$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0f30e15-1ff8-38c6-9b43-afc4f9fb0e89.roa File: d0f30e15-1ff8-38c6-9b43-afc4f9fb0e89.roa (raw, json) Hash identifier: sFZoVeUSxVTXV34VS65/kbRZrNoo24R08BNNFgKdSLg= Subject key identifier: DE:E1:C0:68:5B:C8:82:46:A7:F7:DA:7F:48:33:32:3D:A2:A6:AA:D2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFAA1594F39167A4BAD80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0f30e15-1ff8-38c6-9b43-afc4f9fb0e89.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 173.245.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:fa:a1:59:4f:39:16:7a:4b:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=f45f1f33-5ffe-4f26-89bc-5b980968f4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:46:2a:b9:7f:0a:96:10:23:2b:58:58:4f:71: 4f:4c:77:67:1a:b6:d6:5b:10:5d:05:31:91:ce:b1: 8c:c7:d1:a2:f9:f1:90:d7:3d:41:15:4f:4b:f2:6b: d8:03:ce:98:61:24:9c:4a:0c:3a:f4:d0:ad:e1:f7: 5f:5f:e2:be:9c:1d:ae:19:98:28:b3:e0:db:ff:db: c7:77:f4:12:70:15:79:cb:f9:bf:07:27:6a:a3:3d: 34:9d:28:23:40:09:20:46:0a:c4:26:bc:3b:ac:70: 0c:a4:b2:4e:35:60:69:23:18:c5:35:da:54:58:e0: fc:6c:f2:44:a6:84:52:be:9c:0c:21:e4:b8:ca:cd: 21:65:dc:da:f8:20:42:49:bb:fe:fb:18:41:64:f6: e1:b1:c7:a7:6e:60:cb:07:e2:1e:59:c9:aa:93:a9: b7:75:2d:3b:4f:02:e6:b6:da:08:e6:ef:df:1d:a9: 94:56:9d:f3:a5:66:0f:2a:3e:de:90:e6:33:6a:f5: 9e:c6:ab:7b:9e:38:49:54:24:a0:ae:4a:7c:80:ac: ca:b0:c9:f6:98:27:4b:bf:ac:b1:ca:7f:f2:8c:85: 0d:45:a3:08:70:76:d7:7b:75:42:aa:14:1f:81:ee: f6:6d:cf:01:03:5b:18:cb:7f:03:23:95:b5:df:ff: 3c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E1:C0:68:5B:C8:82:46:A7:F7:DA:7F:48:33:32:3D:A2:A6:AA:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0f30e15-1ff8-38c6-9b43-afc4f9fb0e89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 173.245.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:a5:ef:3e:fb:6e:be:37:bb:e7:58:63:4e:08:e6:f4:c8:2b: db:a1:e4:66:4b:c9:71:fa:ad:54:cf:b1:19:b5:a2:94:b2:2b: 36:ea:89:92:51:0b:da:e6:28:e3:04:09:80:7d:74:2a:bf:29: 71:9c:bb:39:be:5a:23:a5:ff:58:6d:bf:b3:10:a8:fb:3a:b2: 75:fc:17:b4:89:e5:fe:04:6d:85:fe:a8:58:92:bf:55:0e:53: 42:23:95:6f:5b:f1:7c:fa:a2:e0:70:4f:90:2f:0d:3f:a7:87: ab:f4:c7:76:e4:4c:ff:18:b7:a5:63:4e:82:80:31:c2:1f:5b: 63:ad:0c:20:36:cb:c7:0b:df:e7:c7:5d:0a:e2:c3:8a:ef:fa: db:2b:72:b3:22:e1:60:10:63:1b:39:e2:f5:94:64:e0:33:bf: 5f:67:4a:9b:b1:2a:00:0c:de:02:ff:d9:6c:5b:8a:37:d4:27: 17:ff:f9:8e:24:e8:e4:8c:c4:d3:29:43:ff:6e:80:bf:23:78: c5:8a:98:a1:77:fc:b4:13:31:90:f1:ed:a4:5c:b2:95:df:37: 83:75:e7:9f:14:ab:a9:1c:4b:75:f0:54:cd:e5:b2:a5:05:1e: e9:19:22:d9:f5:4f:1f:90:3e:89:d5:10:cd:a3:e2:95:47:d2: 26:05:ee:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPqhWU85FnpLrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZjQ1ZjFmMzMtNWZmZS00ZjI2LTg5YmMtNWI5ODA5NjhmNGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0YquX8KlhAjK1hYT3FPTHdnGrbWWxBdBTGR zrGMx9Gi+fGQ1z1BFU9L8mvYA86YYSScSgw69NCt4fdfX+K+nB2uGZgos+Db/9vH d/QScBV5y/m/Bydqoz00nSgjQAkgRgrEJrw7rHAMpLJONWBpIxjFNdpUWOD8bPJE poRSvpwMIeS4ys0hZdza+CBCSbv++xhBZPbhscenbmDLB+IeWcmqk6m3dS07TwLm ttoI5u/fHamUVp3zpWYPKj7ekOYzavWexqt7njhJVCSgrkp8gKzKsMn2mCdLv6yx yn/yjIUNRaMIcHbXe3VCqhQfge72bc8BA1sYy38DI5W13/88OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7hwGhbyIJGp/faf0gzMj2ipqrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDBmMzBlMTUtMWZmOC0z OGM2LTliNDMtYWZjNGY5ZmIwZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfU/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+l7z77br43u+dYY04I5vTIK9uh5GZLyXH6rVTPsRm1opSyKzbqiZJR C9rmKOMECYB9dCq/KXGcuzm+WiOl/1htv7MQqPs6snX8F7SJ5f4EbYX+qFiSv1UO U0IjlW9b8Xz6ouBwT5AvDT+nh6v0x3bkTP8Yt6VjToKAMcIfW2OtDCA2y8cL3+fH XQriw4rv+tsrcrMi4WAQYxs54vWUZOAzv19nSpuxKgAM3gL/2WxbijfUJxf/+Y4k 6OSMxNMpQ/9ugL8jeMWKmKF3/LQTMZDx7aRcspXfN4N1558Uq6kcS3XwVM3lsqUF HukZItn1Tx+QPonVEM2j4pVH0iYF7l8= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:42 2025 by rpki-client