$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e43b226c-1c19-3e30-949a-33cc821dcd4a.roa File: e43b226c-1c19-3e30-949a-33cc821dcd4a.roa (raw, json) Hash identifier: JGIVdC3qX+Mm+mTzey9mHMe6fmj0X/qgw3a0iI4xz3I= Subject key identifier: 4C:2B:05:16:C6:50:0E:D4:E0:83:83:4E:1F:22:2D:5E:52:9B:6F:0E Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584BAEC7BC2B02311B8A21AF1000 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e43b226c-1c19-3e30-949a-33cc821dcd4a.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 6128 IP address blocks: 173.251.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:bc:2b:02:31:1b:8a:21:af:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=c2ea2d17-5080-45fe-9f34-f82ea02dceac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ce:09:08:cc:3c:c6:0d:78:fa:2d:8b:47:0d: 3c:fa:bd:47:c0:95:91:e0:89:9a:f5:e7:06:cd:71: 33:ba:dd:1b:84:49:70:e5:d8:f0:4e:02:8c:4d:85: 7f:e0:df:46:13:bc:12:17:35:dc:95:4a:ea:c9:f7: 56:0f:d5:82:46:d7:8c:07:de:4e:1a:90:b7:80:61: 85:d6:62:f3:c2:de:c2:5b:6d:2a:5a:fa:86:ad:27: c3:5b:a0:5f:8b:f6:03:5a:a2:9c:59:c2:b8:e3:3d: 66:a9:0b:fb:9e:d8:d9:a0:66:5b:67:bf:a6:9e:02: 79:e3:15:02:2a:0d:27:cc:da:d9:f5:56:92:e0:c6: 7e:d0:a5:49:88:1d:dd:e1:34:69:ce:61:5f:2d:a8: dc:d3:7c:d6:87:75:b1:23:96:b0:d6:ad:0f:51:06: 20:9a:e0:0b:bf:30:17:84:a6:7e:0e:b1:9e:d9:13: 9b:15:bd:0e:87:00:f2:ef:1b:52:84:ab:69:dc:9b: bc:41:76:b7:aa:51:92:f0:0c:2f:4c:2b:9a:85:9a: 3b:5b:ee:0c:fb:c1:9a:bc:dd:2d:4e:da:d4:41:7f: 99:5e:2d:d6:27:78:26:1f:8e:b6:f9:3e:85:1c:d9: 90:15:08:b3:41:39:34:9f:11:65:2a:b6:c9:8f:1a: bb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2B:05:16:C6:50:0E:D4:E0:83:83:4E:1F:22:2D:5E:52:9B:6F:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e43b226c-1c19-3e30-949a-33cc821dcd4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 173.251.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:83:d3:8a:3b:10:85:86:16:4e:24:8d:c1:54:fa:df:cd:14: d6:04:98:3e:17:a3:49:d4:3e:75:79:e0:f3:69:e1:d7:e5:94: 5e:34:55:c4:7a:b7:d5:f0:56:e3:81:f5:71:dd:c5:fe:1b:3e: 87:d2:61:4e:07:77:aa:fa:77:ed:0a:87:e8:14:0d:61:69:96: 25:4c:b4:c3:be:98:97:78:5f:d7:a0:95:06:20:ca:39:9a:54: 09:f2:7c:c9:ed:09:f5:47:6d:ef:44:fd:09:48:23:d5:df:11: f6:a4:a3:ac:76:cd:fc:57:f9:e2:31:8b:12:99:6f:74:ec:d6: 0b:f4:36:da:ea:b3:5c:ff:c1:c0:69:c4:b1:67:26:26:a6:4a: f3:98:1c:49:87:ee:44:13:d9:7f:7d:41:98:07:b7:71:61:1d: e1:d7:fa:59:6f:69:02:b7:1e:72:b6:8c:37:fe:9e:c2:33:46: 7a:b6:b2:d6:5a:26:e0:de:5a:8f:cf:ca:e8:ca:8e:3a:11:f6: 0f:f0:8a:91:97:bf:34:5e:69:ba:54:01:e7:84:3a:9b:96:95: 36:6f:d2:7a:d6:12:a4:a4:10:e6:d5:b2:e3:0e:d2:ab:0f:56: 65:75:b1:24:e1:fd:84:16:b1:e9:88:df:c8:7e:28:30:8a:d9: 1d:5a:eb:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7wrAjEbiiGvEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk YzJlYTJkMTctNTA4MC00NWZlLTlmMzQtZjgyZWEwMmRjZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg84JCMw8xg14+i2LRw08+r1HwJWR4Ima9ecG zXEzut0bhElw5djwTgKMTYV/4N9GE7wSFzXclUrqyfdWD9WCRteMB95OGpC3gGGF 1mLzwt7CW20qWvqGrSfDW6Bfi/YDWqKcWcK44z1mqQv7ntjZoGZbZ7+mngJ54xUC Kg0nzNrZ9VaS4MZ+0KVJiB3d4TRpzmFfLajc03zWh3WxI5aw1q0PUQYgmuALvzAX hKZ+DrGe2RObFb0OhwDy7xtShKtp3Ju8QXa3qlGS8AwvTCuahZo7W+4M+8GavN0t TtrUQX+ZXi3WJ3gmH462+T6FHNmQFQizQTk0nxFlKrbJjxq7VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwrBRbGUA7U4IODTh8iLV5Sm28OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvZTQzYjIyNmMtMWMxOS0z ZTMwLTk0OWEtMzNjYzgyMWRjZDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfsLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqD04o7EIWGFk4kjcFU+t/NFNYEmD4Xo0nUPnV54PNp4dfllF40VcR6 t9XwVuOB9XHdxf4bPofSYU4Hd6r6d+0Kh+gUDWFpliVMtMO+mJd4X9eglQYgyjma VAnyfMntCfVHbe9E/QlII9XfEfako6x2zfxX+eIxixKZb3Ts1gv0Ntrqs1z/wcBp xLFnJiamSvOYHEmH7kQT2X99QZgHt3FhHeHX+llvaQK3HnK2jDf+nsIzRnq2stZa JuDeWo/PyujKjjoR9g/wipGXvzReabpUAeeEOpuWlTZv0nrWEqSkEObVsuMO0qsP VmV1sSTh/YQWsemI38h+KDCK2R1a65k= -----END CERTIFICATE-----Generated at Wed Nov 5 04:38:00 2025 by rpki-client