$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/ed51f9d5-3719-308d-96cb-590fd7335460.roa File: ed51f9d5-3719-308d-96cb-590fd7335460.roa (raw, json) Hash identifier: bjiHUPTv7on2cBYCTczruInk7RHhXylhY8KrwU8Spkk= Subject key identifier: 1D:C5:87:1A:38:AF:2D:F8:0D:E6:B0:1C:BC:B1:F5:82:17:46:32:2C Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584B8BE223F0C7E0DA1434584900 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/ed51f9d5-3719-308d-96cb-590fd7335460.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 40771 IP address blocks: 173.249.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:23:f0:c7:e0:da:14:34:58:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=ca2a1491-b3a9-474a-9699-65aafe379bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:eb:89:d0:0f:4d:cf:b5:3c:96:64:d9:79:b7: b8:2a:57:98:b3:9d:22:14:86:75:05:4c:a0:6a:a7: 90:4b:df:62:12:a9:f2:7a:9b:c4:3d:04:bf:ec:e4: 77:1a:31:4f:f8:44:18:b8:72:1c:a9:eb:21:28:96: 91:46:a1:aa:30:55:e0:71:44:5e:d3:00:d6:fe:61: cb:90:aa:83:ea:38:28:42:3b:a7:bf:21:ab:58:28: 06:7a:b9:b2:1f:45:da:61:4a:4c:11:04:72:42:f4: a0:97:80:47:bc:89:74:1c:63:ee:0b:7e:64:28:81: b0:e1:6d:6e:e4:44:69:7c:f1:9f:93:82:1d:a7:17: bf:b3:7d:06:21:c2:03:ca:57:15:14:62:b5:e3:62: 10:5b:e1:7b:db:4b:a0:fe:1f:a0:7b:41:44:f4:d3: 4d:b1:76:60:36:6c:24:e7:b1:df:7b:8f:0a:2d:68: 82:d9:1a:5e:77:67:20:95:58:8c:b3:af:d8:de:24: 0e:da:5d:e5:1a:4e:c7:ca:69:ff:29:32:fd:c3:1e: 18:66:ff:ba:5a:13:d8:b9:43:0f:0d:43:6f:8e:9f: cf:63:22:83:2a:52:ba:e2:f0:cf:80:30:c8:ba:19: f2:f4:ff:d0:92:78:85:b9:87:d0:96:8c:6f:d6:38: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C5:87:1A:38:AF:2D:F8:0D:E6:B0:1C:BC:B1:F5:82:17:46:32:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/ed51f9d5-3719-308d-96cb-590fd7335460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 173.249.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:80:07:5f:ba:48:b6:9b:b2:b6:c2:70:59:25:98:2d:30:de: 73:6e:99:be:b7:6c:e6:43:40:a7:08:2e:27:5e:1b:3b:eb:88: 63:cb:ab:90:79:9f:bb:da:41:83:05:a0:41:66:23:d7:13:61: 23:55:77:38:00:64:45:88:3f:96:83:49:a4:00:cd:3a:74:52: cd:2a:c6:f5:e0:06:8f:73:d8:a5:5b:68:98:b7:99:35:59:eb: 94:7e:b2:40:24:de:08:50:e3:a2:36:60:6d:c4:f0:53:25:cc: eb:07:b5:04:79:8a:05:d1:a7:7f:e8:ab:21:bb:68:e4:73:47: 84:ba:31:a4:f2:16:14:0d:85:d8:d1:69:2d:09:18:bc:50:3b: 53:19:93:09:fc:23:f0:28:9c:1f:eb:b4:27:00:99:b2:de:10: 34:89:a4:9f:24:6f:37:6b:00:7c:58:24:bd:0c:9c:27:12:34: 41:b5:54:a3:b3:8b:1a:7b:23:00:54:8c:e5:00:9b:b9:1b:a6: 57:59:30:d3:e1:c2:db:51:76:0d:8a:d4:44:92:00:54:6e:b4: 6e:7b:33:ba:c0:fd:92:1d:fd:36:a9:0d:ec:a9:3f:14:77:d3: 5d:fd:26:99:54:a9:0d:9e:37:6d:3e:d0:69:b1:64:77:d4:64: c4:0f:3c:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4iPwx+DaFDRYSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk Y2EyYTE0OTEtYjNhOS00NzRhLTk2OTktNjVhYWZlMzc5YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OuJ0A9Nz7U8lmTZebe4KleYs50iFIZ1BUyg aqeQS99iEqnyepvEPQS/7OR3GjFP+EQYuHIcqeshKJaRRqGqMFXgcURe0wDW/mHL kKqD6jgoQjunvyGrWCgGermyH0XaYUpMEQRyQvSgl4BHvIl0HGPuC35kKIGw4W1u 5ERpfPGfk4Idpxe/s30GIcIDylcVFGK142IQW+F720ug/h+ge0FE9NNNsXZgNmwk 57Hfe48KLWiC2Rped2cglViMs6/Y3iQO2l3lGk7Hymn/KTL9wx4YZv+6WhPYuUMP DUNvjp/PYyKDKlK64vDPgDDIuhny9P/QkniFuYfQloxv1jj4kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3Fhxo4ry34DeawHLyx9YIXRjIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvZWQ1MWY5ZDUtMzcxOS0z MDhkLTk2Y2ItNTkwZmQ3MzM1NDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArflFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmAB1+6SLabsrbCcFklmC0w3nNumb63bOZDQKcILideGzvriGPLq5B5 n7vaQYMFoEFmI9cTYSNVdzgAZEWIP5aDSaQAzTp0Us0qxvXgBo9z2KVbaJi3mTVZ 65R+skAk3ghQ46I2YG3E8FMlzOsHtQR5igXRp3/oqyG7aORzR4S6MaTyFhQNhdjR aS0JGLxQO1MZkwn8I/AonB/rtCcAmbLeEDSJpJ8kbzdrAHxYJL0MnCcSNEG1VKOz ixp7IwBUjOUAm7kbpldZMNPhwttRdg2K1ESSAFRutG57M7rA/ZId/TapDeypPxR3 0139JplUqQ2eN20+0GmxZHfUZMQPPJc= -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:34 2025 by rpki-client