$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5a672a13-376a-313c-bdc5-1de18b37510f.roa File: 5a672a13-376a-313c-bdc5-1de18b37510f.roa (raw, json) Hash identifier: ck2zU77nMPP2CgXcCYTmoJTQ102ADnRX17vUg6zAH3U= Subject key identifier: 3B:AA:93:AA:AC:1A:02:D6:89:14:2F:56:D5:E3:E4:8E:46:AB:7B:5C Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584B0FA00897260C2A735166DA80 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5a672a13-376a-313c-bdc5-1de18b37510f.roa Signing time: Tue 02 Sep 2025 12:47:16 +0000 ROA not before: Tue 02 Sep 2025 12:47:16 +0000 ROA not after: Mon 01 Dec 2025 13:47:16 +0000 asID: 399672 IP address blocks: 173.211.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a0:08:97:26:0c:2a:73:51:66:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Sep 2 12:47:16 2025 GMT Not After : Dec 1 13:47:16 2025 GMT Subject: CN=ecb3febc-c344-4e63-97a9-6d5da3ccff15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bc:98:3e:02:0b:f3:71:20:59:45:3d:54:78: 3c:49:53:e6:ca:0b:d9:4e:0e:6d:10:9a:6e:3f:60: fe:a0:27:08:76:66:65:98:88:bd:78:f7:50:55:5c: 3a:18:f3:26:36:d6:bf:a6:fb:c0:61:d5:5f:31:d9: 4f:28:20:88:f6:88:43:e8:cb:da:f4:3f:23:0d:44: c2:4f:54:30:2e:37:34:fb:dc:61:0c:17:c2:32:b5: c7:47:fa:0f:bc:1d:46:3e:4f:3c:9d:69:7c:61:f6: b1:ef:fc:7a:7d:2b:3d:72:64:43:8f:5d:9e:82:df: bf:b1:38:de:14:1e:88:af:fd:f6:40:5b:50:50:82: da:e8:1d:22:12:5f:a2:9c:17:e0:51:3c:74:eb:af: 30:9f:1e:1b:f4:92:29:e0:b2:07:71:e4:9d:1a:0d: 16:03:18:0a:20:3a:8a:07:38:ff:ca:e2:11:c1:ae: f2:95:a5:ff:c5:09:a6:1b:7e:3f:8a:8c:51:f6:26: b8:05:a6:4c:fe:b2:0f:5b:06:d8:d7:a3:76:01:f5: e9:d5:fe:db:51:b1:17:6f:22:25:72:04:23:78:6b: 0c:1e:f4:42:33:a4:9e:06:1b:92:e5:cf:fa:fc:62: b9:84:cd:4b:8b:b4:61:54:cd:34:c4:2e:c7:13:94: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AA:93:AA:AC:1A:02:D6:89:14:2F:56:D5:E3:E4:8E:46:AB:7B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5a672a13-376a-313c-bdc5-1de18b37510f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 173.211.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:44:df:9c:62:2f:2b:3a:e0:bb:60:8a:09:fd:9d:be:35:16: 87:e4:ba:f6:29:90:41:63:af:5d:fb:70:38:e1:85:65:59:f4: 3c:05:5a:6e:7f:08:80:cb:4c:6b:38:7f:ad:52:ac:8e:d4:46: d4:14:7b:25:24:c4:84:04:a0:01:1c:a3:6b:c5:1f:04:90:63: c6:4a:b9:b3:f6:36:5c:8a:8e:3a:34:39:44:ea:30:01:e1:bc: 21:74:bb:86:a4:19:f6:4c:d2:f2:5c:06:1a:86:2b:3f:1b:68: 75:42:63:2c:f5:3d:95:57:2a:3d:79:8a:c3:58:b9:a2:73:9a: 1b:eb:d9:f9:14:ef:1d:ba:6f:81:9d:ae:13:bb:8d:ee:c4:48: 8c:14:45:cf:26:72:aa:02:e9:00:6d:82:c0:6b:3d:84:27:ff: bc:88:79:a8:3a:30:4a:3e:e2:d5:64:0c:b7:3e:0f:94:31:95: dc:fa:4b:31:c4:f3:e9:59:70:5d:48:c4:d8:de:4b:1a:0c:da: d3:37:6f:5a:76:61:a8:2b:34:db:cd:11:9e:89:54:fb:d5:40: 48:c3:54:d0:df:57:83:ff:05:04:3d:41:85:60:9d:9c:9f:95: ea:f1:8d:61:ab:d6:97:b3:3c:1d:6f:a0:4c:1a:b1:91:0c:96: 8d:70:03:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPoAiXJgwqc1Fm2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDkwMjEyNDcxNloXDTI1MTIwMTEzNDcxNlowLzEtMCsGA1UEAxMk ZWNiM2ZlYmMtYzM0NC00ZTYzLTk3YTktNmQ1ZGEzY2NmZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbyYPgIL83EgWUU9VHg8SVPmygvZTg5tEJpu P2D+oCcIdmZlmIi9ePdQVVw6GPMmNta/pvvAYdVfMdlPKCCI9ohD6Mva9D8jDUTC T1QwLjc0+9xhDBfCMrXHR/oPvB1GPk88nWl8Yfax7/x6fSs9cmRDj12egt+/sTje FB6Ir/32QFtQUILa6B0iEl+inBfgUTx0668wnx4b9JIp4LIHceSdGg0WAxgKIDqK Bzj/yuIRwa7ylaX/xQmmG34/ioxR9ia4BaZM/rIPWwbY16N2AfXp1f7bUbEXbyIl cgQjeGsMHvRCM6SeBhuS5c/6/GK5hM1Li7RhVM00xC7HE5Q/7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuqk6qsGgLWiRQvVtXj5I5Gq3tcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNWE2NzJhMTMtMzc2YS0z MTNjLWJkYzUtMWRlMThiMzc1MTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdN9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMVE35xiLys64Ltgign9nb41FofkuvYpkEFjr137cDjhhWVZ9DwFWm5/ CIDLTGs4f61SrI7URtQUeyUkxIQEoAEco2vFHwSQY8ZKubP2NlyKjjo0OUTqMAHh vCF0u4akGfZM0vJcBhqGKz8baHVCYyz1PZVXKj15isNYuaJzmhvr2fkU7x26b4Gd rhO7je7ESIwURc8mcqoC6QBtgsBrPYQn/7yIeag6MEo+4tVkDLc+D5Qxldz6SzHE 8+lZcF1IxNjeSxoM2tM3b1p2YagrNNvNEZ6JVPvVQEjDVNDfV4P/BQQ9QYVgnZyf lerxjWGr1pezPB1voEwasZEMlo1wA1g= -----END CERTIFICATE-----Generated at Mon Sep 15 11:18:56 2025 by rpki-client