$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5686cd4d-64b1-3f81-9094-4d5f1634ae26.roa File: 5686cd4d-64b1-3f81-9094-4d5f1634ae26.roa (raw, json) Hash identifier: y6l+kjYgsEomBzFeWJyvdQteBWOzR4PfFT9p7SiIbfc= Subject key identifier: 46:51:A4:A1:9E:BF:EE:93:31:7B:2E:8C:F3:AB:2E:7D:31:58:72:FE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB19275CD7D1828521CD9A000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5686cd4d-64b1-3f81-9094-4d5f1634ae26.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 173.223.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:75:cd:7d:18:28:52:1c:d9:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=63691a84-94f0-4f5d-8610-e8b85e40b1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:af:82:71:24:c3:99:72:8e:38:ad:00:05: 0a:e3:4c:6f:45:d3:8d:c5:ab:97:9e:70:35:35:8b: f7:d1:fe:6b:69:14:54:65:73:a4:46:13:1b:0a:3f: d3:12:0d:68:02:08:f2:ce:cb:c0:fb:10:65:60:b9: 22:39:44:24:fb:e0:7b:e3:80:ee:d6:e4:37:15:06: a3:4f:c3:73:58:42:19:e9:42:fd:03:c1:1c:3a:1c: 11:df:fb:04:73:57:a2:8a:69:e7:f8:87:f4:4c:42: e0:cc:f7:e3:5c:a0:7c:07:c6:80:7d:3d:87:1a:97: fc:71:7f:02:83:ea:87:78:9f:41:c4:fd:83:e5:d8: 8d:89:1b:ea:29:2b:c2:e8:e4:42:4b:50:15:3c:56: a5:5a:e4:3f:9f:2a:a6:8b:f7:19:ba:c3:3b:9e:b1: 82:57:6c:b7:8e:71:23:df:aa:b9:28:44:d2:9d:19: 21:db:7c:4d:d8:38:c2:e2:ad:52:f9:ee:16:da:0f: 99:52:b4:36:07:19:10:32:ec:11:a3:84:5d:21:70: c1:05:77:1a:a1:cf:0d:a0:52:5a:8d:da:ff:bf:76: 01:06:33:17:8b:f8:9b:2c:e1:66:20:dd:6e:14:97: ca:63:4e:35:1c:91:8d:81:62:48:5a:1c:6e:b3:96: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:51:A4:A1:9E:BF:EE:93:31:7B:2E:8C:F3:AB:2E:7D:31:58:72:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5686cd4d-64b1-3f81-9094-4d5f1634ae26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:6d:f5:9c:75:eb:bc:21:98:a6:19:53:d3:5b:4c:36:aa:0f: ea:06:15:3f:b6:25:35:53:a2:75:7e:b3:6f:a6:d2:53:56:3f: 84:69:8c:70:10:ae:0f:2b:e5:b0:49:27:3b:c8:c1:4e:71:6a: ce:24:e3:33:6a:45:13:3b:83:eb:ef:aa:c0:29:68:53:d5:8f: 28:70:4c:12:f1:88:2a:1b:69:f6:8d:eb:de:0d:e2:e1:e0:21: 4e:bb:ad:6a:b3:e4:d4:88:66:da:6a:56:fe:ba:7f:ae:57:8d: 1f:d4:c0:8b:db:7e:05:44:45:64:4a:0e:35:48:a4:bf:e7:77: 9b:12:c9:8a:53:f4:e0:f0:7f:11:44:a6:d8:ad:3e:97:f2:49: da:7c:06:dd:82:1b:bf:23:9a:15:e3:46:8a:e3:9d:70:a9:1d: 90:ac:6d:49:e2:cd:21:74:8f:ec:d3:29:df:ac:1f:52:88:38: 6c:f5:32:c4:c1:dc:a0:50:5d:ce:e3:70:e0:8a:af:7b:b8:c4: 7d:67:c9:7e:35:96:a1:3e:51:87:03:94:5c:96:4b:c6:c0:3f: f9:82:55:8a:32:5e:d5:a8:07:6f:b4:92:04:5a:f7:b6:c0:ad: 29:8e:90:59:7a:34:55:dd:ad:48:6e:3b:cc:39:7b:25:7a:f7: 59:7c:07:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknXNfRgoUhzZoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NjM2OTFhODQtOTRmMC00ZjVkLTg2MTAtZThiODVlNDBiMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLyvgnEkw5lyjjitAAUK40xvRdONxauXnnA1 NYv30f5raRRUZXOkRhMbCj/TEg1oAgjyzsvA+xBlYLkiOUQk++B744Du1uQ3FQaj T8NzWEIZ6UL9A8EcOhwR3/sEc1eiimnn+If0TELgzPfjXKB8B8aAfT2HGpf8cX8C g+qHeJ9BxP2D5diNiRvqKSvC6ORCS1AVPFalWuQ/nyqmi/cZusM7nrGCV2y3jnEj 36q5KETSnRkh23xN2DjC4q1S+e4W2g+ZUrQ2BxkQMuwRo4RdIXDBBXcaoc8NoFJa jdr/v3YBBjMXi/ibLOFmIN1uFJfKY041HJGNgWJIWhxus5YHYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZRpKGev+6TMXsujPOrLn0xWHL+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTY4NmNkNGQtNjRiMS0z ZjgxLTkwOTQtNGQ1ZjE2MzRhZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRt9Zx167whmKYZU9NbTDaqD+oGFT+2JTVTonV+s2+m0lNWP4RpjHAQ rg8r5bBJJzvIwU5xas4k4zNqRRM7g+vvqsApaFPVjyhwTBLxiCobafaN694N4uHg IU67rWqz5NSIZtpqVv66f65XjR/UwIvbfgVERWRKDjVIpL/nd5sSyYpT9ODwfxFE ptitPpfySdp8Bt2CG78jmhXjRorjnXCpHZCsbUnizSF0j+zTKd+sH1KIOGz1MsTB 3KBQXc7jcOCKr3u4xH1nyX41lqE+UYcDlFyWS8bAP/mCVYoyXtWoB2+0kgRa97bA rSmOkFl6NFXdrUhuO8w5eyV691l8B/4= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:22 2025 by rpki-client