$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/84b81215-f76d-3151-a30f-aafc2380d4b1.roa File: 84b81215-f76d-3151-a30f-aafc2380d4b1.roa (raw, json) Hash identifier: 5IxZSdWpAaIszVSDZge6pnR+9e2Oo4tydhgu6aRteVQ= Subject key identifier: 89:4E:C3:DF:87:90:7B:D5:C7:47:D3:AB:56:16:05:AB:25:09:76:07 Certificate issuer: /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Certificate serial: 010D0C9F4328584BB5C267CDB30F4567BEB78EB0 Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/84b81215-f76d-3151-a30f-aafc2380d4b1.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 12208 IP address blocks: 173.248.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:67:cd:b3:0f:45:67:be:b7:8e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=41f8a8a0-bd75-4a25-82eb-bf9abc9d6432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4a:66:ca:7f:fc:db:58:6d:55:0d:e4:fa:f5: d4:88:cc:0e:6a:c3:b7:38:8f:5d:6c:83:fb:f6:a8: ff:52:c5:c5:b2:45:4d:23:8a:e7:62:03:2c:23:fe: c9:32:64:04:f3:88:62:2c:c6:c9:d9:e1:ef:dd:84: 9b:74:78:59:8b:f4:9a:1b:ce:a1:ff:08:9f:ed:c3: 73:db:c7:6a:1f:cb:21:65:7c:94:9f:4c:f1:65:0f: e8:3f:6f:17:94:3e:b7:a5:8a:04:29:43:7e:d4:c1: 8b:d7:18:fb:9a:b5:ab:86:6d:1c:62:e7:5d:d0:d7: c1:ba:fd:7a:13:9b:47:87:b0:4d:be:46:99:cc:19: 1d:c6:15:a1:be:4d:fd:a0:57:7a:35:87:4b:ee:47: a4:be:35:58:0d:fa:07:a2:df:29:36:ba:b4:b5:c7: d8:de:ed:5f:68:85:4d:f6:c1:8d:09:b7:55:00:79: 1e:09:79:02:e2:a7:92:98:6d:6c:ba:19:b2:89:d0: 5f:91:29:94:e0:f7:20:77:15:ff:90:0c:2b:4f:c6: fb:09:41:4e:00:9e:b9:69:a7:ca:6b:a9:d1:c7:d1: bc:bd:f2:f2:6b:45:96:3a:0c:fd:89:34:8b:7e:35: c7:97:44:06:ba:08:66:c4:99:db:8c:42:cf:03:3c: 18:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4E:C3:DF:87:90:7B:D5:C7:47:D3:AB:56:16:05:AB:25:09:76:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/84b81215-f76d-3151-a30f-aafc2380d4b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl X509v3 Authority Key Identifier: keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer sbgp-ipAddrBlock: critical IPv4: 173.248.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:20:f9:1e:58:54:7c:69:2d:40:15:2e:72:76:89:81:33:6c: 3d:4f:63:19:21:25:1f:44:34:e0:c7:41:1b:d2:30:e6:88:a9: 8e:8c:67:5b:9f:a5:ba:e7:2b:e8:00:d6:5e:5b:6f:5b:97:48: 22:63:85:1f:c8:25:fb:98:29:45:b7:8c:df:a0:81:cc:3e:de: 28:60:9a:e3:47:40:48:f5:b5:2c:1a:fc:1f:c6:09:61:f6:51: e9:4e:fa:7a:e7:b8:11:52:a7:a1:d0:47:64:a9:63:27:a4:46: 7c:e7:74:6b:f3:65:a3:5c:ef:ce:41:d3:0b:91:2a:cb:a2:f8: 44:05:ae:77:65:24:44:53:5b:0b:4f:ea:ab:47:61:98:ab:cf: 7d:58:84:bb:73:f6:88:0d:06:58:ae:2d:97:30:69:99:db:be: 27:48:33:0a:e4:f3:25:34:9f:f6:b2:2d:f5:b6:43:19:92:a3: 4f:c4:a1:b3:4a:05:76:ba:f4:ed:07:bc:55:ac:98:b7:5e:2e: 60:81:41:2b:c5:10:fa:db:e0:36:44:ed:4c:18:0a:2b:0b:22: 12:36:e3:db:e2:a6:d4:8f:9e:54:47:7f:13:79:96:b0:79:f0: 3a:a5:eb:2c:3b:9f:8d:0b:d3:ed:db:72:00:82:bf:50:9f:eb: 37:8e:d5:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmfNsw9FZ763jrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzczZTEwNTQtNWY0Yi00YWE1LTllNTUtMWM1Yzg3ZmI3 MDlkMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NDFmOGE4YTAtYmQ3NS00YTI1LTgyZWItYmY5YWJjOWQ2NDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30pmyn/821htVQ3k+vXUiMwOasO3OI9dbIP7 9qj/UsXFskVNI4rnYgMsI/7JMmQE84hiLMbJ2eHv3YSbdHhZi/SaG86h/wif7cNz 28dqH8shZXyUn0zxZQ/oP28XlD63pYoEKUN+1MGL1xj7mrWrhm0cYudd0NfBuv16 E5tHh7BNvkaZzBkdxhWhvk39oFd6NYdL7kekvjVYDfoHot8pNrq0tcfY3u1faIVN 9sGNCbdVAHkeCXkC4qeSmG1suhmyidBfkSmU4PcgdxX/kAwrT8b7CUFOAJ65aafK a6nRx9G8vfLya0WWOgz9iTSLfjXHl0QGughmxJnbjELPAzwYOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlOw9+HkHvVx0fTq1YWBaslCXYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNl MTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVjODdmYjcwOWQvODRiODEyMTUtZjc2ZC0z MTUxLWEzMGYtYWFmYzIzODBkNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzczZTEwNTQtNWY0Yi00YWE1LTll NTUtMWM1Yzg3ZmI3MDlkL2M3M2UxMDU0LTVmNGItNGFhNS05ZTU1LTFjNWM4N2Zi NzA5ZC5jcmwwHwYDVR0jBBgwFoAUrzLMgojaa/ENvSnJtECK+OjGFtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNlMTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVj ODdmYjcwOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrfjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIg+R5YVHxpLUAVLnJ2iYEzbD1PYxkhJR9ENODHQRvSMOaIqY6MZ1uf pbrnK+gA1l5bb1uXSCJjhR/IJfuYKUW3jN+ggcw+3ihgmuNHQEj1tSwa/B/GCWH2 UelO+nrnuBFSp6HQR2SpYyekRnzndGvzZaNc785B0wuRKsui+EQFrndlJERTWwtP 6qtHYZirz31YhLtz9ogNBliuLZcwaZnbvidIMwrk8yU0n/ayLfW2QxmSo0/EobNK BXa69O0HvFWsmLdeLmCBQSvFEPrb4DZE7UwYCisLIhI249viptSPnlRHfxN5lrB5 8Dql6yw7n40L0+3bcgCCv1Cf6zeO1c8= -----END CERTIFICATE-----Generated at Wed Nov 5 16:54:09 2025 by rpki-client