$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa File: a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa (raw, json) Hash identifier: Bweahhhjm3CEnwHeA3HMNTZ9amZLQnYUEmYZEqNABJI= Subject key identifier: C8:62:3A:7C:3B:6B:99:AC:44:32:2F:0D:5D:74:28:13:2F:5B:5A:9B Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584AF951416F9DCD10833E2C4780 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 31898 IP address blocks: 173.199.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:41:6f:9d:cd:10:83:3e:2c:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=497f2d18-151c-4727-ba4a-bc221a1c1d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:98:2c:5e:a8:66:cc:3f:4a:57:16:e9:8c:89: 60:7c:20:da:09:1c:2b:03:62:83:63:44:9c:57:1f: 2f:fb:fd:3d:53:6e:73:42:72:0e:97:7b:92:41:64: 1b:1c:19:e4:a1:0f:ad:89:5c:68:89:7b:04:d2:77: 97:26:74:75:5c:27:ae:77:a6:d3:02:c1:91:b0:0b: 3c:ba:91:7b:0a:f1:b9:1e:ef:e1:f2:43:3f:f0:45: 44:0b:af:62:91:b9:44:ff:7c:a5:6c:17:7a:28:6d: 25:c6:93:2b:d4:16:5e:2d:64:4c:26:c9:86:82:b3: 8a:bd:71:1c:5a:d8:77:28:ec:3a:f8:9b:66:07:3c: fa:e5:ba:d1:f4:86:54:b6:ee:03:d9:fd:fa:aa:7f: 2b:18:be:94:58:96:a1:07:3e:31:5f:bc:30:40:9a: f4:47:25:20:49:e9:6d:c6:e0:89:92:27:42:15:b5: e4:cd:9b:a0:61:d7:09:d7:ef:4a:6e:88:9f:f5:dc: aa:45:9a:b6:aa:f6:86:91:0d:3d:47:29:06:13:5c: 87:ee:b6:60:9c:9b:d7:56:6f:cd:d2:1b:ea:a5:96: 1a:13:3a:0a:b1:fc:0e:11:7f:d5:ae:ea:7b:68:3a: 28:c7:20:df:21:03:de:93:5a:bf:27:b9:e9:c3:19: 57:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:62:3A:7C:3B:6B:99:AC:44:32:2F:0D:5D:74:28:13:2F:5B:5A:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:66:5d:5f:cc:cb:7f:dc:33:29:b5:60:6a:bf:8d:fc:3b:f4: 2f:78:ed:30:d2:2e:fb:c7:f9:61:6c:8d:46:d1:4b:79:61:c4: 82:9a:86:61:41:d8:67:68:6a:73:74:d9:2a:af:2b:1c:a2:5d: 25:3a:ca:62:6b:2c:f6:b7:0c:b2:ab:62:73:6a:69:f9:bf:bd: 0f:53:be:83:82:a9:af:f9:ee:4f:b2:eb:eb:41:4a:f7:0d:89: 76:81:52:0b:e5:9d:47:91:d1:df:58:1b:36:c6:d7:30:42:8d: ac:90:b2:77:62:a9:7d:07:cc:d2:24:5c:5c:f3:2b:0c:75:86: e8:8d:3d:bd:3f:bc:5f:42:87:6a:63:8e:2e:e9:4b:7c:58:cf: 91:2f:e6:05:ee:a6:bd:f3:5b:dd:20:fb:5a:4d:16:8e:2a:52: 06:01:a1:d7:28:eb:37:1b:5c:7e:a4:73:d8:bf:d4:06:1a:21: 99:78:97:27:50:e3:40:e0:06:16:c7:b9:9d:fc:09:9a:1e:d4: 1e:1b:75:8c:e9:2d:cc:86:a6:49:ff:87:ea:e3:a4:fb:64:d5: 2e:49:a4:d9:14:77:8f:e6:77:bd:5c:05:77:17:bc:02:37:64: 3f:73:69:76:98:d6:33:2a:ca:b9:1a:7f:3d:bb:6d:21:ef:43: e6:7e:95:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUFvnc0Qgz4sR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NDk3ZjJkMTgtMTUxYy00NzI3LWJhNGEtYmMyMjFhMWMxZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5gsXqhmzD9KVxbpjIlgfCDaCRwrA2KDY0Sc Vx8v+/09U25zQnIOl3uSQWQbHBnkoQ+tiVxoiXsE0neXJnR1XCeud6bTAsGRsAs8 upF7CvG5Hu/h8kM/8EVEC69ikblE/3ylbBd6KG0lxpMr1BZeLWRMJsmGgrOKvXEc Wth3KOw6+JtmBzz65brR9IZUtu4D2f36qn8rGL6UWJahBz4xX7wwQJr0RyUgSelt xuCJkidCFbXkzZugYdcJ1+9Kboif9dyqRZq2qvaGkQ09RykGE1yH7rZgnJvXVm/N 0hvqpZYaEzoKsfwOEX/Vrup7aDooxyDfIQPek1q/J7npwxlXFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhiOnw7a5msRDIvDV10KBMvW1qbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTNjNDdhNjUtZjEwOC0z MzBlLWExZDQtZDVhMjZhMjYwN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrccwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtmXV/My3/cMym1YGq/jfw79C947TDSLvvH+WFsjUbRS3lhxIKahmFB 2GdoanN02SqvKxyiXSU6ymJrLPa3DLKrYnNqafm/vQ9TvoOCqa/57k+y6+tBSvcN iXaBUgvlnUeR0d9YGzbG1zBCjayQsndiqX0HzNIkXFzzKwx1huiNPb0/vF9Ch2pj ji7pS3xYz5Ev5gXupr3zW90g+1pNFo4qUgYBodco6zcbXH6kc9i/1AYaIZl4lydQ 40DgBhbHuZ38CZoe1B4bdYzpLcyGpkn/h+rjpPtk1S5JpNkUd4/md71cBXcXvAI3 ZD9zaXaY1jMqyrkafz27bSHvQ+Z+lX4= -----END CERTIFICATE-----Generated at Wed Nov 5 12:17:50 2025 by rpki-client