMYpKd1fatR/5rxrrtlzG+9mlNIwdWOulhXu5WUByxPfMEP43hj66nQc gsIMaKR46aTISv6B+/xSIouL2yE9SUWafNGhUcpG95bshN+7v7cyhjrb5DXR3ql8 L3rqNhyNstG/VB115xNHm4X6cD4+taR8Gd6u4oZ/zaOBrw7YwG6P+xDJtCeupKov Iog4VChUfVDoVQB1C+3jkx9SR/d4UQERDpX0gXp30Bq3uRw8Ee9Yw0vKSgJdDmnc LtCw+rg/5GaeOhokg6wBWlxic162I9oZD3zvDzExWPTgSijtaDQzDD1+RFoD3jc7 pmviSZDzMY0tzgZZmskJ8fhbnQZuRpw= -----END CERTIFICATE-----Generated at Wed Nov 5 17:48:40 2025 by rpki-client