$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/e8701d46-d019-31ab-beee-5bfc34ed3804.roa File: e8701d46-d019-31ab-beee-5bfc34ed3804.roa (raw, json) Hash identifier: EKx4VgOdbZyzpCx9cG1/WYb2TnQ0jHxFRJLFx9Tj0u4= Subject key identifier: 2A:1A:15:59:EA:1B:BC:99:87:9B:82:3C:74:1F:CE:4B:09:AF:8F:DA Certificate issuer: /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Certificate serial: 010D0C9F4328584BAEC7BA1504C0985004B61D30 Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/e8701d46-d019-31ab-beee-5bfc34ed3804.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 18986 IP address blocks: 173.255.152.0/24 maxlen: 24 173.255.153.0/24 maxlen: 24 173.255.154.0/24 maxlen: 24 173.255.155.0/24 maxlen: 24 173.255.156.0/23 maxlen: 23 173.255.158.0/24 maxlen: 24 173.255.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:ba:15:04:c0:98:50:04:b6:1d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=cc9a889a-7b8d-4fa6-a24c-bafd6b235e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b0:d2:7b:64:34:1b:f0:72:b1:59:e1:c4:f0: be:29:59:d3:0e:2a:da:77:bd:68:40:5d:bc:71:3c: 7b:bb:3d:62:71:56:93:f8:7c:d3:2e:f4:6b:ad:c8: 3f:28:83:a9:06:c4:b3:7b:21:62:b1:e2:d8:51:7a: 6b:59:fd:c8:02:da:b0:e5:dc:d1:d1:75:11:c5:47: af:c2:3e:89:18:bd:75:a8:53:5a:95:2c:a2:70:3a: 70:ae:1c:40:e6:6f:88:ba:ff:f9:44:14:52:9b:2e: 75:ef:31:e9:fb:db:7e:1b:b0:e2:c5:7b:5f:7a:d9: b5:94:d6:20:e8:16:c3:78:a7:36:c5:45:80:81:90: 5e:8a:ca:5e:00:6e:b6:78:28:da:a2:9b:09:f6:b1: 3c:69:16:d7:f6:dd:3e:00:1e:5a:fb:3f:ae:53:73: ed:24:f4:3b:fb:97:ee:ad:e2:90:2e:2b:eb:75:71: ad:3e:af:2c:ae:5b:e7:25:fa:f1:81:b0:08:22:51: 4b:6f:94:b4:6b:dd:ee:e2:0d:da:f3:b2:7f:5e:16: bc:4e:52:39:e0:76:6a:2d:88:f2:bb:47:d1:c8:5a: cb:60:b4:11:66:90:d7:7a:7e:48:48:b7:7d:df:15: b3:e5:21:2e:56:cd:4e:ac:2d:1f:d7:05:eb:df:04: 71:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1A:15:59:EA:1B:BC:99:87:9B:82:3C:74:1F:CE:4B:09:AF:8F:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/e8701d46-d019-31ab-beee-5bfc34ed3804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl X509v3 Authority Key Identifier: keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer sbgp-ipAddrBlock: critical IPv4: 173.255.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4a:12:da:00:84:0d:42:2e:80:7d:a4:52:c1:d3:b3:21:2e: 26:42:ab:ac:f6:4b:28:48:f7:91:35:d6:42:11:bd:0a:11:ad: 19:cb:7a:05:ac:50:43:d4:fa:7e:af:9c:c4:82:f2:ce:e1:41: 85:c0:76:e6:0c:d7:c4:96:68:be:99:bd:01:a1:9d:55:e2:cb: fa:8f:17:ae:81:87:d0:4a:9c:83:dc:06:88:71:cf:0f:ed:91: 2c:83:7b:d0:4e:fa:af:14:9e:83:f1:b9:89:de:0e:59:ad:58: 41:c9:83:36:a2:f0:42:60:9a:f5:3b:ac:53:e3:a8:26:90:6c: 24:0c:cc:c0:9b:be:64:67:d0:e3:f8:f7:74:52:d8:db:0c:bd: 57:72:cc:97:a0:5c:ca:b2:6b:37:23:51:e1:37:50:9d:a3:3d: b9:db:7b:06:33:81:9a:bc:6b:ad:eb:58:94:e0:7b:3d:5e:ed: 6c:3f:a5:a8:0f:27:8d:3b:e7:75:4f:68:d7:93:aa:08:6b:3f: e2:1e:48:dd:ae:fe:a1:b8:45:ca:4b:f0:1c:f8:a6:44:23:18: 8b:21:db:3f:8b:85:8d:06:18:3b:11:d4:98:fa:95:0d:e2:14: 16:84:a9:a8:c7:7d:80:7c:6c:0d:25:18:1d:e5:2c:5e:bd:9c: f1:1e:28:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7oVBMCYUAS2HTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4 ZmMxMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk Y2M5YTg4OWEtN2I4ZC00ZmE2LWEyNGMtYmFmZDZiMjM1ZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrDSe2Q0G/BysVnhxPC+KVnTDirad71oQF28 cTx7uz1icVaT+HzTLvRrrcg/KIOpBsSzeyFiseLYUXprWf3IAtqw5dzR0XURxUev wj6JGL11qFNalSyicDpwrhxA5m+Iuv/5RBRSmy517zHp+9t+G7DixXtfetm1lNYg 6BbDeKc2xUWAgZBeispeAG62eCjaopsJ9rE8aRbX9t0+AB5a+z+uU3PtJPQ7+5fu reKQLivrdXGtPq8srlvnJfrxgbAIIlFLb5S0a93u4g3a87J/Xha8TlI54HZqLYjy u0fRyFrLYLQRZpDXen5ISLd93xWz5SEuVs1OrC0f1wXr3wRx5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoaFVnqG7yZh5uCPHQfzksJr4/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWEz ZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvZTg3MDFkNDYtZDAxOS0z MWFiLWJlZWUtNWJmYzM0ZWQzODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzVhM2YwODgtMDViNy00NzBhLTlh ZjUtNDViZDI1ZWU4ZmMxLzM1YTNmMDg4LTA1YjctNDcwYS05YWY1LTQ1YmQyNWVl OGZjMS5jcmwwHwYDVR0jBBgwFoAUNK7WIvW+qxwynlURzXYDdVCcFwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJk MjVlZThmYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrf+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1KEtoAhA1CLoB9pFLB07MhLiZCq6z2SyhI95E11kIRvQoRrRnLegWs UEPU+n6vnMSC8s7hQYXAduYM18SWaL6ZvQGhnVXiy/qPF66Bh9BKnIPcBohxzw/t kSyDe9BO+q8UnoPxuYneDlmtWEHJgzai8EJgmvU7rFPjqCaQbCQMzMCbvmRn0OP4 93RS2NsMvVdyzJegXMqyazcjUeE3UJ2jPbnbewYzgZq8a63rWJTgez1e7Ww/pagP J40753VPaNeTqghrP+IeSN2u/qG4RcpL8Bz4pkQjGIsh2z+LhY0GGDsR1Jj6lQ3i FBaEqajHfYB8bA0lGB3lLF69nPEeKG0= -----END CERTIFICATE-----Generated at Wed Nov 5 16:17:03 2025 by rpki-client