$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/df5385bc-7c9f-361d-8431-48648c5562f2.roa File: df5385bc-7c9f-361d-8431-48648c5562f2.roa (raw, json) Hash identifier: zFY7Kx7yCSV/UkFFjo2o5Hxy4DpKo4Ybe7rLUKyA5pc= Subject key identifier: 23:E6:F9:30:04:1B:AC:3A:2D:78:5E:94:1C:49:DF:84:9E:22:0A:B5 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584BA93251D64C55D08C293A5100 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/df5385bc-7c9f-361d-8431-48648c5562f2.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 6643 IP address blocks: 173.199.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:51:d6:4c:55:d0:8c:29:3a:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=b4a9c2ed-0c31-4619-8115-a6bbef443a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f4:3e:79:8b:a7:e7:f6:5e:11:25:2f:04:6f: 91:ed:9c:7b:20:0e:e8:ae:3b:e2:34:90:e9:f4:9e: 16:42:36:4d:46:aa:e8:4a:3b:ec:82:8e:97:e1:89: 7d:96:df:ca:37:57:cf:bb:86:f8:b6:8e:d3:6e:06: 05:b3:54:1f:c8:86:5c:be:f3:1a:fe:d2:06:b9:f9: 4a:f2:f5:52:2d:fc:ba:4c:bc:d8:51:f5:9d:2a:43: ae:d6:ef:83:2d:a6:47:9d:e4:49:4b:ca:d4:7e:10: fb:60:63:8c:40:ad:8c:fc:b8:40:7b:ad:93:3b:c2: e2:da:82:f1:ca:02:c1:c6:5a:9e:fb:32:44:34:94: ed:82:4a:27:24:d5:30:b8:4a:8b:bf:1b:19:d0:68: 55:3f:35:b4:38:5b:8f:4f:19:b8:c3:39:58:b5:7d: 66:ba:02:18:bf:38:c2:06:ae:c6:f4:95:13:0b:3c: 32:98:be:dd:8a:52:c7:41:d6:0a:ea:fa:85:d7:80: 9d:9b:a0:4b:0b:db:3b:71:4f:ef:37:f3:36:11:86: f0:9c:66:30:9d:79:30:93:00:7b:39:07:15:5f:43: 9b:4e:c1:0d:af:69:0d:14:3a:8c:43:a3:c0:15:d4: 90:d2:c3:c4:dd:ee:f5:51:9b:6f:93:ce:1b:c4:b0: 03:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E6:F9:30:04:1B:AC:3A:2D:78:5E:94:1C:49:DF:84:9E:22:0A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/df5385bc-7c9f-361d-8431-48648c5562f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f8:71:9e:3b:c5:3e:93:f3:47:01:ce:d8:11:12:30:a9:69: 47:14:5b:82:f8:3a:86:b4:9e:13:68:38:f0:60:ab:2f:bb:23: da:71:4c:b6:b8:ae:ab:7d:9f:f3:68:e2:32:e1:1f:68:f6:32: c7:eb:1f:24:9c:59:23:be:c0:05:18:a2:12:52:fd:14:93:3e: 23:1d:55:c4:dd:72:c9:35:fb:fa:41:82:a2:ed:ab:8c:c3:36: 0b:09:ce:17:c5:80:ee:a7:45:cb:d7:7e:5c:57:70:20:71:6f: ef:c0:53:98:69:70:31:41:22:a7:d1:39:09:6c:39:b7:cf:23: 63:4b:f9:25:09:b8:c8:18:dd:3c:d7:63:08:89:0f:5f:f5:ca: 92:e5:7f:3f:51:c0:8a:66:8d:15:bc:5a:b5:43:4d:43:7e:97: 45:c1:1b:6b:b8:67:1a:29:b8:c6:ea:ae:71:b6:e6:47:bf:0d: a9:7d:b2:96:87:3d:f5:15:ba:de:fb:7a:4e:b9:86:f9:b8:cc: 30:b2:fa:79:11:89:0c:77:42:e7:6d:e1:55:2b:16:79:4a:f2: aa:16:1d:a6:6a:b2:88:21:43:fa:17:fa:b9:3b:87:82:cc:98: 4a:3a:5a:8d:52:07:1b:2f:2c:41:39:f9:36:e7:15:4d:0b:85: 03:ff:d3:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlHWTFXQjCk6UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YjRhOWMyZWQtMGMzMS00NjE5LTgxMTUtYTZiYmVmNDQzYTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPQ+eYun5/ZeESUvBG+R7Zx7IA7orjviNJDp 9J4WQjZNRqroSjvsgo6X4Yl9lt/KN1fPu4b4to7TbgYFs1QfyIZcvvMa/tIGuflK 8vVSLfy6TLzYUfWdKkOu1u+DLaZHneRJS8rUfhD7YGOMQK2M/LhAe62TO8Li2oLx ygLBxlqe+zJENJTtgkonJNUwuEqLvxsZ0GhVPzW0OFuPTxm4wzlYtX1mugIYvzjC Bq7G9JUTCzwymL7dilLHQdYK6vqF14Cdm6BLC9s7cU/vN/M2EYbwnGYwnXkwkwB7 OQcVX0ObTsENr2kNFDqMQ6PAFdSQ0sPE3e71UZtvk84bxLAD4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPm+TAEG6w6LXhelBxJ34SeIgq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGY1Mzg1YmMtN2M5Zi0z NjFkLTg0MzEtNDg2NDhjNTU2MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArccLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT4cZ47xT6T80cBztgREjCpaUcUW4L4Ooa0nhNoOPBgqy+7I9pxTLa4 rqt9n/No4jLhH2j2MsfrHyScWSO+wAUYohJS/RSTPiMdVcTdcsk1+/pBgqLtq4zD NgsJzhfFgO6nRcvXflxXcCBxb+/AU5hpcDFBIqfROQlsObfPI2NL+SUJuMgY3TzX YwiJD1/1ypLlfz9RwIpmjRW8WrVDTUN+l0XBG2u4ZxopuMbqrnG25ke/Dal9spaH PfUVut77ek65hvm4zDCy+nkRiQx3Qudt4VUrFnlK8qoWHaZqsoghQ/oX+rk7h4LM mEo6Wo1SBxsvLEE5+TbnFU0LhQP/0yA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:45:11 2025 by rpki-client