$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b818fb44-27c2-3c6e-9db6-8d0343925241.roa File: b818fb44-27c2-3c6e-9db6-8d0343925241.roa (raw, json) Hash identifier: uLfhuwhZuVBchXK5IuXzNgq5iU5m7sNwoMg22U2vlCc= Subject key identifier: FF:82:6E:20:33:53:54:BD:26:1D:B4:34:EE:AC:A1:30:DE:EF:A4:F8 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B95A79327293717AFA1379600 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b818fb44-27c2-3c6e-9db6-8d0343925241.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 174 IP address blocks: 173.232.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:93:27:29:37:17:af:a1:37:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e8e6f9a7-fc21-4feb-9b7c-06a785fad275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:87:a4:8b:97:ab:55:4c:b7:9d:69:54:91:93: d7:b7:61:39:12:b3:db:d5:fe:5d:49:97:8c:5d:eb: 13:33:14:e0:9e:2d:25:d8:13:ba:28:2d:96:8e:98: 11:3c:2b:a2:16:8b:7d:7a:e0:84:b4:b2:a3:a4:ff: 58:00:b8:2c:97:7a:82:42:a1:2e:08:a6:40:7b:d4: f2:ab:44:87:57:c9:2b:4e:29:94:1d:fe:a6:42:4c: 81:a2:07:ea:df:25:de:49:e2:15:97:e8:17:c7:7a: a9:bf:4f:17:86:ac:07:74:3b:85:52:73:76:a9:83: d4:c0:69:8e:83:dd:80:7f:a1:4d:55:a3:70:5b:5b: 3f:cc:0c:b9:04:cb:91:3f:e1:d7:52:f6:f4:11:88: 97:2b:de:81:85:d8:fb:b9:32:95:98:5d:00:6f:15: 7d:fa:83:dc:08:a9:6f:bc:1c:b7:d1:81:56:8a:af: d5:07:0d:82:97:68:03:c0:77:0f:2d:45:af:5f:25: 1a:5f:12:4c:c5:e3:e1:4e:d7:e4:30:6c:b6:df:a6: 7c:5c:31:b3:11:2e:68:7e:99:51:ca:c9:09:cc:97: 14:1e:99:f5:95:6d:92:75:66:1e:10:a7:d8:1c:a6: aa:ba:0f:4c:85:60:82:9a:ff:ce:19:23:64:f9:26: 7b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:82:6E:20:33:53:54:BD:26:1D:B4:34:EE:AC:A1:30:DE:EF:A4:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b818fb44-27c2-3c6e-9db6-8d0343925241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b0:59:24:ea:24:fa:87:0f:07:1b:69:83:90:df:df:19:0e: 27:36:09:a7:fa:81:d4:bb:63:00:fe:db:86:b6:06:33:7f:2b: 98:12:b8:09:43:82:a2:0b:58:ec:e4:a1:95:db:55:b8:3e:21: 36:72:ec:83:56:e9:f4:80:4b:3e:4c:77:b2:c0:37:88:45:1c: af:a0:44:45:ae:3c:9b:e8:03:45:75:01:87:9d:09:64:f0:81: 86:59:88:13:91:91:c9:98:b3:2e:b8:2a:2a:2e:b5:b0:7d:40: d8:31:02:7e:e2:53:31:a7:44:ae:88:20:54:25:ae:26:b8:ff: 1e:da:b0:70:64:07:32:69:b3:fe:66:97:f3:db:8a:10:61:8d: bb:07:ca:68:77:c7:5c:21:49:e1:4e:28:81:71:6a:04:fc:cf: 82:40:0f:cf:3b:9a:fe:78:0e:8a:ee:2f:a7:3b:8a:95:66:db: a0:21:a5:ea:6d:73:28:0e:cb:cc:30:2b:4b:42:82:d1:11:77: c8:44:ee:4d:06:5c:86:2b:4e:c3:39:73:a5:61:5e:a0:f2:75: 15:ce:fa:21:ea:cf:97:01:d2:2c:61:f3:d2:bb:1c:9a:ce:f9: 6c:62:59:37:31:91:38:36:cb:50:ad:6c:fb:d8:9b:b5:a8:96: 84:d8:9a:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5MnKTcXr6E3lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZThlNmY5YTctZmMyMS00ZmViLTliN2MtMDZhNzg1ZmFkMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoeki5erVUy3nWlUkZPXt2E5ErPb1f5dSZeM XesTMxTgni0l2BO6KC2WjpgRPCuiFot9euCEtLKjpP9YALgsl3qCQqEuCKZAe9Ty q0SHV8krTimUHf6mQkyBogfq3yXeSeIVl+gXx3qpv08XhqwHdDuFUnN2qYPUwGmO g92Af6FNVaNwW1s/zAy5BMuRP+HXUvb0EYiXK96Bhdj7uTKVmF0AbxV9+oPcCKlv vBy30YFWiq/VBw2Cl2gDwHcPLUWvXyUaXxJMxePhTtfkMGy236Z8XDGzES5ofplR yskJzJcUHpn1lW2SdWYeEKfYHKaqug9MhWCCmv/OGSNk+SZ73wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+CbiAzU1S9Jh20NO6soTDe76T4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYjgxOGZiNDQtMjdjMi0z YzZlLTlkYjYtOGQwMzQzOTI1MjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArejvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKwWSTqJPqHDwcbaYOQ398ZDic2Caf6gdS7YwD+24a2BjN/K5gSuAlD gqILWOzkoZXbVbg+ITZy7INW6fSASz5Md7LAN4hFHK+gREWuPJvoA0V1AYedCWTw gYZZiBORkcmYsy64KioutbB9QNgxAn7iUzGnRK6IIFQlria4/x7asHBkBzJps/5m l/PbihBhjbsHymh3x1whSeFOKIFxagT8z4JAD887mv54DoruL6c7ipVm26Ahpept cygOy8wwK0tCgtERd8hE7k0GXIYrTsM5c6VhXqDydRXO+iHqz5cB0ixh89K7HJrO +WxiWTcxkTg2y1CtbPvYm7WoloTYmnM= -----END CERTIFICATE-----Generated at Mon Oct 20 21:40:33 2025 by rpki-client