$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/4420984a-f7eb-38c1-89b7-981cd4631dc3.roa File: 4420984a-f7eb-38c1-89b7-981cd4631dc3.roa (raw, json) Hash identifier: lUV5hHOh1MdZLkEwXfkKjVQoNunJMUVYnsH313j/VFg= Subject key identifier: C1:0B:A1:30:D1:91:8E:50:6F:76:4A:36:1A:80:AA:22:6C:83:E3:DB Certificate issuer: /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Certificate serial: 010D0C9F4328584BBA104B71351D9329E0767D80 Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/4420984a-f7eb-38c1-89b7-981cd4631dc3.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 22135 IP address blocks: 173.242.10.0/24 maxlen: 24 173.242.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:4b:71:35:1d:93:29:e0:76:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=983faf4f-5d38-4125-920f-b52c64fc2286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e0:53:f8:67:28:23:5a:bd:40:36:a4:46:13: 27:23:94:38:4f:9f:b1:d1:88:7b:8d:28:8c:73:cb: 5e:fa:4e:03:09:47:21:cb:30:c1:56:7a:59:bc:56: 18:e1:51:a2:54:0b:6d:43:02:f6:92:37:0e:36:02: ad:29:2b:b4:72:93:19:65:1f:d1:0d:2a:b8:32:44: da:86:f5:e3:36:d6:e4:b8:82:b4:46:86:a3:99:cc: 4b:b1:89:81:34:6b:d2:90:08:a7:89:36:5d:9f:40: 6c:03:89:52:90:a8:b0:b2:9e:f4:be:87:9e:63:1e: 24:a0:90:df:30:79:a3:78:c9:fd:98:f2:f2:46:eb: d8:57:f6:08:30:79:38:98:b5:36:da:26:ef:67:97: a8:af:fc:a8:1b:44:dd:9b:d7:03:e7:de:90:45:61: 6b:ac:2a:76:97:82:d8:33:9a:d5:0f:ff:61:87:3d: 57:cb:0b:f9:49:44:8e:99:2d:8f:2a:a8:a4:b9:cd: 5f:5a:0c:79:01:dd:dc:08:10:64:ce:35:52:fc:c1: b4:fb:1d:29:07:93:0f:c7:30:a1:b7:cd:2e:51:f4: e5:13:3f:37:1f:72:c8:9c:dc:bb:af:7e:34:c5:eb: 7f:4f:f4:ee:5c:3e:39:3b:ca:9f:99:64:95:7e:a5: a9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0B:A1:30:D1:91:8E:50:6F:76:4A:36:1A:80:AA:22:6C:83:E3:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/4420984a-f7eb-38c1-89b7-981cd4631dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl X509v3 Authority Key Identifier: keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer sbgp-ipAddrBlock: critical IPv4: 173.242.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:df:45:44:2c:42:12:d4:d3:dc:b3:ac:8f:99:c4:51:61:79: ec:a6:40:63:53:97:5a:02:ca:8c:f6:57:c8:38:23:02:a6:b9: 16:23:7d:53:54:1c:f2:cb:18:68:79:f4:01:3b:b2:b9:4f:c6: 38:56:91:37:47:7b:19:9e:b8:ac:ab:de:63:05:4d:e0:9f:a6: a0:1e:36:dc:bc:39:07:e2:2b:ce:3b:a9:25:e6:1f:b5:10:7f: 62:34:22:c2:00:40:2f:7b:c1:b8:4e:12:45:62:5f:df:95:cd: 5a:44:72:54:70:2e:71:7f:f2:df:3d:ca:36:e4:54:d7:74:66: a8:cc:6c:7f:b3:10:61:56:63:ce:ff:40:95:bc:55:0b:85:21: 67:e6:4f:84:65:c9:e6:5f:84:3b:6c:a7:03:8c:89:83:ed:50: d6:52:49:ed:cc:45:83:83:19:f3:af:b2:00:73:7d:b8:0f:8b: 38:78:7a:0c:0b:11:29:e5:52:37:81:c1:1b:21:a3:85:20:89: 7a:fc:3a:c3:39:fa:e6:3d:5a:00:a0:b9:1e:93:44:11:e4:06: 5e:eb:53:14:44:a1:67:09:a9:8d:ea:de:c3:29:f3:33:e3:fb: 4a:f9:59:06:9a:53:cf:da:84:5c:07:25:3e:3e:6b:b7:42:dd: 0d:79:1c:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEtxNR2TKeB2fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5NDk5YTctZGQ3My00ZDI4LWIzYWQtMjgxM2UxNDIx YzY0MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk OTgzZmFmNGYtNWQzOC00MTI1LTkyMGYtYjUyYzY0ZmMyMjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuBT+GcoI1q9QDakRhMnI5Q4T5+x0Yh7jSiM c8te+k4DCUchyzDBVnpZvFYY4VGiVAttQwL2kjcONgKtKSu0cpMZZR/RDSq4MkTa hvXjNtbkuIK0RoajmcxLsYmBNGvSkAiniTZdn0BsA4lSkKiwsp70voeeYx4koJDf MHmjeMn9mPLyRuvYV/YIMHk4mLU22ibvZ5eor/yoG0Tdm9cD596QRWFrrCp2l4LY M5rVD/9hhz1Xywv5SUSOmS2PKqikuc1fWgx5Ad3cCBBkzjVS/MG0+x0pB5MPxzCh t80uUfTlEz83H3LInNy7r340xet/T/TuXD45O8qfmWSVfqWpSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMELoTDRkY5Qb3ZKNhqAqiJsg+PbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDk0 OTlhNy1kZDczLTRkMjgtYjNhZC0yODEzZTE0MjFjNjQvNDQyMDk4NGEtZjdlYi0z OGMxLTg5YjctOTgxY2Q0NjMxZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ5NDk5YTctZGQ3My00ZDI4LWIz YWQtMjgxM2UxNDIxYzY0LzVkOTQ5OWE3LWRkNzMtNGQyOC1iM2FkLTI4MTNlMTQy MWM2NC5jcmwwHwYDVR0jBBgwFoAUButBQNUQLNt8DYziewcWWtswkqkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZDk0OTlhNy1kZDczLTRkMjgtYjNhZC0yODEz ZTE0MjFjNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrfIKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/fRUQsQhLU09yzrI+ZxFFheeymQGNTl1oCyoz2V8g4IwKmuRYjfVNU HPLLGGh59AE7srlPxjhWkTdHexmeuKyr3mMFTeCfpqAeNty8OQfiK847qSXmH7UQ f2I0IsIAQC97wbhOEkViX9+VzVpEclRwLnF/8t89yjbkVNd0ZqjMbH+zEGFWY87/ QJW8VQuFIWfmT4RlyeZfhDtspwOMiYPtUNZSSe3MRYODGfOvsgBzfbgPizh4egwL ESnlUjeBwRsho4UgiXr8OsM5+uY9WgCguR6TRBHkBl7rUxREoWcJqY3q3sMp8zPj +0r5WQaaU8/ahFwHJT4+a7dC3Q15HOo= -----END CERTIFICATE-----Generated at Mon Nov 3 08:59:32 2025 by rpki-client