$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa File: 8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa (raw, json) Hash identifier: Wzq6L+OryXos5URgjkbHnbiCsKEewcZYPq/1tp3PurU= Subject key identifier: F0:67:0E:57:25:E7:94:F8:C3:3A:DC:99:A9:8D:5D:C1:40:01:95:67 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B1806CE92C2A5FAC869457C80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 22781 IP address blocks: 173.255.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:ce:92:c2:a5:fa:c8:69:45:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=b491bcd8-4fcb-4064-be60-70fb33afb185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c8:0b:33:62:6b:17:f3:cf:8d:cf:8b:d9:33: 75:ae:36:41:29:f0:d7:af:36:fd:88:15:0e:ed:ad: 9b:c3:cd:6f:c7:cb:71:4a:e9:99:3e:ab:e1:96:48: 3c:da:43:3d:fb:e6:ea:19:cf:66:7f:f5:04:98:70: d6:84:65:aa:68:ce:f4:0d:88:8e:86:85:87:3d:27: 8f:b2:3c:f3:77:f7:8a:82:4d:a1:4c:11:09:5e:46: 5f:6c:06:c7:6e:4b:c0:fc:c3:69:17:8a:1e:88:43: 92:f9:d4:69:c8:c5:fc:1e:02:38:16:d0:7a:a3:84: d8:b6:e3:b7:7d:cb:30:a3:33:6d:9a:48:5c:46:7e: 3d:5e:c6:b8:5f:4b:46:9d:7e:cc:fb:b2:fb:b0:b7: 90:1c:d9:9e:2d:a9:a0:25:73:c9:18:b3:d0:d5:bf: 85:60:f2:10:2e:53:22:6f:14:65:f5:85:61:d3:80: 7c:09:94:da:3c:7a:3e:ce:31:69:be:f5:d4:b8:e4: ce:17:2f:77:fa:32:71:24:69:a5:31:48:60:4d:37: 7b:7b:0b:03:7c:ff:c3:dd:93:45:d9:e2:65:30:1b: b0:1c:9d:5f:0b:e8:a8:f8:7f:03:11:f3:50:56:8e: 1e:cf:3c:0f:1f:20:e2:8e:2e:82:1e:5d:ec:fc:b3: 8e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:67:0E:57:25:E7:94:F8:C3:3A:DC:99:A9:8D:5D:C1:40:01:95:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:04:ae:cb:df:6e:6f:00:8a:68:97:16:38:48:30:96:30:f1: 0c:0a:cf:2d:cc:97:4a:a7:a9:94:6e:17:df:db:73:ea:6a:a2: 0f:ec:5a:8f:94:c0:87:d6:19:94:93:c1:62:71:31:bb:23:a5: fa:a0:d1:38:4a:f6:08:67:d2:13:5a:6d:a8:ae:2c:f9:ff:33: dd:9f:4a:7b:e3:e6:4b:fb:25:34:8b:7b:f4:77:33:4f:9d:f6: e0:d5:74:6c:e2:90:af:d6:8d:90:bd:8c:26:e4:37:bf:ee:61: 06:73:3c:3f:ca:bb:18:ab:42:47:14:ed:3e:29:ec:8c:00:17: 86:c5:8b:d5:b1:c5:0a:98:cc:f0:a6:4f:bc:77:ae:84:a5:46: 6e:4c:14:03:f9:09:63:a7:99:bd:86:79:cd:43:24:48:c5:66: 5b:8f:da:a0:09:30:68:10:d1:83:e8:b5:a0:e9:e7:75:62:e6: b3:99:d9:61:60:c9:89:a6:59:7f:20:65:4a:76:c7:26:3a:cc: fe:de:1a:2a:c1:09:b5:9c:23:e3:a0:eb:38:1e:f6:ad:d7:de: d9:cb:aa:a3:9f:8e:0f:7e:ac:a4:8d:92:7d:a7:ec:c8:59:80: c6:24:59:d0:a8:d9:39:ef:52:4c:81:a6:db:0d:a6:34:7e:93: 31:b4:cd:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBs6SwqX6yGlFfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YjQ5MWJjZDgtNGZjYi00MDY0LWJlNjAtNzBmYjMzYWZiMTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8gLM2JrF/PPjc+L2TN1rjZBKfDXrzb9iBUO 7a2bw81vx8txSumZPqvhlkg82kM9++bqGc9mf/UEmHDWhGWqaM70DYiOhoWHPSeP sjzzd/eKgk2hTBEJXkZfbAbHbkvA/MNpF4oeiEOS+dRpyMX8HgI4FtB6o4TYtuO3 fcswozNtmkhcRn49Xsa4X0tGnX7M+7L7sLeQHNmeLamgJXPJGLPQ1b+FYPIQLlMi bxRl9YVh04B8CZTaPHo+zjFpvvXUuOTOFy93+jJxJGmlMUhgTTd7ewsDfP/D3ZNF 2eJlMBuwHJ1fC+io+H8DEfNQVo4ezzwPHyDiji6CHl3s/LOOzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBnDlcl55T4wzrcmamNXcFAAZVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvOGFhNGNkYTgtMDZmMy0z YTc3LThjZmYtNWU4NjAzY2U0YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrf+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8Ersvfbm8AimiXFjhIMJYw8QwKzy3Ml0qnqZRuF9/bc+pqog/sWo+U wIfWGZSTwWJxMbsjpfqg0ThK9ghn0hNabaiuLPn/M92fSnvj5kv7JTSLe/R3M0+d 9uDVdGzikK/WjZC9jCbkN7/uYQZzPD/KuxirQkcU7T4p7IwAF4bFi9WxxQqYzPCm T7x3roSlRm5MFAP5CWOnmb2Gec1DJEjFZluP2qAJMGgQ0YPotaDp53Vi5rOZ2WFg yYmmWX8gZUp2xyY6zP7eGirBCbWcI+Og6zge9q3X3tnLqqOfjg9+rKSNkn2n7MhZ gMYkWdCo2TnvUkyBptsNpjR+kzG0zXU= -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:17 2025 by rpki-client