$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/daab1f0f-f1e4-3670-9337-a48d9a648d86.roa File: daab1f0f-f1e4-3670-9337-a48d9a648d86.roa (raw, json) Hash identifier: nGyflsArj3JSf5qqBDcVo0B/p/dJ4uwq8culs90LAmw= Subject key identifier: F4:D4:3D:B6:FA:E8:F0:01:14:14:68:33:8F:4B:99:7A:31:40:6D:F2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB19266A522880AC569EDB000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/daab1f0f-f1e4-3670-9337-a48d9a648d86.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 173.223.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:66:a5:22:88:0a:c5:69:ed:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=60e58250-bbe4-42dd-ba48-64b8394dcfa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:80:84:dc:14:9f:48:2a:4e:a3:4f:18:d2: 85:a5:1c:1a:c8:d1:35:58:cf:d8:bd:d9:02:3b:99: 2a:c0:08:58:f6:b2:64:83:98:4a:6e:74:0c:0a:88: 68:ce:1b:ba:4e:31:d0:2a:9e:7e:fe:23:0c:a9:a4: 44:0c:d5:15:cb:1f:01:a8:9d:5f:43:e6:ed:ed:59: 4f:7a:a8:86:4f:40:32:59:b7:08:b6:a4:35:2c:b4: c3:da:f7:77:da:3f:65:df:b0:f5:52:0a:0b:75:45: a2:86:3e:f1:94:b4:5c:74:3e:28:8f:4a:e6:98:94: e4:e1:fa:6f:b7:51:70:2a:e4:d7:4d:ca:25:92:6c: b6:f6:9b:8f:22:aa:a2:05:8b:c8:3e:f7:c1:48:b5: 61:de:cd:1c:41:d2:1a:50:b7:ab:b0:b0:5b:df:a9: e0:41:b6:5c:36:f3:80:4c:7d:36:d8:3f:4d:c1:f9: fb:85:51:26:2b:23:69:c3:8c:47:41:6a:78:ca:2a: 1a:21:18:4b:93:8a:1e:59:d7:02:05:e8:73:37:06: db:8d:ba:2a:64:ac:c6:c8:42:f8:44:9c:62:f8:e4: 32:6e:7e:36:46:dc:c3:ab:79:3f:02:80:6f:9f:fa: 5f:10:27:4d:49:19:79:da:69:62:eb:ee:c4:e2:45: 3d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D4:3D:B6:FA:E8:F0:01:14:14:68:33:8F:4B:99:7A:31:40:6D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/daab1f0f-f1e4-3670-9337-a48d9a648d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b4:4b:a8:53:33:16:00:c0:1b:05:91:ee:ef:cf:16:9e:31: 3a:a1:c7:14:87:b5:1b:d3:c4:2e:42:a2:62:6f:43:0a:cc:40: 05:a6:06:db:f9:6c:bd:bb:69:99:3b:59:17:df:aa:d0:6a:bc: cd:3a:0b:98:36:17:8d:b5:6a:34:f9:d8:e9:64:bd:61:93:bc: 9e:6a:e4:b2:f9:b1:96:b9:78:d1:d0:52:12:f3:d4:0a:6c:f2: d2:57:a7:fb:29:0e:3e:e6:93:90:26:69:24:7b:26:be:55:29: 43:4e:b1:7e:64:b6:88:ae:29:40:2d:af:52:84:ca:fb:2e:09: 0c:5a:d0:47:01:05:21:c4:4c:9e:39:b4:6e:2e:18:5a:8d:10: 42:cd:38:2f:ab:6f:0d:2e:03:b4:8c:db:a7:b9:cf:db:6b:44: d9:b4:3e:e8:68:86:76:1f:f3:99:a0:0d:2d:6e:6e:df:97:ac: 40:ec:ed:9b:6c:f7:79:f5:c0:cd:0f:39:81:a7:98:65:4f:76: d1:b9:19:09:21:06:c8:62:c2:af:fb:5f:b0:66:2b:d0:27:f6: 98:e7:8e:72:c2:40:8b:dd:3b:a7:d6:3a:ce:29:9c:b4:3c:da: 7d:a4:4e:b9:f7:4a:03:ce:9a:bf:51:51:39:d6:c0:12:cd:cf: 77:46:53:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmalIogKxWntsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NjBlNTgyNTAtYmJlNC00MmRkLWJhNDgtNjRiODM5NGRjZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjyAhNwUn0gqTqNPGNKFpRwayNE1WM/YvdkC O5kqwAhY9rJkg5hKbnQMCohozhu6TjHQKp5+/iMMqaREDNUVyx8BqJ1fQ+bt7VlP eqiGT0AyWbcItqQ1LLTD2vd32j9l37D1UgoLdUWihj7xlLRcdD4oj0rmmJTk4fpv t1FwKuTXTcolkmy29puPIqqiBYvIPvfBSLVh3s0cQdIaULersLBb36ngQbZcNvOA TH022D9Nwfn7hVEmKyNpw4xHQWp4yioaIRhLk4oeWdcCBehzNwbbjboqZKzGyEL4 RJxi+OQybn42RtzDq3k/AoBvn/pfECdNSRl52mli6+7E4kU9PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTUPbb66PABFBRoM49LmXoxQG3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGFhYjFmMGYtZjFlNC0z NjcwLTkzMzctYTQ4ZDlhNjQ4ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG0S6hTMxYAwBsFke7vzxaeMTqhxxSHtRvTxC5ComJvQwrMQAWmBtv5 bL27aZk7WRffqtBqvM06C5g2F421ajT52OlkvWGTvJ5q5LL5sZa5eNHQUhLz1Aps 8tJXp/spDj7mk5AmaSR7Jr5VKUNOsX5ktoiuKUAtr1KEyvsuCQxa0EcBBSHETJ45 tG4uGFqNEELNOC+rbw0uA7SM26e5z9trRNm0PuhohnYf85mgDS1ubt+XrEDs7Zts 93n1wM0POYGnmGVPdtG5GQkhBshiwq/7X7BmK9An9pjnjnLCQIvdO6fWOs4pnLQ8 2n2kTrn3SgPOmr9RUTnWwBLNz3dGUxM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:45:37 2025 by rpki-client