$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa File: 850c851f-a2f0-39ea-8b04-db5609732a44.roa (raw, json) Hash identifier: k8DeyXDL7B923vFQeZrMN28tVSWDu82LBXQ30koPOuI= Subject key identifier: 5F:63:86:20:2D:F1:46:97:7B:A6:C9:C2:96:23:17:DD:61:B3:8D:C9 Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Certificate serial: 010D0C9F4328584BA0D266256F85AB3B34AD6500 Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 46979 IP address blocks: 173.225.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:66:25:6f:85:ab:3b:34:ad:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=8021387f-e6f8-47a1-9f34-8e74ba9da894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:99:6a:9d:1c:85:01:1a:8d:7d:3e:02:c7: 1e:b3:e2:9e:b1:a5:08:d8:78:8f:79:0e:88:8e:a1: df:0a:96:d2:d8:9d:d7:a4:41:c5:29:90:51:07:3e: 8b:19:f8:22:e7:01:82:c6:85:c2:c6:8f:93:1e:c7: 2f:94:51:2c:7b:b8:0e:f7:cf:58:33:f7:07:8a:43: f7:75:6a:86:80:a7:a9:83:ae:d9:dc:56:b9:75:26: 66:ad:25:60:69:37:91:72:61:78:dc:a6:6e:02:28: 8a:00:83:a5:73:9f:a4:56:5b:20:e3:10:ce:c1:e2: df:3e:70:02:85:88:9d:60:3a:86:d7:31:9b:d7:18: 7e:68:4d:34:79:e3:da:15:06:5b:15:0c:9a:e0:9e: ad:d6:3c:42:29:f2:6f:a1:49:05:24:31:24:14:99: f4:e2:29:ee:9d:2d:a3:ca:34:ff:f4:b7:3f:08:b6: 83:5a:b6:ab:36:22:d8:06:3b:61:00:6e:c8:8d:9a: 89:e5:e2:e1:f0:5f:ca:c8:3b:dc:06:91:79:3b:57: dd:b5:84:56:9a:d9:a3:e3:ea:11:eb:05:43:2f:fc: 61:2b:d8:de:66:4b:ee:83:85:94:61:c7:32:c9:13: d4:21:31:7d:e2:93:61:de:62:f3:9c:88:ef:85:d3: 13:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:63:86:20:2D:F1:46:97:7B:A6:C9:C2:96:23:17:DD:61:B3:8D:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl X509v3 Authority Key Identifier: keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer sbgp-ipAddrBlock: critical IPv4: 173.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:59:59:8e:39:2c:65:c2:fc:aa:6d:d3:a1:1b:03:51:b3:fa: e2:a1:7a:0f:44:3c:b2:81:df:67:11:2d:12:82:19:6b:bd:37: da:70:a7:3c:62:f2:b3:55:92:db:b9:00:74:90:a7:0a:90:43: fe:22:b3:a5:c6:1e:12:bf:9a:e5:83:fb:f1:83:6d:59:dd:9d: 9a:99:43:6f:a9:c4:5f:0d:5b:2e:01:d5:09:07:9a:5f:5b:26: 1e:06:ea:fc:19:19:f8:28:56:34:4b:48:5a:1b:bd:ed:0b:e6: 22:f7:71:72:34:9b:4a:95:56:db:c7:62:b3:a0:9e:86:46:9a: af:b5:ed:83:46:60:56:89:35:67:29:74:43:c3:e6:cb:1e:93: 5a:7a:8e:5a:4d:56:e9:9f:eb:90:6c:8f:7f:5b:c6:23:d9:60: ee:02:65:33:95:81:3e:14:4c:73:f3:95:39:17:b8:60:ef:9d: db:55:f3:9b:83:a3:a1:c1:99:ae:8e:cc:a5:e0:b9:b8:0c:42: de:ee:db:c8:a2:d9:db:0c:b0:05:bb:29:4e:41:98:1a:14:dd: 02:3f:b4:20:45:c2:6d:49:68:d6:d7:82:1d:0d:c3:fa:3a:69: 18:15:05:99:d2:20:58:ba:b6:a3:ac:e0:5b:d9:7c:ba:7e:e9: 88:83:1c:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mYlb4WrOzStZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy ODE5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ODAyMTM4N2YtZTZmOC00N2ExLTlmMzQtOGU3NGJhOWRhODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr22Zap0chQEajX0+Asces+KesaUI2HiPeQ6I jqHfCpbS2J3XpEHFKZBRBz6LGfgi5wGCxoXCxo+THscvlFEse7gO989YM/cHikP3 dWqGgKepg67Z3Fa5dSZmrSVgaTeRcmF43KZuAiiKAIOlc5+kVlsg4xDOweLfPnAC hYidYDqG1zGb1xh+aE00eePaFQZbFQya4J6t1jxCKfJvoUkFJDEkFJn04inunS2j yjT/9Lc/CLaDWrarNiLYBjthAG7IjZqJ5eLh8F/KyDvcBpF5O1fdtYRWmtmj4+oR 6wVDL/xhK9jeZkvug4WUYccyyRPUITF94pNh3mLznIjvhdMTvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9jhiAt8UaXe6bJwpYjF91hs43JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvODUwYzg1MWYtYTJmMC0z OWVhLThiMDQtZGI1NjA5NzMyYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1 ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1ZWY45LGXC/Kpt06EbA1Gz+uKheg9EPLKB32cRLRKCGWu9N9pwpzxi 8rNVktu5AHSQpwqQQ/4is6XGHhK/muWD+/GDbVndnZqZQ2+pxF8NWy4B1QkHml9b Jh4G6vwZGfgoVjRLSFobve0L5iL3cXI0m0qVVtvHYrOgnoZGmq+17YNGYFaJNWcp dEPD5ssek1p6jlpNVumf65Bsj39bxiPZYO4CZTOVgT4UTHPzlTkXuGDvndtV85uD o6HBma6OzKXgubgMQt7u28ii2dsMsAW7KU5BmBoU3QI/tCBFwm1JaNbXgh0Nw/o6 aRgVBZnSIFi6tqOs4FvZfLp+6YiDHIk= -----END CERTIFICATE-----Generated at Wed Oct 29 14:41:59 2025 by rpki-client