$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/922156f4-c611-3dd6-9d0e-b98df24ae729.roa File: 922156f4-c611-3dd6-9d0e-b98df24ae729.roa (raw, json) Hash identifier: JRSRfTq1qzSndAqNcO7tB8x5ZhIvtlU6w7MWrLVqPTY= Subject key identifier: 6B:04:9C:45:E9:87:8E:4B:64:57:EF:EC:9A:99:8C:4E:52:F4:A0:AA Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B5141BC92328CAB5F47603E80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/922156f4-c611-3dd6-9d0e-b98df24ae729.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 173.199.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:bc:92:32:8c:ab:5f:47:60:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=1d58d4b8-0ee6-4492-90b6-a79ea7bec49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6f:0e:99:96:3a:ec:75:90:a2:02:ec:a1:eb: 4b:6d:3d:f8:cc:3e:b9:a6:3f:68:c5:90:9f:e3:1d: d9:92:df:ca:4b:ad:1c:a0:b4:df:8a:21:47:d9:de: 62:60:9c:d1:42:5b:b9:02:ef:dc:4e:60:8f:fc:47: 49:c7:9a:af:7e:26:3d:a8:48:0f:36:8e:96:ea:da: 6f:da:1d:af:68:93:24:a4:68:c1:a2:0b:af:0d:33: a2:ef:34:fa:bd:6a:8b:8f:be:3c:69:68:0c:6f:93: 3b:a5:03:dd:e0:97:9d:9a:7f:98:90:7e:00:92:61: b5:74:5f:3d:cb:59:02:c9:01:72:38:30:14:d2:bb: c0:74:1a:6a:7c:be:74:ae:99:20:5a:ae:9a:95:72: 5f:00:3d:9b:08:99:31:37:46:71:74:a0:87:2c:0d: 1d:2b:75:02:06:66:e9:41:f5:89:1a:46:26:9a:d2: b4:18:58:27:80:9a:a8:b8:d8:7d:50:64:a2:58:69: 0c:b8:05:79:f3:91:a5:30:89:f6:c1:ee:d1:54:3f: 61:a8:21:ee:1a:94:88:98:32:aa:f1:6d:cd:33:6b: bf:a0:5c:f7:3b:0d:1c:b3:d6:49:b5:12:45:1a:42: b7:2c:54:b5:ce:8e:f2:12:f0:42:77:44:a8:b7:31: f0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:04:9C:45:E9:87:8E:4B:64:57:EF:EC:9A:99:8C:4E:52:F4:A0:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/922156f4-c611-3dd6-9d0e-b98df24ae729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b5:c1:54:c9:02:80:aa:eb:c0:1b:23:02:15:a5:ea:2b:04: a7:9d:7d:e0:89:a9:d6:ac:ba:50:6a:44:bc:4b:fe:8d:48:a3: 12:25:1d:c4:b2:bc:bc:4a:d9:6d:e6:9c:e0:b8:0a:eb:6e:4b: 4e:b8:d1:da:f9:fa:68:06:58:4b:4c:01:89:c0:c6:c5:d6:be: bf:83:e8:4c:02:14:dd:fe:07:e4:e0:44:93:f0:f9:d6:55:76: 69:11:eb:d4:e7:77:24:a3:b4:76:8b:8a:b1:c8:7e:19:f0:7b: 26:77:3d:4e:06:cc:80:ad:e2:a8:6c:9f:2a:b7:e8:f7:40:a7: f2:aa:17:da:07:53:da:58:37:9b:84:37:19:a4:d0:3c:b5:35: 69:56:5f:f3:44:7a:38:2e:96:37:1b:03:ad:e9:c3:29:1d:49: cf:3e:d2:3b:af:84:0c:e3:a4:e5:e6:d4:65:b4:02:fc:fd:7e: c8:49:8f:0b:29:03:f3:d2:fd:c2:e4:c3:a6:1f:62:4c:25:12: fc:2d:fd:63:fc:dc:17:10:fa:2f:46:de:b2:1c:f7:8e:e7:24: 16:e6:63:b0:2c:e7:d7:6d:ce:69:a4:bc:6c:f6:32:3a:1a:93: bf:96:c3:d2:30:b0:13:a3:d9:40:28:6b:1a:f4:c2:ed:a1:43: fa:cc:57:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQbySMoyrX0dgPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MWQ1OGQ0YjgtMGVlNi00NDkyLTkwYjYtYTc5ZWE3YmVjNDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m8OmZY67HWQogLsoetLbT34zD65pj9oxZCf 4x3Zkt/KS60coLTfiiFH2d5iYJzRQlu5Au/cTmCP/EdJx5qvfiY9qEgPNo6W6tpv 2h2vaJMkpGjBoguvDTOi7zT6vWqLj748aWgMb5M7pQPd4Jedmn+YkH4AkmG1dF89 y1kCyQFyODAU0rvAdBpqfL50rpkgWq6alXJfAD2bCJkxN0ZxdKCHLA0dK3UCBmbp QfWJGkYmmtK0GFgngJqouNh9UGSiWGkMuAV585GlMIn2we7RVD9hqCHuGpSImDKq 8W3NM2u/oFz3Ow0cs9ZJtRJFGkK3LFS1zo7yEvBCd0SotzHwaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsEnEXph45LZFfv7JqZjE5S9KCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOTIyMTU2ZjQtYzYxMS0z ZGQ2LTlkMGUtYjk4ZGYyNGFlNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcc7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu1wVTJAoCq68AbIwIVpeorBKedfeCJqdasulBqRLxL/o1IoxIlHcSy vLxK2W3mnOC4CutuS0640dr5+mgGWEtMAYnAxsXWvr+D6EwCFN3+B+TgRJPw+dZV dmkR69TndySjtHaLirHIfhnweyZ3PU4GzICt4qhsnyq36PdAp/KqF9oHU9pYN5uE Nxmk0Dy1NWlWX/NEejguljcbA63pwykdSc8+0juvhAzjpOXm1GW0Avz9fshJjwsp A/PS/cLkw6YfYkwlEvwt/WP83BcQ+i9G3rIc947nJBbmY7As59dtzmmkvGz2Mjoa k7+Ww9IwsBOj2UAoaxr0wu2hQ/rMV5w= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:15 2025 by rpki-client