$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c790923e-3c9c-3d96-a8c7-ec566f522967.roa File: c790923e-3c9c-3d96-a8c7-ec566f522967.roa (raw, json) Hash identifier: nNF3FSsEQVHQroAxgCasC/qX9JCLToQjGD1bMC/2uWI= Subject key identifier: 94:DB:5A:27:A1:2C:83:8F:95:94:AB:A4:B6:FF:B2:02:28:4C:3B:88 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584BAEC7B877F87D05B094A2C200 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c790923e-3c9c-3d96-a8c7-ec566f522967.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 3257 IP address blocks: 173.232.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b8:77:f8:7d:05:b0:94:a2:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=34041b7c-05cf-41b3-8f31-c0e4f7ff665e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e0:9e:f0:9a:b5:9e:3d:d0:6f:4f:88:b7:d3: 18:65:c0:e6:cc:a6:56:e8:b4:09:45:12:d9:ef:02: 06:bc:1e:3d:4f:fb:f8:62:5b:06:5d:c8:11:cf:38: e5:18:63:5e:2a:e2:36:36:88:a5:30:35:93:66:6c: 1d:bf:37:5d:1d:df:6f:c1:b3:82:89:d9:da:4e:c9: 82:02:c4:a5:14:ee:9e:66:04:57:aa:62:53:b8:03: fd:81:ff:b6:4c:d9:3a:c7:76:fd:6f:04:93:46:80: 18:8a:c7:b8:74:68:48:6c:85:65:43:77:84:44:ef: b9:3b:fa:ad:7b:53:90:26:24:6b:eb:c8:63:05:0a: 63:56:26:4b:dc:49:7d:b5:f6:a0:ac:5c:77:19:da: 90:09:5c:00:b4:de:37:75:f1:83:0c:9d:b4:e0:e9: 68:3c:d1:65:db:f7:b8:72:b2:f6:82:0c:d6:2c:37: d7:14:09:82:0a:f7:1e:fc:02:c3:5e:5f:2e:72:96: c2:9d:90:3b:60:60:b5:6c:0b:03:dc:d5:f3:39:63: ad:c3:d3:5a:b6:a9:14:f2:ed:de:b5:17:a6:25:28: 9c:53:10:fa:2d:40:ca:e1:8d:2e:47:e5:6e:d0:ed: d1:1f:3c:ae:ee:83:bc:c5:bd:6b:79:1a:73:ac:92: 33:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DB:5A:27:A1:2C:83:8F:95:94:AB:A4:B6:FF:B2:02:28:4C:3B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c790923e-3c9c-3d96-a8c7-ec566f522967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:6d:fc:cd:75:0f:e7:c5:be:0e:45:9f:24:cb:d7:71:63:30: 68:06:40:ab:25:a2:2e:a3:3f:3b:a4:4a:76:5e:f4:63:3e:f2: ca:40:18:f2:a7:6e:f2:ce:ed:7a:e4:34:4e:89:cf:44:6b:65: b4:f5:91:48:23:c4:8f:c9:ee:5d:78:30:70:fc:58:74:43:ba: c7:7e:c2:c3:ab:52:72:5b:40:61:a4:6c:b8:50:3f:82:78:d5: a7:43:c3:7a:3b:01:de:b3:d8:c8:c1:14:66:33:e8:62:20:6c: ed:64:b1:51:5a:8a:fa:ea:45:06:c8:f5:ac:f1:97:7f:36:19: 67:0b:f4:9e:9d:58:2e:f5:87:8a:cd:94:3a:8b:c2:18:a2:42: 17:53:dc:6b:e5:e0:fd:7f:34:5f:f8:09:1b:12:4d:56:fd:fb: 7b:64:32:32:11:ac:81:eb:a2:07:31:86:f0:89:37:0e:16:0c: 29:a1:db:6e:6e:13:2d:ab:7e:d1:05:68:ca:cc:4e:79:50:ae: 97:8f:1c:6c:11:d4:27:27:95:10:1f:68:31:79:a7:e7:93:a5: dc:3a:ac:ba:0d:e5:1e:c5:cc:d8:3c:88:d2:20:6d:7a:66:f8: 1f:56:55:e3:e2:67:70:74:bc:8e:a3:f1:80:e8:ba:4e:a8:5b: c2:11:39:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7h3+H0FsJSiwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MzQwNDFiN2MtMDVjZi00MWIzLThmMzEtYzBlNGY3ZmY2NjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeCe8Jq1nj3Qb0+It9MYZcDmzKZW6LQJRRLZ 7wIGvB49T/v4YlsGXcgRzzjlGGNeKuI2NoilMDWTZmwdvzddHd9vwbOCidnaTsmC AsSlFO6eZgRXqmJTuAP9gf+2TNk6x3b9bwSTRoAYise4dGhIbIVlQ3eERO+5O/qt e1OQJiRr68hjBQpjViZL3El9tfagrFx3GdqQCVwAtN43dfGDDJ204OloPNFl2/e4 crL2ggzWLDfXFAmCCvce/ALDXl8ucpbCnZA7YGC1bAsD3NXzOWOtw9NatqkU8u3e tRemJSicUxD6LUDK4Y0uR+Vu0O3RHzyu7oO8xb1reRpzrJIzhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTbWiehLIOPlZSrpLb/sgIoTDuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYzc5MDkyM2UtM2M5Yy0z ZDk2LWE4YzctZWM1NjZmNTIyOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEht/M11D+fFvg5FnyTL13FjMGgGQKsloi6jPzukSnZe9GM+8spAGPKn bvLO7XrkNE6Jz0RrZbT1kUgjxI/J7l14MHD8WHRDusd+wsOrUnJbQGGkbLhQP4J4 1adDw3o7Ad6z2MjBFGYz6GIgbO1ksVFaivrqRQbI9azxl382GWcL9J6dWC71h4rN lDqLwhiiQhdT3Gvl4P1/NF/4CRsSTVb9+3tkMjIRrIHrogcxhvCJNw4WDCmh225u Ey2rftEFaMrMTnlQrpePHGwR1CcnlRAfaDF5p+eTpdw6rLoN5R7FzNg8iNIgbXpm +B9WVePiZ3B0vI6j8YDouk6oW8IROaM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:08 2025 by rpki-client