$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/2fecfb56-a7bd-3805-90cc-ffcacd30a74a.roa File: 2fecfb56-a7bd-3805-90cc-ffcacd30a74a.roa (raw, json) Hash identifier: 7KSIV0hbQUODCnuJ3VSRf1V0BkxD3+vlVy0/Y2/vQgI= Subject key identifier: 6D:82:A9:7A:4D:F5:79:8A:3E:83:0B:19:4A:7D:B2:9F:70:F3:A2:7D Certificate issuer: /CN=d28e4965-df1a-4ee0-91f8-24c72779af73 Certificate serial: 010D0C9F4328584B0B769BF31279D3BF984D9900 Authority key identifier: 13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/2fecfb56-a7bd-3805-90cc-ffcacd30a74a.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 21709 IP address blocks: 173.225.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9b:f3:12:79:d3:bf:98:4d:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d28e4965-df1a-4ee0-91f8-24c72779af73 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=9a3cad8d-db86-43f4-a1ed-c7d617bf6c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fe:87:4e:d5:e0:bd:26:eb:0e:1c:24:9f:5e: 26:5d:2b:74:70:5d:dd:f5:16:2b:76:e2:ea:7b:6b: 05:4d:9c:06:38:6b:c5:39:3e:00:8e:91:83:33:bb: 04:b0:95:8f:80:90:20:e2:68:b0:13:f2:ea:85:c2: 01:41:50:04:45:92:d7:cc:04:d3:b5:af:a0:2c:4f: a8:a7:8f:f5:bf:ef:5a:65:d9:10:05:21:7d:d6:26: 1d:f0:d2:d6:eb:97:b4:97:46:21:2e:98:6a:50:cc: 57:54:d5:20:5d:25:64:b7:ae:4d:19:33:08:1a:ae: 18:80:8d:7e:85:49:6c:01:55:0e:78:22:ac:1b:e4: 83:91:62:3d:2c:3a:0c:31:c9:9f:5c:c8:e2:5e:d6: 03:72:1c:f2:fc:b2:1a:fe:75:04:b9:93:93:15:2d: c4:2c:fb:88:63:94:2e:21:30:ce:6e:45:e0:33:73: 29:a1:87:41:77:ba:02:b1:0a:3c:3b:c3:82:c3:f3: 0b:91:02:28:bd:a4:4a:46:89:49:a7:fd:dc:bf:65: ec:7d:20:d3:0f:e3:33:82:d6:d5:76:ec:ee:e8:33: 12:db:59:bc:53:8a:b3:46:b8:41:a8:43:02:64:54: 63:77:8b:ab:70:5c:2e:ae:2e:30:cf:f5:a8:c6:7e: 9d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:82:A9:7A:4D:F5:79:8A:3E:83:0B:19:4A:7D:B2:9F:70:F3:A2:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/2fecfb56-a7bd-3805-90cc-ffcacd30a74a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl X509v3 Authority Key Identifier: keyid:13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer sbgp-ipAddrBlock: critical IPv4: 173.225.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:18:8f:ce:8e:ae:2e:5e:80:10:00:64:87:6d:d1:00:bd:e3: 97:cd:67:d7:87:9c:0c:75:27:3b:d1:93:49:4f:08:43:8c:1f: 44:28:49:4d:16:d7:bb:28:06:60:3c:91:7e:eb:82:6f:33:47: d7:34:ce:67:ea:bb:f0:2d:30:bf:21:e0:38:73:f1:46:0b:1c: bf:ae:67:d0:fd:c9:bf:01:8b:a9:86:f6:05:0c:6f:07:73:7d: bb:ed:ac:56:5d:10:c0:f1:32:14:1e:31:18:08:dd:e1:d1:75: cb:72:6c:64:7c:f0:10:12:2f:b8:3b:91:f1:68:0f:f9:db:d8: 58:72:15:dc:e4:f5:cf:f0:32:6b:d5:06:f9:59:bb:a0:9d:ed: 95:f5:2e:d3:f5:5d:90:10:7b:09:99:a4:32:cb:26:59:83:36: 68:6c:69:8d:31:52:b7:0e:56:24:c5:01:24:33:86:0d:54:bb: 0c:20:b4:61:e3:01:c7:84:c5:d8:1c:37:5e:02:d2:62:7e:71: e1:b8:6e:50:f7:d6:09:bf:62:16:a7:13:c5:22:c4:a5:64:96: 9a:f3:03:fc:f4:ae:72:a2:d4:fa:fd:6d:bd:2c:9d:97:1d:35: 14:eb:ae:1e:cd:43:94:92:28:ba:34:3b:dc:29:34:04:3d:4d: 9d:b9:2a:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdpvzEnnTv5hNmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI4ZTQ5NjUtZGYxYS00ZWUwLTkxZjgtMjRjNzI3Nzlh ZjczMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk OWEzY2FkOGQtZGI4Ni00M2Y0LWExZWQtYzdkNjE3YmY2YzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP6HTtXgvSbrDhwkn14mXSt0cF3d9RYrduLq e2sFTZwGOGvFOT4AjpGDM7sEsJWPgJAg4miwE/LqhcIBQVAERZLXzATTta+gLE+o p4/1v+9aZdkQBSF91iYd8NLW65e0l0YhLphqUMxXVNUgXSVkt65NGTMIGq4YgI1+ hUlsAVUOeCKsG+SDkWI9LDoMMcmfXMjiXtYDchzy/LIa/nUEuZOTFS3ELPuIY5Qu ITDObkXgM3MpoYdBd7oCsQo8O8OCw/MLkQIovaRKRolJp/3cv2XsfSDTD+MzgtbV duzu6DMS21m8U4qzRrhBqEMCZFRjd4urcFwuri4wz/Woxn6dQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2CqXpN9XmKPoMLGUp9sp9w86J9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMjhl NDk2NS1kZjFhLTRlZTAtOTFmOC0yNGM3Mjc3OWFmNzMvMmZlY2ZiNTYtYTdiZC0z ODA1LTkwY2MtZmZjYWNkMzBhNzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDI4ZTQ5NjUtZGYxYS00ZWUwLTkx ZjgtMjRjNzI3NzlhZjczL2QyOGU0OTY1LWRmMWEtNGVlMC05MWY4LTI0YzcyNzc5 YWY3My5jcmwwHwYDVR0jBBgwFoAUE9xsJyQD94mC1LDU6G59N6ygji8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMjhlNDk2NS1kZjFhLTRlZTAtOTFmOC0yNGM3 Mjc3OWFmNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIYj86Ori5egBAAZIdt0QC945fNZ9eHnAx1JzvRk0lPCEOMH0QoSU0W 17soBmA8kX7rgm8zR9c0zmfqu/AtML8h4Dhz8UYLHL+uZ9D9yb8Bi6mG9gUMbwdz fbvtrFZdEMDxMhQeMRgI3eHRdctybGR88BASL7g7kfFoD/nb2FhyFdzk9c/wMmvV BvlZu6Cd7ZX1LtP1XZAQewmZpDLLJlmDNmhsaY0xUrcOViTFASQzhg1UuwwgtGHj AceExdgcN14C0mJ+ceG4blD31gm/YhanE8UixKVklprzA/z0rnKi1Pr9bb0snZcd NRTrrh7NQ5SSKLo0O9wpNAQ9TZ25KjQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:53:26 2025 by rpki-client