$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/fc872b64-dfea-3313-9c57-cf28a8ad0f71.roa File: fc872b64-dfea-3313-9c57-cf28a8ad0f71.roa (raw, json) Hash identifier: z7UPaf1G9lVLGvZi7wss2pjv8fzOXNyKsOqOpXkxTFY= Subject key identifier: 96:0D:90:1C:30:D7:C4:C1:15:7B:52:7E:C1:AC:3D:20:9D:09:F6:4A Certificate issuer: /CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc Certificate serial: 010D0C9F4328584B84E7890BF7A2D43229090180 Authority key identifier: E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/fc872b64-dfea-3313-9c57-cf28a8ad0f71.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 173.252.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:89:0b:f7:a2:d4:32:29:09:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=d5f41743-7b81-4468-9515-762f05ce71a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0c:e9:54:22:23:4e:0b:da:3e:e1:d2:89:02: 15:b7:16:86:3b:e9:8f:7c:13:78:e6:ac:eb:50:8e: 0d:bf:16:02:5e:0b:74:c8:17:4e:2a:32:07:8e:8b: d0:f0:b9:77:ab:b6:11:03:d0:92:b6:c7:98:21:b6: ce:05:1b:88:e4:e6:2d:f0:d7:7a:f5:49:e7:d5:40: 23:b6:e4:ff:a1:15:84:80:18:b1:5a:85:9b:05:7c: a5:b3:0b:7b:12:39:7d:0c:7c:cc:8f:c2:ec:32:81: 60:42:9b:d3:dd:2e:b0:02:d7:45:b0:91:92:23:f5: 71:31:74:2d:0b:2d:ef:98:dd:87:09:71:cf:17:e6: 02:9e:a9:2b:78:4d:10:6f:6c:af:aa:89:51:81:ee: aa:57:53:cd:98:c7:9f:53:e1:95:05:d9:23:27:c4: bd:eb:ae:1e:f3:bc:11:a7:0a:20:06:aa:e5:2c:85: 6d:13:e9:00:40:5f:03:02:1a:4b:d9:69:4e:d2:03: 8d:82:dd:2c:32:26:5a:d3:88:9f:3e:48:4d:f6:be: 86:6e:da:7a:15:5f:a2:f5:98:9f:16:7f:54:d4:21: ad:91:15:81:71:54:24:da:13:31:7f:8d:86:fd:02: d5:38:2b:fd:64:ba:3a:48:6f:54:97:08:aa:8c:47: d5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0D:90:1C:30:D7:C4:C1:15:7B:52:7E:C1:AC:3D:20:9D:09:F6:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/fc872b64-dfea-3313-9c57-cf28a8ad0f71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl X509v3 Authority Key Identifier: keyid:E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer sbgp-ipAddrBlock: critical IPv4: 173.252.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:b8:75:87:41:ad:1e:45:9f:da:d5:93:fc:d5:66:27:67:34: 92:90:b4:b0:18:53:d6:92:cc:0e:7e:82:37:4c:53:42:37:2f: 49:ad:34:06:14:17:c4:f8:67:19:3c:fc:91:3b:fc:c8:7d:50: cd:b7:6b:9b:0f:df:21:83:57:44:83:44:5f:56:45:29:c5:ad: ed:33:b6:24:2e:83:1e:63:93:aa:f8:2c:df:a2:ab:3a:44:ba: b4:76:b1:6b:ca:91:5a:72:69:5c:42:8d:9f:35:26:26:d4:7a: 43:6c:2a:9f:ea:9d:ca:f1:17:72:23:43:18:0c:80:da:e8:e6: ff:b5:c4:74:3f:df:47:04:b0:67:4e:e2:2c:8a:22:a1:3d:81: 18:87:02:b8:5d:5a:c1:42:a0:25:f6:ed:7e:0f:10:a6:27:61: 49:9b:ec:00:57:78:5e:48:f6:10:0e:d9:c7:01:aa:46:bd:c9: 0a:09:6b:0e:8c:1c:f8:5e:24:03:e0:dc:06:64:8d:d4:59:2f: 0b:c9:bd:6e:fe:6d:a2:6e:0e:75:65:e9:d1:b7:4c:ef:99:d9: 13:a5:88:cf:07:bd:2f:ca:fe:69:41:fb:fc:97:ee:bb:5a:d5: 67:09:6c:66:73:0f:50:04:2f:4a:27:7d:fd:6d:cc:39:55:5e: df:c1:0e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54kL96LUMikJAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliMDg3N2YtZjdhYy00YzEzLTlhMTAtYjAyMzU4ZWUw MGJjMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZDVmNDE3NDMtN2I4MS00NDY4LTk1MTUtNzYyZjA1Y2U3MWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQzpVCIjTgvaPuHSiQIVtxaGO+mPfBN45qzr UI4NvxYCXgt0yBdOKjIHjovQ8Ll3q7YRA9CStseYIbbOBRuI5OYt8Nd69Unn1UAj tuT/oRWEgBixWoWbBXylswt7Ejl9DHzMj8LsMoFgQpvT3S6wAtdFsJGSI/VxMXQt Cy3vmN2HCXHPF+YCnqkreE0Qb2yvqolRge6qV1PNmMefU+GVBdkjJ8S9664e87wR pwogBqrlLIVtE+kAQF8DAhpL2WlO0gONgt0sMiZa04ifPkhN9r6Gbtp6FV+i9Zif Fn9U1CGtkRWBcVQk2hMxf42G/QLVOCv9ZLo6SG9UlwiqjEfVhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYNkBww18TBFXtSfsGsPSCdCfZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OWIw ODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIzNThlZTAwYmMvZmM4NzJiNjQtZGZlYS0z MzEzLTljNTctY2YyOGE4YWQwZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODliMDg3N2YtZjdhYy00YzEzLTlh MTAtYjAyMzU4ZWUwMGJjLzg5YjA4NzdmLWY3YWMtNGMxMy05YTEwLWIwMjM1OGVl MDBiYy5jcmwwHwYDVR0jBBgwFoAU4qqXMdzDv7nFqcRXYAVtTrwbvKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OWIwODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIz NThlZTAwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu4dYdBrR5Fn9rVk/zVZidnNJKQtLAYU9aSzA5+gjdMU0I3L0mtNAYU F8T4Zxk8/JE7/Mh9UM23a5sP3yGDV0SDRF9WRSnFre0ztiQugx5jk6r4LN+iqzpE urR2sWvKkVpyaVxCjZ81JibUekNsKp/qncrxF3IjQxgMgNro5v+1xHQ/30cEsGdO 4iyKIqE9gRiHArhdWsFCoCX27X4PEKYnYUmb7ABXeF5I9hAO2ccBqka9yQoJaw6M HPheJAPg3AZkjdRZLwvJvW7+baJuDnVl6dG3TO+Z2ROliM8HvS/K/mlB+/yX7rta 1WcJbGZzD1AEL0onff1tzDlVXt/BDq8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:55:43 2025 by rpki-client