$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/70af7514-4dbc-3963-8c42-158baab7fb82.roa File: 70af7514-4dbc-3963-8c42-158baab7fb82.roa (raw, json) Hash identifier: VpkFARhq0uxDINy5e5jLsW547toiFMvyw7IMjzBeHHc= Subject key identifier: 29:67:60:5C:9A:15:B7:F2:06:E7:D6:FB:DC:C8:06:79:1E:64:9A:C6 Certificate issuer: /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62 Certificate serial: 010D0C9F4328584B970CC97BF32C8BD0527F88C0 Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/70af7514-4dbc-3963-8c42-158baab7fb82.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 25655 IP address blocks: 173.241.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:c9:7b:f3:2c:8b:d0:52:7f:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=497d3c33-7abd-4f2e-a76c-9a0a12863e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:03:78:d4:a1:a2:97:03:4f:68:d4:a0:91:87: 28:38:68:3f:4f:8b:50:c0:ed:73:1f:9f:a2:1b:3e: f5:8c:33:74:78:5c:32:02:db:ae:18:b2:a7:41:3b: 25:f6:f7:71:2f:9d:45:e6:16:ab:35:52:4f:4f:63: ef:f3:0b:0b:eb:11:e9:10:64:78:db:b1:2d:7d:9a: d5:39:0a:2c:a5:2f:18:b7:23:24:0f:17:0c:42:bf: e8:85:6d:7e:0b:4b:2c:1b:a4:13:3b:b2:6d:0e:51: f2:b8:92:50:4a:d8:b1:86:ab:90:17:d8:d5:3d:32: c1:68:bb:e4:ad:7d:54:16:df:ef:89:09:2d:93:78: 5d:93:56:c2:20:8c:58:d9:be:b0:30:c6:d0:0c:11: 60:df:d3:24:99:03:1d:4c:56:78:84:a8:05:91:e8: 3e:6a:4e:9b:d1:ec:ed:36:27:d9:61:74:79:84:b7: 42:3b:d8:61:7d:04:a9:41:cd:cb:c6:10:bc:2f:5e: 39:4c:51:4c:b8:20:a0:b9:e8:70:cc:92:ac:c5:1b: 89:35:73:bc:08:ec:37:d9:71:4b:51:57:93:74:b2: 4b:eb:80:d0:82:25:eb:3f:9c:25:35:f6:45:14:e1: 1a:d2:44:5f:68:bc:4b:60:36:39:ab:e9:fb:13:f7: f3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:67:60:5C:9A:15:B7:F2:06:E7:D6:FB:DC:C8:06:79:1E:64:9A:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/70af7514-4dbc-3963-8c42-158baab7fb82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl X509v3 Authority Key Identifier: keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer sbgp-ipAddrBlock: critical IPv4: 173.241.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3a:91:3e:64:6a:78:27:dd:7f:20:f1:34:8e:7f:15:7d:ae: 30:cc:da:39:14:e1:47:92:16:a2:e2:8c:21:1d:6d:01:d1:09: ad:7b:71:6a:fa:02:c8:58:96:da:c8:cb:a5:76:ec:e7:b2:f3: 4e:2a:71:fe:b4:77:07:5f:1a:78:de:d6:fc:84:e3:f7:11:a9: da:fa:c5:d4:39:e6:d8:ed:1e:bd:d8:8d:d7:00:2a:45:8e:e0: 42:05:76:b9:08:24:ce:98:29:71:8b:0d:8d:6c:b0:b5:24:48: f8:97:24:98:11:cf:af:65:44:eb:b5:d9:4f:40:9c:10:a8:90: 16:d1:71:8f:8b:d2:9e:49:76:dc:83:b6:84:82:9a:72:1e:d9: e4:47:6c:0c:a3:3f:58:42:b2:bf:51:3b:ce:af:44:0c:57:16: 5f:dc:49:00:e1:be:9a:c7:ef:3e:55:be:75:00:50:63:15:f7: 75:d3:5d:6c:c2:0a:e9:f0:72:f7:e8:38:9d:5e:d8:95:19:49: 0c:f1:7e:44:77:b9:b1:ed:58:d4:8d:13:c1:ac:b2:4f:46:08: 70:3f:73:29:89:e0:2a:52:1d:ad:d3:07:2c:ef:43:b7:b1:1f: c0:88:e0:23:49:fc:61:da:5b:65:d2:f6:1f:49:40:26:f8:c2: f6:b3:bd:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDMl78yyL0FJ/iMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhOTQ0Y2QtNTFhOC00ZDEwLWFlNTctNzI0ZGUyNmEx ZDYyMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NDk3ZDNjMzMtN2FiZC00ZjJlLWE3NmMtOWEwYTEyODYzZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAN41KGilwNPaNSgkYcoOGg/T4tQwO1zH5+i Gz71jDN0eFwyAtuuGLKnQTsl9vdxL51F5harNVJPT2Pv8wsL6xHpEGR427EtfZrV OQospS8YtyMkDxcMQr/ohW1+C0ssG6QTO7JtDlHyuJJQStixhquQF9jVPTLBaLvk rX1UFt/viQktk3hdk1bCIIxY2b6wMMbQDBFg39MkmQMdTFZ4hKgFkeg+ak6b0ezt NifZYXR5hLdCO9hhfQSpQc3LxhC8L145TFFMuCCguehwzJKsxRuJNXO8COw32XFL UVeTdLJL64DQgiXrP5wlNfZFFOEa0kRfaLxLYDY5q+n7E/fzxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClnYFyaFbfyBufW+9zIBnkeZJrGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5 NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRkZTI2YTFkNjIvNzBhZjc1MTQtNGRiYy0z OTYzLThjNDItMTU4YmFhYjdmYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzNhOTQ0Y2QtNTFhOC00ZDEwLWFl NTctNzI0ZGUyNmExZDYyL2MzYTk0NGNkLTUxYTgtNGQxMC1hZTU3LTcyNGRlMjZh MWQ2Mi5jcmwwHwYDVR0jBBgwFoAUqGCfuRfF6i7M/i9bQ1PRwl+tfbUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRk ZTI2YTFkNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU6kT5kangn3X8g8TSOfxV9rjDM2jkU4UeSFqLijCEdbQHRCa17cWr6 AshYltrIy6V27Oey804qcf60dwdfGnje1vyE4/cRqdr6xdQ55tjtHr3YjdcAKkWO 4EIFdrkIJM6YKXGLDY1ssLUkSPiXJJgRz69lROu12U9AnBCokBbRcY+L0p5JdtyD toSCmnIe2eRHbAyjP1hCsr9RO86vRAxXFl/cSQDhvprH7z5VvnUAUGMV93XTXWzC CunwcvfoOJ1e2JUZSQzxfkR3ubHtWNSNE8Gssk9GCHA/cymJ4CpSHa3TByzvQ7ex H8CI4CNJ/GHaW2XS9h9JQCb4wvazvbY= -----END CERTIFICATE-----Generated at Wed Nov 5 19:21:21 2025 by rpki-client