$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/3cbc27e2-5dcd-3467-af15-d37674866f33.roa File: 3cbc27e2-5dcd-3467-af15-d37674866f33.roa (raw, json) Hash identifier: iQfN1MLxozFRrKcb6sAHB0vqdtDr6Ss3OPhNK7aahXw= Subject key identifier: A1:18:BF:A6:2B:FA:0E:15:48:25:CB:A0:47:2E:C1:66:C2:6D:93:46 Certificate issuer: /CN=7ed23894-86e6-4cc5-bf0f-6e077e092448 Certificate serial: 010D0C9F4328584B9B3CE53B2C2020DA417C0160 Authority key identifier: FB:7B:B8:33:51:D5:9E:1A:A0:1A:6D:F5:67:A0:13:78:0C:D7:31:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/3cbc27e2-5dcd-3467-af15-d37674866f33.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 3925 IP address blocks: 173.214.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e5:3b:2c:20:20:da:41:7c:01:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ed23894-86e6-4cc5-bf0f-6e077e092448 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=e1f7ed92-097a-4be9-94e9-6eb6a346bb98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:86:48:93:ef:ab:99:08:4a:c6:f4:9e:a3:c9: 38:d6:e6:c2:df:b7:ae:de:a4:4b:be:b0:b6:6b:0e: 78:91:eb:4e:2d:fd:b8:fe:11:56:ab:c5:36:9f:69: 8a:ae:6d:a1:5f:35:11:6e:66:1d:6d:37:0d:21:12: 6c:c2:12:c8:da:4e:23:62:19:d4:f8:d2:4e:a2:8a: 99:ef:2e:e5:93:ed:33:49:82:f9:58:09:2a:64:19: e5:e6:7d:53:24:65:b6:25:42:f1:ca:52:6f:1a:ae: 9c:e0:a6:f0:a8:a7:74:56:80:16:4c:33:15:a2:50: 2f:b0:b5:a7:20:f2:57:09:71:de:3b:b1:bf:44:cf: e2:7c:54:00:bf:63:7a:b0:9a:3d:21:e2:7b:b4:e0: 57:cf:6c:16:cf:1e:c3:d8:8e:9e:3f:2b:fc:64:90: 99:a4:5c:a5:51:be:b3:17:63:38:cf:96:d5:2f:c4: c9:3d:6a:f9:45:f9:74:bd:78:8a:71:25:61:b2:54: bc:e6:76:05:d5:7c:85:1b:35:2a:1e:fe:6d:17:f8: da:1e:a4:7d:5f:2f:13:82:08:9c:15:7f:2b:16:9b: 84:17:a5:9e:32:4f:db:44:c5:11:9d:8f:fb:46:bb: 07:d6:80:22:86:b4:b8:06:62:75:14:22:c5:49:06: 62:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:18:BF:A6:2B:FA:0E:15:48:25:CB:A0:47:2E:C1:66:C2:6D:93:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/3cbc27e2-5dcd-3467-af15-d37674866f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.crl X509v3 Authority Key Identifier: keyid:FB:7B:B8:33:51:D5:9E:1A:A0:1A:6D:F5:67:A0:13:78:0C:D7:31:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer sbgp-ipAddrBlock: critical IPv4: 173.214.