$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/b3b62227-4c53-30d7-972e-c47431f7123d.roa File: b3b62227-4c53-30d7-972e-c47431f7123d.roa (raw, json) Hash identifier: WKmniYT9iYep7pM1fdddKiUcPHKoUeNW3eXvX1/D2tY= Subject key identifier: 65:3C:1D:BA:39:79:07:B2:07:98:1A:E0:3C:F5:F5:05:39:4F:7E:75 Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584BA39CFB800F90D80E50432480 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/b3b62227-4c53-30d7-972e-c47431f7123d.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 22372 IP address blocks: 173.212.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:fb:80:0f:90:d8:0e:50:43:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=16d117ab-31de-439c-8180-e83719661b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:2e:54:cf:f4:32:17:6b:31:43:a6:d9:b2: d9:d2:17:b7:2b:5f:55:c5:13:50:40:55:f6:54:12: a9:5b:ed:f4:82:0d:39:1c:9c:43:a2:18:db:1c:2c: 9f:c3:63:ce:fe:b1:c7:d5:56:89:bc:4a:fb:de:ff: b8:f0:d1:4c:9b:f6:9d:ac:28:a3:11:c1:58:81:31: 59:6d:f5:b9:b7:a2:cd:7d:d9:8c:b9:c4:86:fc:88: 55:4a:0e:07:fb:27:61:18:03:2f:48:b1:01:d8:d5: d7:28:fc:3d:78:f1:79:24:f0:81:34:3c:06:09:f2: f4:48:62:87:b1:f5:54:b7:81:ba:f5:80:cd:58:b8: f8:f8:11:1a:cb:49:12:4b:09:ca:5e:ec:e8:c6:9b: 10:b2:db:23:3f:05:ce:78:4c:9a:c1:23:5d:43:4b: 8d:ac:1d:b2:30:f5:32:61:01:b5:e8:52:2c:ae:79: cf:e8:b3:09:85:04:34:d2:76:1e:7c:d9:76:79:23: 95:00:d4:15:41:6d:1e:25:a0:be:f6:9f:c4:ea:55: f0:e2:2a:cb:11:59:0e:c0:c1:3d:49:00:eb:28:07: 91:8f:7d:b6:72:fc:7f:e5:ba:2c:6f:fb:8f:c6:cf: ee:82:7b:5c:ff:fe:2f:01:f7:21:71:30:12:15:e9: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3C:1D:BA:39:79:07:B2:07:98:1A:E0:3C:F5:F5:05:39:4F:7E:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/b3b62227-4c53-30d7-972e-c47431f7123d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 173.212.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d5:46:5d:fa:f6:07:fe:72:72:20:14:67:17:ac:6c:31:ca: 64:f3:25:a5:1c:b0:08:77:72:9d:46:d8:99:09:29:2a:f5:02: 3a:f0:54:a5:4a:10:5b:a3:4e:89:c7:6a:b1:59:0b:f2:2a:65: fb:0b:e9:5f:ab:ba:3b:fb:ac:2a:12:8f:a5:ab:f8:6e:b8:e0: 56:7a:49:36:1c:50:44:8f:0f:54:d3:d0:6a:d7:6a:97:37:da: 98:80:7d:65:c5:6a:70:65:f3:b9:db:37:7d:60:d2:92:2e:d8: 6f:64:a8:07:cd:17:ba:ef:c7:7b:26:2a:ec:98:45:44:f8:20: 26:22:f5:f9:04:25:d7:91:21:89:c8:f0:17:03:ce:21:e4:e1: a7:76:1e:0c:61:20:fc:ba:91:cf:b6:3d:a5:4a:f6:51:37:b0: a8:15:ee:22:23:12:e1:9a:f6:fb:fa:16:b2:b0:b6:04:55:05: 9c:46:45:ff:f5:00:93:59:bb:18:45:b7:c5:af:bc:2a:e2:24: 24:78:2f:1d:0a:0e:07:88:d0:fc:01:a7:f7:11:3e:5d:34:71: eb:1c:b1:7e:40:8a:69:d4:d6:50:82:58:f7:0f:65:f9:e5:4e: 8f:a8:78:51:dc:fa:0f:50:45:c2:d5:8f:2a:7f:86:d3:6c:b2: dc:7b:0b:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPuAD5DYDlBDJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MTZkMTE3YWItMzFkZS00MzljLTgxODAtZTgzNzE5NjYxYjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLMuVM/0MhdrMUOm2bLZ0he3K19VxRNQQFX2 VBKpW+30gg05HJxDohjbHCyfw2PO/rHH1VaJvEr73v+48NFMm/adrCijEcFYgTFZ bfW5t6LNfdmMucSG/IhVSg4H+ydhGAMvSLEB2NXXKPw9ePF5JPCBNDwGCfL0SGKH sfVUt4G69YDNWLj4+BEay0kSSwnKXuzoxpsQstsjPwXOeEyawSNdQ0uNrB2yMPUy YQG16FIsrnnP6LMJhQQ00nYefNl2eSOVANQVQW0eJaC+9p/E6lXw4irLEVkOwME9 SQDrKAeRj322cvx/5bosb/uPxs/ugntc//4vAfchcTASFeno5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU8Hbo5eQeyB5ga4Dz19QU5T351MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvYjNiNjIyMjctNGM1My0z MGQ3LTk3MmUtYzQ3NDMxZjcxMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdRWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnVRl369gf+cnIgFGcXrGwxymTzJaUcsAh3cp1G2JkJKSr1AjrwVKVK EFujTonHarFZC/IqZfsL6V+rujv7rCoSj6Wr+G644FZ6STYcUESPD1TT0GrXapc3 2piAfWXFanBl87nbN31g0pIu2G9kqAfNF7rvx3smKuyYRUT4ICYi9fkEJdeRIYnI 8BcDziHk4ad2HgxhIPy6kc+2PaVK9lE3sKgV7iIjEuGa9vv6FrKwtgRVBZxGRf/1 AJNZuxhFt8WvvCriJCR4Lx0KDgeI0PwBp/cRPl00cescsX5AimnU1lCCWPcPZfnl To+oeFHc+g9QRcLVjyp/htNsstx7C6s= -----END CERTIFICATE-----Generated at Wed Nov 5 16:08:09 2025 by rpki-client