$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e3aa021b-4de7-3417-b140-22db633a4c46.roa File: e3aa021b-4de7-3417-b140-22db633a4c46.roa (raw, json) Hash identifier: n8s3sBW+0NSOPSaaCkRlfV8cWXOrkua6qwPqzINjNAQ= Subject key identifier: 66:20:4A:A9:62:8F:17:48:EB:84:7B:BE:E2:96:28:1A:11:F5:82:38 Certificate issuer: /CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee Certificate serial: 010D0C9F4328584B3F1C60438C55C5E60E069250 Authority key identifier: EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e3aa021b-4de7-3417-b140-22db633a4c46.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 18540 IP address blocks: 170.62.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:60:43:8c:55:c5:e6:0e:06:92:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=cc7f2409-fa17-4dac-bdff-e2f4b293efd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4a:a7:0e:f5:98:3e:96:d5:a3:78:1e:db:7f: f7:d9:7c:35:1c:7f:3c:56:60:2e:fb:c7:30:b4:a4: 29:0b:87:5b:68:d5:8f:3a:aa:4e:3a:1e:7b:79:49: 12:f1:24:3e:2c:e7:b6:68:9d:e1:b6:5d:42:45:1d: 50:70:d8:37:70:df:84:01:53:06:b2:48:08:8a:96: 79:57:58:11:2c:1c:22:8c:b5:75:02:1c:04:31:1f: bc:7c:ba:9e:da:53:6a:6c:86:f1:6f:23:04:6e:ef: 58:38:47:81:cc:0f:2c:94:da:5e:83:83:cb:80:8e: 8e:ea:5f:a7:ee:19:a8:24:43:d0:4a:fa:a3:17:f4: 19:7a:48:7f:99:a3:d5:38:99:d8:72:66:5f:5c:00: 01:92:fa:ba:42:eb:02:51:f6:ac:c1:ee:d1:9f:45: 2a:26:cc:79:f0:bb:d9:a7:9a:84:07:22:57:2c:05: 8b:bd:e0:1c:5a:1f:1d:f0:26:e3:c0:d8:15:3a:d8: e7:b0:e3:cb:5d:8e:05:97:92:01:34:68:a3:12:ef: d4:09:64:99:fd:e6:cd:66:77:c9:df:f4:79:8e:fa: b3:f2:1e:d4:84:9f:ec:9a:e0:53:cb:85:6e:cb:ca: dc:db:e6:33:62:5a:08:3e:51:88:5d:28:6d:bf:22: 60:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:20:4A:A9:62:8F:17:48:EB:84:7B:BE:E2:96:28:1A:11:F5:82:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e3aa021b-4de7-3417-b140-22db633a4c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl X509v3 Authority Key Identifier: keyid:EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer sbgp-ipAddrBlock: critical IPv4: 170.62.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:3a:06:5e:2e:e3:a8:a7:17:98:f4:45:c2:52:9e:ed:11:f5: 64:2c:87:0e:27:8b:bc:5b:73:eb:e2:75:1e:d5:3a:36:5c:82: a3:84:68:33:9c:0d:a9:4c:3d:e5:3c:ac:30:bb:30:1e:4f:e9: 59:fa:4c:5e:8d:c4:3b:32:ac:c4:b5:19:00:ea:b3:b6:3f:58: c3:c4:d2:fd:ea:03:07:da:78:a8:e7:e2:84:54:c2:cf:3e:a3: 11:72:f8:07:06:4f:7c:6a:6d:7e:ca:e1:7a:bb:66:d6:60:ca: 14:04:f4:eb:d1:ad:39:7e:f4:62:b4:35:47:3d:6d:d5:97:3e: 6e:c8:92:24:73:a3:c2:83:73:de:64:91:87:b8:1d:0d:21:84: 45:10:15:cf:b2:dc:2c:7a:95:4d:49:4f:27:9b:6e:4d:c8:83: e4:5e:74:aa:20:9a:b7:9e:df:04:a3:31:8a:32:d0:cd:02:6a: 78:00:37:63:f8:67:98:2a:38:7a:f0:ae:66:68:24:85:ea:7a: 75:a5:9b:8a:f9:37:fd:d9:ac:e8:01:62:e3:70:70:71:d1:c1: a7:83:b1:bf:d7:b7:fc:36:8f:5e:c0:50:2a:45:15:44:7d:6e: a9:79:02:f8:3c:b6:02:7b:4c:1a:32:62:f5:d3:1d:15:8f:bf: e4:8a:72:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HGBDjFXF5g4GklAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QwMDE5OGYtYTUzMC00OTBjLThlZjUtNWMzMWFjOWI4 OGVlMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk Y2M3ZjI0MDktZmExNy00ZGFjLWJkZmYtZTJmNGIyOTNlZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kqnDvWYPpbVo3ge23/32Xw1HH88VmAu+8cw tKQpC4dbaNWPOqpOOh57eUkS8SQ+LOe2aJ3htl1CRR1QcNg3cN+EAVMGskgIipZ5 V1gRLBwijLV1AhwEMR+8fLqe2lNqbIbxbyMEbu9YOEeBzA8slNpeg4PLgI6O6l+n 7hmoJEPQSvqjF/QZekh/maPVOJnYcmZfXAABkvq6QusCUfaswe7Rn0UqJsx58LvZ p5qEByJXLAWLveAcWh8d8CbjwNgVOtjnsOPLXY4Fl5IBNGijEu/UCWSZ/ebNZnfJ 3/R5jvqz8h7UhJ/smuBTy4Vuy8rc2+YzYloIPlGIXShtvyJg8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYgSqlijxdI64R7vuKWKBoR9YI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDAw MTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMxYWM5Yjg4ZWUvZTNhYTAyMWItNGRlNy0z NDE3LWIxNDAtMjJkYjYzM2E0YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2QwMDE5OGYtYTUzMC00OTBjLThl ZjUtNWMzMWFjOWI4OGVlL2NkMDAxOThmLWE1MzAtNDkwYy04ZWY1LTVjMzFhYzli ODhlZS5jcmwwHwYDVR0jBBgwFoAU7rLnVBdOMcl6DRXlckVdZx3zkr8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDAwMTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMx YWM5Yjg4ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk6Bl4u46inF5j0RcJSnu0R9WQshw4ni7xbc+vidR7VOjZcgqOEaDOc DalMPeU8rDC7MB5P6Vn6TF6NxDsyrMS1GQDqs7Y/WMPE0v3qAwfaeKjn4oRUws8+ oxFy+AcGT3xqbX7K4Xq7ZtZgyhQE9OvRrTl+9GK0NUc9bdWXPm7IkiRzo8KDc95k kYe4HQ0hhEUQFc+y3Cx6lU1JTyebbk3Ig+RedKogmree3wSjMYoy0M0CangAN2P4 Z5gqOHrwrmZoJIXqenWlm4r5N/3ZrOgBYuNwcHHRwaeDsb/Xt/w2j17AUCpFFUR9 bql5Avg8tgJ7TBoyYvXTHRWPv+SKcrk= -----END CERTIFICATE-----Generated at Sat Oct 11 02:59:10 2025 by rpki-client