$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/98552e14-9210-3d85-af8d-5b4991935af3.roa File: 98552e14-9210-3d85-af8d-5b4991935af3.roa (raw, json) Hash identifier: 33of2J1BHFsWj50BxE7MEtQOl5BrfmwTqwHyBDaRuQ4= Subject key identifier: 45:67:FC:D9:7B:EA:90:E7:11:97:28:0B:D4:71:AC:7C:A1:BF:65:B6 Certificate issuer: /CN=ee6bee5d-23d5-44e1-9615-76f9de86f2dd Certificate serial: 010D0C9F4328584B110C11FEB65AC4A649A5C600 Authority key identifier: 52:51:B6:B9:53:49:BF:16:DC:4B:79:FB:8C:F9:F8:46:0E:8D:5A:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/98552e14-9210-3d85-af8d-5b4991935af3.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 400956 IP address blocks: 170.62.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:11:fe:b6:5a:c4:a6:49:a5:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee6bee5d-23d5-44e1-9615-76f9de86f2dd Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=bcdb98fd-50b5-448b-969a-7d60162b6e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:80:1f:c8:b4:c4:e7:56:30:39:4b:56:a7:83: 92:00:d4:fd:8e:88:0a:64:6d:50:d7:30:48:a0:4c: 11:22:90:6f:b2:e2:4c:55:63:a1:91:15:e5:c6:5b: 36:21:10:a4:a8:c5:69:d3:52:d4:1f:47:9d:f4:93: 1a:e2:c8:81:08:5b:9e:49:b7:60:a4:ec:ec:d8:55: 7a:69:f3:75:04:5e:27:57:80:83:55:56:b4:3b:e3: 53:5a:b9:97:f0:d9:bf:42:62:b8:8f:27:27:ce:73: 8a:f5:e1:8b:96:8c:0b:43:d7:83:93:04:67:56:1b: a7:ca:76:fb:f2:0b:2d:ce:9f:1d:a5:d0:a3:c1:6d: ed:52:cf:59:eb:51:d3:1b:02:25:f3:30:e5:fb:9c: 18:fa:22:97:53:fe:b7:1a:b0:e0:fe:f0:2a:09:89: e7:06:4a:71:2d:cb:56:4d:f8:15:89:a5:d6:7b:bf: 1c:6b:5b:79:a1:51:4c:d0:70:64:4e:ae:eb:eb:25: 0f:49:55:12:31:88:69:77:69:58:ec:68:3e:71:9f: c8:b6:93:ef:c2:64:5e:e9:8c:7e:3b:6d:b3:06:b2: 98:bf:3a:1f:b8:c2:5e:fa:61:85:93:40:e0:6b:2f: b8:7a:13:f8:86:d8:33:c7:05:0a:c6:ae:21:68:dc: d1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:67:FC:D9:7B:EA:90:E7:11:97:28:0B:D4:71:AC:7C:A1:BF:65:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/98552e14-9210-3d85-af8d-5b4991935af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.crl X509v3 Authority Key Identifier: keyid:52:51:B6:B9:53:49:BF:16:DC:4B:79:FB:8C:F9:F8:46:0E:8D:5A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer sbgp-ipAddrBlock: critical IPv4: 170.62.