$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa File: 96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa (raw, json) Hash identifier: 4DQ4KIKky6rmWTlVl22h4zn1Ca9R3dCewnh8FQxG9wk= Subject key identifier: 40:C6:B2:3E:BA:B0:8A:73:CB:BE:A6:25:81:B1:42:41:F1:94:5E:6F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B2A31BD4E190A8FC4A1A3B480 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa Signing time: Fri 12 Sep 2025 01:11:52 +0000 ROA not before: Fri 12 Sep 2025 01:11:52 +0000 ROA not after: Thu 11 Dec 2025 02:11:52 +0000 asID: 54253 IP address blocks: 170.52.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:31:bd:4e:19:0a:8f:c4:a1:a3:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 12 01:11:52 2025 GMT Not After : Dec 11 02:11:52 2025 GMT Subject: CN=5fd2be44-e8ea-4114-8a6c-c566219a7642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3d:e2:ca:3e:cc:8c:d7:79:a3:15:e3:c7:27: f5:ea:19:90:af:31:7b:f9:b6:0a:66:c9:60:a6:fa: e0:22:40:5e:e1:53:09:05:c5:57:08:16:23:28:57: a7:8d:e2:18:2e:71:6f:e7:37:27:c2:e5:e2:4d:a9: 23:b2:97:80:a6:0e:08:5e:af:67:02:fa:23:63:27: dc:31:5e:8d:29:0e:0d:cd:6d:fc:8e:98:0d:1f:8f: 35:c6:fc:1a:9e:f8:a1:8b:bd:4b:f5:a5:ff:49:a6: 1e:d0:31:09:1c:db:af:13:48:62:a1:78:c3:e9:55: 87:0c:c2:33:60:c8:b8:1c:84:e6:c5:4e:52:03:6a: ef:65:09:f2:97:97:5a:54:cc:8b:cc:5a:3f:3b:16: 67:c7:62:ba:3d:56:03:a7:08:25:08:d3:a1:f0:da: 49:af:3e:87:04:cc:f3:86:0a:e1:48:4a:ce:c2:97: f3:09:57:ea:64:22:77:de:ac:8c:ce:e4:97:be:62: e8:79:ca:17:03:97:3b:69:52:fb:d1:3f:97:46:3a: 84:fe:0c:f2:e0:12:1b:a8:5f:c5:cd:7d:a2:fc:ab: bc:2e:a9:85:0a:cc:42:68:ba:aa:9c:30:49:b9:cc: 2b:85:2b:ee:22:8d:59:e8:2a:73:06:eb:53:ad:e4: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C6:B2:3E:BA:B0:8A:73:CB:BE:A6:25:81:B1:42:41:F1:94:5E:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.52.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:b2:15:a5:b5:36:ff:12:f7:ab:40:ec:b3:27:43:75:64:2f: 12:89:b4:25:aa:85:20:62:7e:c5:a6:61:df:47:c3:65:40:a2: f4:8f:67:f7:52:0c:9c:a1:2a:f3:9e:89:43:6b:74:35:30:b0: ec:19:92:6d:15:ff:ef:bb:e2:60:7b:75:2c:54:a7:a3:f9:8b: 16:8b:9f:36:70:36:f6:f9:62:00:59:e1:eb:b3:37:87:9a:ad: d7:5e:fc:2e:fd:cc:27:d9:a0:3c:01:21:d7:03:34:02:08:97: e9:d2:88:75:d2:07:d4:06:4a:e6:dd:dd:8c:33:9b:df:27:84: af:20:2b:86:2f:8b:76:d8:e5:a3:e7:2e:fb:16:31:ef:23:6b: 69:46:20:d4:aa:71:65:a6:a6:e9:25:19:c4:a2:a4:2e:e3:d4: a8:45:6b:54:3f:f9:37:ad:2c:9f:94:a9:ae:34:16:f0:f1:90: c7:bf:a2:6f:38:59:d5:38:ce:a0:85:71:5d:cb:1c:c0:21:ea: 4f:58:0c:ec:b4:b7:32:fc:08:b5:f6:e6:b5:4b:43:47:6c:21: 5d:ee:2f:b7:91:c8:96:92:99:01:62:d2:c4:19:9b:b8:cc:a2: 6b:91:5c:69:7b:ff:21:a4:05:cb:9b:b1:d8:13:65:c7:b3:85: 66:7b:b5:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqMb1OGQqPxKGjtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMjAxMTE1MloXDTI1MTIxMTAyMTE1MlowLzEtMCsGA1UEAxMk NWZkMmJlNDQtZThlYS00MTE0LThhNmMtYzU2NjIxOWE3NjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD3iyj7MjNd5oxXjxyf16hmQrzF7+bYKZslg pvrgIkBe4VMJBcVXCBYjKFenjeIYLnFv5zcnwuXiTakjspeApg4IXq9nAvojYyfc MV6NKQ4NzW38jpgNH481xvwanvihi71L9aX/SaYe0DEJHNuvE0hioXjD6VWHDMIz YMi4HITmxU5SA2rvZQnyl5daVMyLzFo/OxZnx2K6PVYDpwglCNOh8NpJrz6HBMzz hgrhSErOwpfzCVfqZCJ33qyMzuSXvmLoecoXA5c7aVL70T+XRjqE/gzy4BIbqF/F zX2i/Ku8LqmFCsxCaLqqnDBJucwrhSvuIo1Z6CpzButTreRc6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDGsj66sIpzy76mJYGxQkHxlF5vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTYyMDViMWQtYjFjMy0z MGE2LWJlNzctZmQ2M2I2OGNhNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqjQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqyFaW1Nv8S96tA7LMnQ3VkLxKJtCWqhSBifsWmYd9Hw2VAovSPZ/dS DJyhKvOeiUNrdDUwsOwZkm0V/++74mB7dSxUp6P5ixaLnzZwNvb5YgBZ4euzN4ea rdde/C79zCfZoDwBIdcDNAIIl+nSiHXSB9QGSubd3Ywzm98nhK8gK4Yvi3bY5aPn LvsWMe8ja2lGINSqcWWmpuklGcSipC7j1KhFa1Q/+TetLJ+Uqa40FvDxkMe/om84 WdU4zqCFcV3LHMAh6k9YDOy0tzL8CLX25rVLQ0dsIV3uL7eRyJaSmQFi0sQZm7jM omuRXGl7/yGkBcubsdgTZcezhWZ7tSw= -----END CERTIFICATE-----Generated at Thu Oct 9 03:10:59 2025 by rpki-client