$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/223a42c8-e995-3175-9c5c-a1468cebb726.roa File: 223a42c8-e995-3175-9c5c-a1468cebb726.roa (raw, json) Hash identifier: aae0VQ/NCGGFI5OwmwxQybQ1cuebXWt9zrX8QbUbPtg= Subject key identifier: 63:02:39:80:B3:23:6E:5C:02:07:DD:78:64:41:01:7E:AF:69:DB:10 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584B6E91F869682BF942E1564280 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/223a42c8-e995-3175-9c5c-a1468cebb726.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 214054 IP address blocks: 173.214.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:f8:69:68:2b:f9:42:e1:56:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=017191e7-b4bb-418c-a053-47b571caba00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:4d:75:3b:07:f1:86:0f:0e:4a:af:cf:b4: 9a:06:cc:b6:12:9b:61:72:3b:39:f9:1b:24:30:b3: f6:b8:2e:a9:79:ce:e3:c6:11:4d:37:0e:87:57:c9: af:92:f7:5f:13:cf:15:e1:b2:8a:74:72:8c:dc:59: 25:d1:b5:58:c1:5a:86:7c:7a:1c:04:43:27:1b:46: 1d:67:a5:5e:38:d0:db:bf:41:de:ed:aa:04:83:f7: c5:51:90:5b:58:8d:5a:60:61:ec:3a:b1:86:08:6d: 9d:3e:32:c8:b2:c3:74:c8:ce:d0:9b:7f:fe:b4:02: 2c:7c:03:36:75:af:2b:b2:c6:a7:9a:18:24:86:9d: ef:92:b1:80:03:ac:18:c5:bb:61:db:01:9b:f8:09: 5c:5c:d3:86:be:84:6b:b2:53:ac:e7:81:15:64:bb: 26:28:ba:c4:b9:21:e4:e4:7d:f1:f2:38:10:f4:b4: 38:0c:51:4a:95:73:d3:0b:19:01:82:9f:d0:db:8a: 95:0e:f9:84:d2:aa:60:e7:e4:2b:1c:33:03:df:7c: ad:79:08:1d:f4:20:e9:b6:6a:73:55:1a:19:cc:14: 70:f0:58:d3:6d:00:ea:95:92:64:40:d1:8a:97:5b: 41:e1:a8:2d:09:eb:b9:fa:cb:45:f6:ea:35:58:32: 6d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:02:39:80:B3:23:6E:5C:02:07:DD:78:64:41:01:7E:AF:69:DB:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/223a42c8-e995-3175-9c5c-a1468cebb726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 173.214.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:19:92:63:89:88:c0:67:d6:ab:89:4e:b2:ce:f6:0b:79:11: 34:db:13:63:3b:00:5b:b0:9d:5b:d9:64:7c:42:22:28:87:0c: e3:2d:1f:b2:74:f7:81:b2:1b:7e:37:2d:cf:57:76:02:42:d3: 67:be:be:5c:68:70:51:0d:fd:bf:36:19:5c:8d:f1:3f:0b:c8: dc:96:7a:55:30:f3:08:3c:7d:80:7e:ae:9f:37:74:21:1a:63: c3:6c:35:52:65:c8:e8:51:56:9e:20:b3:b1:6d:a2:6b:f0:98: 77:cc:e2:74:4b:50:e9:5d:3f:18:cd:ba:7a:48:00:00:1d:08: 27:a3:28:3d:1c:55:11:c8:09:e3:d5:4e:62:a7:96:9d:1c:96: 03:7f:4a:d0:b6:4f:0d:29:a9:c3:19:e2:0e:6a:24:7a:1e:0d: d0:95:6b:15:0a:33:76:cc:d3:0c:23:7e:42:cb:e5:e7:7a:28: 4b:7b:79:4b:f6:ea:da:48:87:11:62:c9:b5:b0:01:be:61:d1: 67:cf:2f:cc:b0:0d:45:dc:48:b6:1e:6f:26:6a:60:75:8a:ea: 09:79:31:68:cf:97:44:59:4c:4c:a2:48:66:61:2b:3e:f4:a9: c5:6b:ff:63:90:a7:2e:40:6a:90:cb:c1:5a:98:f4:9d:ac:bd: 11:30:d0:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfhpaCv5QuFWQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk MDE3MTkxZTctYjRiYi00MThjLWEwNTMtNDdiNTcxY2FiYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIZNdTsH8YYPDkqvz7SaBsy2Epthcjs5+Rsk MLP2uC6pec7jxhFNNw6HV8mvkvdfE88V4bKKdHKM3Fkl0bVYwVqGfHocBEMnG0Yd Z6VeONDbv0He7aoEg/fFUZBbWI1aYGHsOrGGCG2dPjLIssN0yM7Qm3/+tAIsfAM2 da8rssanmhgkhp3vkrGAA6wYxbth2wGb+AlcXNOGvoRrslOs54EVZLsmKLrEuSHk 5H3x8jgQ9LQ4DFFKlXPTCxkBgp/Q24qVDvmE0qpg5+QrHDMD33yteQgd9CDptmpz VRoZzBRw8FjTbQDqlZJkQNGKl1tB4agtCeu5+stF9uo1WDJt/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMCOYCzI25cAgfdeGRBAX6vadsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMjIzYTQyYzgtZTk5NS0z MTc1LTljNWMtYTE0NjhjZWJiNzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArda6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMZkmOJiMBn1quJTrLO9gt5ETTbE2M7AFuwnVvZZHxCIiiHDOMtH7J0 94GyG343Lc9XdgJC02e+vlxocFEN/b82GVyN8T8LyNyWelUw8wg8fYB+rp83dCEa Y8NsNVJlyOhRVp4gs7FtomvwmHfM4nRLUOldPxjNunpIAAAdCCejKD0cVRHICePV TmKnlp0clgN/StC2Tw0pqcMZ4g5qJHoeDdCVaxUKM3bM0wwjfkLL5ed6KEt7eUv2 6tpIhxFiybWwAb5h0WfPL8ywDUXcSLYebyZqYHWK6gl5MWjPl0RZTEyiSGZhKz70 qcVr/2OQpy5AapDLwVqY9J2svREw0Ps= -----END CERTIFICATE-----Generated at Wed Oct 15 16:53:40 2025 by rpki-client