$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0a6d902e-b68f-324b-862c-c6d4e9655731.roa File: 0a6d902e-b68f-324b-862c-c6d4e9655731.roa (raw, json) Hash identifier: WzW9fGDIhhlj9zfIEEkOA/urV2mjw7WuuLpH8IjqMy0= Subject key identifier: C9:76:F2:45:C4:F1:BB:44:1D:D5:CD:F4:46:96:68:0D:3F:A5:07:97 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584AF7EBD73C930D592F0B48D400 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0a6d902e-b68f-324b-862c-c6d4e9655731.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 16696 IP address blocks: 216.120.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d7:3c:93:0d:59:2f:0b:48:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=7fcd1523-aeb4-4197-9f2e-42faebc2d421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7c:ee:dc:c9:1f:94:a2:4f:ee:1c:2e:19:82: ee:c7:79:f6:6d:3d:5a:2e:9b:66:d5:1e:5b:7f:0e: cc:db:1e:c8:24:aa:c8:0c:e1:4d:7a:95:66:e2:5a: 10:12:0a:a2:c8:e3:3c:16:7a:49:a0:a8:4b:f8:e9: b7:0b:b7:7c:a8:4f:b1:38:b5:ad:4b:06:9b:fa:06: 0c:1e:d5:1a:ff:48:04:58:00:b3:87:ec:7d:a2:0e: 5d:b0:c0:70:95:b9:34:7a:97:0d:af:b2:84:6b:47: 22:cf:5c:26:f8:e4:2a:46:61:52:64:ea:8f:fa:0c: ce:05:c0:b1:20:cc:78:c2:0b:fd:fc:ec:1a:eb:4f: 8d:ab:0f:d6:18:0c:87:ff:b6:0e:3e:44:d3:a9:45: 2a:17:1b:5a:fc:d4:36:2b:77:52:9a:e5:99:16:20: b3:e7:f5:cb:ae:db:ac:0c:5b:36:4e:64:8c:e5:9b: ab:25:6f:9c:82:b6:cd:07:b2:12:47:22:50:87:04: 6e:23:b3:d8:fd:2e:81:a6:23:40:c9:0c:62:16:97: 52:41:23:da:a1:f1:28:d2:c8:98:5a:a8:77:4f:72: d0:9c:da:71:2f:63:e4:86:cd:b2:49:cf:60:ef:d6: 17:90:4b:b9:95:8b:d4:1b:56:92:a0:db:0f:93:04: 75:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:76:F2:45:C4:F1:BB:44:1D:D5:CD:F4:46:96:68:0D:3F:A5:07:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0a6d902e-b68f-324b-862c-c6d4e9655731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 216.120.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:55:4a:7f:5d:19:4a:3e:17:29:ac:20:45:d8:26:b6:34:d0: f7:c4:56:4d:82:19:2a:a6:99:00:e9:36:be:b0:5d:28:c4:f1: ce:18:e1:18:45:9c:ca:e1:86:02:36:da:de:7b:2f:2d:ee:c2: 55:f6:4b:1c:70:06:56:45:34:36:05:6a:56:92:0e:4d:e5:eb: 6d:27:5a:7b:45:03:3a:ec:7c:55:2d:ea:fa:19:fc:28:2a:09: c8:6a:94:e6:10:a0:7f:be:68:7f:9b:3e:c9:94:9e:19:06:b0: b7:41:7c:5b:59:c8:fe:48:46:1e:84:54:15:e0:f9:63:44:b1: 93:14:06:5d:22:3d:03:1d:2b:f0:43:89:cf:c5:6e:90:da:1f: 85:3d:e3:75:6a:91:de:17:63:ca:20:d8:5f:6c:00:b2:d1:59: cb:71:6a:85:74:f2:45:e0:80:23:71:1f:66:6c:88:f8:fb:ca: 8a:f1:30:98:a5:2a:f5:cf:6c:7e:0d:59:4e:69:f7:69:13:0d: 41:4e:cd:52:a1:9e:19:9a:da:77:2c:8e:bb:31:e1:c0:74:c8: ed:84:50:89:08:a6:8c:9f:31:8b:b6:48:aa:98:55:c9:b5:c4: c4:bd:94:ec:51:cf:54:e6:10:37:d7:2c:68:c8:3e:ee:00:58: 89:1d:df:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369c8kw1ZLwtI1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk N2ZjZDE1MjMtYWViNC00MTk3LTlmMmUtNDJmYWViYzJkNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHzu3MkflKJP7hwuGYLux3n2bT1aLptm1R5b fw7M2x7IJKrIDOFNepVm4loQEgqiyOM8FnpJoKhL+Om3C7d8qE+xOLWtSwab+gYM HtUa/0gEWACzh+x9og5dsMBwlbk0epcNr7KEa0ciz1wm+OQqRmFSZOqP+gzOBcCx IMx4wgv9/Owa60+Nqw/WGAyH/7YOPkTTqUUqFxta/NQ2K3dSmuWZFiCz5/XLrtus DFs2TmSM5ZurJW+cgrbNB7ISRyJQhwRuI7PY/S6BpiNAyQxiFpdSQSPaofEo0siY Wqh3T3LQnNpxL2Pkhs2ySc9g79YXkEu5lYvUG1aSoNsPkwR1gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMl28kXE8btEHdXN9EaWaA0/pQeXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMGE2ZDkwMmUtYjY4Zi0z MjRiLTg2MmMtYzZkNGU5NjU1NzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HiqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9VSn9dGUo+FymsIEXYJrY00PfEVk2CGSqmmQDpNr6wXSjE8c4Y4RhF nMrhhgI22t57Ly3uwlX2SxxwBlZFNDYFalaSDk3l620nWntFAzrsfFUt6voZ/Cgq CchqlOYQoH++aH+bPsmUnhkGsLdBfFtZyP5IRh6EVBXg+WNEsZMUBl0iPQMdK/BD ic/FbpDaH4U943Vqkd4XY8og2F9sALLRWctxaoV08kXggCNxH2ZsiPj7yorxMJil KvXPbH4NWU5p92kTDUFOzVKhnhma2ncsjrsx4cB0yO2EUIkIpoyfMYu2SKqYVcm1 xMS9lOxRz1TmEDfXLGjIPu4AWIkd3yk= -----END CERTIFICATE-----Generated at Mon Nov 3 08:45:39 2025 by rpki-client