$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c105563-24b0-38b3-a529-1a243ef05aa4.roa File: 9c105563-24b0-38b3-a529-1a243ef05aa4.roa (raw, json) Hash identifier: K0CCd3zITFnTUVuQstVX8sr+c0d7/+5nMAet+XQG/Fs= Subject key identifier: 2C:8B:14:ED:9D:A6:36:7B:B7:5D:41:79:BF:2F:2C:55:4A:26:3C:47 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927E385A8BCDB2F7DCDA00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c105563-24b0-38b3-a529-1a243ef05aa4.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 173.245.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7e:38:5a:8b:cd:b2:f7:dc:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=d5ef58d3-9930-441a-8394-025ea2a6c9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:d5:21:9e:ce:d0:31:25:d3:28:4f:86:8d: 94:88:9c:16:5e:ef:69:55:c0:ca:50:f0:c9:14:15: 5c:dc:08:d3:74:a9:10:bb:99:88:45:e4:d4:17:47: 82:fe:c1:3c:48:ca:a1:94:6c:05:3b:7a:d9:58:c6: 0a:05:e1:31:2c:7e:3c:6d:35:12:6f:79:d0:c6:7d: ee:c4:2c:34:ee:f6:20:f8:31:4d:f9:e3:c0:5d:f5: 35:7b:3b:2a:d3:9d:80:4f:8f:ce:71:a6:9b:b9:df: 50:22:3c:24:ad:6d:e8:65:22:ee:f0:e1:91:5e:c5: 8d:db:22:3e:af:50:16:a9:06:45:0e:aa:4c:fc:13: ec:f3:9f:e8:4d:c3:fe:77:be:45:7b:2b:74:e5:c6: 21:5f:29:b8:88:8b:e0:cc:d1:1a:64:ae:6e:ff:df: b9:e1:76:e7:7b:2c:ff:83:38:f3:bd:ed:2e:4d:31: 8e:6a:e0:c7:f1:af:3e:df:73:4e:24:a5:d1:24:e5: 7b:7e:35:76:2a:d0:c9:49:70:cf:3f:99:00:6a:80: fb:70:7c:3b:c2:08:5f:01:92:2f:6d:54:87:e8:78: 2c:5f:ea:c6:bb:f6:05:f2:e3:1c:52:63:cd:ba:78: 6e:e2:cb:c0:1d:c6:2a:2c:64:01:bb:7b:ef:e9:9d: 07:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8B:14:ED:9D:A6:36:7B:B7:5D:41:79:BF:2F:2C:55:4A:26:3C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c105563-24b0-38b3-a529-1a243ef05aa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 173.245.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:b0:98:df:c1:90:3e:0b:06:d8:45:e0:69:c0:8b:71:4f:e8: 10:d0:b0:ea:e8:a3:ee:59:a5:43:10:98:25:4a:98:60:43:bf: 59:dd:e7:61:74:77:24:2f:a3:e0:80:ad:7f:96:a1:36:4c:85: 75:ef:73:fc:ac:e3:0f:3a:71:ff:6f:d8:c0:00:a6:42:03:c1: ed:ff:6f:f0:93:74:e4:1d:b8:5d:1c:ee:c3:6b:0c:32:3d:0d: b7:9c:10:ee:d6:ef:67:98:de:eb:3b:d5:97:c0:e6:41:07:cf: 7a:fc:70:fc:dd:e7:a4:a7:59:a9:8e:9c:91:bb:23:73:96:e3: d8:e4:fc:2c:3c:e8:52:07:4a:b7:e6:4f:9d:47:6d:27:5c:a5: d8:e1:f9:41:8b:2e:cf:5a:ee:0a:6d:20:8e:77:fd:8a:4d:98: 62:ff:cf:89:97:fd:30:79:88:49:56:f3:0e:08:69:ea:c3:3b: 7a:83:8b:a3:fc:66:86:00:4c:fc:ac:fa:df:48:ea:1c:ff:08: 87:5d:22:1f:62:37:5e:77:96:fc:97:59:10:de:3f:3a:5e:0c: ba:3e:a7:3a:a8:3f:f6:4c:90:95:49:5e:b4:04:d7:03:bb:d9: 12:35:99:ec:3a:5a:5c:d7:b2:53:c1:d3:50:b0:25:e6:ac:8d: 9f:00:29:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkn44WovNsvfc2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZDVlZjU4ZDMtOTkzMC00NDFhLTgzOTQtMDI1ZWEyYTZjOWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8HVIZ7O0DEl0yhPho2UiJwWXu9pVcDKUPDJ FBVc3AjTdKkQu5mIReTUF0eC/sE8SMqhlGwFO3rZWMYKBeExLH48bTUSb3nQxn3u xCw07vYg+DFN+ePAXfU1ezsq052AT4/Ocaabud9QIjwkrW3oZSLu8OGRXsWN2yI+ r1AWqQZFDqpM/BPs85/oTcP+d75Feyt05cYhXym4iIvgzNEaZK5u/9+54Xbneyz/ gzjzve0uTTGOauDH8a8+33NOJKXRJOV7fjV2KtDJSXDPP5kAaoD7cHw7wghfAZIv bVSH6HgsX+rGu/YF8uMcUmPNunhu4svAHcYqLGQBu3vv6Z0HkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyLFO2dpjZ7t11Beb8vLFVKJjxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWMxMDU1NjMtMjRiMC0z OGIzLWE1MjktMWEyNDNlZjA1YWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfU6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGwmN/BkD4LBthF4GnAi3FP6BDQsOroo+5ZpUMQmCVKmGBDv1nd52F0 dyQvo+CArX+WoTZMhXXvc/ys4w86cf9v2MAApkIDwe3/b/CTdOQduF0c7sNrDDI9 DbecEO7W72eY3us71ZfA5kEHz3r8cPzd56SnWamOnJG7I3OW49jk/Cw86FIHSrfm T51HbSdcpdjh+UGLLs9a7gptII53/YpNmGL/z4mX/TB5iElW8w4IaerDO3qDi6P8 ZoYATPys+t9I6hz/CIddIh9iN153lvyXWRDePzpeDLo+pzqoP/ZMkJVJXrQE1wO7 2RI1mew6WlzXslPB01CwJeasjZ8AKV8= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:51 2025 by rpki-client