$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a9e68ba8-8a04-30bf-af1c-f207f282ee15.roa File: a9e68ba8-8a04-30bf-af1c-f207f282ee15.roa (raw, json) Hash identifier: t+8FoVoWcLX1GLTDq9KnvJOIH4kmfo6hDOlxPpu5rWI= Subject key identifier: 4C:5A:2D:E4:51:9F:AA:F0:F4:AA:4F:D2:02:D9:34:D9:79:ED:20:98 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B156845F0BD235A3D87C18E00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a9e68ba8-8a04-30bf-af1c-f207f282ee15.roa Signing time: Thu 04 Sep 2025 14:29:46 +0000 ROA not before: Thu 04 Sep 2025 14:29:46 +0000 ROA not after: Wed 03 Dec 2025 15:29:46 +0000 asID: 3223 IP address blocks: 173.255.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:68:45:f0:bd:23:5a:3d:87:c1:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 4 14:29:46 2025 GMT Not After : Dec 3 15:29:46 2025 GMT Subject: CN=0f79788f-ce67-4de8-a320-a878124f3b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c8:99:7b:6e:e6:0b:d3:25:ba:3c:ae:73:43: 0a:a9:36:8d:ef:6f:25:2c:a1:b4:be:0e:b6:eb:cc: 6a:d4:27:9f:3d:1e:e7:15:f8:89:6a:aa:49:d0:c8: d1:a3:27:a9:d7:e7:d8:c4:11:f8:9d:dc:25:b8:3f: e4:f0:8b:8d:9e:57:e9:9e:e9:ef:c3:a6:bd:c3:cf: 86:96:b5:db:1d:26:9e:90:b6:98:8d:53:cd:0e:24: 81:8b:4c:cc:45:f3:d9:e9:99:08:5f:68:46:bc:a5: 33:52:74:a5:97:66:15:9a:79:69:f4:60:4b:d4:ad: 9f:46:08:95:7c:c4:94:16:f0:02:9a:eb:ed:82:38: 1f:ee:8c:f3:07:08:b0:c5:17:86:c4:a2:e2:5f:c3: 0b:59:c4:ab:f6:e2:15:67:7a:0b:ab:aa:4b:7e:be: 34:05:26:5f:12:e6:9a:92:6c:45:17:37:6d:c9:0a: fa:b1:6c:78:35:7c:5a:40:45:84:03:24:0f:6d:91: 24:47:03:f8:bf:02:f6:5b:71:ac:f1:b4:1e:9c:6a: b6:09:c2:a3:a3:5f:10:95:63:d7:b5:b9:ce:0c:54: f7:f2:da:97:24:14:0a:45:59:7d:8b:2e:83:30:a8: 52:a0:a2:42:b7:a4:01:d3:3b:0c:af:3f:e1:bd:d3: 25:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5A:2D:E4:51:9F:AA:F0:F4:AA:4F:D2:02:D9:34:D9:79:ED:20:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a9e68ba8-8a04-30bf-af1c-f207f282ee15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:59:d1:20:bd:e6:cf:56:56:6e:34:db:c7:7f:2a:2a:6a:93: a5:e1:b7:31:42:8f:f8:9c:c4:bf:ac:ee:ee:a5:cb:05:5a:e0: ce:95:b1:11:c9:a8:68:ab:39:ef:0f:41:3f:d6:3d:1f:50:df: 69:32:be:6e:11:97:09:96:5e:dd:e1:22:e2:d3:20:4b:15:f0: 23:64:60:04:5e:a7:da:c7:28:65:2a:c3:6d:c9:1e:96:7b:2d: 84:9e:2e:d3:8c:fd:f8:a8:94:80:57:b5:1b:43:de:48:1c:6f: f2:cf:7e:3f:a3:dd:9b:17:d7:fa:47:80:6c:87:2f:9d:a2:30: 3a:7b:d8:94:fa:a5:69:e5:cd:05:cf:c6:a8:5e:47:bd:75:dd: ad:dc:85:96:93:d2:3b:b9:2a:ef:a6:99:30:01:56:b2:56:37: e0:4f:64:e0:02:9f:23:ed:3d:c9:00:42:bf:05:c2:6f:90:fb: 4d:71:a7:f6:53:5d:20:d0:c8:69:51:2c:ba:16:83:d4:c0:f9: d7:68:aa:68:5e:df:b7:7f:e0:30:60:99:aa:16:8a:51:59:71: a8:dc:00:ab:34:64:51:8f:df:9b:5c:70:2d:d5:b8:3e:fa:b8: 3c:fc:92:7e:c6:2f:01:f8:f0:2b:c0:aa:61:54:e6:84:05:47: 74:c6:14:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVaEXwvSNaPYfBjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwNDE0Mjk0NloXDTI1MTIwMzE1Mjk0NlowLzEtMCsGA1UEAxMk MGY3OTc4OGYtY2U2Ny00ZGU4LWEzMjAtYTg3ODEyNGYzYjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8iZe27mC9Mlujyuc0MKqTaN728lLKG0vg62 68xq1CefPR7nFfiJaqpJ0MjRoyep1+fYxBH4ndwluD/k8IuNnlfpnunvw6a9w8+G lrXbHSaekLaYjVPNDiSBi0zMRfPZ6ZkIX2hGvKUzUnSll2YVmnlp9GBL1K2fRgiV fMSUFvACmuvtgjgf7ozzBwiwxReGxKLiX8MLWcSr9uIVZ3oLq6pLfr40BSZfEuaa kmxFFzdtyQr6sWx4NXxaQEWEAyQPbZEkRwP4vwL2W3Gs8bQenGq2CcKjo18QlWPX tbnODFT38tqXJBQKRVl9iy6DMKhSoKJCt6QB0zsMrz/hvdMlOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExaLeRRn6rw9KpP0gLZNNl57SCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYTllNjhiYTgtOGEwNC0z MGJmLWFmMWMtZjIwN2YyODJlZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrf+kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBZ0SC95s9WVm4028d/Kipqk6XhtzFCj/icxL+s7u6lywVa4M6VsRHJ qGirOe8PQT/WPR9Q32kyvm4RlwmWXt3hIuLTIEsV8CNkYARep9rHKGUqw23JHpZ7 LYSeLtOM/fiolIBXtRtD3kgcb/LPfj+j3ZsX1/pHgGyHL52iMDp72JT6pWnlzQXP xqheR7113a3chZaT0ju5Ku+mmTABVrJWN+BPZOACnyPtPckAQr8Fwm+Q+01xp/ZT XSDQyGlRLLoWg9TA+ddoqmhe37d/4DBgmaoWilFZcajcAKs0ZFGP35tccC3VuD76 uDz8kn7GLwH48CvAqmFU5oQFR3TGFJw= -----END CERTIFICATE-----Generated at Fri Sep 5 19:54:41 2025 by rpki-client