$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63ac2c72-b418-33fd-abcd-c5bf4dac6e1c.roa File: 63ac2c72-b418-33fd-abcd-c5bf4dac6e1c.roa (raw, json) Hash identifier: lSdPJqoskf6mMiuaMoPOngwfmXvj4Mzwznn38y7hitw= Subject key identifier: 9A:30:EB:33:62:43:4F:B5:BF:CA:02:84:EB:9A:F6:50:EB:52:30:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB19265EDDC22A0978B05FE5E Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63ac2c72-b418-33fd-abcd-c5bf4dac6e1c.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 173.223.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:65:ed:dc:22:a0:97:8b:05:fe:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=886d0154-509d-42d7-9397-e30fc3d83e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:01:40:99:32:52:dc:83:7a:13:df:d1:b3:5a: 94:05:a7:ff:3d:5e:e6:0f:87:fa:32:d4:5d:aa:30: e5:e8:7c:05:4b:8a:1a:30:67:12:84:2f:ac:ad:a9: d8:bc:c9:bc:4d:59:86:da:78:4f:16:8b:b7:87:0a: 40:a9:d3:7e:95:ba:57:dd:35:4d:01:c1:ca:15:04: 7a:d7:b2:53:0d:c8:92:29:93:c6:8c:fd:02:6b:82: 78:1e:d5:04:18:04:fb:5a:63:da:26:92:4c:01:6b: 76:5c:32:5b:a9:1b:c1:4f:b6:43:7c:e9:58:9b:84: a6:30:9b:20:2a:75:d5:66:9e:b4:2a:dc:9e:19:fe: b5:05:1a:d3:8c:90:ea:84:d7:fe:8d:a5:99:6a:52: b2:05:85:9d:03:50:bf:8f:48:78:e8:24:38:94:d8: 15:92:a3:9b:dc:9e:ce:2e:46:76:f3:87:4f:c9:41: d5:f7:66:80:1f:57:e7:6a:23:17:79:a5:e0:84:e1: 1f:57:05:07:1e:61:e9:16:c2:2e:b5:db:3c:88:80: f1:a0:19:c4:9b:db:d3:aa:81:38:ff:e1:c8:69:dc: e7:40:fd:44:89:85:79:8e:d3:a9:87:92:43:c2:ca: 48:ad:98:4d:a8:0f:8f:a0:4a:b8:ec:76:85:85:2b: 16:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:30:EB:33:62:43:4F:B5:BF:CA:02:84:EB:9A:F6:50:EB:52:30:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63ac2c72-b418-33fd-abcd-c5bf4dac6e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c3:f2:45:b8:90:8c:17:64:52:39:b1:6e:64:81:3d:52:65: 3a:29:88:e1:4e:2f:b3:7b:da:61:85:94:e1:6a:57:e4:dd:b7: e6:8f:21:e7:7b:0f:6a:9e:95:4f:07:7a:f6:06:09:1c:66:31: ee:c2:62:e4:6c:ab:e6:81:f6:fb:98:94:77:e8:1b:a7:9b:85: e4:18:3b:89:99:7e:77:1b:2f:f2:27:0c:3d:da:64:50:21:70: 37:23:5e:99:06:2e:b3:b7:71:d7:1e:a8:24:30:4c:13:6e:d1: c5:de:3b:21:3c:af:44:6b:c4:fa:72:e0:7b:42:2a:a0:4a:86: a2:e6:3d:89:13:8d:b7:42:f7:6d:cb:4d:24:09:b4:25:3d:8f: 64:40:06:8a:e3:9a:93:ac:5e:96:da:2b:05:65:19:ff:a4:b1: cd:11:58:03:ed:28:95:87:8f:78:f5:db:4c:da:0b:78:fc:c1: 84:5a:77:e2:b5:6d:f6:26:65:1b:61:b9:9c:be:73:1a:37:bd: ac:cb:d4:07:89:df:a1:28:20:11:02:8f:a5:18:68:78:3e:9b: 29:76:9c:52:d7:f9:f5:1e:47:d0:c7:6c:ec:21:22:2c:00:e7: 77:0a:28:3c:c4:63:ae:10:7e:82:19:16:b9:f4:38:6b:27:3f: 96:7d:fe:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmXt3CKgl4sF/l4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ODg2ZDAxNTQtNTA5ZC00MmQ3LTkzOTctZTMwZmMzZDgzZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgFAmTJS3IN6E9/Rs1qUBaf/PV7mD4f6MtRd qjDl6HwFS4oaMGcShC+sranYvMm8TVmG2nhPFou3hwpAqdN+lbpX3TVNAcHKFQR6 17JTDciSKZPGjP0Ca4J4HtUEGAT7WmPaJpJMAWt2XDJbqRvBT7ZDfOlYm4SmMJsg KnXVZp60KtyeGf61BRrTjJDqhNf+jaWZalKyBYWdA1C/j0h46CQ4lNgVkqOb3J7O LkZ284dPyUHV92aAH1fnaiMXeaXghOEfVwUHHmHpFsIutds8iIDxoBnEm9vTqoE4 /+HIadznQP1EiYV5jtOph5JDwspIrZhNqA+PoEq47HaFhSsWowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJow6zNiQ0+1v8oChOua9lDrUjAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjNhYzJjNzItYjQxOC0z M2ZkLWFiY2QtYzViZjRkYWM2ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETD8kW4kIwXZFI5sW5kgT1SZTopiOFOL7N72mGFlOFqV+Tdt+aPIed7 D2qelU8HevYGCRxmMe7CYuRsq+aB9vuYlHfoG6ebheQYO4mZfncbL/InDD3aZFAh cDcjXpkGLrO3cdceqCQwTBNu0cXeOyE8r0RrxPpy4HtCKqBKhqLmPYkTjbdC923L TSQJtCU9j2RABorjmpOsXpbaKwVlGf+ksc0RWAPtKJWHj3j120zaC3j8wYRad+K1 bfYmZRthuZy+cxo3vazL1AeJ36EoIBECj6UYaHg+myl2nFLX+fUeR9DHbOwhIiwA 53cKKDzEY64QfoIZFrn0OGsnP5Z9/u8= -----END CERTIFICATE-----Generated at Wed Nov 5 00:54:01 2025 by rpki-client