$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18b3cc76-b135-3b6b-aea7-cbb1a53e09ae.roa File: 18b3cc76-b135-3b6b-aea7-cbb1a53e09ae.roa (raw, json) Hash identifier: Trt6QVV3cF/51CqcIq4vXRhU6zdQ6Nq2ch4ovTePthI= Subject key identifier: 5C:82:C5:84:CF:D9:0F:0C:E8:62:59:B0:86:D4:47:7C:F9:56:6D:F6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BAEC7C6D3F0B046EE03C5C700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18b3cc76-b135-3b6b-aea7-cbb1a53e09ae.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 16625 IP address blocks: 173.222.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c6:d3:f0:b0:46:ee:03:c5:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=d1b45ce4-59ac-45a6-976f-e0b83055e93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:26:86:45:44:20:fa:47:af:1e:4a:92:68:94: 63:7d:64:25:2a:7e:d8:95:8c:2b:6a:c1:35:c6:6c: 27:8a:82:c8:75:81:8c:f2:b7:2e:fd:96:c7:1b:03: 18:e0:de:71:4c:23:01:78:fa:89:45:11:7e:1e:17: d3:74:4b:19:25:0b:86:95:a5:92:e5:56:9a:92:1f: 3b:bd:d7:75:91:b0:1a:37:80:0c:6d:e6:c6:fe:10: 62:24:5c:4e:53:f0:48:5f:0e:4f:27:18:fe:01:15: 47:40:bc:d9:eb:d1:47:41:5d:2b:5a:24:77:6f:a0: e5:26:1c:c3:c4:01:ab:53:81:c4:18:07:12:f8:9d: 18:50:7b:e3:51:46:ce:75:5f:f9:75:97:fd:19:d9: b9:7a:3a:a2:46:29:da:5c:fe:ef:5f:5e:62:9e:3e: 49:09:d7:60:20:30:d1:da:34:07:a8:0d:49:76:56: 6a:56:a5:ce:97:70:f2:04:60:ed:e5:e7:c9:bc:e4: b7:07:93:1f:70:87:27:5c:84:ab:ee:d0:38:32:d2: 0a:95:65:9c:04:cc:60:cc:dc:01:1f:00:38:42:f3: 59:9c:fa:28:c1:9e:f3:6b:a2:33:f6:eb:35:38:16: 40:bc:2a:bb:42:51:a5:7d:20:29:86:5f:9c:a6:f8: 9b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:82:C5:84:CF:D9:0F:0C:E8:62:59:B0:86:D4:47:7C:F9:56:6D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18b3cc76-b135-3b6b-aea7-cbb1a53e09ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:45:fc:d9:27:1a:19:6c:4d:2a:a8:07:b5:46:6d:0b:77:d8: b1:37:6f:dc:57:82:a4:19:77:bb:3f:51:e8:fe:cd:59:fa:c9: da:cc:11:15:9e:2c:20:7a:3d:22:15:31:af:47:b7:e9:52:61: 2e:ac:90:d8:2c:df:bd:cc:e2:31:78:50:1f:1c:04:90:e5:a5: 9c:f4:f7:3c:5e:60:99:7d:34:6d:2f:56:c1:6f:c4:2a:82:aa: 4b:38:68:6d:35:03:75:c9:9f:8f:cb:3c:ed:95:69:2d:4e:b1: 12:87:ff:eb:18:ed:e3:d1:cc:10:25:79:c6:dc:54:af:e9:42: c5:dc:4b:c4:f7:d1:64:a1:13:2b:1f:83:23:bd:ad:3d:26:40: 8c:75:2f:59:78:0d:11:7b:b6:69:3f:a4:0b:1c:19:fe:06:ef: ff:77:3e:70:a7:41:a3:82:ef:8d:0c:bc:ad:90:50:17:84:6f: a6:bf:ef:ca:ed:34:ef:91:50:41:97:7c:8e:99:df:1c:c0:32: ff:ae:79:6e:d2:9d:9a:73:80:26:58:56:0a:68:c2:86:23:41: 0a:fd:1c:9a:02:98:89:13:74:90:90:bb:17:9e:49:4d:c0:01: 24:da:1d:1d:32:9a:21:a8:c4:89:ca:f2:49:a6:30:b8:9e:f9: 77:ce:9d:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8bT8LBG7gPFxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ZDFiNDVjZTQtNTlhYy00NWE2LTk3NmYtZTBiODMwNTVlOTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCaGRUQg+kevHkqSaJRjfWQlKn7YlYwrasE1 xmwnioLIdYGM8rcu/ZbHGwMY4N5xTCMBePqJRRF+HhfTdEsZJQuGlaWS5Vaakh87 vdd1kbAaN4AMbebG/hBiJFxOU/BIXw5PJxj+ARVHQLzZ69FHQV0rWiR3b6DlJhzD xAGrU4HEGAcS+J0YUHvjUUbOdV/5dZf9Gdm5ejqiRinaXP7vX15inj5JCddgIDDR 2jQHqA1JdlZqVqXOl3DyBGDt5efJvOS3B5MfcIcnXISr7tA4MtIKlWWcBMxgzNwB HwA4QvNZnPoowZ7za6Iz9us1OBZAvCq7QlGlfSAphl+cpvibEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyCxYTP2Q8M6GJZsIbUR3z5Vm32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMThiM2NjNzYtYjEzNS0z YjZiLWFlYTctY2JiMWE1M2UwOWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtF/NknGhlsTSqoB7VGbQt32LE3b9xXgqQZd7s/Uej+zVn6ydrMERWe LCB6PSIVMa9Ht+lSYS6skNgs373M4jF4UB8cBJDlpZz09zxeYJl9NG0vVsFvxCqC qks4aG01A3XJn4/LPO2VaS1OsRKH/+sY7ePRzBAlecbcVK/pQsXcS8T30WShEysf gyO9rT0mQIx1L1l4DRF7tmk/pAscGf4G7/93PnCnQaOC740MvK2QUBeEb6a/78rt NO+RUEGXfI6Z3xzAMv+ueW7SnZpzgCZYVgpowoYjQQr9HJoCmIkTdJCQuxeeSU3A ASTaHR0ymiGoxInK8kmmMLie+XfOnSU= -----END CERTIFICATE-----Generated at Tue Nov 4 20:55:25 2025 by rpki-client