$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa File: 495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa (raw, json) Hash identifier: oV5apzlorRvJ3Icum3mvdE62lw2cheMRotZLcleDNF0= Subject key identifier: 48:23:0A:0F:1D:E7:71:53:73:26:E3:24:7B:65:C9:BE:96:F9:7A:B1 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B13D6AF9A6DC2D7C925B01998 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 173.199.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:af:9a:6d:c2:d7:c9:25:b0:19:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=77919914-b664-4ebc-931f-c3e821b60e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:f4:e9:7f:3d:a8:47:38:63:d5:d7:65:6f: f9:3d:d0:fc:94:a6:4c:88:1d:22:e7:cb:6a:e2:f0: a9:cb:65:93:7b:01:e4:67:0d:35:a9:6f:1e:d1:ab: 44:f1:0e:9d:a7:66:ea:93:92:05:57:11:d9:95:e7: b4:e6:7e:d4:3f:8c:7e:e1:91:76:b3:c5:0b:79:29: 4b:e1:94:14:bd:c0:e3:a7:cd:3a:f8:33:53:f0:28: ec:db:3c:39:d9:12:43:23:a0:c1:f4:78:c0:de:d9: c7:74:e2:9b:2a:4b:ce:f9:84:29:1d:02:63:8d:c1: 2a:47:07:5d:9c:73:90:fc:60:4a:b2:5e:88:54:76: 1b:70:93:a8:53:37:20:e1:d8:6b:16:46:e4:3c:19: 64:51:33:dd:2e:d0:b6:5e:59:7e:66:47:e5:3e:c5: 0d:90:c6:38:86:25:33:3c:c4:80:69:05:29:33:65: be:92:c0:de:3e:8b:60:6f:29:92:78:7a:46:bc:b0: 11:ce:a0:a7:81:07:08:49:9d:03:d3:a2:41:d4:2f: fd:a6:ba:3f:35:a1:c0:c5:8a:05:59:d1:25:f3:52: 64:f1:0e:29:7d:99:4f:48:78:ab:06:56:31:16:65: 3b:97:9a:a9:82:73:b8:f1:28:8a:2d:81:e3:e8:e4: d0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:23:0A:0F:1D:E7:71:53:73:26:E3:24:7B:65:C9:BE:96:F9:7A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:37:38:1e:78:28:92:86:fc:58:23:6e:d2:22:44:cb:52:08: 80:0c:56:8c:d6:b0:ed:7e:41:f9:d7:78:ec:74:0f:6a:75:0b: 9b:63:af:cb:cb:1f:69:ca:e4:c9:68:6c:3d:17:d3:ff:49:bb: 38:82:78:52:03:c5:63:1f:bf:6f:c3:30:07:38:f1:ab:f3:78: 35:b9:26:08:9b:55:67:0b:12:de:5b:82:7b:58:30:fa:c1:92: 13:4d:67:35:1b:05:78:1e:af:3d:74:0c:ae:1f:3b:4c:03:b7: 5f:8a:de:87:2e:8f:f0:ee:ae:a6:9d:b2:d9:50:0b:25:0f:3e: bc:e2:f4:fd:4e:fc:50:46:9c:b6:d9:4b:2c:5a:55:ad:7a:40: 2c:65:45:69:44:19:ba:9b:48:15:2b:cf:bf:2c:2c:4b:a0:aa: ee:4d:ec:f6:61:56:54:ae:a9:56:f0:3b:99:30:40:62:5c:df: c7:5e:40:25:88:5a:2c:56:c2:b6:c2:90:1c:b6:96:e3:36:80: a0:a5:a0:bc:3b:07:bb:7e:21:81:57:79:12:2f:dd:23:15:68: 6c:f4:2d:3f:17:d9:32:08:bc:72:6b:cc:8b:a4:b7:5b:1d:6a: c0:21:e6:58:07:3b:47:23:95:ff:76:62:a3:89:59:8b:78:72: e6:06:13:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1q+abcLXySWwGZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk Nzc5MTk5MTQtYjY2NC00ZWJjLTkzMWYtYzNlODIxYjYwZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDP06X89qEc4Y9XXZW/5PdD8lKZMiB0i58tq 4vCpy2WTewHkZw01qW8e0atE8Q6dp2bqk5IFVxHZlee05n7UP4x+4ZF2s8ULeSlL 4ZQUvcDjp806+DNT8Cjs2zw52RJDI6DB9HjA3tnHdOKbKkvO+YQpHQJjjcEqRwdd nHOQ/GBKsl6IVHYbcJOoUzcg4dhrFkbkPBlkUTPdLtC2Xll+ZkflPsUNkMY4hiUz PMSAaQUpM2W+ksDePotgbymSeHpGvLARzqCngQcISZ0D06JB1C/9pro/NaHAxYoF WdEl81Jk8Q4pfZlPSHirBlYxFmU7l5qpgnO48SiKLYHj6OTQHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgjCg8d53FTcybjJHtlyb6W+XqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDk1Njk1YmQtMmE1Mi0z MmNjLWFhMDktYTBkYzliMWYyYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcckMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJw3OB54KJKG/FgjbtIiRMtSCIAMVozWsO1+QfnXeOx0D2p1C5tjr8vL H2nK5MlobD0X0/9JuziCeFIDxWMfv2/DMAc48avzeDW5JgibVWcLEt5bgntYMPrB khNNZzUbBXgerz10DK4fO0wDt1+K3ocuj/DurqadstlQCyUPPrzi9P1O/FBGnLbZ SyxaVa16QCxlRWlEGbqbSBUrz78sLEugqu5N7PZhVlSuqVbwO5kwQGJc38deQCWI WixWwrbCkBy2luM2gKCloLw7B7t+IYFXeRIv3SMVaGz0LT8X2TIIvHJrzIukt1sd asAh5lgHO0cjlf92YqOJWYt4cuYGE5Q= -----END CERTIFICATE-----Generated at Mon Oct 27 12:02:38 2025 by rpki-client