$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5e357e41-db2e-3379-bb72-cbe0f5798846.roa File: 5e357e41-db2e-3379-bb72-cbe0f5798846.roa (raw, json) Hash identifier: /0+4QBxF9vsYytpg6+7hdaXfWXLlMfbL+bXzK1NLkMU= Subject key identifier: DE:BC:5B:F3:90:EA:F4:1D:41:E0:74:23:82:49:6C:2E:2F:75:E3:30 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B5C6C7147E10552EA043B2500 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5e357e41-db2e-3379-bb72-cbe0f5798846.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 174 IP address blocks: 173.213.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:71:47:e1:05:52:ea:04:3b:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=c63d8763-6346-4214-a5b2-dc214d286266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e1:cf:e6:55:1c:aa:c9:74:8c:d0:c0:c1:40: 41:97:3b:3b:fc:b5:ea:c4:2b:39:20:00:98:7a:a3: 77:50:cd:16:00:d9:f6:e4:44:0a:0b:ae:dc:41:6b: 25:99:25:d0:46:f9:56:26:8c:0a:ec:5a:aa:28:e0: d5:d9:6a:db:b0:3b:67:da:33:b2:d8:8d:5a:81:20: 4b:17:ab:dc:12:e3:e5:2e:29:13:3d:8e:47:d4:d2: 38:62:a5:62:75:e1:21:a3:b2:33:21:3e:68:94:90: 9d:b9:41:4e:8f:93:95:f8:91:fb:ef:b6:33:2a:a8: 2f:88:81:24:cc:0f:da:80:fb:7b:48:d8:39:f6:38: 1f:db:eb:ce:2e:99:31:c6:67:61:0a:86:6f:cd:27: 61:10:e7:a5:eb:3e:61:ee:81:24:a1:6c:79:04:b7: a9:0a:b2:e7:2f:09:06:10:aa:99:59:94:5f:15:2e: c4:a4:32:4c:54:5e:98:03:a9:96:4d:88:a2:fb:0f: 4d:58:5f:9f:d7:af:a3:61:86:0b:0c:89:74:4e:50: 1f:29:a1:92:8a:93:0d:e7:6d:4b:92:d4:aa:d3:ed: 4f:13:aa:51:58:24:c8:d0:ea:39:4e:3b:e3:61:f6: b0:a0:28:06:1c:bd:9b:ec:1d:46:69:8f:b6:fe:96: fc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BC:5B:F3:90:EA:F4:1D:41:E0:74:23:82:49:6C:2E:2F:75:E3:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5e357e41-db2e-3379-bb72-cbe0f5798846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.213.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:55:e7:9d:ec:36:63:74:5c:8f:5b:1d:ea:7f:8f:81:a9:59: 16:55:fd:db:82:ac:d9:52:4d:c5:27:85:15:ed:5b:f6:0a:02: 30:60:3f:24:25:d0:94:b1:06:fb:85:e7:d8:dc:7c:77:c2:39: 06:71:9d:79:8a:74:72:5e:c7:3e:cf:f1:ce:4e:2e:0c:2e:f7: c3:00:89:78:90:70:87:fe:bd:6f:9e:a4:84:91:28:c5:83:cd: d4:40:b0:d1:d5:aa:f1:43:06:48:b2:83:39:b9:c3:a0:cf:f1: c3:42:3b:1f:d7:31:84:f3:fe:78:82:67:02:26:ec:46:71:68: 94:67:10:f5:46:0c:90:82:50:a4:89:62:4c:d7:94:0d:da:04: b4:ac:f5:ba:a7:94:6a:1a:20:8b:9d:e6:cc:97:15:4d:39:3a: da:04:55:b9:18:42:e8:2e:1d:4f:44:14:3e:fb:12:97:eb:0b: 67:c5:27:69:ad:1a:a0:9d:f2:f6:42:39:e3:99:cf:1a:e2:48: c4:b3:e8:ef:d1:e9:b8:2e:3b:9e:25:14:92:f3:4a:d6:62:18: 95:a2:5e:05:8f:66:c7:a3:9a:35:e4:eb:4b:b1:61:c9:99:22: b0:97:d6:b3:f5:da:53:82:cf:2a:f3:d9:fd:23:f9:d1:7e:c3: 03:45:1a:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHFH4QVS6gQ7JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk YzYzZDg3NjMtNjM0Ni00MjE0LWE1YjItZGMyMTRkMjg2MjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOHP5lUcqsl0jNDAwUBBlzs7/LXqxCs5IACY eqN3UM0WANn25EQKC67cQWslmSXQRvlWJowK7FqqKODV2WrbsDtn2jOy2I1agSBL F6vcEuPlLikTPY5H1NI4YqVideEho7IzIT5olJCduUFOj5OV+JH777YzKqgviIEk zA/agPt7SNg59jgf2+vOLpkxxmdhCoZvzSdhEOel6z5h7oEkoWx5BLepCrLnLwkG EKqZWZRfFS7EpDJMVF6YA6mWTYii+w9NWF+f16+jYYYLDIl0TlAfKaGSipMN521L ktSq0+1PE6pRWCTI0Oo5TjvjYfawoCgGHL2b7B1GaY+2/pb8iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN68W/OQ6vQdQeB0I4JJbC4vdeMwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNWUzNTdlNDEtZGIyZS0z Mzc5LWJiNzItY2JlMGY1Nzk4ODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdV553sNmN0XI9bHep/j4GpWRZV/duCrNlSTcUnhRXtW/YKAjBgPyQl 0JSxBvuF59jcfHfCOQZxnXmKdHJexz7P8c5OLgwu98MAiXiQcIf+vW+epISRKMWD zdRAsNHVqvFDBkiygzm5w6DP8cNCOx/XMYTz/niCZwIm7EZxaJRnEPVGDJCCUKSJ YkzXlA3aBLSs9bqnlGoaIIud5syXFU05OtoEVbkYQuguHU9EFD77EpfrC2fFJ2mt GqCd8vZCOeOZzxriSMSz6O/R6bguO54lFJLzStZiGJWiXgWPZsejmjXk60uxYcmZ IrCX1rP12lOCzyrz2f0j+dF+wwNFGq8= -----END CERTIFICATE-----Generated at Wed Oct 8 15:38:57 2025 by rpki-client