$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3893e306-005b-303b-a684-2d86471f9576.roa File: 3893e306-005b-303b-a684-2d86471f9576.roa (raw, json) Hash identifier: rxOJlmKZfbj0f1Uwi+2mqY4UcmJpajUWseERUY7zEGU= Subject key identifier: 74:5E:BD:9F:65:83:E1:8A:CD:0B:18:C0:95:38:55:34:9E:CC:6C:38 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE1B30CC12B71069720F60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3893e306-005b-303b-a684-2d86471f9576.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 173.255.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:1b:30:cc:12:b7:10:69:72:0f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=075f2b38-3248-46ac-bc56-ddee259530f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:5c:30:36:03:e9:2b:66:43:4a:87:b1:ed: 72:06:bc:99:8f:39:6d:50:88:2e:40:ac:57:22:5f: 9f:01:1a:3e:53:90:ef:71:54:c5:42:f4:fd:52:df: c6:bc:cb:56:c7:dc:13:1a:ca:a4:69:2f:bf:d0:7a: 65:35:92:7d:66:ef:a0:39:6d:c9:22:98:4c:9d:d8: 32:64:1f:73:7d:ab:99:4f:a9:27:b9:f8:64:55:87: 62:ec:ad:dd:c6:e0:6f:b7:c5:d6:02:2d:3a:d6:04: 51:9f:32:61:bb:22:3c:12:ce:9f:98:3a:17:66:b9: 9f:13:70:e1:87:20:3c:a7:85:7b:65:14:df:af:fa: bc:f1:13:2a:b0:11:70:2f:19:ff:7a:a5:cd:77:fb: 17:2f:af:75:a8:8b:3a:e0:c4:7a:10:60:30:61:e0: 3a:ad:59:fb:f2:10:09:81:cb:51:27:4c:52:30:af: b9:06:bb:ed:b4:5b:7d:94:29:6d:dd:ef:28:2a:14: 25:7b:df:a4:20:c5:2b:3d:c1:ea:fb:98:61:35:33: e0:b9:7a:da:cd:ae:c9:c1:38:2f:58:55:06:ac:07: e6:23:39:63:55:8a:2e:75:85:08:bd:29:40:3d:70: f1:2f:28:1e:2a:bd:32:ec:21:fd:35:f0:dc:87:a8: a8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5E:BD:9F:65:83:E1:8A:CD:0B:18:C0:95:38:55:34:9E:CC:6C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3893e306-005b-303b-a684-2d86471f9576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 173.255.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:88:78:0e:3f:45:b0:f8:5d:b6:43:e7:eb:f0:c8:44:57:fd: af:2d:1b:de:38:23:b7:6c:90:53:30:36:d5:f9:aa:f9:3f:f9: 5c:ec:97:fb:0c:26:34:73:31:d9:c7:e8:51:ee:c1:2e:d2:db: 00:98:f7:ac:eb:ac:0f:55:f1:e9:0a:0c:f6:62:d3:d4:35:82: 11:da:7d:0d:af:22:e2:4e:2c:7f:12:c1:90:a2:7c:07:cd:d0: d3:69:3a:98:83:f9:38:cb:02:f3:ff:53:31:95:37:1e:f4:6e: fa:3d:7e:3a:44:a2:40:57:6e:96:18:3c:db:04:2e:7b:b6:68: cf:e7:db:1c:1b:20:b1:5d:86:57:a4:37:b4:c1:7c:7d:54:cf: 3b:32:af:90:49:c0:77:89:55:ca:8b:39:a0:3a:d3:46:65:3b: 22:ca:2d:76:70:7d:ae:11:c4:08:ab:34:cf:30:72:c3:ac:e6: 04:69:ea:85:88:f6:c6:57:49:70:67:82:f7:3a:6c:87:59:e7: c3:0c:09:29:62:d4:6f:e4:95:ff:51:11:e7:2a:11:6b:07:3a: 9f:2d:2b:97:fb:26:da:fd:21:51:96:84:bd:ed:0c:67:f6:da: ed:41:56:cb:37:f7:53:61:9b:ac:da:2c:ca:fb:d0:a5:b4:53: 53:62:df:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhswzBK3EGlyD2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDc1ZjJiMzgtMzI0OC00NmFjLWJjNTYtZGRlZTI1OTUzMGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRtcMDYD6StmQ0qHse1yBryZjzltUIguQKxX Il+fARo+U5DvcVTFQvT9Ut/GvMtWx9wTGsqkaS+/0HplNZJ9Zu+gOW3JIphMndgy ZB9zfauZT6knufhkVYdi7K3dxuBvt8XWAi061gRRnzJhuyI8Es6fmDoXZrmfE3Dh hyA8p4V7ZRTfr/q88RMqsBFwLxn/eqXNd/sXL691qIs64MR6EGAwYeA6rVn78hAJ gctRJ0xSMK+5BrvttFt9lClt3e8oKhQle9+kIMUrPcHq+5hhNTPguXraza7JwTgv WFUGrAfmIzljVYoudYUIvSlAPXDxLygeKr0y7CH9NfDch6iogQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRevZ9lg+GKzQsYwJU4VTSezGw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzg5M2UzMDYtMDA1Yi0z MDNiLWE2ODQtMmQ4NjQ3MWY5NTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf93MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWIeA4/RbD4XbZD5+vwyERX/a8tG944I7dskFMwNtX5qvk/+Vzsl/sM JjRzMdnH6FHuwS7S2wCY96zrrA9V8ekKDPZi09Q1ghHafQ2vIuJOLH8SwZCifAfN 0NNpOpiD+TjLAvP/UzGVNx70bvo9fjpEokBXbpYYPNsELnu2aM/n2xwbILFdhlek N7TBfH1Uzzsyr5BJwHeJVcqLOaA600ZlOyLKLXZwfa4RxAirNM8wcsOs5gRp6oWI 9sZXSXBngvc6bIdZ58MMCSli1G/klf9REecqEWsHOp8tK5f7Jtr9IVGWhL3tDGf2 2u1BVss391Nhm6zaLMr70KW0U1Ni39s= -----END CERTIFICATE-----Generated at Mon Oct 20 10:43:58 2025 by rpki-client