$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3185cc6-59be-3e0e-b876-18f70e4af35c.roa File: e3185cc6-59be-3e0e-b876-18f70e4af35c.roa (raw, json) Hash identifier: pYnDAfMKtOnXFfGUaWTPNpzj+5vYAQ1BBYAKfwo3keg= Subject key identifier: B8:4E:4B:0D:4F:9B:08:A9:49:DC:8C:E3:1A:9E:6C:DD:E3:53:03:CD Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584BB5C251D22EB53241773CE600 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3185cc6-59be-3e0e-b876-18f70e4af35c.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 45671 IP address blocks: 173.211.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:51:d2:2e:b5:32:41:77:3c:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=e49054fa-b961-4aab-a0eb-df405480820a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2d:73:ca:89:fd:7d:3f:c1:2e:44:94:f6:7a: 92:bc:f7:5e:da:a7:51:e9:e2:32:eb:15:b9:5c:fb: 35:ad:96:c9:58:28:81:ce:26:c6:ad:92:ad:56:8e: 19:8d:e5:9c:58:57:65:19:fc:fc:e2:1b:99:38:9d: 3c:53:4d:01:4b:97:50:d0:47:ad:43:e5:29:e8:1d: 46:b6:c5:45:dd:11:a9:ce:61:af:e8:18:2c:f6:43: fd:82:87:98:1c:a1:91:a7:b4:35:5b:6f:b7:73:db: cb:c7:b4:af:4d:76:a6:42:84:98:de:e5:3f:08:db: 04:aa:3b:33:78:3a:29:a1:d2:85:e6:03:fb:fe:48: d6:c8:23:f9:8b:cd:dc:e7:16:12:fd:cd:a8:10:6d: 3c:5c:4d:d0:9e:9b:a8:f7:50:54:92:97:ae:5c:f4: 42:70:1f:de:ab:06:71:af:1a:b7:8c:7c:1a:77:7b: e5:17:7b:f2:a9:d5:f7:64:ee:f1:f6:5f:f7:42:db: 59:c3:e6:da:65:0a:09:df:a5:5a:44:3f:d5:f7:0d: 31:ef:ac:33:bb:de:1f:b9:30:d1:31:61:8a:77:8a: d1:37:7d:a9:aa:c5:10:7d:11:23:22:49:c7:fc:d4: 1c:14:7e:ed:5b:19:3b:9b:e9:b8:28:63:45:94:dc: 6f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4E:4B:0D:4F:9B:08:A9:49:DC:8C:E3:1A:9E:6C:DD:E3:53:03:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3185cc6-59be-3e0e-b876-18f70e4af35c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 173.211.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:47:b7:59:12:c5:8c:15:8d:93:70:4d:91:d7:1e:e3:d5:b2: 63:af:30:c7:e0:09:3c:2e:de:d2:c8:29:f4:43:e6:8c:2c:a6: 18:2e:f9:a2:d2:e4:aa:e8:c9:eb:51:d1:12:d2:19:63:df:d1: 2a:56:5e:61:63:63:06:66:07:69:ec:31:1f:28:89:5a:36:b3: 37:5a:49:09:32:a1:01:9d:1b:4c:51:99:fb:44:30:69:0c:3f: f6:71:9c:7c:f7:5e:91:6a:12:12:cc:cb:62:8d:4c:5d:6d:08: 9d:65:d7:8d:b9:eb:7d:e9:74:30:4a:f4:be:9b:6b:5c:1e:95: 79:44:48:a4:99:c9:ce:fb:f2:5b:44:2a:6d:b1:6d:e5:05:ef: c6:ed:51:3e:7c:61:f2:e7:3a:a5:51:19:e5:42:7f:68:2e:ed: ed:6e:3a:bf:52:97:c6:d7:27:0c:9e:c9:7a:9c:bb:39:b0:13: 6b:cf:fc:6d:8e:cc:db:11:f3:f2:48:13:eb:ed:02:5a:e1:47: c7:09:87:b5:d4:7b:7e:17:20:4f:67:31:6a:3f:7c:6f:85:34: a6:e4:eb:22:00:70:7c:59:71:24:46:69:5b:5a:63:6d:46:d6: c4:dd:4c:0c:fe:a4:79:6d:70:89:19:40:e8:46:b1:0b:bb:19: b2:53:aa:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wlHSLrUyQXc85gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZTQ5MDU0ZmEtYjk2MS00YWFiLWEwZWItZGY0MDU0ODA4MjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i1zyon9fT/BLkSU9nqSvPde2qdR6eIy6xW5 XPs1rZbJWCiBzibGrZKtVo4ZjeWcWFdlGfz84huZOJ08U00BS5dQ0EetQ+Up6B1G tsVF3RGpzmGv6Bgs9kP9goeYHKGRp7Q1W2+3c9vLx7SvTXamQoSY3uU/CNsEqjsz eDopodKF5gP7/kjWyCP5i83c5xYS/c2oEG08XE3Qnpuo91BUkpeuXPRCcB/eqwZx rxq3jHwad3vlF3vyqdX3ZO7x9l/3QttZw+baZQoJ36VaRD/V9w0x76wzu94fuTDR MWGKd4rRN32pqsUQfREjIknH/NQcFH7tWxk7m+m4KGNFlNxvHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhOSw1PmwipSdyM4xqebN3jUwPNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZTMxODVjYzYtNTliZS0z ZTBlLWI4NzYtMThmNzBlNGFmMzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdNaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVHt1kSxYwVjZNwTZHXHuPVsmOvMMfgCTwu3tLIKfRD5owsphgu+aLS 5KroyetR0RLSGWPf0SpWXmFjYwZmB2nsMR8oiVo2szdaSQkyoQGdG0xRmftEMGkM P/ZxnHz3XpFqEhLMy2KNTF1tCJ1l1425633pdDBK9L6ba1welXlESKSZyc778ltE Km2xbeUF78btUT58YfLnOqVRGeVCf2gu7e1uOr9Sl8bXJwyeyXqcuzmwE2vP/G2O zNsR8/JIE+vtAlrhR8cJh7XUe34XIE9nMWo/fG+FNKbk6yIAcHxZcSRGaVtaY21G 1sTdTAz+pHltcIkZQOhGsQu7GbJTqm0= -----END CERTIFICATE-----Generated at Wed Nov 5 04:34:51 2025 by rpki-client