$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c9cf63e-f831-38dc-9842-492c99ff3d7a.roa File: 2c9cf63e-f831-38dc-9842-492c99ff3d7a.roa (raw, json) Hash identifier: g8bQXWXHN9xpW6sCmI2PzrVXGyUr7Htowe1fAnyHw00= Subject key identifier: DB:7D:97:82:BA:1E:35:5C:3C:89:4D:B8:D5:D5:53:EC:9A:A4:84:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB19265C30C9A725AF1752380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c9cf63e-f831-38dc-9842-492c99ff3d7a.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 173.222.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:65:c3:0c:9a:72:5a:f1:75:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=5205f8a8-b1fd-4f05-a784-a5d297603a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ff:ef:85:e0:07:93:f4:ab:f5:64:a2:84:4b: 71:d4:67:89:26:ba:ea:64:63:6f:d2:de:35:d4:7e: 3c:bf:4a:a9:fa:5e:65:9d:9a:2f:ad:36:a8:a6:e9: 2c:5d:34:1e:e2:6c:84:ab:a1:c9:6e:a8:9a:0f:07: 42:07:6a:29:9f:c1:a7:b9:2b:cf:c9:79:86:0e:38: e3:14:c7:09:77:89:f1:6c:a9:34:ff:5a:9e:ba:93: ee:2d:22:b4:7f:a7:0b:d1:9e:f1:ec:ef:ba:cc:95: c0:72:13:f9:49:49:60:2b:30:25:4e:a0:3f:7e:71: f6:9b:a4:eb:43:8c:92:0e:be:1e:dc:0d:03:66:e5: bc:6e:67:54:93:50:ae:b0:65:4f:7e:0e:b9:5a:06: 90:c5:83:62:95:ca:84:01:9b:14:99:8d:8e:75:7c: 26:99:23:38:28:a3:03:f6:78:16:4b:df:8a:c8:c5: 42:ea:a6:ee:e1:34:20:71:a6:d9:20:e8:61:0d:c9: 11:c1:74:ed:25:b0:cf:ac:f6:21:c0:04:d7:b5:5c: b3:b2:49:68:5a:5c:55:87:62:13:e7:fa:33:8a:d6: 01:f4:7d:b8:92:b9:b1:d3:73:6c:e0:15:33:46:1b: 02:63:6a:8f:cc:79:52:3d:25:ae:be:22:d3:82:4d: 84:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7D:97:82:BA:1E:35:5C:3C:89:4D:B8:D5:D5:53:EC:9A:A4:84:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c9cf63e-f831-38dc-9842-492c99ff3d7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:af:43:e6:a3:12:e5:d3:27:bd:15:65:22:18:a8:15:f6:05: 8c:64:19:78:d8:52:1b:ff:fc:1f:45:57:67:3b:72:2c:62:91: 90:9a:09:ba:c7:e9:79:6c:1f:0c:0a:49:f4:28:12:30:1f:4a: ce:b3:fe:b5:40:bf:cf:46:5e:30:57:2f:ba:be:e2:33:53:07: cc:ff:68:0d:b6:28:1b:8f:26:93:79:0b:85:94:19:ff:9c:fd: 9f:8c:11:fe:15:c3:0f:50:22:75:93:d0:f4:0c:93:25:7f:b7: 2f:8e:35:a3:71:f6:40:2a:b9:81:ae:a2:25:af:94:a2:ae:4d: 4d:68:8f:a8:0c:92:c5:25:7e:0a:6c:92:c8:4a:bf:25:1b:83: 98:95:4d:76:bb:59:fe:69:78:ce:6c:7e:c6:84:ca:45:a0:39: a5:12:6a:ca:0f:53:52:2a:b4:84:57:c5:fd:09:1b:e6:e7:51: 36:11:46:a8:6d:a4:30:a8:d8:3c:cd:ba:86:cb:26:66:f5:ca: 33:8d:b4:c3:40:99:20:ee:c7:d1:4f:b6:b9:a9:df:bb:cc:74: 64:c2:08:11:46:1e:7a:45:7f:6a:98:19:22:f1:de:f3:69:09: 8c:fd:13:30:f6:64:7e:7c:fc:25:25:ad:f2:4f:4e:df:06:3b: 1b:96:eb:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmXDDJpyWvF1I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NTIwNWY4YTgtYjFmZC00ZjA1LWE3ODQtYTVkMjk3NjAzYTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP/vheAHk/Sr9WSihEtx1GeJJrrqZGNv0t41 1H48v0qp+l5lnZovrTaopuksXTQe4myEq6HJbqiaDwdCB2opn8GnuSvPyXmGDjjj FMcJd4nxbKk0/1qeupPuLSK0f6cL0Z7x7O+6zJXAchP5SUlgKzAlTqA/fnH2m6Tr Q4ySDr4e3A0DZuW8bmdUk1CusGVPfg65WgaQxYNilcqEAZsUmY2OdXwmmSM4KKMD 9ngWS9+KyMVC6qbu4TQgcabZIOhhDckRwXTtJbDPrPYhwATXtVyzskloWlxVh2IT 5/ozitYB9H24krmx03Ns4BUzRhsCY2qPzHlSPSWuviLTgk2ElQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNt9l4K6HjVcPIlNuNXVU+yapIRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmM5Y2Y2M2UtZjgzMS0z OGRjLTk4NDItNDkyYzk5ZmYzZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd71MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqvQ+ajEuXTJ70VZSIYqBX2BYxkGXjYUhv//B9FV2c7cixikZCaCbrH 6XlsHwwKSfQoEjAfSs6z/rVAv89GXjBXL7q+4jNTB8z/aA22KBuPJpN5C4WUGf+c /Z+MEf4Vww9QInWT0PQMkyV/ty+ONaNx9kAquYGuoiWvlKKuTU1oj6gMksUlfgps kshKvyUbg5iVTXa7Wf5peM5sfsaEykWgOaUSasoPU1IqtIRXxf0JG+bnUTYRRqht pDCo2DzNuobLJmb1yjONtMNAmSDux9FPtrmp37vMdGTCCBFGHnpFf2qYGSLx3vNp CYz9EzD2ZH58/CUlrfJPTt8GOxuW6+o= -----END CERTIFICATE-----Generated at Tue Nov 4 22:25:46 2025 by rpki-client