$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d771eef-151a-3a88-98d2-f93e1f30305e.roa File: 2d771eef-151a-3a88-98d2-f93e1f30305e.roa (raw, json) Hash identifier: RhCnBfeLG79mJrhynRtFEiSTmUHBgiViSQs5pqN9Ags= Subject key identifier: 76:44:A0:77:E9:4E:A2:03:D1:E2:12:E6:74:89:38:AC:A8:B5:68:4E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB19266B8A48966230F3F9900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d771eef-151a-3a88-98d2-f93e1f30305e.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 173.223.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:66:b8:a4:89:66:23:0f:3f:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=f158975a-14b9-4045-9c3f-7eaf0a4a71c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cc:61:67:6c:b4:82:c1:8c:23:a7:e2:83:fe: c9:11:27:c9:2f:ab:3e:6d:43:bb:f7:bc:90:14:0a: 5d:dc:f2:4f:8b:17:5b:30:8f:34:11:b0:71:13:b3: f1:2a:e4:6f:80:a6:b6:78:7c:7c:5d:69:77:5f:43: b2:85:9a:01:79:3f:a8:25:d3:dc:72:3b:13:84:0c: a1:8c:63:5f:fc:e0:dd:30:3d:78:c2:e6:c7:f4:6c: 33:c1:55:54:15:93:7c:79:08:a7:fb:c6:be:0b:6e: dc:ca:61:ef:fb:be:12:3f:ae:f0:e9:84:4d:00:03: 23:14:c1:8c:f2:04:da:a8:16:23:e0:19:42:64:3c: 77:a8:09:72:57:e9:5c:be:6b:30:3c:9a:4e:a0:6a: 59:a5:39:1e:d2:8e:cd:7e:c5:9f:1f:6b:9b:a1:9d: 57:34:37:b8:80:32:33:e8:bb:3f:89:00:1f:a6:08: 38:56:cb:c7:dc:9b:43:04:ce:86:ec:69:5a:51:01: 98:25:79:93:dc:9c:76:0d:6c:40:9a:be:03:3f:7b: 34:9c:f5:f3:5f:4f:3e:b0:b6:a9:e9:e4:57:d8:71: 83:b6:13:89:9c:6f:f7:3f:7a:ab:5e:a2:73:74:84: 9e:06:eb:6d:9f:08:73:79:dd:ee:76:32:2c:06:83: 58:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:44:A0:77:E9:4E:A2:03:D1:E2:12:E6:74:89:38:AC:A8:B5:68:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d771eef-151a-3a88-98d2-f93e1f30305e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e6:8b:a1:f0:5c:b2:64:e2:85:56:8b:dd:46:12:1a:f3:62: 17:03:9d:53:b1:ad:0d:16:a8:08:06:15:28:90:22:c8:00:fb: fb:30:ab:e5:a6:71:a0:13:19:1e:28:cb:71:45:50:32:bc:8f: 3a:bb:81:ee:3b:36:75:0c:80:84:13:61:38:b8:db:fb:73:df: a4:12:cc:27:ea:6e:e7:58:7a:f1:f3:e2:cd:0e:6c:ce:7b:3c: 76:66:dc:cc:3d:1f:c9:2b:99:f0:eb:ed:79:38:30:de:42:e6: 57:b2:84:70:0a:46:73:fe:41:21:3d:dd:b5:7c:42:0f:96:a1: 7b:64:52:35:50:47:40:7f:03:cc:a5:fe:ef:77:c9:8b:60:70: d4:4d:f5:d4:aa:21:be:f4:38:b0:00:8e:e4:a6:cf:4c:8a:69: d6:79:ae:e9:56:0a:a2:06:6b:a3:00:76:79:7b:e3:88:25:83: de:4a:83:09:13:07:5a:a1:14:e1:81:a9:91:63:a6:fe:58:52: 88:fb:99:52:30:75:2f:34:01:20:0f:52:0b:3f:5f:6b:f5:e2: 12:f3:27:31:c7:ee:23:56:bb:53:07:87:89:bb:a3:32:71:9f: bd:1f:6e:23:db:97:b0:3e:4d:b1:23:ce:32:33:be:88:7f:f5: 61:7b:8c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkma4pIlmIw8/mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZjE1ODk3NWEtMTRiOS00MDQ1LTljM2YtN2VhZjBhNGE3MWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsxhZ2y0gsGMI6fig/7JESfJL6s+bUO797yQ FApd3PJPixdbMI80EbBxE7PxKuRvgKa2eHx8XWl3X0OyhZoBeT+oJdPccjsThAyh jGNf/ODdMD14wubH9GwzwVVUFZN8eQin+8a+C27cymHv+74SP67w6YRNAAMjFMGM 8gTaqBYj4BlCZDx3qAlyV+lcvmswPJpOoGpZpTke0o7NfsWfH2uboZ1XNDe4gDIz 6Ls/iQAfpgg4VsvH3JtDBM6G7GlaUQGYJXmT3Jx2DWxAmr4DP3s0nPXzX08+sLap 6eRX2HGDthOJnG/3P3qrXqJzdISeButtnwhzed3udjIsBoNYTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZEoHfpTqID0eIS5nSJOKyotWhOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmQ3NzFlZWYtMTUxYS0z YTg4LTk4ZDItZjkzZTFmMzAzMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd/jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/mi6HwXLJk4oVWi91GEhrzYhcDnVOxrQ0WqAgGFSiQIsgA+/swq+Wm caATGR4oy3FFUDK8jzq7ge47NnUMgIQTYTi42/tz36QSzCfqbudYevHz4s0ObM57 PHZm3Mw9H8krmfDr7Xk4MN5C5leyhHAKRnP+QSE93bV8Qg+WoXtkUjVQR0B/A8yl /u93yYtgcNRN9dSqIb70OLAAjuSmz0yKadZ5rulWCqIGa6MAdnl744glg95KgwkT B1qhFOGBqZFjpv5YUoj7mVIwdS80ASAPUgs/X2v14hLzJzHH7iNWu1MHh4m7ozJx n70fbiPbl7A+TbEjzjIzvoh/9WF7jBE= -----END CERTIFICATE-----Generated at Wed Nov 5 02:41:49 2025 by rpki-client