$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/64e6b2ae-03b1-35f3-a11e-91cc3ca0635b.roa File: 64e6b2ae-03b1-35f3-a11e-91cc3ca0635b.roa (raw, json) Hash identifier: qjf/P+PhFrkwzq2MNULKCerD2jcDXD1/q9RAYJHQJGc= Subject key identifier: A9:1D:CB:A5:95:D0:6F:D4:9F:A8:0B:9E:E9:0A:3B:C6:C7:0D:23:CB Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B758CB3839839037992276CE0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/64e6b2ae-03b1-35f3-a11e-91cc3ca0635b.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 55286 IP address blocks: 173.255.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:b3:83:98:39:03:79:92:27:6c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=b44a17ea-3235-491b-b34c-913fa8bc1e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:a7:81:71:d3:69:64:ab:36:55:27:9a:23: 71:07:11:bd:5e:5d:2a:04:7e:bb:78:23:99:f0:cb: 76:08:78:81:54:df:e4:cb:73:90:be:7c:27:cf:7c: 2f:09:68:e4:68:cc:15:6b:ff:50:72:ef:6c:93:29: e6:56:2c:29:f2:32:83:c8:dd:1f:cc:d0:a3:83:f5: 56:9c:34:14:d1:86:99:e6:be:43:a6:2b:7a:64:e6: aa:10:69:ce:6f:a9:20:26:f0:16:a7:1f:9c:b5:37: 07:ec:74:18:f9:84:07:38:04:c2:78:90:32:15:f2: 4e:c7:7c:c2:75:52:41:97:c3:31:cc:93:7f:76:a5: 4d:a8:84:9a:4c:04:07:f6:c4:50:75:f1:95:c7:07: 2c:d5:2d:e0:7a:d2:72:93:6b:94:87:2e:dc:44:be: 42:9c:ef:a8:08:f3:c7:df:37:c5:12:9a:85:a5:d9: aa:ad:61:c2:53:df:e2:b3:32:56:3a:a6:ff:a4:a7: ae:b5:ea:1a:2c:5e:c7:85:4a:4e:74:8b:c6:b2:91: 3e:44:80:e3:23:9c:f2:3e:f4:bf:6b:48:1b:32:00: 27:b1:aa:b5:26:e2:8b:83:67:9f:40:1b:8e:f5:0d: 76:31:c5:a8:e9:65:f4:89:80:df:f3:83:ea:41:d7: 07:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1D:CB:A5:95:D0:6F:D4:9F:A8:0B:9E:E9:0A:3B:C6:C7:0D:23:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/64e6b2ae-03b1-35f3-a11e-91cc3ca0635b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e8:1c:6f:c9:0d:36:ab:ba:94:53:be:89:80:fd:5d:29:04: 58:00:b2:f4:60:0b:97:6e:94:29:90:bd:45:59:a8:17:1c:ff: 60:0a:75:ed:09:0d:55:6e:0d:dd:93:e3:da:9f:89:cc:81:fe: 27:c8:38:f9:65:3d:f4:ed:7b:3d:13:2e:ac:75:30:e9:e8:ba: a8:e7:1f:a4:cc:94:b2:82:73:d5:a0:69:df:25:61:e4:fa:88: f2:39:f4:28:2a:e2:4e:55:ca:de:40:83:22:ab:af:2f:b3:08: 35:8e:b6:a6:56:08:dd:4b:6d:af:5f:d5:46:93:a0:33:a4:3d: 6c:9c:80:e4:d3:32:5c:55:fd:fa:06:d8:0d:38:e6:31:fb:18: eb:f8:b0:8c:b7:01:ee:b7:40:92:4a:1a:32:32:58:b8:07:01: b6:6a:09:f2:5f:c8:83:a4:76:b1:18:08:93:46:0d:26:57:b7: 7a:f3:3d:cf:83:02:48:86:2c:79:14:e2:5c:1b:63:07:3d:d4: 2a:c8:b8:a4:8f:d9:12:5a:50:75:0f:f3:07:31:7d:54:f8:c2: 73:97:13:a7:e9:66:63:10:02:0d:eb:d1:9a:eb:05:13:48:57: e0:9f:1d:e7:80:1a:99:b9:1a:96:d9:0d:ff:e9:ac:9e:67:6d: 57:a5:7f:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jLODmDkDeZInbOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk YjQ0YTE3ZWEtMzIzNS00OTFiLWIzNGMtOTEzZmE4YmMxZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto2ngXHTaWSrNlUnmiNxBxG9Xl0qBH67eCOZ 8Mt2CHiBVN/ky3OQvnwnz3wvCWjkaMwVa/9Qcu9skynmViwp8jKDyN0fzNCjg/VW nDQU0YaZ5r5Dpit6ZOaqEGnOb6kgJvAWpx+ctTcH7HQY+YQHOATCeJAyFfJOx3zC dVJBl8MxzJN/dqVNqISaTAQH9sRQdfGVxwcs1S3getJyk2uUhy7cRL5CnO+oCPPH 3zfFEpqFpdmqrWHCU9/iszJWOqb/pKeuteoaLF7HhUpOdIvGspE+RIDjI5zyPvS/ a0gbMgAnsaq1JuKLg2efQBuO9Q12McWo6WX0iYDf84PqQdcHNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkdy6WV0G/Un6gLnukKO8bHDSPLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNjRlNmIyYWUtMDNiMS0z NWYzLWExMWUtOTFjYzNjYTA2MzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrf+qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7oHG/JDTarupRTvomA/V0pBFgAsvRgC5dulCmQvUVZqBcc/2AKde0J DVVuDd2T49qficyB/ifIOPllPfTtez0TLqx1MOnouqjnH6TMlLKCc9Wgad8lYeT6 iPI59Cgq4k5Vyt5AgyKrry+zCDWOtqZWCN1Lba9f1UaToDOkPWycgOTTMlxV/foG 2A045jH7GOv4sIy3Ae63QJJKGjIyWLgHAbZqCfJfyIOkdrEYCJNGDSZXt3rzPc+D AkiGLHkU4lwbYwc91CrIuKSP2RJaUHUP8wcxfVT4wnOXE6fpZmMQAg3r0ZrrBRNI V+CfHeeAGpm5GpbZDf/prJ5nbVelfxU= -----END CERTIFICATE-----Generated at Thu Oct 9 13:17:09 2025 by rpki-client