$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4581957a-9a08-3c8e-afcc-0cd69fd3cc88.roa File: 4581957a-9a08-3c8e-afcc-0cd69fd3cc88.roa (raw, json) Hash identifier: keKs5BWfpxypaVSskjdsegjC4pxA7qAv4wfPydmn1lA= Subject key identifier: AD:D4:C3:3C:5D:01:B1:F3:AE:4B:B0:7B:79:36:E0:09:CA:62:17:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB19274E602579DC62AF4D000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4581957a-9a08-3c8e-afcc-0cd69fd3cc88.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 173.222.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:74:e6:02:57:9d:c6:2a:f4:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=3622325c-eb0c-4125-a35b-60fd0e84bd1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:11:f5:c4:6b:10:c7:21:2b:52:c5:b1:b1:83: 6d:39:7b:81:d5:a9:22:39:34:70:fe:d0:e2:b0:52: d4:36:d8:25:c6:88:bb:c2:59:74:20:93:a5:dc:20: ef:72:4e:75:ac:b4:d9:00:fe:08:1a:d4:33:dd:e0: 62:1d:ba:4b:57:03:ec:2e:cf:b7:9f:91:cd:1f:b1: 1d:80:92:d3:1d:66:a1:12:7a:2e:ba:22:75:cc:12: f3:26:85:89:84:d0:a7:54:42:5c:01:c9:1a:e7:6d: 4c:04:f8:64:0f:13:c5:e8:a4:3c:1c:d8:53:f5:53: ab:2a:66:fd:ad:b6:6e:d7:5b:46:72:62:21:4b:a5: 37:5a:68:f6:ff:d1:46:69:1f:19:e1:87:ea:32:ad: 5e:eb:15:67:ae:0f:89:d5:1c:37:7c:3e:bd:87:2b: bd:b6:c6:49:86:a0:3f:20:bf:ce:e5:79:09:e3:15: 64:49:b4:42:39:46:a0:29:5a:65:8d:c3:91:8b:c0: 6d:a0:51:b0:57:43:67:dc:ea:ea:98:1e:a6:41:37: 93:bc:f7:c5:dd:e5:67:62:70:dc:27:48:cd:70:71: 92:85:17:ee:1e:88:45:63:51:2e:dc:6a:3a:b5:b0: 42:20:8c:01:38:fc:01:d6:d1:57:dd:16:41:93:68: 3f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D4:C3:3C:5D:01:B1:F3:AE:4B:B0:7B:79:36:E0:09:CA:62:17:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4581957a-9a08-3c8e-afcc-0cd69fd3cc88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:3e:9d:bc:44:fa:4d:27:a0:9f:74:d4:9c:89:6c:61:60:6c: bc:19:1e:2f:69:b3:e4:c7:ea:4b:ea:4f:e7:6d:7b:be:76:e8: d3:1a:4f:94:d9:f3:52:fc:22:47:c6:58:41:f4:0e:14:c1:b5: 6e:bc:09:80:45:d8:13:4d:7f:b2:99:dd:b7:b2:97:0b:9f:39: fe:d2:73:a5:c2:ef:8f:34:9c:83:18:b9:b5:ac:95:98:f1:77: 97:a1:60:35:e2:e3:39:b0:b8:b2:bc:2d:1e:4f:f6:69:7a:27: f2:0c:75:2f:69:16:69:14:5c:da:00:2e:99:7e:3d:b0:1c:a7: 8d:a5:26:9a:00:7d:26:81:e9:f9:de:b7:c6:e6:6f:10:ed:3c: 13:c8:79:18:e2:12:28:02:f8:aa:6b:80:a2:41:e7:0e:c6:dc: 21:09:36:26:ed:b6:bb:50:5e:46:28:1f:3c:72:8c:f3:70:21: 8e:a9:45:dc:19:13:81:02:2d:4d:14:01:1d:77:11:42:99:80: f2:a1:3e:ec:7e:39:30:eb:23:ba:1e:ba:b4:7d:94:88:e0:bc: 61:a0:e0:66:7f:bb:e6:55:19:9a:78:93:80:cd:3c:b8:dd:40: 6d:e6:87:e3:6b:67:69:6a:44:69:20:d0:bf:61:52:c5:43:3f: dc:83:74:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknTmAledxir00AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MzYyMjMyNWMtZWIwYy00MTI1LWEzNWItNjBmZDBlODRiZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhH1xGsQxyErUsWxsYNtOXuB1akiOTRw/tDi sFLUNtglxoi7wll0IJOl3CDvck51rLTZAP4IGtQz3eBiHbpLVwPsLs+3n5HNH7Ed gJLTHWahEnouuiJ1zBLzJoWJhNCnVEJcAcka521MBPhkDxPF6KQ8HNhT9VOrKmb9 rbZu11tGcmIhS6U3Wmj2/9FGaR8Z4YfqMq1e6xVnrg+J1Rw3fD69hyu9tsZJhqA/ IL/O5XkJ4xVkSbRCOUagKVpljcORi8BtoFGwV0Nn3OrqmB6mQTeTvPfF3eVnYnDc J0jNcHGShRfuHohFY1Eu3Go6tbBCIIwBOPwB1tFX3RZBk2g/nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3UwzxdAbHzrkuwe3k24AnKYhcyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDU4MTk1N2EtOWEwOC0z YzhlLWFmY2MtMGNkNjlmZDNjYzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrd76MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE+nbxE+k0noJ901JyJbGFgbLwZHi9ps+TH6kvqT+dte7526NMaT5TZ 81L8IkfGWEH0DhTBtW68CYBF2BNNf7KZ3beylwufOf7Sc6XC7480nIMYubWslZjx d5ehYDXi4zmwuLK8LR5P9ml6J/IMdS9pFmkUXNoALpl+PbAcp42lJpoAfSaB6fne t8bmbxDtPBPIeRjiEigC+KprgKJB5w7G3CEJNibttrtQXkYoHzxyjPNwIY6pRdwZ E4ECLU0UAR13EUKZgPKhPux+OTDrI7oeurR9lIjgvGGg4GZ/u+ZVGZp4k4DNPLjd QG3mh+NrZ2lqRGkg0L9hUsVDP9yDdKg= -----END CERTIFICATE-----Generated at Wed Nov 5 01:31:52 2025 by rpki-client