$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/b0735067-3eda-3583-9857-b24e2ee796bc.roa File: b0735067-3eda-3583-9857-b24e2ee796bc.roa (raw, json) Hash identifier: xyze57fRvlpcS7Vxuk31IEt+fLBDZBdBY+WFxK0dlXI= Subject key identifier: 55:67:80:69:AE:9B:34:8D:34:FF:6A:33:58:2D:21:9E:A6:F6:08:64 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584B8BE22416BE85CBCDD0FE4000 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/b0735067-3eda-3583-9857-b24e2ee796bc.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 40948 IP address blocks: 173.249.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:24:16:be:85:cb:cd:d0:fe:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=3bcee8e1-3ac9-4c7d-84d1-c0bc9069595e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:af:51:f6:46:48:47:48:c5:ed:6b:8e:c2:b9: ab:64:79:d8:55:e7:97:b0:e6:95:ca:f1:0c:f0:52: 58:7a:b6:74:2e:33:2b:0b:a3:48:20:c8:82:c9:89: dc:c6:58:9d:7c:de:53:15:ef:a0:42:dc:b7:38:9d: f8:1a:af:ad:06:60:b8:5a:90:84:7d:2b:4d:d4:4b: 8c:51:9d:15:cc:44:7c:75:3a:03:ff:1f:7e:e5:28: 8d:c8:87:98:87:88:09:2a:d3:ee:28:bb:2c:32:04: 8d:5a:41:9c:7c:04:95:ce:55:5e:4b:e3:d3:38:6a: c4:8b:d8:dd:44:3e:45:62:a4:3e:5d:5e:1f:db:c7: 22:bc:05:47:eb:88:7a:83:59:01:e2:b5:e3:f9:35: a9:3e:70:db:7c:a8:46:48:7a:e9:b8:c3:16:9d:2d: cd:94:17:99:6d:aa:00:df:0c:24:ac:80:24:f8:ed: f5:98:c6:90:2a:3a:d9:68:ae:c9:67:7e:b8:bb:95: 10:b0:f6:cd:37:dd:d8:9d:8a:d6:46:99:8d:5a:67: c9:10:88:e2:e8:4b:63:60:da:05:0e:e5:e9:7a:c2: bb:9f:c6:73:bd:a0:20:ad:c1:06:56:31:96:95:76: 20:77:ec:7b:0f:07:08:c8:ff:bb:17:0e:2d:1a:54: a7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:67:80:69:AE:9B:34:8D:34:FF:6A:33:58:2D:21:9E:A6:F6:08:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/b0735067-3eda-3583-9857-b24e2ee796bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 173.249.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f3:0e:6c:cf:14:73:e7:2b:05:cc:4d:e6:56:c3:8a:72:c9: a4:04:5c:11:12:9f:52:1d:04:c9:a9:9b:b0:87:6d:9a:3d:41: 56:8f:e5:e3:3b:d7:8f:55:13:80:c8:d8:ca:8f:f5:19:a8:2f: a7:6b:e9:2e:e8:03:93:36:cc:e9:25:46:7a:09:f2:7c:68:d1: dd:14:6a:ee:43:98:ba:23:b5:ac:b3:8f:7d:cd:a0:52:fc:17: 68:ae:7a:b2:25:f2:7a:03:1c:02:76:bf:a7:a8:d5:4d:89:ed: fb:e2:a3:d3:31:bb:6d:4b:1a:33:74:6d:e0:01:b4:e1:ff:06: 62:c9:ba:e8:35:a9:36:15:11:ed:a5:c2:4e:ae:8b:6d:5e:f3: 97:de:fa:5c:9e:68:7e:6a:04:bf:dc:69:be:76:80:72:4c:da: 9c:7c:14:80:1d:54:68:27:6d:17:0d:ce:5d:74:35:27:62:58: c5:73:60:17:92:a3:1a:c2:e1:2a:1b:50:c4:00:72:f7:4f:90: a2:89:64:fe:5f:f4:48:b3:7a:0e:a6:54:5e:2b:06:28:7e:e5: c3:6e:32:d0:6d:23:52:f9:35:83:40:c5:8f:05:e0:7f:f3:0e: 19:2e:90:af:23:67:d8:32:2f:f0:b8:0b:3b:6a:03:b8:33:8f: 10:c3:eb:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4iQWvoXLzdD+QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk M2JjZWU4ZTEtM2FjOS00YzdkLTg0ZDEtYzBiYzkwNjk1OTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm69R9kZIR0jF7WuOwrmrZHnYVeeXsOaVyvEM 8FJYerZ0LjMrC6NIIMiCyYncxlidfN5TFe+gQty3OJ34Gq+tBmC4WpCEfStN1EuM UZ0VzER8dToD/x9+5SiNyIeYh4gJKtPuKLssMgSNWkGcfASVzlVeS+PTOGrEi9jd RD5FYqQ+XV4f28civAVH64h6g1kB4rXj+TWpPnDbfKhGSHrpuMMWnS3NlBeZbaoA 3wwkrIAk+O31mMaQKjrZaK7JZ364u5UQsPbNN93YnYrWRpmNWmfJEIji6EtjYNoF DuXpesK7n8ZzvaAgrcEGVjGWlXYgd+x7DwcIyP+7Fw4tGlSnJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVngGmumzSNNP9qM1gtIZ6m9ghkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvYjA3MzUwNjctM2VkYS0z NTgzLTk4NTctYjI0ZTJlZTc5NmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErflAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTzDmzPFHPnKwXMTeZWw4pyyaQEXBESn1IdBMmpm7CHbZo9QVaP5eM7 149VE4DI2MqP9RmoL6dr6S7oA5M2zOklRnoJ8nxo0d0Uau5DmLojtayzj33NoFL8 F2iuerIl8noDHAJ2v6eo1U2J7fvio9Mxu21LGjN0beABtOH/BmLJuug1qTYVEe2l wk6ui21e85fe+lyeaH5qBL/cab52gHJM2px8FIAdVGgnbRcNzl10NSdiWMVzYBeS oxrC4SobUMQAcvdPkKKJZP5f9Eizeg6mVF4rBih+5cNuMtBtI1L5NYNAxY8F4H/z DhkukK8jZ9gyL/C4CztqA7gzjxDD61M= -----END CERTIFICATE-----Generated at Tue Oct 21 05:10:41 2025 by rpki-client