$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c36706-7a07-30a3-8ac0-4f853f76d634.roa File: d4c36706-7a07-30a3-8ac0-4f853f76d634.roa (raw, json) Hash identifier: OeO7sVJU7T79kq4zvzF1AMN/Rbj2/HwbrKTz4kbKl04= Subject key identifier: 50:D3:95:8D:45:23:5E:AC:7E:D6:50:A0:F5:CC:47:07:00:B9:3E:05 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584BAD6253B5938F4C4D72CA4E00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c36706-7a07-30a3-8ac0-4f853f76d634.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 54203 IP address blocks: 173.255.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:53:b5:93:8f:4c:4d:72:ca:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=d82460bc-547d-4f18-9296-faf731a9dec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c9:c1:2a:33:bc:fe:97:73:5e:e5:d0:69:d9: 6b:e6:15:d9:a7:b0:81:75:cd:a6:58:1f:4c:ce:b8: ea:32:c6:e5:72:3c:a7:9d:5e:86:1b:11:57:79:75: 9c:bd:5e:66:5b:1f:8f:a5:20:0f:b0:65:c5:f4:5d: ed:72:dc:dc:0f:40:27:00:80:42:f9:29:ea:05:49: fa:04:ac:fd:76:dd:73:25:c7:5c:e5:e8:9b:c1:ca: 00:7c:6f:52:5a:08:27:9a:86:45:a5:75:ae:d5:1e: 3f:fe:cf:cb:e8:3c:7c:4e:14:46:59:89:24:2b:cb: ac:e6:5b:11:0c:0b:94:0e:5c:c6:cd:ff:a3:01:06: 48:53:d5:83:9d:f6:7d:24:60:7f:1a:29:8a:2d:c4: 22:47:87:93:8a:86:fa:db:62:d5:3f:7d:48:a8:5c: ff:3f:3b:56:0d:7e:bc:37:ae:b2:f9:f8:ec:30:71: 03:78:f9:54:45:1c:b8:ae:e1:01:21:0f:9f:5c:4b: 8d:79:a3:46:b6:71:3f:1e:88:48:c0:c8:5c:f5:ba: be:c6:34:a7:2b:d4:af:1b:ef:0e:f8:f8:d1:d6:ae: 91:6f:f5:f8:68:db:1a:91:79:8e:11:16:af:de:41: a9:7b:cd:3c:59:9f:13:69:fd:5a:eb:e4:ce:94:59: e8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D3:95:8D:45:23:5E:AC:7E:D6:50:A0:F5:CC:47:07:00:B9:3E:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c36706-7a07-30a3-8ac0-4f853f76d634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:7b:cb:5f:c5:3b:c2:ca:18:07:2c:ed:ed:3c:e4:42:e5:38: 7e:ec:59:8b:24:20:16:f2:39:d5:93:e0:8d:1b:f9:4f:6b:87: 55:38:f1:e2:5e:22:ab:91:b3:2d:4b:d5:7f:e3:fe:57:dd:70: bf:5b:ab:23:b6:df:f5:99:ce:97:8e:b7:e5:5e:35:1c:67:1c: 55:68:36:61:16:98:a4:0e:63:5d:ea:0b:79:ec:99:e4:24:fa: 79:4c:d9:1b:f5:c3:45:95:d6:14:3e:02:dc:df:8d:ef:3c:70: 8f:7a:3f:24:fc:ea:69:46:71:89:6e:d0:02:ec:02:a5:33:7f: 04:88:77:0d:68:67:94:3c:1e:1d:de:9e:05:e1:44:0c:28:6f: 69:b4:71:b8:45:7e:96:ac:30:61:a8:7e:58:9e:54:2b:9a:ee: 07:0a:1c:40:d9:77:ad:34:26:9c:77:fd:55:2c:85:85:f1:ff: 81:2d:1a:57:d1:3c:a4:bb:04:32:bd:0e:3d:ee:f7:b8:a2:c2: 64:01:50:b6:1b:c7:af:41:c0:73:c5:a6:d5:e5:ee:cb:54:ac: 9f:30:bc:7f:76:6c:91:d1:f7:a7:97:2a:c6:7c:cb:78:d8:0a: aa:2c:1a:9b:58:25:bb:d9:00:cc:fd:bd:20:26:52:f6:7b:86: 81:3c:dd:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYlO1k49MTXLKTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZDgyNDYwYmMtNTQ3ZC00ZjE4LTkyOTYtZmFmNzMxYTlkZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8nBKjO8/pdzXuXQadlr5hXZp7CBdc2mWB9M zrjqMsblcjynnV6GGxFXeXWcvV5mWx+PpSAPsGXF9F3tctzcD0AnAIBC+SnqBUn6 BKz9dt1zJcdc5eibwcoAfG9SWggnmoZFpXWu1R4//s/L6Dx8ThRGWYkkK8us5lsR DAuUDlzGzf+jAQZIU9WDnfZ9JGB/GimKLcQiR4eTiob622LVP31IqFz/PztWDX68 N66y+fjsMHEDePlURRy4ruEBIQ+fXEuNeaNGtnE/HohIwMhc9bq+xjSnK9SvG+8O +PjR1q6Rb/X4aNsakXmOERav3kGpe808WZ8Taf1a6+TOlFnoWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDTlY1FI16sftZQoPXMRwcAuT4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDRjMzY3MDYtN2EwNy0z MGEzLThhYzAtNGY4NTNmNzZkNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAx7y1/FO8LKGAcs7e085ELlOH7sWYskIBbyOdWT4I0b+U9rh1U48eJe IquRsy1L1X/j/lfdcL9bqyO23/WZzpeOt+VeNRxnHFVoNmEWmKQOY13qC3nsmeQk +nlM2Rv1w0WV1hQ+Atzfje88cI96PyT86mlGcYlu0ALsAqUzfwSIdw1oZ5Q8Hh3e ngXhRAwob2m0cbhFfpasMGGoflieVCua7gcKHEDZd600Jpx3/VUshYXx/4EtGlfR PKS7BDK9Dj3u97iiwmQBULYbx69BwHPFptXl7stUrJ8wvH92bJHR96eXKsZ8y3jY CqosGptYJbvZAMz9vSAmUvZ7hoE83cY= -----END CERTIFICATE-----Generated at Wed Nov 5 06:29:39 2025 by rpki-client