$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/ccc1e6e7-19ce-310b-92b2-8fffd9fc5676.roa File: ccc1e6e7-19ce-310b-92b2-8fffd9fc5676.roa (raw, json) Hash identifier: +QfEiBGShJf6RhNJ6YTCiKGbxD+HwgpajgEEkiydieQ= Subject key identifier: 82:58:4C:30:A1:53:0A:1A:D5:D6:CC:F5:54:E7:96:BF:E4:2E:80:31 Certificate issuer: /CN=d862b5c6-40a1-4249-a26e-11938a702985 Certificate serial: 010D0C9F4328584B3821953A934FE31A6933CC40 Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/ccc1e6e7-19ce-310b-92b2-8fffd9fc5676.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 15257 IP address blocks: 173.195.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:95:3a:93:4f:e3:1a:69:33:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=83bd96e3-8ec8-47da-9a3a-176371cf4126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:1b:f5:30:e6:94:7f:2e:cd:d3:ac:58:74: a5:fa:b1:68:be:e5:28:c4:69:ef:fe:2a:0d:cd:d3: 8d:22:d9:f8:01:c4:c9:53:de:08:9e:5a:79:a2:78: c6:2f:76:61:9f:a0:1c:7c:f0:10:96:83:ee:1f:2e: e3:a0:19:0f:92:36:c1:5c:79:26:d4:1d:8d:05:46: 38:41:56:44:de:df:e9:ce:94:8b:d3:2c:1f:3b:a2: fb:a2:22:72:ac:7f:84:cd:26:df:f2:29:35:78:75: 77:38:c4:76:48:44:33:5b:4e:cf:e1:1e:3f:01:28: fa:8a:32:13:f5:d6:1e:0d:12:18:51:db:c3:c4:05: d1:0d:a9:ef:eb:32:4c:e9:a8:34:a6:a2:82:89:fc: 7e:22:33:e6:7d:aa:9f:a7:3a:18:b0:6f:47:41:e5: ee:5f:0c:70:48:70:34:08:f2:02:a0:2f:f7:c8:57: 5c:27:85:0d:75:cb:57:3d:f5:0f:76:71:11:8a:35: 16:6f:c4:79:18:fb:88:17:77:b1:ef:89:e2:48:48: a7:b2:a8:e6:93:82:89:c7:67:1c:61:7b:38:63:80: 89:0b:98:e5:78:b4:45:88:dd:84:9a:8d:43:f0:d8: c7:d0:cd:b2:20:56:c5:99:bd:fc:a6:60:3c:10:46: 7f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:58:4C:30:A1:53:0A:1A:D5:D6:CC:F5:54:E7:96:BF:E4:2E:80:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/ccc1e6e7-19ce-310b-92b2-8fffd9fc5676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl X509v3 Authority Key Identifier: keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer sbgp-ipAddrBlock: critical IPv4: 173.195.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:3f:c6:21:90:80:ce:ee:30:81:2c:3c:ba:e1:b6:75:82:5e: dc:d4:1a:b2:55:e8:cf:f1:cd:9a:31:15:16:7d:3b:c0:a4:9f: 51:d1:c8:3f:73:7b:a2:6c:22:61:7a:6f:f8:71:90:23:29:6e: 0b:2f:78:ef:fd:f4:b0:9b:12:2f:95:02:72:50:e8:e7:55:71: 2c:81:48:76:1f:6d:ca:5a:01:cf:77:34:32:88:15:ca:c3:f1: 47:cb:94:c3:65:72:8b:d9:69:02:74:d6:9b:e7:c8:ca:0c:1a: 4f:8a:21:d4:52:bb:91:2c:63:25:aa:90:db:cb:50:bc:c0:c3: 4a:81:78:a7:dc:a8:ac:f8:13:3c:f8:86:59:75:0b:64:07:47: ef:6c:42:7c:11:ee:1d:23:53:e8:e8:a7:3f:49:8b:1e:bf:aa: f4:ba:51:4a:55:b4:9f:26:3d:33:d4:c6:a4:be:26:c6:12:6e: 0b:fc:af:f4:ca:36:07:bf:8e:f7:a9:b1:80:47:d6:40:ce:f8: ee:14:83:b5:b3:2d:10:58:35:4f:51:f3:47:f8:04:80:97:1c: 03:71:63:7b:e4:6b:91:e8:20:5a:81:35:e4:cb:73:6a:86:77: 6e:39:52:98:76:6b:57:66:96:a0:99:78:dd:bb:c8:48:77:0e: ec:fa:51:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZU6k0/jGmkzzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg2MmI1YzYtNDBhMS00MjQ5LWEyNmUtMTE5MzhhNzAy OTg1MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk ODNiZDk2ZTMtOGVjOC00N2RhLTlhM2EtMTc2MzcxY2Y0MTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomUb9TDmlH8uzdOsWHSl+rFovuUoxGnv/ioN zdONItn4AcTJU94Inlp5onjGL3Zhn6AcfPAQloPuHy7joBkPkjbBXHkm1B2NBUY4 QVZE3t/pzpSL0ywfO6L7oiJyrH+EzSbf8ik1eHV3OMR2SEQzW07P4R4/ASj6ijIT 9dYeDRIYUdvDxAXRDanv6zJM6ag0pqKCifx+IjPmfaqfpzoYsG9HQeXuXwxwSHA0 CPICoC/3yFdcJ4UNdctXPfUPdnERijUWb8R5GPuIF3ex74niSEinsqjmk4KJx2cc YXs4Y4CJC5jleLRFiN2Emo1D8NjH0M2yIFbFmb38pmA8EEZ/gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJYTDChUwoa1dbM9VTnlr/kLoAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kODYy YjVjNi00MGExLTQyNDktYTI2ZS0xMTkzOGE3MDI5ODUvY2NjMWU2ZTctMTljZS0z MTBiLTkyYjItOGZmZmQ5ZmM1Njc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDg2MmI1YzYtNDBhMS00MjQ5LWEy NmUtMTE5MzhhNzAyOTg1L2Q4NjJiNWM2LTQwYTEtNDI0OS1hMjZlLTExOTM4YTcw Mjk4NS5jcmwwHwYDVR0jBBgwFoAUgfwOi4Mvut7//KOFwjE85iiqGdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kODYyYjVjNi00MGExLTQyNDktYTI2ZS0xMTkz OGE3MDI5ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKE/xiGQgM7uMIEsPLrhtnWCXtzUGrJV6M/xzZoxFRZ9O8Ckn1HRyD9z e6JsImF6b/hxkCMpbgsveO/99LCbEi+VAnJQ6OdVcSyBSHYfbcpaAc93NDKIFcrD 8UfLlMNlcovZaQJ01pvnyMoMGk+KIdRSu5EsYyWqkNvLULzAw0qBeKfcqKz4Ezz4 hll1C2QHR+9sQnwR7h0jU+jopz9Jix6/qvS6UUpVtJ8mPTPUxqS+JsYSbgv8r/TK Nge/jvepsYBH1kDO+O4Ug7WzLRBYNU9R80f4BICXHANxY3vka5HoIFqBNeTLc2qG d245Uph2a1dmlqCZeN27yEh3Duz6UVk= -----END CERTIFICATE-----Generated at Wed Oct 29 00:50:05 2025 by rpki-client