$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/039d5cc0-5b83-30a1-94a3-c6a913324e9a.roa File: 039d5cc0-5b83-30a1-94a3-c6a913324e9a.roa (raw, json) Hash identifier: GVm8lTs1J6zDeY2aSxrghf8WPU/7O0/mRGv6Vh8V954= Subject key identifier: B1:76:56:70:59:9E:87:BA:6C:AC:EA:26:C6:6B:F7:C6:D0:83:EE:4D Certificate issuer: /CN=93e43339-37a5-4091-b560-67e3fca1a9fa Certificate serial: 010D0C9F4328584B4AE68A15DC668175F0CCE100 Authority key identifier: 22:7D:8E:EC:B9:0A:FB:3C:CA:D0:B1:0D:9A:C9:B0:15:6E:A9:23:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/039d5cc0-5b83-30a1-94a3-c6a913324e9a.roa Signing time: Tue 23 Sep 2025 18:22:02 +0000 ROA not before: Tue 23 Sep 2025 18:22:02 +0000 ROA not after: Mon 22 Dec 2025 19:22:02 +0000 asID: 27277 IP address blocks: 173.250.192.0/23 maxlen: 24 173.250.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/93e43339-37a5-4091-b560-67e3fca1a9fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/93e43339-37a5-4091-b560-67e3fca1a9fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:e6:8a:15:dc:66:81:75:f0:cc:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e43339-37a5-4091-b560-67e3fca1a9fa Validity Not Before: Sep 23 18:22:02 2025 GMT Not After : Dec 22 19:22:02 2025 GMT Subject: CN=bea48ff4-744b-454f-bffa-3dcf9b98ca78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:a1:68:a0:10:84:75:18:ae:fb:54:97:2b: 42:84:55:18:24:fb:82:f8:0e:43:a9:b8:e4:2e:b9: f6:f6:96:4d:3e:db:66:36:02:ee:e3:56:a8:cc:48: 5a:ac:bc:36:6f:61:2e:e8:a1:f6:f6:07:0b:3c:bf: 98:cc:74:13:dc:f8:f6:75:d7:d0:7b:e1:d5:21:71: cc:b4:af:fb:13:5a:f8:67:4c:cd:0a:46:6e:84:09: ba:83:7c:1d:50:5d:dc:d5:40:07:29:92:d6:4b:bf: 43:8b:4a:03:9a:4b:3e:07:ed:92:2b:75:3a:99:5b: 6b:83:b9:62:a9:5a:c9:3d:7d:11:0f:98:5e:37:9e: c4:24:03:00:52:7f:d2:14:ce:74:e3:03:f7:60:48: 83:58:7d:89:e2:61:c8:a4:9c:e3:5a:70:50:2e:1b: 89:5f:3a:66:eb:e4:a6:46:ec:2e:04:f7:79:d2:74: 7f:d9:50:22:0b:c7:db:d8:8d:94:0a:03:31:1a:bb: a0:32:15:ca:26:dc:e1:51:45:16:f7:6f:7f:b8:af: 50:90:9c:05:4f:06:f7:46:91:13:86:12:3e:f1:66: dc:7f:36:5e:5f:38:bb:f0:53:7c:af:8f:01:2a:f6: 71:8e:84:18:cf:d0:31:bb:f3:3b:f1:23:0d:ff:40: f2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:76:56:70:59:9E:87:BA:6C:AC:EA:26:C6:6B:F7:C6:D0:83:EE:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/039d5cc0-5b83-30a1-94a3-c6a913324e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/93e43339-37a5-4091-b560-67e3fca1a9fa.crl X509v3 Authority Key Identifier: keyid:22:7D:8E:EC:B9:0A:FB:3C:CA:D0:B1:0D:9A:C9:B0:15:6E:A9:23:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa.cer sbgp-ipAddrBlock: critical IPv4: 173.250.