$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/3f978426-61da-31a0-bd32-07cfc039e674.roa File: 3f978426-61da-31a0-bd32-07cfc039e674.roa (raw, json) Hash identifier: Kq+/lJElmBpOyJk+LMklJ32Og53peJK79WXzBr8scE4= Subject key identifier: F9:BC:1B:11:CD:5F:C0:78:8A:AF:C8:BE:24:AD:84:41:88:1F:96:82 Certificate issuer: /CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc Certificate serial: 010D0C9F4328584BA93293A74FCE820B0B0CCBA0 Authority key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/3f978426-61da-31a0-bd32-07cfc039e674.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 46169 IP address blocks: 173.219.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:93:a7:4f:ce:82:0b:0b:0c:cb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=a6e1831f-9547-4998-bbce-c2d7bfdb1fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:6d:d8:68:cf:98:f5:7c:f4:4a:3c:3f:28: 19:68:77:d0:e4:e2:40:7c:30:16:63:03:64:91:71: f5:69:76:0d:90:2b:c2:c6:95:00:b7:7d:88:4e:93: 65:da:4d:67:ce:71:b7:99:59:f7:45:eb:a8:9d:6e: 40:31:ed:92:a2:a4:aa:9f:a7:f0:3a:4e:00:f2:b5: 0b:de:ec:46:19:da:b7:07:da:d1:60:1d:ce:e0:73: e5:48:79:ca:5b:f8:0b:62:a6:6d:18:7b:61:ec:21: 87:9d:20:43:4f:8c:f3:7f:64:1a:0b:cf:f1:89:ab: 85:6b:3b:4b:76:9b:5c:cc:b8:cc:c2:21:64:85:66: e4:43:b3:95:68:fd:c8:38:99:e6:92:c4:08:0b:93: b3:8b:45:22:ef:d9:d1:51:44:f8:83:28:e3:6d:39: ad:50:5d:76:fb:15:19:01:bb:eb:14:3f:29:4e:0d: bc:9d:d9:71:d4:5c:f5:ab:9c:d3:bc:09:e1:55:18: 84:9a:09:b4:a4:90:7c:60:6d:39:69:d4:d8:d3:b2: 41:da:c4:55:da:94:f0:9b:98:f4:b7:00:4d:43:6a: 9f:90:4b:d0:91:ef:12:bc:73:e6:1d:ad:f1:b6:5d: fd:9f:f4:31:1e:f5:01:78:de:8e:78:89:de:ec:f2: 7d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BC:1B:11:CD:5F:C0:78:8A:AF:C8:BE:24:AD:84:41:88:1F:96:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/3f978426-61da-31a0-bd32-07cfc039e674.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl X509v3 Authority Key Identifier: keyid:FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer sbgp-ipAddrBlock: critical IPv4: 173.219.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:1a:81:0f:b6:4a:57:a2:e6:a0:4a:01:36:29:3d:e9:b9:2e: a9:00:70:70:c0:30:d9:a9:97:9b:21:b9:0c:23:2b:4b:ea:b8: 6f:ba:9e:95:a9:31:ce:89:32:4e:a3:33:44:4c:fc:0a:46:21: c4:29:59:a2:b6:d7:41:d9:6f:0f:1b:18:52:9f:d7:e3:51:3d: de:6b:0e:28:61:94:50:de:b2:4f:ff:ee:a6:d6:b6:2d:0a:e5: f7:35:2e:24:9c:9b:f1:08:d5:19:a2:1b:09:da:07:6c:24:a0: 5c:b5:e4:90:d1:33:ba:9b:76:23:c2:3d:1b:ec:c2:ee:0c:bc: 90:28:bc:75:be:c6:57:5e:35:d8:93:96:81:98:43:90:05:c6: 88:fc:18:4a:3d:8e:01:45:1c:9f:eb:ff:bb:a3:a8:8a:a0:c5: ac:35:15:bb:82:aa:6d:53:fc:4a:df:60:e4:16:16:f6:cd:43: 7d:a6:5e:45:b3:91:28:ae:95:f4:1b:99:cb:ae:28:62:14:a7: 07:35:c4:6b:f4:b0:3b:e5:4d:5d:89:59:8e:29:7b:fd:1e:ee: c8:9e:74:f4:07:6a:d3:28:c4:82:44:2c:ec:b2:89:6f:44:41: b9:eb:71:33:ef:65:5e:50:36:30:30:6d:52:61:5c:e3:7d:91: 6c:58:5f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMpOnT86CCwsMy6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E3YWJlZmYtZmVhYy00Y2M5LTkwNzctODY2ZjBiYjFi OGNjMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YTZlMTgzMWYtOTU0Ny00OTk4LWJiY2UtYzJkN2JmZGIxZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJZt2GjPmPV89Eo8PygZaHfQ5OJAfDAWYwNk kXH1aXYNkCvCxpUAt32ITpNl2k1nznG3mVn3ReuonW5AMe2SoqSqn6fwOk4A8rUL 3uxGGdq3B9rRYB3O4HPlSHnKW/gLYqZtGHth7CGHnSBDT4zzf2QaC8/xiauFaztL dptczLjMwiFkhWbkQ7OVaP3IOJnmksQIC5Ozi0Ui79nRUUT4gyjjbTmtUF12+xUZ AbvrFD8pTg28ndlx1Fz1q5zTvAnhVRiEmgm0pJB8YG05adTY07JB2sRV2pTwm5j0 twBNQ2qfkEvQke8SvHPmHa3xtl39n/QxHvUBeN6OeIne7PJ9FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPm8GxHNX8B4iq/IviSthEGIH5aCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTdh YmVmZi1mZWFjLTRjYzktOTA3Ny04NjZmMGJiMWI4Y2MvM2Y5Nzg0MjYtNjFkYS0z MWEwLWJkMzItMDdjZmMwMzllNjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2E3YWJlZmYtZmVhYy00Y2M5LTkw NzctODY2ZjBiYjFiOGNjLzdhN2FiZWZmLWZlYWMtNGNjOS05MDc3LTg2NmYwYmIx YjhjYy5jcmwwHwYDVR0jBBgwFoAU+79+OuW9smvC3UATG67xRb6sEjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTdhYmVmZi1mZWFjLTRjYzktOTA3Ny04NjZm MGJiMWI4Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdslMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgagQ+2Slei5qBKATYpPem5LqkAcHDAMNmpl5shuQwjK0vquG+6npWp Mc6JMk6jM0RM/ApGIcQpWaK210HZbw8bGFKf1+NRPd5rDihhlFDesk//7qbWti0K 5fc1LiScm/EI1RmiGwnaB2wkoFy15JDRM7qbdiPCPRvswu4MvJAovHW+xldeNdiT loGYQ5AFxoj8GEo9jgFFHJ/r/7ujqIqgxaw1FbuCqm1T/ErfYOQWFvbNQ32mXkWz kSiulfQbmcuuKGIUpwc1xGv0sDvlTV2JWY4pe/0e7siedPQHatMoxIJELOyyiW9E QbnrcTPvZV5QNjAwbVJhXON9kWxYXyQ= -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:02 2025 by rpki-client