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:2a:d7:22:10:e5:4d:2c:62:4a:33:34:77:6d:12:f8:85:6d: 26:a9:0e:b5:c7:40:30:49:22:ab:16:b6:36:53:b2:14:a0:31: db:83:85:4b:df:7b:0b:29:3b:3c:d7:20:35:ff:8e:3f:0e:dc: df:24:af:a0:2a:ff:21:28:48:72:e1:96:0d:1c:e5:b0:b0:b1: 93:1f:d6:a6:96:22:68:07:7b:89:73:bf:be:80:f6:20:96:e3: a3:f9:e0:bd:4d:b6:b0:aa:63:67:c5:97:68:7b:5f:b8:16:65: 9c:d8:7e:d0:ae:c5:38:a7:d7:ce:c6:bb:92:26:37:79:ad:1e: d9:bc:d7:8a:7d:c2:f8:88:01:17:89:db:36:e5:ac:d1:ee:c2: 0c:aa:7b:b7:6c:4e:fc:bd:e2:24:33:68:56:d1:7e:a1:b1:22: 8c:58:f4:77:7b:4d:37:26:11:c6:2c:d7:30:df:77:01:f6:15: 44:36:b9:b5:ad:13:ec:d1:22:81:9f:e6:ec:c5:4e:d4:97:ba: 05:9b:e2:3c:24:33:c1:9e:40:44:4c:ac:bc:ab:ad:ba:81:11: 5d:09:42:2b:c9:4e:c0:ce:53:6b:97:d6:5f:f9:5b:e6:7a:31: ed:26:7e:de:41:9a:6d:24:9d:52:ed:39:48:97:cd:02:1d:5f: ca:2e:4e:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOU7LCAg2kF8AWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VkMjM4OTQtODZlNi00Y2M1LWJmMGYtNmUwNzdlMDky NDQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZTFmN2VkOTItMDk3YS00YmU5LTk0ZTktNmViNmEzNDZiYjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4ZIk++rmQhKxvSeo8k41ubC37eu3qRLvrC2 aw54ketOLf24/hFWq8U2n2mKrm2hXzURbmYdbTcNIRJswhLI2k4jYhnU+NJOooqZ 7y7lk+0zSYL5WAkqZBnl5n1TJGW2JULxylJvGq6c4KbwqKd0VoAWTDMVolAvsLWn IPJXCXHeO7G/RM/ifFQAv2N6sJo9IeJ7tOBXz2wWzx7D2I6ePyv8ZJCZpFylUb6z F2M4z5bVL8TJPWr5Rfl0vXiKcSVhslS85nYF1XyFGzUqHv5tF/jaHqR9Xy8Tggic FX8rFpuEF6WeMk/bRMURnY/7RrsH1oAihrS4BmJ1FCLFSQZiwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEYv6Yr+g4VSCXLoEcuwWbCbZNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZWQy Mzg5NC04NmU2LTRjYzUtYmYwZi02ZTA3N2UwOTI0NDgvM2NiYzI3ZTItNWRjZC0z NDY3LWFmMTUtZDM3Njc0ODY2ZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2VkMjM4OTQtODZlNi00Y2M1LWJm MGYtNmUwNzdlMDkyNDQ4LzdlZDIzODk0LTg2ZTYtNGNjNS1iZjBmLTZlMDc3ZTA5 MjQ0OC5jcmwwHwYDVR0jBBgwFoAU+3u4M1HVnhqgGm31Z6ATeAzXMX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZWQyMzg5NC04NmU2LTRjYzUtYmYwZi02ZTA3 N2UwOTI0NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdbNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsq1yIQ5U0sYkozNHdtEviFbSapDrXHQDBJIqsWtjZTshSgMduDhUvf ewspOzzXIDX/jj8O3N8kr6Aq/yEoSHLhlg0c5bCwsZMf1qaWImgHe4lzv76A9iCW 46P54L1NtrCqY2fFl2h7X7gWZZzYftCuxTin187Gu5ImN3mtHtm814p9wviIAReJ 2zblrNHuwgyqe7dsTvy94iQzaFbRfqGxIoxY9Hd7TTcmEcYs1zDfdwH2FUQ2ubWt E+zRIoGf5uzFTtSXugWb4jwkM8GeQERMrLyrrbqBEV0JQivJTsDOU2uX1l/5W+Z6 Me0mft5Bmm0knVLtOUiXzQIdX8ouTjU= -----END CERTIFICATE-----Generated at Wed Nov 5 06:24:35 2025 by rpki-client