$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa File: 774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa (raw, json) Hash identifier: k1pb70tUnbPAASL6xhjiDUKCAfFX2pVx8O6hnXKRvH0= Subject key identifier: 17:75:4D:2D:43:C9:F9:E7:E7:A2:35:C3:F1:78:CE:3D:A0:0B:05:98 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584B6BC74A963B747C103389B500 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16433 IP address blocks: 173.240.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:4a:96:3b:74:7c:10:33:89:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=be611b04-5c68-4567-ab5c-8147fe97cfda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7c:24:7b:ac:52:59:01:00:f0:69:94:17:aa: 24:12:9c:3f:d5:e4:53:f8:26:f2:b8:68:e8:3a:55: 04:56:e4:81:c5:45:5c:8d:11:99:90:f7:3f:87:23: b7:d6:f7:79:fa:ec:05:07:f7:c2:8c:e4:74:66:d4: d5:b6:78:25:ed:2f:9c:a1:f9:94:f3:a0:82:ac:45: 85:3b:4c:fe:a8:11:b5:1b:8d:07:32:a6:31:f8:a8: a7:32:50:8c:45:eb:c7:d4:03:7d:31:75:be:1c:26: fb:b1:e1:23:4f:13:cc:3e:df:53:0f:26:b8:d5:76: d4:de:53:fe:12:5d:1b:d6:88:41:45:46:c2:20:01: f5:3a:56:65:30:2f:a6:9a:4a:be:0b:8c:18:65:af: b1:9b:39:a5:b8:65:2a:18:9b:f6:c7:f5:03:34:dc: f7:1c:68:cb:e8:7f:c9:56:bb:7a:93:d3:02:5f:01: 4f:a5:62:82:29:f8:c6:1c:98:c3:4d:33:cb:7a:a4: 6f:ac:7a:90:58:64:0e:be:45:28:bf:ee:b6:a7:5d: af:56:aa:97:62:ba:34:48:df:8b:2f:2c:0c:84:1c: 11:01:bc:6d:f8:49:45:cf:f7:c6:7c:94:0e:5f:a6: 7f:50:e2:b9:0c:91:11:8f:fe:4d:2d:60:91:e8:f4: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:75:4D:2D:43:C9:F9:E7:E7:A2:35:C3:F1:78:CE:3D:A0:0B:05:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 173.240.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:88:5b:07:1e:2e:99:9b:3a:6e:42:cf:7c:09:b1:a6:f2:b4: 06:bf:39:0f:ae:5e:ed:55:f9:6e:be:39:89:71:22:b1:d2:b4: 75:21:25:94:c9:0e:83:de:2c:07:95:c4:94:89:7d:03:14:16: b4:7c:b3:0f:09:09:70:c4:bb:cf:20:82:f1:be:38:de:95:d0: e6:7c:35:87:2b:76:59:fe:71:1a:d5:a5:6d:21:8b:0e:d5:eb: f2:e3:ea:39:48:2a:12:39:0c:dd:64:51:52:95:17:bb:bd:89: 7b:7c:b4:4c:d9:32:4b:74:50:e8:ea:d8:3e:28:01:48:77:d4: d2:9a:6a:2e:b8:86:60:fd:ef:02:b7:36:e4:5e:eb:a3:bc:f0: b3:ac:c6:43:79:b4:29:a2:8d:20:3e:74:b0:db:56:5b:5e:88: c8:4a:0b:80:c7:3c:64:35:c4:87:ff:cc:a3:f0:8f:34:a1:a8: 44:f9:e4:ff:bb:5a:6c:7c:34:23:95:8a:15:6c:29:e6:df:cc: 79:3b:d0:87:09:b7:8a:95:04:9a:d0:83:0d:58:ef:e4:52:2a: 49:2f:70:9c:df:d0:1c:9c:d5:b9:c7:33:75:29:21:d7:a8:43: de:bd:75:70:24:cf:6c:c8:03:d5:96:9c:c7:60:19:30:d5:d1: 30:b0:2b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx0qWO3R8EDOJtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YmU2MTFiMDQtNWM2OC00NTY3LWFiNWMtODE0N2ZlOTdjZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nwke6xSWQEA8GmUF6okEpw/1eRT+CbyuGjo OlUEVuSBxUVcjRGZkPc/hyO31vd5+uwFB/fCjOR0ZtTVtngl7S+cofmU86CCrEWF O0z+qBG1G40HMqYx+KinMlCMRevH1AN9MXW+HCb7seEjTxPMPt9TDya41XbU3lP+ El0b1ohBRUbCIAH1OlZlMC+mmkq+C4wYZa+xmzmluGUqGJv2x/UDNNz3HGjL6H/J Vrt6k9MCXwFPpWKCKfjGHJjDTTPLeqRvrHqQWGQOvkUov+62p12vVqqXYro0SN+L LywMhBwRAbxt+ElFz/fGfJQOX6Z/UOK5DJERj/5NLWCR6PQ8GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBd1TS1Dyfnn56I1w/F4zj2gCwWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNzc0ZGI2ZjAtY2YyZC0z OTVlLWI1YTctNDBhNWQyMTEzNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKIWwceLpmbOm5Cz3wJsabytAa/OQ+uXu1V+W6+OYlxIrHStHUhJZTJ DoPeLAeVxJSJfQMUFrR8sw8JCXDEu88ggvG+ON6V0OZ8NYcrdln+cRrVpW0hiw7V 6/Lj6jlIKhI5DN1kUVKVF7u9iXt8tEzZMkt0UOjq2D4oAUh31NKaai64hmD97wK3 NuRe66O88LOsxkN5tCmijSA+dLDbVlteiMhKC4DHPGQ1xIf/zKPwjzShqET55P+7 Wmx8NCOVihVsKebfzHk70IcJt4qVBJrQgw1Y7+RSKkkvcJzf0Byc1bnHM3UpIdeo Q969dXAkz2zIA9WWnMdgGTDV0TCwK5A= -----END CERTIFICATE-----Generated at Sun Oct 19 00:56:58 2025 by rpki-client