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a7:0a:a4:8c:b7:17:f3:ba:2f:5c:d1:fb:a2:79:23:91:d9: 85:d6:1d:f0:e9:b1:5a:04:ef:09:dd:6d:30:d5:dd:ed:43:65: 24:65:68:92:0f:f5:60:9c:c8:46:0d:d7:08:87:db:64:e0:16: 61:e2:28:e4:bf:d1:85:1b:f8:3d:e6:b8:ad:da:77:d8:cf:92: d5:fb:ed:11:1b:8b:31:39:4c:13:5b:11:6d:da:e8:6c:3c:00: e7:a9:90:ec:a9:f4:53:12:2b:05:23:0e:89:05:5e:d4:13:3d: 8a:97:e0:3e:83:78:81:35:a3:93:f9:7f:bd:00:cd:02:80:e9: 73:ff:11:71:7a:24:21:fa:67:a7:f9:52:37:a9:a2:82:a0:ad: 35:99:8f:ed:bf:34:17:8a:2f:ca:87:2f:0f:45:d8:0c:3a:6f: aa:1b:04:67:3b:5f:5e:dd:6e:10:34:a4:ad:0b:f4:53:c1:09: 1f:62:96:7e:78:af:55:f6:34:3b:11:e8:0b:04:f1:d6:17:c3: 8b:61:1b:62:3a:65:ca:23:71:be:f4:94:cb:2e:a7:5a:ca:fd: 12:fb:cb:71:6a:b6:3a:2b:bb:59:bf:38:9b:45:05:35:31:61: fc:50:8a:2b:66:69:e5:b2:11:42:a2:6e:e8:ab:54:3a:03:18: 94:6e:9b:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDBH+tlrEpkmlxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU2YmVlNWQtMjNkNS00NGUxLTk2MTUtNzZmOWRlODZm MmRkMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk YmNkYjk4ZmQtNTBiNS00NDhiLTk2OWEtN2Q2MDE2MmI2ZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooAfyLTE51YwOUtWp4OSANT9jogKZG1Q1zBI oEwRIpBvsuJMVWOhkRXlxls2IRCkqMVp01LUH0ed9JMa4siBCFueSbdgpOzs2FV6 afN1BF4nV4CDVVa0O+NTWrmX8Nm/QmK4jycnznOK9eGLlowLQ9eDkwRnVhunynb7 8gstzp8dpdCjwW3tUs9Z61HTGwIl8zDl+5wY+iKXU/63GrDg/vAqCYnnBkpxLctW TfgViaXWe78ca1t5oVFM0HBkTq7r6yUPSVUSMYhpd2lY7Gg+cZ/ItpPvwmRe6Yx+ O22zBrKYvzofuMJe+mGFk0Dgay+4ehP4htgzxwUKxq4haNzRZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVn/Nl76pDnEZcoC9RxrHyhv2W2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZTZi ZWU1ZC0yM2Q1LTQ0ZTEtOTYxNS03NmY5ZGU4NmYyZGQvOTg1NTJlMTQtOTIxMC0z ZDg1LWFmOGQtNWI0OTkxOTM1YWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWU2YmVlNWQtMjNkNS00NGUxLTk2 MTUtNzZmOWRlODZmMmRkL2VlNmJlZTVkLTIzZDUtNDRlMS05NjE1LTc2ZjlkZTg2 ZjJkZC5jcmwwHwYDVR0jBBgwFoAUUlG2uVNJvxbcS3n7jPn4Rg6NWuUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZTZiZWU1ZC0yM2Q1LTQ0ZTEtOTYxNS03NmY5 ZGU4NmYyZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj55MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmnCqSMtxfzui9c0fuieSOR2YXWHfDpsVoE7wndbTDV3e1DZSRlaJIP 9WCcyEYN1wiH22TgFmHiKOS/0YUb+D3muK3ad9jPktX77REbizE5TBNbEW3a6Gw8 AOepkOyp9FMSKwUjDokFXtQTPYqX4D6DeIE1o5P5f70AzQKA6XP/EXF6JCH6Z6f5 UjepooKgrTWZj+2/NBeKL8qHLw9F2Aw6b6obBGc7X17dbhA0pK0L9FPBCR9iln54 r1X2NDsR6AsE8dYXw4thG2I6Zcojcb70lMsup1rK/RL7y3Fqtjoru1m/OJtFBTUx YfxQiitmaeWyEUKibuirVDoDGJRumxc= -----END CERTIFICATE-----Generated at Sat Oct 11 07:46:28 2025 by rpki-client