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:da:67:15:1f:b5:b9:46:f5:a3:cd:fa:13:f2:7f:7d:3d:a4: 62:1a:7f:e7:b9:d8:ec:65:bc:19:1d:8f:e8:d2:00:0c:09:b4: 3c:96:bf:09:18:08:27:e1:4b:fe:23:a6:3d:cf:d5:e3:51:40: d1:1c:ec:e1:16:15:26:a4:32:55:3d:51:e0:db:9d:dc:d7:de: 86:9e:ed:41:b9:7e:ba:fd:f2:a7:4e:04:e7:76:d1:73:c6:03: 24:5b:bb:af:83:07:ff:eb:62:b6:72:c2:2b:61:45:46:57:9d: 9a:36:5c:31:16:24:00:54:95:1f:84:8b:76:ed:7e:68:e7:a3: e6:a0:cc:38:c1:7d:e1:db:f8:88:ba:bd:50:64:07:0c:c3:9a: f9:4a:29:73:fe:09:e0:af:a8:8e:33:6b:2d:98:30:a9:69:5f: 1d:41:a7:ed:a4:78:ba:2b:7e:4e:c0:21:6c:f1:bf:bf:4c:b7: 2e:79:9c:b8:ef:95:a3:e3:b0:14:8c:24:f0:16:82:3c:02:a3: 81:39:73:c0:56:b8:72:a4:40:76:23:13:62:c0:fc:75:49:32: d3:aa:85:2d:7f:a1:f4:9d:21:4d:cc:f4:3a:81:02:0d:7e:38: 10:83:76:5a:51:07:9d:d7:39:24:d0:0a:98:5f:cd:2e:57:ae: e9:2c:5f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtK5ooV3GaBdfDM4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTNlNDMzMzktMzdhNS00MDkxLWI1NjAtNjdlM2ZjYTFh OWZhMB4XDTI1MDkyMzE4MjIwMloXDTI1MTIyMjE5MjIwMlowLzEtMCsGA1UEAxMk YmVhNDhmZjQtNzQ0Yi00NTRmLWJmZmEtM2RjZjliOThjYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDahaKAQhHUYrvtUlytChFUYJPuC+A5Dqbjk Lrn29pZNPttmNgLu41aozEharLw2b2Eu6KH29gcLPL+YzHQT3Pj2ddfQe+HVIXHM tK/7E1r4Z0zNCkZuhAm6g3wdUF3c1UAHKZLWS79Di0oDmks+B+2SK3U6mVtrg7li qVrJPX0RD5heN57EJAMAUn/SFM504wP3YEiDWH2J4mHIpJzjWnBQLhuJXzpm6+Sm RuwuBPd50nR/2VAiC8fb2I2UCgMxGrugMhXKJtzhUUUW929/uK9QkJwFTwb3RpET hhI+8WbcfzZeXzi78FN8r48BKvZxjoQYz9Axu/M78SMN/0DyVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF2VnBZnoe6bKzqJsZr98bQg+5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85M2U0 MzMzOS0zN2E1LTQwOTEtYjU2MC02N2UzZmNhMWE5ZmEvMDM5ZDVjYzAtNWI4My0z MGExLTk0YTMtYzZhOTEzMzI0ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTNlNDMzMzktMzdhNS00MDkxLWI1 NjAtNjdlM2ZjYTFhOWZhLzkzZTQzMzM5LTM3YTUtNDA5MS1iNTYwLTY3ZTNmY2Ex YTlmYS5jcmwwHwYDVR0jBBgwFoAUIn2O7LkK+zzK0LENmsmwFW6pI6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85M2U0MzMzOS0zN2E1LTQwOTEtYjU2MC02N2Uz ZmNhMWE5ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLaZxUftblG9aPN+hPyf309pGIaf+e52OxlvBkdj+jSAAwJtDyWvwkY CCfhS/4jpj3P1eNRQNEc7OEWFSakMlU9UeDbndzX3oae7UG5frr98qdOBOd20XPG AyRbu6+DB//rYrZywithRUZXnZo2XDEWJABUlR+Ei3btfmjno+agzDjBfeHb+Ii6 vVBkBwzDmvlKKXP+CeCvqI4zay2YMKlpXx1Bp+2keLorfk7AIWzxv79Mty55nLjv laPjsBSMJPAWgjwCo4E5c8BWuHKkQHYjE2LA/HVJMtOqhS1/ofSdIU3M9DqBAg1+ OBCDdlpRB53XOSTQCphfzS5XruksX/Y= -----END CERTIFICATE-----Generated at Wed Nov 5 15:31:08 2025 by rpki-client