$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fda0b40e-d655-3540-9fee-bef563b1afeb.roa File: fda0b40e-d655-3540-9fee-bef563b1afeb.roa (raw, json) Hash identifier: kbLiXqkalq+rS5X1wf/IiFd0TXc61gd2fdjupsSHcsk= Subject key identifier: D4:44:14:FB:F3:3D:A6:8C:C2:66:BF:79:0B:6D:6F:A5:8B:58:A2:42 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584BA0D24E253E411D2F4AD35200 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fda0b40e-d655-3540-9fee-bef563b1afeb.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16815 IP address blocks: 173.199.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:4e:25:3e:41:1d:2f:4a:d3:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=67b28ab8-8fae-40fd-8412-b4802369332a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d6:a6:a0:ff:08:55:1d:f3:b0:d4:2e:e6:10: 3b:ce:ef:92:c6:44:0b:87:9b:de:be:9d:2c:97:0d: 94:0a:21:e3:cc:aa:b6:3b:c0:63:87:93:d5:58:26: c9:b5:5a:23:b3:f3:d9:8f:99:80:e0:cf:32:e6:4b: b0:30:ca:02:26:27:84:ec:d9:07:cf:2a:f2:5a:45: db:65:7e:59:65:03:bb:3e:07:d5:a4:6d:c0:6b:c0: cb:62:a9:90:47:ec:6d:2b:d4:08:c1:78:5e:a7:a2: 99:f3:d7:1a:6e:e1:01:e7:46:c4:21:97:1a:f5:b0: d2:bc:72:68:72:b5:75:47:bc:02:ac:93:36:e0:c9: d3:58:c6:78:05:f7:19:b6:cf:54:65:19:7d:7b:ca: 86:54:d0:2f:c1:81:6d:bc:06:bb:6f:ae:f9:e3:eb: ba:5b:ef:e2:87:9a:7b:9e:9a:0c:1e:1c:46:05:e9: 77:53:1c:43:d3:ce:37:11:ef:ad:aa:f7:59:61:61: bb:20:f8:eb:9a:e7:3f:d8:67:b0:2d:4e:76:92:26: e9:db:a0:36:f3:fc:5a:55:aa:70:7f:02:d9:27:d5: cb:0e:3a:40:a4:27:6b:02:34:68:93:81:a6:a2:1b: 7a:4d:28:58:18:e5:43:96:5f:22:47:aa:d0:84:94: f6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:44:14:FB:F3:3D:A6:8C:C2:66:BF:79:0B:6D:6F:A5:8B:58:A2:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fda0b40e-d655-3540-9fee-bef563b1afeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:8f:e1:d4:57:4f:e3:3b:89:e2:17:cc:c6:19:72:b3:85:95: d5:41:38:fe:d4:c5:3d:59:7c:a4:3c:4a:14:0f:19:d4:51:f3: 2e:ca:f5:28:4b:57:35:4a:11:a6:37:32:a1:ec:0c:4a:20:0c: b9:20:20:67:37:91:35:bd:eb:47:57:12:8f:8c:56:24:5d:b6: 2f:5d:4a:d0:4d:c3:c0:ee:f0:d8:b0:9c:14:e1:76:9f:21:fc: 69:43:1d:46:19:d3:2e:27:97:56:bd:df:00:f4:68:da:6d:34: ff:c3:1d:65:19:7e:bd:49:f2:c2:4f:43:23:3d:98:8f:1b:cf: 0f:45:be:70:d8:6d:bb:65:c7:19:70:da:30:64:03:52:21:25: 9a:5f:9f:43:bf:23:e1:ed:f3:ac:e1:a2:0b:32:8c:ec:71:83: 7e:1a:6f:a1:11:5e:d7:1b:ac:fe:84:25:47:53:7e:2a:44:28: 98:2b:4c:63:9c:73:fb:a9:bc:82:13:45:01:e7:28:e6:2b:3f: de:4d:56:fe:ee:fe:ff:e5:a6:90:f6:d1:62:8e:e6:8a:d0:15: 16:10:8d:f0:bd:c5:36:f7:36:77:95:f3:4f:94:85:c9:2e:b2: 3f:71:a2:93:f7:d5:10:c1:5e:4d:fb:1b:e9:57:63:1a:61:88: b9:25:3f:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0k4lPkEdL0rTUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NjdiMjhhYjgtOGZhZS00MGZkLTg0MTItYjQ4MDIzNjkzMzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNamoP8IVR3zsNQu5hA7zu+SxkQLh5vevp0s lw2UCiHjzKq2O8Bjh5PVWCbJtVojs/PZj5mA4M8y5kuwMMoCJieE7NkHzyryWkXb ZX5ZZQO7PgfVpG3Aa8DLYqmQR+xtK9QIwXhep6KZ89cabuEB50bEIZca9bDSvHJo crV1R7wCrJM24MnTWMZ4BfcZts9UZRl9e8qGVNAvwYFtvAa7b6754+u6W+/ih5p7 npoMHhxGBel3UxxD0843Ee+tqvdZYWG7IPjrmuc/2GewLU52kibp26A28/xaVapw fwLZJ9XLDjpApCdrAjRok4Gmoht6TShYGOVDll8iR6rQhJT2VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNREFPvzPaaMwma/eQttb6WLWKJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZmRhMGI0MGUtZDY1NS0z NTQwLTlmZWUtYmVmNTYzYjFhZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrccAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyP4dRXT+M7ieIXzMYZcrOFldVBOP7UxT1ZfKQ8ShQPGdRR8y7K9ShL VzVKEaY3MqHsDEogDLkgIGc3kTW960dXEo+MViRdti9dStBNw8Du8NiwnBThdp8h /GlDHUYZ0y4nl1a93wD0aNptNP/DHWUZfr1J8sJPQyM9mI8bzw9FvnDYbbtlxxlw 2jBkA1IhJZpfn0O/I+Ht86zhogsyjOxxg34ab6ERXtcbrP6EJUdTfipEKJgrTGOc c/upvIITRQHnKOYrP95NVv7u/v/lppD20WKO5orQFRYQjfC9xTb3NneV80+Uhcku sj9xopP31RDBXk37G+lXYxphiLklPwc= -----END CERTIFICATE-----Generated at Wed Nov 5 09:42:24 2025 by rpki-client