$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab8ce5ae-6be1-30e1-90ac-c7f5627a87d6.roa File: ab8ce5ae-6be1-30e1-90ac-c7f5627a87d6.roa (raw, json) Hash identifier: WKY0yttreWmIO0R3AH9ji/PEwDCxsIJltEfEPMjzoGs= Subject key identifier: 1F:4E:DC:1A:EF:8B:2D:E2:51:01:26:C2:93:30:B6:C7:95:32:BE:22 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB192750ADA08C3ADD8789F40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab8ce5ae-6be1-30e1-90ac-c7f5627a87d6.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 173.223.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:75:0a:da:08:c3:ad:d8:78:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=f19d9342-a980-4247-9050-91eb741512ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:50:c5:bd:0a:d3:5c:ff:4a:0b:0a:d3:37:9b: 2b:c6:a2:6c:fe:b6:62:87:40:2e:d4:b4:b7:49:8a: fe:ac:c8:0d:01:69:9a:4b:8a:c1:45:a1:53:fb:9a: 79:50:fb:fa:49:c1:84:6e:c6:53:e0:3d:0c:c9:e6: cd:61:20:fa:3b:85:ee:73:e7:a5:0f:6e:46:c5:c1: 79:fd:ef:55:63:b5:b1:55:69:22:5f:cf:3a:cd:da: f3:b2:91:cd:8f:1e:72:f4:a3:88:3c:b0:2a:63:d6: 75:c6:e7:35:2f:d2:ae:ba:49:66:0f:ed:c7:f6:70: 3b:a9:f0:79:72:1c:a4:f9:68:b5:dd:a4:2d:27:69: 67:3a:93:00:df:ce:f7:34:e7:f9:bd:40:e4:65:ec: 46:ee:32:ed:4d:e8:78:c3:85:5d:89:fa:b5:80:83: 7a:d2:22:27:bc:0c:19:6d:d1:28:8b:ba:9b:c9:6b: 5d:da:03:a1:86:af:2b:f6:e0:22:28:e4:48:79:e1: d8:fe:08:e0:55:1e:fa:9c:f9:64:75:ae:84:32:2e: 77:fa:e1:69:1e:c6:1c:71:58:74:b6:22:b6:f3:e1: e4:dd:95:1b:9a:cf:c1:07:ab:53:02:b7:89:ec:ac: 57:4f:64:c9:8f:78:d9:0a:3b:9d:81:9f:5c:c0:6d: 98:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4E:DC:1A:EF:8B:2D:E2:51:01:26:C2:93:30:B6:C7:95:32:BE:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab8ce5ae-6be1-30e1-90ac-c7f5627a87d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:6e:c3:7c:08:3c:39:c7:bb:3d:58:e5:ca:0d:aa:51:be:81: c3:fe:c2:6a:2f:22:4f:3a:c0:ed:d0:ae:d8:f7:af:58:ea:fe: 58:c2:30:43:01:48:85:d8:53:5c:b2:19:0a:f7:bd:df:ff:d7: 27:7f:a1:40:0b:fb:3e:9f:d0:7f:67:81:18:4a:6e:2c:bf:2a: af:bc:2c:c0:ba:56:b3:f6:f4:3c:75:98:a4:86:62:55:cc:e1: ce:09:b6:85:a5:ec:ec:b9:f5:fa:5d:bf:02:65:19:8a:cc:68: 83:34:8e:60:1b:d9:44:64:50:8d:4e:8c:ec:49:69:3a:c1:e7: b8:c2:8a:3c:f9:f1:0f:a5:af:c4:fa:24:18:9a:8f:26:96:2d: dc:c6:e7:df:87:c8:4c:a0:d7:cd:14:19:9b:a3:b4:92:33:01: e5:e5:d9:b8:5c:8e:09:e5:71:75:c3:b5:17:1a:65:d5:bf:37: 46:a9:95:bb:49:54:ee:d8:86:f7:69:e1:d9:8f:e9:86:23:60: 8c:3a:e7:00:c0:e4:77:1f:65:70:87:5e:49:b2:9e:1e:eb:b4: 42:37:b1:3c:9f:04:47:67:a9:26:06:f6:f0:3e:9e:b2:7e:1f: 59:c3:52:90:33:1e:c2:b9:c6:43:23:19:19:6e:79:81:99:4e: 63:ea:02:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknUK2gjDrdh4n0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZjE5ZDkzNDItYTk4MC00MjQ3LTkwNTAtOTFlYjc0MTUxMmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFDFvQrTXP9KCwrTN5srxqJs/rZih0Au1LS3 SYr+rMgNAWmaS4rBRaFT+5p5UPv6ScGEbsZT4D0MyebNYSD6O4Xuc+elD25GxcF5 /e9VY7WxVWkiX886zdrzspHNjx5y9KOIPLAqY9Z1xuc1L9KuuklmD+3H9nA7qfB5 chyk+Wi13aQtJ2lnOpMA3873NOf5vUDkZexG7jLtTeh4w4Vdifq1gIN60iInvAwZ bdEoi7qbyWtd2gOhhq8r9uAiKORIeeHY/gjgVR76nPlkda6EMi53+uFpHsYccVh0 tiK28+Hk3ZUbms/BB6tTAreJ7KxXT2TJj3jZCjudgZ9cwG2Y2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9O3Brviy3iUQEmwpMwtseVMr4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWI4Y2U1YWUtNmJlMS0z MGUxLTkwYWMtYzdmNTYyN2E4N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhuw3wIPDnHuz1Y5coNqlG+gcP+wmovIk86wO3Qrtj3r1jq/ljCMEMB SIXYU1yyGQr3vd//1yd/oUAL+z6f0H9ngRhKbiy/Kq+8LMC6VrP29Dx1mKSGYlXM 4c4JtoWl7Oy59fpdvwJlGYrMaIM0jmAb2URkUI1OjOxJaTrB57jCijz58Q+lr8T6 JBiajyaWLdzG59+HyEyg180UGZujtJIzAeXl2bhcjgnlcXXDtRcaZdW/N0aplbtJ VO7Yhvdp4dmP6YYjYIw65wDA5HcfZXCHXkmynh7rtEI3sTyfBEdnqSYG9vA+nrJ+ H1nDUpAzHsK5xkMjGRlueYGZTmPqAtg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:01:53 2025 by rpki-client