$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa File: 2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa (raw, json) Hash identifier: M1IEaCnRTFrJhvj69pftxs9mkdmm0kpV8/QRxqCMGuI= Subject key identifier: 31:34:32:DF:3E:B4:48:C7:CA:5B:FA:0E:3D:A4:CE:F1:7B:03:5C:43 Certificate issuer: /CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc Certificate serial: 010D0C9F4328584B84E788E3CEE072D2F2124DF0 Authority key identifier: E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 8987 IP address blocks: 173.252.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:88:e3:ce:e0:72:d2:f2:12:4d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=3a1a81f2-b81a-4937-8f08-d7af828cb3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f3:a9:c7:97:ca:96:ff:41:73:46:94:fb:33: 36:8c:fb:c7:89:d2:9f:da:72:8d:11:1e:82:20:47: d4:75:81:20:eb:99:b0:23:03:65:17:9e:7e:cd:53: 7a:de:89:96:5a:35:78:8f:fc:72:0f:2b:2f:f2:5d: 8b:99:21:15:2d:c9:b8:35:71:e8:f3:e3:37:30:b4: 18:cd:6e:82:6c:05:96:ab:22:37:47:0b:02:19:6f: ee:c6:b2:5c:bc:aa:5d:80:b5:cc:a6:03:b5:15:b8: 72:c9:41:10:df:ef:2a:7b:28:64:fb:e8:4e:db:9b: 40:61:e8:d8:b2:b1:6e:25:ae:78:6a:bf:64:2b:00: 7e:f7:a9:13:4c:7a:21:59:93:4a:6d:5b:1f:a5:af: 0d:50:66:e7:55:ea:8c:ea:ed:1e:f3:77:72:19:78: 48:4a:39:e9:90:d3:13:5c:42:48:28:ca:6b:2d:49: bd:16:a9:ee:74:21:68:a6:9d:3d:46:ff:7f:63:1b: f6:16:9c:89:a7:ec:d9:a3:b5:42:8f:16:c8:c6:82: dd:f9:3f:6f:1b:6b:8a:87:97:9c:44:e8:de:3b:a4: 15:57:b9:a5:ea:2c:3a:ec:49:bc:5b:2c:1b:e3:d9: 25:96:0c:89:9a:c6:ff:a8:bc:b2:dd:07:42:5a:97: 1a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:34:32:DF:3E:B4:48:C7:CA:5B:FA:0E:3D:A4:CE:F1:7B:03:5C:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl X509v3 Authority Key Identifier: keyid:E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer sbgp-ipAddrBlock: critical IPv4: 173.252.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:72:c5:cb:7d:7f:fb:8c:05:d5:6c:bb:32:f6:db:7f:6a:4d: 82:55:71:e9:e9:30:9e:11:01:84:56:93:a6:56:ac:92:ce:27: 10:91:3c:55:04:86:4c:80:04:63:ba:79:16:4e:ae:70:71:3e: 07:73:70:65:49:9c:5e:1c:25:bf:a4:8b:97:64:d6:93:d0:a4: e0:02:68:e6:fd:39:5c:aa:83:01:72:dd:00:34:63:c6:16:7a: 5d:d8:e5:e6:73:2c:e1:2d:33:a8:f5:59:5b:a1:83:c9:95:8a: ec:9e:c4:98:a1:5b:2d:df:9e:36:f2:c3:30:8f:1c:f4:e5:6b: 8d:61:98:87:39:83:a7:fe:40:57:64:08:8f:86:11:a9:04:66: e2:5f:99:3b:1e:80:34:1e:c4:3f:6c:a3:b1:df:81:92:a5:ee: f7:39:a3:c9:ab:20:a5:91:80:14:98:8c:5a:83:33:df:e5:4c: 9e:d2:d9:de:f2:c2:9e:e3:65:f8:77:03:aa:ae:1d:4a:c1:e5: da:38:19:08:70:dd:8e:af:bc:4e:e4:96:31:06:fe:51:a2:0b: c1:27:cd:be:a9:9b:da:50:15:46:ce:fb:49:a0:46:c8:a2:39: 4b:77:15:c5:1f:ba:4a:90:77:e6:e0:1d:3c:bc:3b:1e:c1:3a: 12:c8:a8:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54jjzuBy0vISTfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliMDg3N2YtZjdhYy00YzEzLTlhMTAtYjAyMzU4ZWUw MGJjMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk M2ExYTgxZjItYjgxYS00OTM3LThmMDgtZDdhZjgyOGNiM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9/Opx5fKlv9Bc0aU+zM2jPvHidKf2nKNER6C IEfUdYEg65mwIwNlF55+zVN63omWWjV4j/xyDysv8l2LmSEVLcm4NXHo8+M3MLQY zW6CbAWWqyI3RwsCGW/uxrJcvKpdgLXMpgO1FbhyyUEQ3+8qeyhk++hO25tAYejY srFuJa54ar9kKwB+96kTTHohWZNKbVsfpa8NUGbnVeqM6u0e83dyGXhISjnpkNMT XEJIKMprLUm9FqnudCFopp09Rv9/Yxv2FpyJp+zZo7VCjxbIxoLd+T9vG2uKh5ec ROjeO6QVV7ml6iw67Em8Wywb49kllgyJmsb/qLyy3QdCWpca/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDE0Mt8+tEjHylv6Dj2kzvF7A1xDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OWIw ODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIzNThlZTAwYmMvMmUyYzBlODAtYjhhMS0z Mzc1LWExNmYtNGMzYWU2NGEwNTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODliMDg3N2YtZjdhYy00YzEzLTlh MTAtYjAyMzU4ZWUwMGJjLzg5YjA4NzdmLWY3YWMtNGMxMy05YTEwLWIwMjM1OGVl MDBiYy5jcmwwHwYDVR0jBBgwFoAU4qqXMdzDv7nFqcRXYAVtTrwbvKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OWIwODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIz NThlZTAwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVyxct9f/uMBdVsuzL2239qTYJVcenpMJ4RAYRWk6ZWrJLOJxCRPFUE hkyABGO6eRZOrnBxPgdzcGVJnF4cJb+ki5dk1pPQpOACaOb9OVyqgwFy3QA0Y8YW el3Y5eZzLOEtM6j1WVuhg8mViuyexJihWy3fnjbywzCPHPTla41hmIc5g6f+QFdk CI+GEakEZuJfmTsegDQexD9so7HfgZKl7vc5o8mrIKWRgBSYjFqDM9/lTJ7S2d7y wp7jZfh3A6quHUrB5do4GQhw3Y6vvE7kljEG/lGiC8Enzb6pm9pQFUbO+0mgRsii OUt3FcUfukqQd+bgHTy8Ox7BOhLIqBw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:26 2025 by rpki-client