$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/a8e778ba-cd54-32bc-9dc5-4281fbd70bc7.roa File: a8e778ba-cd54-32bc-9dc5-4281fbd70bc7.roa (raw, json) Hash identifier: 6INFLNlYcF9qSshhj1JZiP1e7fFy8l0LaBgC+pVhNF4= Subject key identifier: CE:9C:75:76:68:18:2B:C4:5F:F5:2C:E6:B0:86:1A:76:A9:A9:13:8B Certificate issuer: /CN=533bea0e-cd52-49a8-9cca-a05cc33ce073 Certificate serial: 010D0C9F4328584BA0D27013E31E1F5CBACAB880 Authority key identifier: 33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/a8e778ba-cd54-32bc-9dc5-4281fbd70bc7.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 6939 IP address blocks: 173.249.254.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:70:13:e3:1e:1f:5c:ba:ca:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533bea0e-cd52-49a8-9cca-a05cc33ce073 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=6e6b3b44-8c88-49c9-8063-e8645af57948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0c:c5:80:21:66:2c:4b:25:3c:2d:95:e7:a0: b7:58:64:d0:6b:5c:05:87:c3:3e:98:65:cd:12:0a: b4:2e:9d:36:8b:b4:46:83:f9:51:af:80:f7:50:81: 69:96:56:73:7d:a9:55:55:23:e7:1c:63:0b:54:02: ed:22:d4:c0:44:50:53:b0:a4:eb:4e:3c:85:88:c3: bc:a8:f8:02:21:73:23:48:78:99:85:4f:64:fc:eb: 58:73:ea:1b:f7:ed:a6:26:82:0f:3e:c9:f9:7d:68: c3:0a:81:91:2f:02:61:51:2d:e9:e6:31:0d:0f:a9: c2:39:69:96:ed:d8:7a:66:5f:57:4b:f5:ee:9b:6a: a7:74:92:78:dd:25:5b:06:6c:cf:fd:e2:96:ac:74: 8a:70:0c:aa:7f:db:ca:58:46:9c:93:5d:e6:b3:c1: 8f:a3:3b:3f:90:b4:bc:7e:01:e8:17:e5:9d:11:f1: 38:a6:72:a3:b0:14:f2:4d:cf:7e:07:fd:b3:e5:5a: b5:42:0b:a3:6e:7d:cd:4e:40:f2:de:bd:cc:5d:ab: 28:95:d6:02:31:7b:a5:d2:bc:8e:2e:1f:ba:4f:84: 21:f2:eb:f3:e5:c6:6e:96:69:16:45:24:63:b4:f0: a8:43:34:20:25:9c:6d:30:08:8c:b7:2b:ee:d0:4a: 2e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9C:75:76:68:18:2B:C4:5F:F5:2C:E6:B0:86:1A:76:A9:A9:13:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/a8e778ba-cd54-32bc-9dc5-4281fbd70bc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl X509v3 Authority Key Identifier: keyid:33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer sbgp-ipAddrBlock: critical IPv4: 173.249.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:25:df:c3:3b:83:1f:bc:83:8f:a7:ea:4d:f2:e3:fa:75:81: d0:45:79:93:79:5c:37:ee:b9:d9:ef:08:81:63:ff:45:5d:d4: 93:07:37:70:c4:df:59:66:7a:31:c6:3b:ae:73:97:40:ce:58: 94:7e:6e:5b:87:d6:6f:c9:8f:29:67:43:90:cb:0b:ec:58:f7: bf:de:37:da:05:98:c7:47:43:ff:ce:d1:8a:bf:1d:16:81:5a: db:f7:3a:ba:97:75:14:82:b9:92:66:a9:af:c3:90:01:b5:c3: 64:03:c6:86:03:df:da:c0:08:28:83:39:52:23:a3:5d:63:17: f5:ab:47:00:64:63:72:75:74:a4:bd:1c:77:a3:5d:e9:81:90: 44:e2:35:69:f8:69:39:41:d0:9e:bd:bf:36:59:1d:ab:28:ac: 32:c6:fe:f8:9e:0a:ed:91:ac:7d:5f:e7:53:d9:9a:36:9b:84: 60:8f:dd:bb:99:50:2a:e2:72:87:3a:2a:76:06:bc:e3:91:96: 9b:ce:f2:e3:00:2e:ce:66:5f:78:11:31:e9:d9:0a:d6:ca:18: 80:81:92:49:fe:e6:bc:ea:c7:15:77:2b:68:8a:8b:62:83:70: 0b:53:d5:aa:07:f7:7b:86:68:ec:93:ca:56:01:13:bc:8a:16: cf:c0:64:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0nAT4x4fXLrKuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMzYmVhMGUtY2Q1Mi00OWE4LTljY2EtYTA1Y2MzM2Nl MDczMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NmU2YjNiNDQtOGM4OC00OWM5LTgwNjMtZTg2NDVhZjU3OTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigzFgCFmLEslPC2V56C3WGTQa1wFh8M+mGXN Egq0Lp02i7RGg/lRr4D3UIFpllZzfalVVSPnHGMLVALtItTARFBTsKTrTjyFiMO8 qPgCIXMjSHiZhU9k/OtYc+ob9+2mJoIPPsn5fWjDCoGRLwJhUS3p5jEND6nCOWmW 7dh6Zl9XS/Xum2qndJJ43SVbBmzP/eKWrHSKcAyqf9vKWEack13ms8GPozs/kLS8 fgHoF+WdEfE4pnKjsBTyTc9+B/2z5Vq1Qgujbn3NTkDy3r3MXasoldYCMXul0ryO Lh+6T4Qh8uvz5cZulmkWRSRjtPCoQzQgJZxtMAiMtyvu0EouVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6cdXZoGCvEX/Us5rCGGnapqROLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MzNi ZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVjYzMzY2UwNzMvYThlNzc4YmEtY2Q1NC0z MmJjLTlkYzUtNDI4MWZiZDcwYmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTMzYmVhMGUtY2Q1Mi00OWE4LTlj Y2EtYTA1Y2MzM2NlMDczLzUzM2JlYTBlLWNkNTItNDlhOC05Y2NhLWEwNWNjMzNj ZTA3My5jcmwwHwYDVR0jBBgwFoAUMxi/JZqnskOqqLLCHXyjj+mzZWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81MzNiZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVj YzMzY2UwNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfn+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsl38M7gx+8g4+n6k3y4/p1gdBFeZN5XDfuudnvCIFj/0Vd1JMHN3DE 31lmejHGO65zl0DOWJR+bluH1m/JjylnQ5DLC+xY97/eN9oFmMdHQ//O0Yq/HRaB Wtv3OrqXdRSCuZJmqa/DkAG1w2QDxoYD39rACCiDOVIjo11jF/WrRwBkY3J1dKS9 HHejXemBkETiNWn4aTlB0J69vzZZHasorDLG/vieCu2RrH1f51PZmjabhGCP3buZ UCricoc6KnYGvOORlpvO8uMALs5mX3gRMenZCtbKGICBkkn+5rzqxxV3K2iKi2KD cAtT1aoH93uGaOyTylYBE7yKFs/AZN4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:15:09 2025 by rpki-client