$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/b864f624-fc3e-3a9d-ac37-a2dee4565c20.roa File: b864f624-fc3e-3a9d-ac37-a2dee4565c20.roa (raw, json) Hash identifier: X8VftFNayNlZQgnx8Rz8UExu4+b+oSi6WRAGA9j/b94= Subject key identifier: A2:8B:C8:3A:B2:E9:87:75:1D:7B:91:90:35:37:34:D3:E0:CD:23:20 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584BA0D25DAA51DF4F08C5951880 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/b864f624-fc3e-3a9d-ac37-a2dee4565c20.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 9009 IP address blocks: 173.245.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5d:aa:51:df:4f:08:c5:95:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=9b165d9c-174f-426e-b989-889b32bf6fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:40:9f:2f:19:32:83:22:05:5f:8e:12:23:ed: c0:5b:8c:4c:bf:72:e0:85:d1:9e:0f:ab:06:89:c3: 37:94:08:85:8e:0e:f9:31:6d:b2:ad:15:5f:00:14: 16:da:47:c1:a7:d9:04:cd:56:60:da:98:04:51:19: 65:3e:0a:f2:c6:81:4b:cf:fc:3e:a6:9c:57:d1:71: 9a:4e:1d:5a:ba:4d:bf:39:5f:9a:8f:f1:5a:c7:5b: a8:6a:18:94:ce:bc:22:db:46:24:e0:d8:73:cd:3c: 10:ad:61:11:42:cb:e7:ad:b9:67:87:cf:00:00:cb: 7b:48:a8:45:d3:b3:a4:f1:9c:1b:2d:b9:de:8b:68: 47:67:ac:e2:23:b5:80:07:de:e8:be:9c:f9:92:71: ce:d1:42:ad:31:5d:54:09:cc:a0:0c:62:0b:c3:55: 0f:dc:46:33:b5:cc:16:e1:7a:4f:40:cc:01:15:8c: 09:d3:a8:53:41:89:4e:02:ca:fc:1d:6f:d2:fb:ef: b6:32:19:74:fd:84:c1:7e:3d:f3:0e:7c:83:9f:85: 4a:b9:aa:e6:91:dc:d0:49:8f:28:1a:1d:10:64:e8: 84:08:3a:bb:72:b4:04:dd:75:78:63:b4:5a:bc:f1: ab:1b:d1:f6:70:80:65:f5:be:36:12:d2:54:92:7c: 38:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8B:C8:3A:B2:E9:87:75:1D:7B:91:90:35:37:34:D3:E0:CD:23:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/b864f624-fc3e-3a9d-ac37-a2dee4565c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:15:ef:a8:76:cb:01:4b:90:de:8a:c1:8e:7c:b2:e5:13:6e: 7a:bf:0b:72:70:1e:6e:12:08:27:6f:90:d7:c8:4e:fb:9c:07: 1f:1b:ef:fe:5c:f4:36:bf:88:cc:21:05:50:d0:06:98:67:35: 2d:42:65:46:cf:5e:37:72:77:21:cc:ab:58:b1:97:a5:fd:4c: cf:d0:77:38:42:30:8c:76:67:7b:cd:f4:37:6e:b8:0f:69:c2: 19:1b:54:00:47:02:66:47:9a:23:05:90:d1:26:4a:6a:9b:48: 9e:26:7a:be:e8:a5:e9:86:bc:14:34:e0:f5:69:d2:61:52:ca: 1e:8f:95:16:32:45:df:f0:3e:d1:ad:18:81:0b:40:33:0e:fe: 2a:98:1d:a1:0e:cc:78:82:51:1c:91:6a:51:e6:bc:c7:c5:7d: 02:76:93:97:f4:57:ee:8f:a7:fa:90:fd:9f:08:c2:63:22:00: dd:4d:0f:76:82:50:41:6d:30:f7:ca:9b:56:d1:e5:89:9a:67: a4:82:c4:da:8d:75:bb:74:c9:a3:ed:7c:39:10:a8:08:d2:88: e4:22:4b:ac:62:51:77:57:e8:cd:87:3b:fc:63:b7:7b:b7:51: 18:86:05:e2:26:ec:21:eb:bf:9b:8f:1d:d0:93:52:64:21:19: 0b:5d:da:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0l2qUd9PCMWVGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk OWIxNjVkOWMtMTc0Zi00MjZlLWI5ODktODg5YjMyYmY2ZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ECfLxkygyIFX44SI+3AW4xMv3LghdGeD6sG icM3lAiFjg75MW2yrRVfABQW2kfBp9kEzVZg2pgEURllPgryxoFLz/w+ppxX0XGa Th1auk2/OV+aj/Fax1uoahiUzrwi20Yk4NhzzTwQrWERQsvnrblnh88AAMt7SKhF 07Ok8ZwbLbnei2hHZ6ziI7WAB97ovpz5knHO0UKtMV1UCcygDGILw1UP3EYztcwW 4XpPQMwBFYwJ06hTQYlOAsr8HW/S+++2Mhl0/YTBfj3zDnyDn4VKuarmkdzQSY8o Gh0QZOiECDq7crQE3XV4Y7RavPGrG9H2cIBl9b42EtJUknw4yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKLyDqy6Yd1HXuRkDU3NNPgzSMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvYjg2NGY2MjQtZmMzZS0z YTlkLWFjMzctYTJkZWU0NTY1YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsV76h2ywFLkN6KwY58suUTbnq/C3JwHm4SCCdvkNfITvucBx8b7/5c 9Da/iMwhBVDQBphnNS1CZUbPXjdydyHMq1ixl6X9TM/QdzhCMIx2Z3vN9DduuA9p whkbVABHAmZHmiMFkNEmSmqbSJ4mer7opemGvBQ04PVp0mFSyh6PlRYyRd/wPtGt GIELQDMO/iqYHaEOzHiCURyRalHmvMfFfQJ2k5f0V+6Pp/qQ/Z8IwmMiAN1ND3aC UEFtMPfKm1bR5YmaZ6SCxNqNdbt0yaPtfDkQqAjSiOQiS6xiUXdX6M2HO/xjt3u3 URiGBeIm7CHrv5uPHdCTUmQhGQtd2nk= -----END CERTIFICATE-----Generated at Sat Oct 25 01:03:01 2025 by rpki-client