$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4eb4d219-1935-3d8c-9782-e188128a406f.roa File: 4eb4d219-1935-3d8c-9782-e188128a406f.roa (raw, json) Hash identifier: /llEfr/3wco+1fXW0W/SlEKJ3yD6jPggkEXgB8+P1jI= Subject key identifier: 7D:75:4B:21:01:4C:3F:F6:0E:FA:34:D5:CE:97:DF:28:D6:AC:AA:F4 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B6202325F0A993F2204B37280 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4eb4d219-1935-3d8c-9782-e188128a406f.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 62904 IP address blocks: 173.232.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:32:5f:0a:99:3f:22:04:b3:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=608e821f-2b8d-4465-ac5f-ba7a74ed2c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:54:0f:bf:3b:ba:99:2a:6d:9f:4b:0f:80:da: 49:fe:c2:75:05:09:25:e0:98:d5:5d:0d:b8:9d:30: d1:bd:b7:88:5d:6f:a2:30:69:cd:e9:e9:d7:0f:6e: d7:dc:07:d0:9b:c9:e4:c2:df:34:6e:85:ba:44:0e: d2:7d:7d:64:f3:c0:9b:a9:39:14:d0:c0:db:5e:9f: f6:0b:21:89:db:85:06:14:6b:cc:7d:96:1a:da:05: 82:03:a4:c3:80:b7:0b:c3:51:5f:9f:0a:80:e0:70: f8:fc:17:e5:6c:00:b3:da:93:dd:24:ea:1b:d4:f8: b9:f4:d4:2e:34:ba:9f:80:21:53:3b:86:5d:64:dc: d8:d8:fb:84:6c:fc:c6:a4:ba:49:40:cc:c8:f2:78: 56:a4:1f:c9:ea:3d:ce:5f:0a:66:a5:35:5c:57:50: 0e:fb:08:23:a8:38:b9:af:44:4f:a3:d0:0e:c3:78: d7:b8:99:57:dd:f3:dd:5f:1b:2b:39:0b:c2:e5:0e: 46:1b:23:d5:e1:09:d3:ba:18:97:d2:b9:4c:2d:dd: 8f:28:29:a3:0c:87:26:35:12:af:4e:00:fe:7a:52: 5d:ef:61:08:52:23:e5:a4:6f:88:8b:56:64:c3:ce: e7:70:17:f2:ad:51:20:2f:1c:54:56:69:50:42:48: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:75:4B:21:01:4C:3F:F6:0E:FA:34:D5:CE:97:DF:28:D6:AC:AA:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4eb4d219-1935-3d8c-9782-e188128a406f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f5:47:4d:e4:e4:1a:a7:10:46:7a:cf:34:ac:29:9f:19:c6: 0b:12:1d:13:44:a5:6c:c5:fd:c1:fb:ff:43:6d:8b:01:b9:4f: 24:8e:5e:a5:dd:bd:0b:2b:2e:9c:8a:05:95:c6:6a:a4:57:a5: 13:92:10:e1:1b:20:ab:f2:77:cb:10:05:e3:1b:70:1c:38:e8: 43:4f:49:75:9c:dc:cc:21:9f:55:d6:5b:21:30:4f:c9:87:32: 1d:d0:27:3e:e5:2e:9b:d6:69:da:88:ae:5f:d4:05:09:3d:68: 26:98:b3:1d:dd:51:3a:fb:1a:b7:6b:c4:6a:eb:76:c4:62:e7: 20:39:75:5d:a4:75:90:68:a8:92:5a:eb:ad:21:b5:83:b5:09: 27:29:16:ab:4f:a6:44:3f:7b:59:9a:04:1b:30:64:e1:49:bd: d9:25:9a:cc:27:9a:b3:57:48:50:19:93:4f:92:6e:78:67:e9: 3e:3e:80:1b:6a:73:8c:6e:8e:b8:0a:d5:9b:53:37:95:5d:73: 3a:ba:76:78:f7:b2:d0:cf:ea:ce:13:58:75:46:af:4f:67:3a: 97:9f:aa:88:ab:b1:90:b4:8f:ed:80:f0:de:66:dd:6f:3d:4f: 04:f5:72:c2:13:c7:ec:d5:34:ea:5c:41:df:29:20:61:d9:f9: 6a:35:59:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjJfCpk/IgSzcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjA4ZTgyMWYtMmI4ZC00NDY1LWFjNWYtYmE3YTc0ZWQyYzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlQPvzu6mSptn0sPgNpJ/sJ1BQkl4JjVXQ24 nTDRvbeIXW+iMGnN6enXD27X3AfQm8nkwt80boW6RA7SfX1k88CbqTkU0MDbXp/2 CyGJ24UGFGvMfZYa2gWCA6TDgLcLw1FfnwqA4HD4/BflbACz2pPdJOob1Pi59NQu NLqfgCFTO4ZdZNzY2PuEbPzGpLpJQMzI8nhWpB/J6j3OXwpmpTVcV1AO+wgjqDi5 r0RPo9AOw3jXuJlX3fPdXxsrOQvC5Q5GGyPV4QnTuhiX0rlMLd2PKCmjDIcmNRKv TgD+elJd72EIUiPlpG+Ii1Zkw87ncBfyrVEgLxxUVmlQQkhTIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH11SyEBTD/2Dvo01c6X3yjWrKr0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNGViNGQyMTktMTkzNS0z ZDhjLTk3ODItZTE4ODEyOGE0MDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL1R03k5BqnEEZ6zzSsKZ8ZxgsSHRNEpWzF/cH7/0NtiwG5TySOXqXd vQsrLpyKBZXGaqRXpROSEOEbIKvyd8sQBeMbcBw46ENPSXWc3Mwhn1XWWyEwT8mH Mh3QJz7lLpvWadqIrl/UBQk9aCaYsx3dUTr7GrdrxGrrdsRi5yA5dV2kdZBoqJJa 660htYO1CScpFqtPpkQ/e1maBBswZOFJvdklmswnmrNXSFAZk0+Sbnhn6T4+gBtq c4xujrgK1ZtTN5Vdczq6dnj3stDP6s4TWHVGr09nOpefqoirsZC0j+2A8N5m3W89 TwT1csITx+zVNOpcQd8pIGHZ+Wo1WRo= -----END CERTIFICATE-----Generated at Wed Oct 8 15:39:30 2025 by rpki-client