$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa File: d859550a-458f-3e37-bf97-e6cd52ef8427.roa (raw, json) Hash identifier: TMVDdwHnfJHtf/TaXLcwVcmP/Sgk9K/fmA0U1dbg/YQ= Subject key identifier: 85:C5:B3:D7:38:F5:20:4A:37:B1:C6:87:52:1B:90:7F:16:9F:01:87 Certificate issuer: /CN=a5e2d89d-6269-4405-9578-836517825b32 Certificate serial: 010D0C9F4328584B13D6AC157C017E52442A8C80 Authority key identifier: E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 13347 IP address blocks: 67.223.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:ac:15:7c:01:7e:52:44:2a:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e2d89d-6269-4405-9578-836517825b32 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=81c04789-6877-4df2-919e-a3102b958259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:da:79:19:26:3b:89:85:b3:53:9d:d1:66:29: 1e:70:1e:59:3a:e1:7a:ae:a9:d9:e6:16:03:6b:1a: 2f:69:36:26:1e:1e:56:af:dd:43:8a:69:ec:39:5d: 74:d9:b4:25:49:b6:9e:c9:35:82:25:c9:d7:f6:e8: e6:4c:78:7a:41:d1:69:ae:e6:cd:84:a1:96:ae:cb: 72:39:b1:17:c0:5a:f9:b1:de:e7:06:6f:77:ae:77: cb:89:0a:8a:f2:ab:0f:85:53:79:c9:98:04:07:6f: e7:72:6d:10:c7:a4:4a:3b:42:88:14:56:2e:20:8c: 1f:bd:b2:3d:51:74:81:7e:26:9c:c3:2a:0c:73:fc: 42:a0:02:e6:13:96:2e:7d:ac:d4:1f:f9:2b:15:ad: 89:50:dd:47:eb:c1:33:dc:00:a0:16:78:c7:e4:42: 61:32:b0:97:99:50:09:a6:2e:31:6d:3d:c4:72:7e: 51:aa:47:06:b3:ac:7c:e7:79:27:5e:6a:a6:09:9b: 28:a8:2f:82:db:40:fd:b5:fc:43:2d:94:f8:31:77: 8a:9d:e5:22:2d:90:1b:ab:97:a8:48:30:c5:8d:d0: fe:89:cf:fb:5d:4a:34:bf:b4:ae:15:cf:5b:e9:b9: bc:b9:a5:f0:8f:6d:a6:e5:f9:fa:a5:58:e2:72:35: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C5:B3:D7:38:F5:20:4A:37:B1:C6:87:52:1B:90:7F:16:9F:01:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl X509v3 Authority Key Identifier: keyid:E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer sbgp-ipAddrBlock: critical IPv4: 67.223.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:43:42:32:af:c0:0a:7a:c6:29:00:b5:9e:c4:79:df:06:09: 03:b9:9e:90:f4:76:8b:d7:aa:14:b4:53:42:23:bf:e4:9a:51: 0d:ba:ab:52:b8:48:1c:7e:dd:5f:e9:fa:d4:07:10:26:31:a8: 34:91:3d:30:f0:0c:7e:b8:a2:ba:4f:49:3d:2c:93:0c:5e:b5: bf:fc:a4:34:42:dd:28:5b:20:0b:be:4d:80:07:c0:a3:9f:c3: 74:b9:cd:5c:13:91:31:fc:ea:a7:b8:3a:ad:54:db:22:28:b9: 5e:81:0f:93:f3:7e:82:57:3f:66:99:60:ec:be:2e:8c:30:43: 5c:0c:97:bd:ee:b8:39:4b:05:3e:2d:b2:7b:fa:12:9b:ce:3c: 39:59:f8:1a:04:46:e0:ff:38:b6:b8:c9:86:1e:12:14:26:52: c3:46:8e:28:bf:60:7e:8b:2c:7c:bc:2a:5b:d8:3e:f9:d3:44: 72:ad:18:3f:52:48:f2:a5:33:93:a8:0e:01:9c:3b:c4:8d:e4: 54:bf:33:52:9e:7f:e2:74:d1:4c:0a:43:63:66:1f:ff:b7:65: 25:0c:95:57:b1:92:15:dd:07:98:0c:57:8b:c5:30:bb:d1:61: 37:1f:68:a0:1b:df:ea:2b:f4:32:d6:2c:b8:88:9e:39:80:a8: 39:d5:52:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1qwVfAF+UkQqjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVlMmQ4OWQtNjI2OS00NDA1LTk1NzgtODM2NTE3ODI1 YjMyMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ODFjMDQ3ODktNjg3Ny00ZGYyLTkxOWUtYTMxMDJiOTU4MjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotp5GSY7iYWzU53RZikecB5ZOuF6rqnZ5hYD axovaTYmHh5Wr91DimnsOV102bQlSbaeyTWCJcnX9ujmTHh6QdFprubNhKGWrsty ObEXwFr5sd7nBm93rnfLiQqK8qsPhVN5yZgEB2/ncm0Qx6RKO0KIFFYuIIwfvbI9 UXSBfiacwyoMc/xCoALmE5YufazUH/krFa2JUN1H68Ez3ACgFnjH5EJhMrCXmVAJ pi4xbT3Ecn5RqkcGs6x853knXmqmCZsoqC+C20D9tfxDLZT4MXeKneUiLZAbq5eo SDDFjdD+ic/7XUo0v7SuFc9b6bm8uaXwj22m5fn6pVjicjXd7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXFs9c49SBKN7HGh1IbkH8WnwGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUy ZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1MTc4MjViMzIvZDg1OTU1MGEtNDU4Zi0z ZTM3LWJmOTctZTZjZDUyZWY4NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTVlMmQ4OWQtNjI2OS00NDA1LTk1 NzgtODM2NTE3ODI1YjMyL2E1ZTJkODlkLTYyNjktNDQwNS05NTc4LTgzNjUxNzgy NWIzMi5jcmwwHwYDVR0jBBgwFoAU59BBfkHLFeCXHRtb1UGhvOtai84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUyZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1 MTc4MjViMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ99wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdDQjKvwAp6xikAtZ7Eed8GCQO5npD0dovXqhS0U0Ijv+SaUQ26q1K4 SBx+3V/p+tQHECYxqDSRPTDwDH64orpPST0skwxetb/8pDRC3ShbIAu+TYAHwKOf w3S5zVwTkTH86qe4Oq1U2yIouV6BD5PzfoJXP2aZYOy+LowwQ1wMl73uuDlLBT4t snv6EpvOPDlZ+BoERuD/OLa4yYYeEhQmUsNGjii/YH6LLHy8KlvYPvnTRHKtGD9S SPKlM5OoDgGcO8SN5FS/M1Kef+J00UwKQ2NmH/+3ZSUMlVexkhXdB5gMV4vFMLvR YTcfaKAb3+or9DLWLLiInjmAqDnVUlM= -----END CERTIFICATE-----Generated at Wed Nov 5 00:15:56 2025 by rpki-client