$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5cc201b9-66d4-3145-a429-3c258de6b544.roa File: 5cc201b9-66d4-3145-a429-3c258de6b544.roa (raw, json) Hash identifier: 7pPI0aOLf589kUMbqWEJoPGRyLG7/BiPqQd76Iwho04= Subject key identifier: 2F:53:11:0F:99:C1:CF:C0:E0:04:D8:3C:AF:AF:61:D7:D5:CF:0F:8D Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B85078E5B2E859D22DF137D40 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5cc201b9-66d4-3145-a429-3c258de6b544.roa Signing time: Tue 14 Oct 2025 14:05:26 +0000 ROA not before: Tue 14 Oct 2025 14:05:26 +0000 ROA not after: Mon 12 Jan 2026 15:05:26 +0000 asID: 23473 IP address blocks: 173.230.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:07:8e:5b:2e:85:9d:22:df:13:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 14 14:05:26 2025 GMT Not After : Jan 12 15:05:26 2026 GMT Subject: CN=a8c749ed-3771-468e-be82-e5f7bf86e6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:32:68:1f:55:bd:e1:90:1c:3e:f3:7b:45:cb: cc:02:c4:38:2d:fb:af:36:16:ab:1b:36:ae:45:f3: f2:36:b9:ff:a4:ee:05:4b:81:3a:1b:8b:77:c1:af: 7c:58:6b:1f:e4:5f:aa:5c:a6:d6:1b:73:e6:1b:9f: 53:03:1b:0d:92:d7:53:77:5d:51:b1:64:68:61:10: 95:eb:00:ee:c7:29:06:52:3d:6b:79:fa:8b:b0:69: a5:c7:12:d5:5c:d2:6c:68:dd:66:a6:f9:66:eb:1e: 3b:b4:5f:2f:cb:01:1c:aa:d7:69:96:84:d3:61:3c: 60:35:e9:30:e9:0a:00:47:0f:88:99:00:1b:e6:24: 0b:a5:70:cb:e7:01:66:a8:48:b8:0d:57:dd:7b:e6: 68:e6:ec:02:0e:a9:48:0f:de:b8:24:cb:d8:fc:24: 5a:99:05:d9:da:e0:58:5c:25:b2:6b:28:b6:4c:e6: cd:19:3f:24:b9:51:c1:3f:ab:a5:89:e6:ed:0b:f6: ab:96:0a:cc:49:44:bb:30:9b:71:62:15:1d:62:47: d0:6a:04:6d:88:fc:62:f4:46:18:0e:50:d9:8b:74: ed:eb:8e:46:62:8b:7f:8e:b7:38:47:f6:45:df:ec: 46:a8:2e:02:07:d9:bf:e8:2b:e5:09:75:66:59:6f: b8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:53:11:0F:99:C1:CF:C0:E0:04:D8:3C:AF:AF:61:D7:D5:CF:0F:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5cc201b9-66d4-3145-a429-3c258de6b544.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 173.230.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f8:52:14:4a:88:c3:1a:3c:67:96:58:1f:95:0f:48:02:a4: d1:5a:d2:15:7b:96:7f:87:60:96:55:8f:0b:be:2d:1e:44:aa: 69:a0:ad:90:06:80:59:5c:0d:30:e1:83:1c:9d:d5:69:af:84: 5d:78:03:26:62:75:fd:70:5e:90:74:69:50:f0:99:89:81:97: 05:06:59:50:3d:89:c3:d9:e1:3d:8f:2e:bb:8b:43:8c:7a:2e: 21:61:dc:94:e1:76:9a:b0:b7:2e:bf:22:cd:33:f1:ad:37:a2: ef:e3:c5:0e:8c:84:97:69:c1:cb:01:85:7d:a5:1d:7b:9d:3c: 35:b9:f1:bf:dc:d0:44:55:e1:63:3b:d1:52:91:d2:7e:0c:17: d5:3b:49:91:61:fe:66:01:60:1c:32:f7:dc:f1:90:8e:0f:c6: cf:35:e3:5b:38:67:45:a5:c0:ef:b1:69:e1:d0:13:86:56:81: e6:74:99:5e:0b:9d:4a:87:4f:d8:9b:20:3f:bb:98:bc:90:65: f0:ee:40:04:55:86:3a:a0:98:f6:58:34:a3:b7:b5:b5:34:52: 85:3d:93:13:a9:c4:78:41:14:7f:4b:70:00:22:a7:2e:7c:ed: c6:b9:86:4c:bb:ca:5b:44:a1:ca:b4:ca:e2:29:b6:4c:2e:6d: 18:85:ac:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFB45bLoWdIt8TfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxNDE0MDUyNloXDTI2MDExMjE1MDUyNlowLzEtMCsGA1UEAxMk YThjNzQ5ZWQtMzc3MS00NjhlLWJlODItZTVmN2JmODZlNmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozJoH1W94ZAcPvN7RcvMAsQ4LfuvNharGzau RfPyNrn/pO4FS4E6G4t3wa98WGsf5F+qXKbWG3PmG59TAxsNktdTd11RsWRoYRCV 6wDuxykGUj1refqLsGmlxxLVXNJsaN1mpvlm6x47tF8vywEcqtdploTTYTxgNekw 6QoARw+ImQAb5iQLpXDL5wFmqEi4DVfde+Zo5uwCDqlID964JMvY/CRamQXZ2uBY XCWyayi2TObNGT8kuVHBP6uliebtC/arlgrMSUS7MJtxYhUdYkfQagRtiPxi9EYY DlDZi3Tt645GYot/jrc4R/ZF3+xGqC4CB9m/6CvlCXVmWW+4vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9TEQ+Zwc/A4ATYPK+vYdfVzw+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNWNjMjAxYjktNjZkNC0z MTQ1LWE0MjktM2MyNThkZTZiNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBreYGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFn4UhRKiMMaPGeWWB+VD0gCpNFa0hV7ln+HYJZVjwu+LR5EqmmgrZAG gFlcDTDhgxyd1WmvhF14AyZidf1wXpB0aVDwmYmBlwUGWVA9icPZ4T2PLruLQ4x6 LiFh3JThdpqwty6/Is0z8a03ou/jxQ6MhJdpwcsBhX2lHXudPDW58b/c0ERV4WM7 0VKR0n4MF9U7SZFh/mYBYBwy99zxkI4Pxs8141s4Z0WlwO+xaeHQE4ZWgeZ0mV4L nUqHT9ibID+7mLyQZfDuQARVhjqgmPZYNKO3tbU0UoU9kxOpxHhBFH9LcAAipy58 7ca5hky7yltEocq0yuIptkwubRiFrLQ= -----END CERTIFICATE-----Generated at Mon Oct 20 20:49:30 2025 by rpki-client