$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa File: 1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa (raw, json) Hash identifier: HWTbeEfM7KG9PMXyurUwKrtPuohxuiZWrz2huHAGrGs= Subject key identifier: A0:D1:51:81:F2:0A:9C:32:4E:80:21:19:DC:ED:FD:90:F8:9C:9F:C4 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B95A7923D877E19B28E057500 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 174 IP address blocks: 173.232.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:92:3d:87:7e:19:b2:8e:05:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8a3b3bf7-0074-46c7-90ad-0367377a7c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:65:a5:20:ad:35:12:2b:84:ba:90:ba:ef: 7d:d8:5f:0e:fb:82:70:5e:1c:a3:f1:65:cc:6f:11: 0f:51:6d:9b:cf:3f:7c:b8:09:42:15:13:d3:b3:d9: 6b:c5:3b:bb:f4:48:28:91:92:16:93:db:73:2b:4e: 7e:83:1c:b5:d6:b6:00:fb:af:43:bc:8c:ff:22:3e: 26:05:68:fc:f5:5c:5b:27:84:56:b6:05:61:8b:8a: c2:c8:5f:78:d5:dc:0e:2d:a3:dd:41:13:d1:dc:2a: c7:4a:2c:7e:58:a8:bc:a6:34:32:55:fd:db:ff:9c: 7c:a0:66:af:0a:38:a4:13:c9:c3:2a:b4:65:41:aa: 62:46:cb:bd:e3:0b:94:df:e0:80:8d:90:a5:43:03: cc:bb:f9:20:2e:6e:63:2b:47:2b:c7:bb:68:11:03: 3e:fd:18:3b:80:10:50:86:62:0f:c4:4c:64:f4:34: 39:1e:15:43:91:8b:2c:1d:e0:fa:3b:ec:8d:36:13: 59:e3:46:41:4b:c3:a7:10:7b:6d:1b:d6:28:eb:f6: 95:d3:bd:9c:e0:df:73:4e:b1:31:cd:ee:a1:94:f3: 03:f9:96:08:1c:06:68:4b:ac:3e:30:18:4d:f6:c4: d3:37:2d:24:94:ab:23:a9:2a:e7:35:59:3b:2e:7b: ae:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D1:51:81:F2:0A:9C:32:4E:80:21:19:DC:ED:FD:90:F8:9C:9F:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ab:ff:bd:06:da:81:b8:50:45:7e:b8:61:ba:a7:e8:d1:1d: 75:b6:53:4c:ad:e0:f3:e4:d5:ae:df:f6:0e:d9:66:a0:8d:98: 54:67:de:d2:36:a1:34:43:64:bc:db:c1:91:fb:ef:f2:69:64: 52:30:6a:52:37:e7:c7:47:bd:ce:d6:79:d4:87:ea:b0:86:25: 52:c4:8f:db:ce:3b:a5:5a:39:80:37:b9:00:45:d9:70:05:1c: 4e:53:3b:9a:eb:58:25:39:dc:ce:e2:71:69:f2:6c:ae:b8:cf: 23:1f:3e:f0:f4:2a:90:fa:9f:67:f5:ba:86:8f:8f:de:a2:c3: 84:9e:51:5d:e1:97:75:ea:b6:69:f5:fa:e2:57:09:fa:05:44: dc:26:ff:f3:e8:4a:08:9c:d0:a8:c3:d2:ae:49:a6:88:41:9f: c0:ca:0a:6c:97:ca:a6:c5:21:44:db:f4:2f:eb:f6:31:3d:3c: b6:b5:46:1e:bd:ae:fc:af:0a:7c:76:e3:9f:c3:90:fe:6e:53: dd:d2:de:45:9a:2d:36:47:a7:06:50:e3:29:e6:68:39:fb:cd: 6e:6c:a8:10:52:26:51:98:63:41:7c:61:cb:1a:eb:06:a9:33: 37:d5:eb:cc:d8:fe:fa:60:fa:e4:e6:b2:88:bd:d2:f9:be:68: 0c:80:07:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5I9h34Zso4FdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OGEzYjNiZjctMDA3NC00NmM3LTkwYWQtMDM2NzM3N2E3Yzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVBlpSCtNRIrhLqQuu992F8O+4JwXhyj8WXM bxEPUW2bzz98uAlCFRPTs9lrxTu79EgokZIWk9tzK05+gxy11rYA+69DvIz/Ij4m BWj89VxbJ4RWtgVhi4rCyF941dwOLaPdQRPR3CrHSix+WKi8pjQyVf3b/5x8oGav CjikE8nDKrRlQapiRsu94wuU3+CAjZClQwPMu/kgLm5jK0crx7toEQM+/Rg7gBBQ hmIPxExk9DQ5HhVDkYssHeD6O+yNNhNZ40ZBS8OnEHttG9Yo6/aV072c4N9zTrEx ze6hlPMD+ZYIHAZoS6w+MBhN9sTTNy0klKsjqSrnNVk7LnuuuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDRUYHyCpwyToAhGdzt/ZD4nJ/EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMWQwM2EyY2QtMDFhYS0z MGQ3LWEyZDAtZjgxYjg4OTExN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreihMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGur/70G2oG4UEV+uGG6p+jRHXW2U0yt4PPk1a7f9g7ZZqCNmFRn3tI2 oTRDZLzbwZH77/JpZFIwalI358dHvc7WedSH6rCGJVLEj9vOO6VaOYA3uQBF2XAF HE5TO5rrWCU53M7icWnybK64zyMfPvD0KpD6n2f1uoaPj96iw4SeUV3hl3Xqtmn1 +uJXCfoFRNwm//PoSgic0KjD0q5JpohBn8DKCmyXyqbFIUTb9C/r9jE9PLa1Rh69 rvyvCnx245/DkP5uU93S3kWaLTZHpwZQ4ynmaDn7zW5sqBBSJlGYY0F8Ycsa6wap MzfV68zY/vpg+uTmsoi90vm+aAyAB6I= -----END CERTIFICATE-----Generated at Tue Nov 4 21:07:56 2025 by rpki-client