$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa File: 0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa (raw, json) Hash identifier: y+bJEKtX3M7+7JIVd6/Zye8DL/PIUG0aLyXONJPmuK0= Subject key identifier: A5:A0:D2:53:6F:62:E5:E0:36:ED:BB:B2:DA:53:A9:2D:F7:F7:3A:D0 Certificate issuer: /CN=b9304eb0-eda9-4524-affd-0a6aa181a658 Certificate serial: 010D0C9F4328584BA667AB10DEF7500612D1F000 Authority key identifier: B9:4B:A5:8B:B9:79:8F:6E:40:C6:25:98:8C:46:F6:CA:44:15:E4:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 397283 IP address blocks: 206.168.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/b9304eb0-eda9-4524-affd-0a6aa181a658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/b9304eb0-eda9-4524-affd-0a6aa181a658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ab:10:de:f7:50:06:12:d1:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9304eb0-eda9-4524-affd-0a6aa181a658 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=359d52f5-55f0-441b-8808-76498f664d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ab:d7:67:17:69:ce:60:8e:87:40:f5:b9:a2: d2:64:aa:8f:41:3b:ff:b7:8a:e4:a2:ee:c0:62:e3: d2:be:47:bb:2c:f0:0d:58:88:4e:ba:c0:a2:d0:2a: 2e:41:5d:6d:54:03:0c:e3:c0:d0:3d:2e:4f:3b:32: 00:8c:3e:68:9a:45:c7:d1:a0:39:09:9c:bd:c7:3b: 88:7b:1b:ce:50:e3:f0:93:cf:2e:8c:a4:b8:27:14: 65:84:c8:1e:14:f1:0d:1e:57:68:4e:9d:aa:87:d7: df:eb:cd:9d:8b:7e:9b:cb:f3:36:29:e9:db:48:7e: 23:bb:d3:7e:50:7c:d4:a3:17:de:53:93:44:d5:38: b3:c9:5c:7f:15:16:fb:44:04:1e:21:b8:f9:ab:01: 3f:19:ec:fb:19:c1:cc:a4:c0:84:56:27:21:df:72: af:8d:15:3b:14:f0:d7:13:5e:9c:96:a5:57:a8:c6: c1:20:2c:b3:0b:5e:df:32:bd:70:fc:b6:e4:58:31: 41:4b:da:de:89:5c:5e:f0:24:e8:f5:45:19:ff:9d: 72:69:ab:95:2e:b3:92:f0:c3:77:de:a8:bf:a6:f4: cd:67:61:89:19:12:d9:8a:c4:6c:5d:d3:71:58:54: fc:4b:8c:2c:b1:4a:5d:0e:fa:1a:05:cf:b5:ac:4a: 52:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A0:D2:53:6F:62:E5:E0:36:ED:BB:B2:DA:53:A9:2D:F7:F7:3A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/b9304eb0-eda9-4524-affd-0a6aa181a658.crl X509v3 Authority Key Identifier: keyid:B9:4B:A5:8B:B9:79:8F:6E:40:C6:25:98:8C:46:F6:CA:44:15:E4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658.cer sbgp-ipAddrBlock: critical IPv4: 206.168.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c2:62:a0:e0:9c:31:2e:62:91:68:7c:22:ca:94:25:29:73: f1:85:a0:36:04:91:a3:dd:27:e8:b3:17:e2:87:f9:48:a5:17: 96:24:e5:2d:ab:98:59:24:9d:16:9a:1f:dd:14:fd:af:e1:f7: 0a:06:a2:e8:f6:85:eb:fc:00:7c:a7:a4:f4:4f:44:c2:be:87: e2:a9:44:85:06:5f:6a:12:31:de:d3:92:58:a0:62:93:72:18: d5:d6:dd:7a:9d:ec:64:d6:f7:96:c2:1e:62:09:25:c4:2f:ab: 9d:eb:e0:74:bc:24:c5:39:a6:3f:c7:04:cc:9c:8f:4f:b1:ed: 8d:53:09:3f:b3:c5:6f:f4:cf:a4:d9:c0:65:cc:db:d1:b4:8b: ad:83:91:23:11:3f:8c:70:7f:e4:ba:70:08:b0:05:98:d3:2d: 09:a7:7c:ea:c0:3a:31:5d:83:93:aa:f0:c2:8b:c3:cd:64:44: 5b:e7:16:d6:0d:d1:d5:9b:c7:57:55:c6:97:60:fe:21:0e:e8: c1:27:05:4e:d0:92:a5:c2:32:f5:ce:88:e8:23:e5:09:3a:6a: 7d:49:a2:ad:9b:31:16:f2:ab:5a:6a:bd:be:06:a0:76:47:d5: b0:a6:b0:e1:26:fc:8e:8b:6f:a9:4f:ad:7d:e6:6f:64:28:e3: ce:34:e4:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6sQ3vdQBhLR8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkzMDRlYjAtZWRhOS00NTI0LWFmZmQtMGE2YWExODFh NjU4MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MzU5ZDUyZjUtNTVmMC00NDFiLTg4MDgtNzY0OThmNjY0ZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6vXZxdpzmCOh0D1uaLSZKqPQTv/t4rkou7A YuPSvke7LPANWIhOusCi0CouQV1tVAMM48DQPS5POzIAjD5omkXH0aA5CZy9xzuI exvOUOPwk88ujKS4JxRlhMgeFPENHldoTp2qh9ff682di36by/M2KenbSH4ju9N+ UHzUoxfeU5NE1TizyVx/FRb7RAQeIbj5qwE/Gez7GcHMpMCEVich33KvjRU7FPDX E16clqVXqMbBICyzC17fMr1w/LbkWDFBS9reiVxe8CTo9UUZ/51yaauVLrOS8MN3 3qi/pvTNZ2GJGRLZisRsXdNxWFT8S4wssUpdDvoaBc+1rEpSGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWg0lNvYuXgNu27stpTqS339zrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOTMw NGViMC1lZGE5LTQ1MjQtYWZmZC0wYTZhYTE4MWE2NTgvMGYyN2ViZjgtZDBhYS0z YjEzLWE5NzctNDNiNTQxN2IwZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjkzMDRlYjAtZWRhOS00NTI0LWFm ZmQtMGE2YWExODFhNjU4L2I5MzA0ZWIwLWVkYTktNDUyNC1hZmZkLTBhNmFhMTgx YTY1OC5jcmwwHwYDVR0jBBgwFoAUuUuli7l5j25AxiWYjEb2ykQV5CYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOTMwNGViMC1lZGE5LTQ1MjQtYWZmZC0wYTZh YTE4MWE2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqitMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXCYqDgnDEuYpFofCLKlCUpc/GFoDYEkaPdJ+izF+KH+UilF5Yk5S2r mFkknRaaH90U/a/h9woGouj2hev8AHynpPRPRMK+h+KpRIUGX2oSMd7TkligYpNy GNXW3Xqd7GTW95bCHmIJJcQvq53r4HS8JMU5pj/HBMycj0+x7Y1TCT+zxW/0z6TZ wGXM29G0i62DkSMRP4xwf+S6cAiwBZjTLQmnfOrAOjFdg5Oq8MKLw81kRFvnFtYN 0dWbx1dVxpdg/iEO6MEnBU7QkqXCMvXOiOgj5Qk6an1Joq2bMRbyq1pqvb4GoHZH 1bCmsOEm/I6Lb6lPrX3mb2Qo48405FM= -----END CERTIFICATE-----Generated at Tue Nov 4 05:33:11 2025 by rpki-client