$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/530351b0-4162-3880-8391-135d2b6cc284.roa File: 530351b0-4162-3880-8391-135d2b6cc284.roa (raw, json) Hash identifier: nun7p5ODxh+RZ2GTI8xfZZqvUFChvIWthKNp4MTsU4Y= Subject key identifier: 4C:C1:7B:25:71:06:B1:D1:53:D6:01:31:21:95:57:91:EB:7A:D7:40 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584B68FC9A50E9FF78F93208EE60 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/530351b0-4162-3880-8391-135d2b6cc284.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 140952 IP address blocks: 173.245.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9a:50:e9:ff:78:f9:32:08:ee:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=eb225b1b-1a1e-42d3-8505-6ea53d33de64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0c:4c:52:02:b8:6b:b5:9e:9f:39:80:19:67: 54:92:c9:8b:c9:5b:61:58:9b:83:7e:a3:67:32:b2: d5:a7:18:3b:71:b0:36:7c:a3:0f:ef:47:0c:75:ea: 1a:f1:11:a5:a3:6c:e1:63:16:29:95:54:1d:48:74: 80:49:51:72:97:4e:b2:b2:0a:62:4c:7b:e9:a5:8d: 48:88:56:5b:22:f2:26:24:d8:6b:3f:6b:ee:11:ff: 87:49:15:58:cb:26:fa:8f:bb:d4:1f:d1:56:3c:53: 8a:f5:86:b2:2e:cc:55:6e:19:cf:b0:78:c4:2f:98: 22:71:a3:58:23:84:76:40:d9:76:4d:da:28:93:4e: ed:d1:be:f0:12:1b:0b:c2:b8:7a:de:da:09:ba:3b: a7:a0:78:76:62:dd:cf:a8:9e:08:32:7f:31:70:9a: cb:3f:1c:05:6b:3a:1a:bd:ef:ab:95:83:a6:7d:2e: 17:94:82:a0:44:fa:30:ba:2e:02:1a:f5:00:e4:e6: 66:d7:ab:8b:0d:69:a2:22:7b:67:03:b5:33:25:49: 81:f3:04:7d:4b:dc:c0:39:af:eb:94:66:c5:a2:4e: 90:5d:18:bb:6c:a6:eb:ba:4a:2f:06:5c:57:c0:3d: 28:22:15:c8:47:1d:ad:70:5c:d3:17:5a:4f:b4:ef: 95:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C1:7B:25:71:06:B1:D1:53:D6:01:31:21:95:57:91:EB:7A:D7:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/530351b0-4162-3880-8391-135d2b6cc284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:78:e8:09:17:fc:81:0e:0a:34:47:0f:41:0e:74:db:44:92: 9c:5e:86:03:f5:21:13:05:5b:5f:07:2b:e4:1b:47:86:14:2c: e8:37:56:8c:6a:5e:51:5c:6a:aa:2d:da:a5:a4:18:f9:f3:75: e1:54:75:20:08:f1:da:81:f3:59:46:f3:41:e7:46:37:de:43: d5:ff:3a:63:d7:b9:7c:d6:17:cb:12:02:59:ce:f2:f8:4f:e6: db:ad:07:55:44:35:77:de:e1:1b:e5:35:16:e7:2b:36:5d:0d: ca:89:ef:d7:07:6c:ef:5d:85:df:1e:cf:c0:e6:9a:72:dd:11: 9c:0a:f2:61:5e:d7:59:63:80:61:f0:39:8a:08:f4:14:54:e1: 6c:e7:be:65:78:2f:87:77:67:da:55:88:88:8e:67:68:41:30: 0e:44:96:2a:a0:89:8f:3d:72:60:51:a2:54:9f:23:13:44:cb: 2f:96:54:43:69:45:04:aa:31:c4:ca:84:c2:62:fd:bf:27:56: 47:d3:32:c0:ce:b4:a8:df:7d:ee:83:4f:92:8e:da:e9:04:d3: aa:38:6b:c8:ac:66:47:c3:2e:44:49:ec:d7:d8:c9:5d:d9:0a: e6:c6:8b:47:01:cb:8e:0a:45:b3:32:05:76:45:95:42:5d:df: 6f:b4:40:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/JpQ6f94+TII7mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ZWIyMjViMWItMWExZS00MmQzLTg1MDUtNmVhNTNkMzNkZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAxMUgK4a7WenzmAGWdUksmLyVthWJuDfqNn MrLVpxg7cbA2fKMP70cMdeoa8RGlo2zhYxYplVQdSHSASVFyl06ysgpiTHvppY1I iFZbIvImJNhrP2vuEf+HSRVYyyb6j7vUH9FWPFOK9YayLsxVbhnPsHjEL5gicaNY I4R2QNl2Tdook07t0b7wEhsLwrh63toJujunoHh2Yt3PqJ4IMn8xcJrLPxwFazoa ve+rlYOmfS4XlIKgRPowui4CGvUA5OZm16uLDWmiIntnA7UzJUmB8wR9S9zAOa/r lGbFok6QXRi7bKbrukovBlxXwD0oIhXIRx2tcFzTF1pPtO+VwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzBeyVxBrHRU9YBMSGVV5HretdAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvNTMwMzUxYjAtNDE2Mi0z ODgwLTgzOTEtMTM1ZDJiNmNjMjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ46AkX/IEOCjRHD0EOdNtEkpxehgP1IRMFW18HK+QbR4YULOg3Voxq XlFcaqot2qWkGPnzdeFUdSAI8dqB81lG80HnRjfeQ9X/OmPXuXzWF8sSAlnO8vhP 5tutB1VENXfe4RvlNRbnKzZdDcqJ79cHbO9dhd8ez8DmmnLdEZwK8mFe11ljgGHw OYoI9BRU4WznvmV4L4d3Z9pViIiOZ2hBMA5EliqgiY89cmBRolSfIxNEyy+WVENp RQSqMcTKhMJi/b8nVkfTMsDOtKjffe6DT5KO2ukE06o4a8isZkfDLkRJ7NfYyV3Z CubGi0cBy44KRbMyBXZFlUJd32+0QBE= -----END CERTIFICATE-----Generated at Sat Oct 25 01:07:58 2025 by rpki-client