$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/a337bf32-0dd5-399a-b30c-b86cbdc818d4.roa File: a337bf32-0dd5-399a-b30c-b86cbdc818d4.roa (raw, json) Hash identifier: KNy1+1s2XnVIuqtdyaXhgqeaMZmZOlkDIiNByWAlhwg= Subject key identifier: 08:4C:2C:18:58:C3:DE:BC:57:82:35:20:48:3B:9F:83:F4:91:99:05 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584AF7EBDE703F70CA0D19FD33C0 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/a337bf32-0dd5-399a-b30c-b86cbdc818d4.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 62651 IP address blocks: 173.245.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:de:70:3f:70:ca:0d:19:fd:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=2e713111-5457-4c4f-8536-e0bbbe65f2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0e:53:23:5b:f7:78:0a:3d:c4:a2:d1:97:bf: bc:d4:01:c4:93:ad:f4:4f:2b:89:62:e2:7e:27:98: c0:29:8d:fd:58:77:81:75:d3:c5:ec:e6:1e:45:2c: da:b1:ad:d7:bb:f7:68:3c:8a:9f:16:95:df:8e:90: aa:26:85:a4:0a:c3:7d:de:13:92:9a:27:2c:55:66: ec:6b:bd:85:d7:ee:d7:2c:b1:b0:cc:26:de:51:dd: f8:c6:6d:08:46:bc:5c:98:65:bf:c6:0e:54:8a:45: dc:15:19:48:04:a3:f1:ae:ea:fa:92:02:a1:ba:2e: ed:24:39:d1:93:48:95:aa:99:e9:58:cf:b8:97:d7: 88:8b:a7:42:4f:75:80:b2:44:88:7c:72:f2:0b:36: 40:46:f6:e8:28:e5:f8:64:e9:81:8d:8a:bf:3a:67: ae:ab:ea:09:e3:13:fd:99:ca:e5:c6:55:00:65:09: 46:cc:b5:fb:00:3d:09:2f:c1:09:c2:90:1f:c9:d7: 81:de:32:04:c4:d1:ae:a8:92:d0:30:7e:4f:6b:ab: 2c:c3:45:29:99:4e:fa:70:3f:15:17:f9:ed:f6:f4: 9c:8f:91:06:0d:ad:1c:6c:3c:ff:22:43:50:2a:5b: b7:e6:82:4c:8e:c4:bf:35:38:4b:a8:59:9b:4d:b6: 18:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4C:2C:18:58:C3:DE:BC:57:82:35:20:48:3B:9F:83:F4:91:99:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/a337bf32-0dd5-399a-b30c-b86cbdc818d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e4:e3:93:9c:34:0e:60:f4:8d:0f:27:ad:f0:4a:42:35:d3: 34:82:9f:84:f4:87:a8:38:4f:9c:40:9c:b1:37:8f:fe:63:ab: 2c:2d:f4:c8:ce:8e:17:5f:12:de:14:b5:22:17:ab:54:ed:8e: e8:53:46:d4:3d:b3:2c:6c:cd:2a:98:d7:00:26:44:6e:c1:ef: 27:8c:2b:9d:8b:49:25:90:92:bc:18:e0:ef:21:3f:65:f0:5d: 34:ed:28:de:00:01:14:0c:10:83:a1:ab:2b:4a:4e:e4:b7:b6: e5:ac:d6:24:51:9d:b7:ec:18:3b:00:7f:76:a3:31:c2:36:22: 45:18:7e:5b:e5:ee:4a:51:23:0a:32:c9:bd:4f:c0:47:3a:06: 54:08:b5:b6:a5:6c:d8:56:8f:11:65:70:df:80:93:48:90:1c: 9d:05:b8:60:f8:b7:c8:fd:8f:99:0b:7e:3b:96:23:82:03:38: c8:e6:7a:75:49:eb:d3:69:ca:32:4b:cf:5a:18:61:22:8c:bd: ab:14:e5:35:9e:0c:54:39:b8:c2:61:ac:71:15:50:37:dd:ed: 03:e4:dd:77:c2:0b:01:66:59:1e:e8:38:7c:d5:95:51:21:8b: 25:40:20:c2:cb:89:03:a5:23:88:85:c5:3f:7f:32:bf:74:c9: 15:78:f2:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr3695wP3DKDRn9M8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MmU3MTMxMTEtNTQ1Ny00YzRmLTg1MzYtZTBiYmJlNjVmMmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw5TI1v3eAo9xKLRl7+81AHEk630TyuJYuJ+ J5jAKY39WHeBddPF7OYeRSzasa3Xu/doPIqfFpXfjpCqJoWkCsN93hOSmicsVWbs a72F1+7XLLGwzCbeUd34xm0IRrxcmGW/xg5UikXcFRlIBKPxrur6kgKhui7tJDnR k0iVqpnpWM+4l9eIi6dCT3WAskSIfHLyCzZARvboKOX4ZOmBjYq/Omeuq+oJ4xP9 mcrlxlUAZQlGzLX7AD0JL8EJwpAfydeB3jIExNGuqJLQMH5Pa6ssw0UpmU76cD8V F/nt9vScj5EGDa0cbDz/IkNQKlu35oJMjsS/NThLqFmbTbYYvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhMLBhYw968V4I1IEg7n4P0kZkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvYTMzN2JmMzItMGRkNS0z OTlhLWIzMGMtYjg2Y2JkYzgxOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3k45OcNA5g9I0PJ63wSkI10zSCn4T0h6g4T5xAnLE3j/5jqywt9MjO jhdfEt4UtSIXq1TtjuhTRtQ9syxszSqY1wAmRG7B7yeMK52LSSWQkrwY4O8hP2Xw XTTtKN4AARQMEIOhqytKTuS3tuWs1iRRnbfsGDsAf3ajMcI2IkUYflvl7kpRIwoy yb1PwEc6BlQItbalbNhWjxFlcN+Ak0iQHJ0FuGD4t8j9j5kLfjuWI4IDOMjmenVJ 69NpyjJLz1oYYSKMvasU5TWeDFQ5uMJhrHEVUDfd7QPk3XfCCwFmWR7oOHzVlVEh iyVAIMLLiQOlI4iFxT9/Mr90yRV48ow= -----END CERTIFICATE-----Generated at Fri Oct 24 10:33:49 2025 by rpki-client