$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/f800c6d8-1be5-3d97-a5c7-e9434771ad19.roa File: f800c6d8-1be5-3d97-a5c7-e9434771ad19.roa (raw, json) Hash identifier: AZ6HXPtvcjtj3ejmqDl7w7Fa2uEOdI62+ZHpLEquX1E= Subject key identifier: 96:E6:F4:4C:45:25:1A:7C:EC:F3:9B:04:BB:82:0F:B3:06:D5:3D:5A Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584B8BE22403C6776B6B32E5D3C0 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/f800c6d8-1be5-3d97-a5c7-e9434771ad19.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 54878 IP address blocks: 173.249.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:24:03:c6:77:6b:6b:32:e5:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=efa04600-49ee-43bf-9001-e6ba1851cb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f9:91:5f:97:cb:36:c1:ed:bc:b7:01:1f:83: ec:a1:53:c7:01:78:7c:10:d0:3d:90:58:26:a5:5e: 1a:24:bd:60:a0:dc:44:69:62:b1:2d:59:87:56:b0: b3:7f:c3:27:72:e8:4a:d4:56:5a:45:a0:73:26:dd: 01:61:12:86:f6:24:46:7b:8c:82:61:de:9a:ca:f5: 47:a7:17:94:e0:ec:71:38:f1:fc:62:d9:d2:d4:d2: db:32:87:1d:8d:bb:81:ab:ab:df:81:74:05:d0:03: 86:f7:57:bc:60:94:5e:b5:79:cf:6f:c9:74:f7:e6: 98:5d:ae:20:bd:85:0e:9c:b3:58:7c:47:46:e9:08: 51:d5:7e:1a:04:16:58:b1:54:5c:74:d5:24:19:db: df:8f:e4:66:cf:9c:c2:a5:f7:69:5b:71:6e:46:0e: 78:52:76:58:f4:f8:17:d0:99:29:67:f4:6f:b7:ca: d1:69:05:7a:bb:52:b2:59:63:27:ce:70:06:b5:e4: e8:19:f7:7f:7b:5a:7c:b9:d1:86:45:76:65:d4:20: 5e:c7:5a:38:cd:9d:5f:87:47:58:76:cc:9e:2a:54: 44:8c:49:f7:ac:71:d6:04:a4:00:80:ed:0b:af:70: 9e:45:7a:82:db:5f:e8:88:cc:4c:5b:f1:52:42:3c: fa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E6:F4:4C:45:25:1A:7C:EC:F3:9B:04:BB:82:0F:B3:06:D5:3D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/f800c6d8-1be5-3d97-a5c7-e9434771ad19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 173.249.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:8c:4c:1f:f3:fb:e6:1a:e4:e9:63:33:48:c5:8d:a5:93:cc: 99:41:bb:a2:d8:e4:e6:f8:92:fd:a9:17:47:c4:7d:42:51:e9: 10:62:a6:d7:bd:8f:9b:eb:58:f9:21:bd:da:ab:ef:11:f6:4b: 8e:82:cf:d3:0a:12:16:4c:32:da:f6:8d:ff:7b:b8:cc:bc:29: b5:66:33:7b:ef:33:ac:67:e2:d3:d0:8c:77:8b:2b:9f:bc:05: 50:9a:d3:a4:09:8a:63:fb:7c:ff:bd:11:a3:ec:ba:ea:6b:3c: 5b:be:d8:0a:bc:de:db:d0:f2:01:b1:3c:2c:af:76:72:1e:bc: a8:f2:82:38:e6:6f:06:03:f1:0b:d6:ef:2a:e7:27:28:71:46: 22:ae:ec:93:e1:e8:60:d7:ce:46:6b:98:af:cb:8e:05:a2:a3: 2c:c7:c7:d8:83:75:d7:13:a5:af:7f:3e:c7:6a:72:67:43:5e: aa:64:d5:a2:44:e5:d8:24:48:7c:ed:d1:26:88:b9:15:66:e6: 82:ea:c1:00:0e:40:34:ab:36:6e:ef:a5:83:87:00:02:4f:8e: a9:a3:f3:17:78:b9:59:a3:cc:e7:e1:b4:39:bc:31:be:70:27: dd:e9:30:bb:20:99:5f:6d:e0:f8:b2:df:81:2e:51:33:e1:d0: 84:de:bf:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4iQDxndrazLl08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ZWZhMDQ2MDAtNDllZS00M2JmLTkwMDEtZTZiYTE4NTFjYjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfmRX5fLNsHtvLcBH4PsoVPHAXh8ENA9kFgm pV4aJL1goNxEaWKxLVmHVrCzf8MncuhK1FZaRaBzJt0BYRKG9iRGe4yCYd6ayvVH pxeU4OxxOPH8YtnS1NLbMocdjbuBq6vfgXQF0AOG91e8YJRetXnPb8l09+aYXa4g vYUOnLNYfEdG6QhR1X4aBBZYsVRcdNUkGdvfj+Rmz5zCpfdpW3FuRg54UnZY9PgX 0JkpZ/Rvt8rRaQV6u1KyWWMnznAGteToGfd/e1p8udGGRXZl1CBex1o4zZ1fh0dY dsyeKlREjEn3rHHWBKQAgO0Lr3CeRXqC21/oiMxMW/FSQjz67wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbm9ExFJRp87PObBLuCD7MG1T1aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvZjgwMGM2ZDgtMWJlNS0z ZDk3LWE1YzctZTk0MzQ3NzFhZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArflGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuMTB/z++Ya5OljM0jFjaWTzJlBu6LY5Ob4kv2pF0fEfUJR6RBipte9 j5vrWPkhvdqr7xH2S46Cz9MKEhZMMtr2jf97uMy8KbVmM3vvM6xn4tPQjHeLK5+8 BVCa06QJimP7fP+9EaPsuuprPFu+2Aq83tvQ8gGxPCyvdnIevKjygjjmbwYD8QvW 7yrnJyhxRiKu7JPh6GDXzkZrmK/LjgWioyzHx9iDddcTpa9/PsdqcmdDXqpk1aJE 5dgkSHzt0SaIuRVm5oLqwQAOQDSrNm7vpYOHAAJPjqmj8xd4uVmjzOfhtDm8Mb5w J93pMLsgmV9t4Piy34EuUTPh0ITev6M= -----END CERTIFICATE-----Generated at Tue Oct 21 02:31:22 2025 by rpki-client