$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/beb12371-bed3-38ca-a955-6c88204b0444.roa File: beb12371-bed3-38ca-a955-6c88204b0444.roa (raw, json) Hash identifier: 3OfR9FD4nPxRX3FESgFi+fy9zqSlrR8/9Rd5O6jObok= Subject key identifier: 30:1F:CA:0C:0D:CC:90:E2:42:74:A4:98:C6:B0:8A:43:9D:6D:BA:E0 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B6FF73EAF27EEB88485E10380 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/beb12371-bed3-38ca-a955-6c88204b0444.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 174 IP address blocks: 173.232.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:3e:af:27:ee:b8:84:85:e1:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=5804a535-01c6-4fdd-8e9d-278e67ece3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1b:88:e5:46:4d:6e:72:48:34:d2:6e:ca:87: 8f:3a:a5:7e:74:1f:10:5d:b9:75:4c:34:da:94:51: ff:db:ac:6c:30:90:b1:7f:76:b5:5e:30:15:40:18: b8:61:20:ba:f0:45:af:1b:20:c3:d3:3d:66:16:f9: dd:57:3a:cd:8c:39:04:65:f9:c1:66:0c:94:f8:89: 38:b8:1e:00:7c:2e:c5:ff:66:cc:29:7e:3a:10:b0: 2c:83:15:de:70:9f:26:d1:c0:bf:98:1e:6b:bb:b3: 9a:75:e4:6d:49:02:60:ce:42:27:37:f0:92:6c:1b: d2:10:c9:70:32:74:25:a4:0e:04:d3:8e:ac:46:69: 90:9d:50:cf:14:aa:48:63:ca:ff:7d:b6:d3:87:ec: 88:d3:cf:55:2f:a5:17:81:06:e2:e4:ba:92:c7:ea: c1:38:e7:31:c8:5b:e4:06:57:09:b4:57:49:64:57: f5:f8:12:09:54:85:9c:43:ba:c1:91:6e:be:e3:ce: 78:42:3d:98:ab:f9:f3:10:c0:b5:33:ce:44:c3:d3: ae:d6:b8:8d:d3:aa:f4:2d:01:65:19:9c:dc:37:82: 7a:84:9c:86:e3:e6:25:8f:bf:6b:48:1a:cf:62:15: b6:7b:39:a5:4b:bb:cf:d2:62:d3:8d:56:3f:07:1a: e9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1F:CA:0C:0D:CC:90:E2:42:74:A4:98:C6:B0:8A:43:9D:6D:BA:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/beb12371-bed3-38ca-a955-6c88204b0444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:78:51:ad:10:92:43:4f:e5:70:0d:f9:93:d4:30:6c:fc:8d: 9d:84:60:e1:34:c9:1b:bf:1e:dc:9b:2a:d7:cb:16:1a:9e:c6: b4:76:42:7a:94:c6:3f:dc:33:9f:6c:eb:78:89:94:49:e0:65: d7:6d:1a:cb:99:a3:e9:a0:d1:11:e1:d0:c5:8f:aa:8d:80:0f: ec:4e:39:c6:2f:2b:cc:9c:39:a7:18:7f:62:ec:15:d1:0b:b0: 18:50:e6:5a:24:93:8b:a4:b7:dc:a6:7a:ab:2e:fc:bb:11:5c: d2:31:05:a6:97:3c:cf:0a:9b:ce:d8:6e:e0:32:c3:47:2e:d4: 57:c6:ef:15:56:1f:ca:31:a7:68:fa:67:6c:d5:b2:8f:96:6b: d1:23:5c:5b:97:11:c2:35:52:92:f8:8f:be:37:db:35:c9:e2: 20:d2:fb:76:2d:a2:2d:5a:2b:b5:d2:24:64:6b:52:10:ab:7a: 56:03:62:bd:0d:6a:df:5c:cf:bd:a7:b4:be:fd:88:f8:17:36: 93:45:80:f8:10:25:8e:3a:bd:d4:03:66:7d:60:6e:dc:40:30: 22:74:81:07:02:01:ad:3d:ee:90:f3:26:d3:a0:6d:7f:e1:3d: dc:fd:af:10:a1:79:34:41:8c:7f:d4:ed:d7:c5:72:8c:49:00: d4:f2:e7:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv9z6vJ+64hIXhA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk NTgwNGE1MzUtMDFjNi00ZmRkLThlOWQtMjc4ZTY3ZWNlM2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRuI5UZNbnJINNJuyoePOqV+dB8QXbl1TDTa lFH/26xsMJCxf3a1XjAVQBi4YSC68EWvGyDD0z1mFvndVzrNjDkEZfnBZgyU+Ik4 uB4AfC7F/2bMKX46ELAsgxXecJ8m0cC/mB5ru7OadeRtSQJgzkInN/CSbBvSEMlw MnQlpA4E046sRmmQnVDPFKpIY8r/fbbTh+yI089VL6UXgQbi5LqSx+rBOOcxyFvk BlcJtFdJZFf1+BIJVIWcQ7rBkW6+4854Qj2Yq/nzEMC1M85Ew9Ou1riN06r0LQFl GZzcN4J6hJyG4+Ylj79rSBrPYhW2ezmlS7vP0mLTjVY/BxrpyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAfygwNzJDiQnSkmMawikOdbbrgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYmViMTIzNzEtYmVkMy0z OGNhLWE5NTUtNmM4ODIwNGIwNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF4Ua0QkkNP5XAN+ZPUMGz8jZ2EYOE0yRu/HtybKtfLFhqexrR2QnqU xj/cM59s63iJlEngZddtGsuZo+mg0RHh0MWPqo2AD+xOOcYvK8ycOacYf2LsFdEL sBhQ5lokk4ukt9ymeqsu/LsRXNIxBaaXPM8Km87YbuAyw0cu1FfG7xVWH8oxp2j6 Z2zVso+Wa9EjXFuXEcI1UpL4j7432zXJ4iDS+3Ytoi1aK7XSJGRrUhCrelYDYr0N at9cz72ntL79iPgXNpNFgPgQJY46vdQDZn1gbtxAMCJ0gQcCAa097pDzJtOgbX/h Pdz9rxCheTRBjH/U7dfFcoxJANTy5zs= -----END CERTIFICATE-----Generated at Wed Oct 8 15:42:47 2025 by rpki-client