$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/33330f62-f621-30ef-aec0-b2d8fe0dc591.roa File: 33330f62-f621-30ef-aec0-b2d8fe0dc591.roa (raw, json) Hash identifier: QaLMOKFgUf/IPmoT16WbMNuMUmMQJZwkRLZ/Yt89Nq0= Subject key identifier: AE:6E:94:C6:80:36:5C:5D:41:D9:33:2E:7C:2B:09:B4:9D:59:DE:81 Certificate issuer: /CN=31671c23-3278-409b-837d-7dfe69606940 Certificate serial: 010D0C9F4328584BAD6251AC0CC181433FC51210 Authority key identifier: 67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/33330f62-f621-30ef-aec0-b2d8fe0dc591.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 170.62.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:51:ac:0c:c1:81:43:3f:c5:12:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31671c23-3278-409b-837d-7dfe69606940 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=8728e07c-a38d-4999-9d1e-139918735bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:03:12:84:b7:4d:7c:b6:ae:74:66:54:ee:4c: 7b:4a:26:42:9b:a5:4c:46:34:4c:2d:b0:fd:bb:a9: 88:5b:d1:11:3b:81:8d:a6:ed:da:eb:3b:5f:ee:d1: bf:58:16:ad:82:80:66:23:c2:d4:b4:9a:74:35:87: 8b:52:6b:74:12:10:45:9f:61:7e:01:e6:c9:7b:e8: 4e:56:62:9d:29:cd:b6:c0:7b:95:8d:f3:f5:58:eb: 6f:bc:bf:a8:77:81:ed:ea:a0:f7:24:28:8d:b7:dd: c1:cf:5c:9b:a0:30:29:43:bc:98:d6:83:ba:83:12: ea:04:60:b3:31:35:7a:d7:2d:1b:d3:67:7e:57:33: bc:69:70:55:d5:52:23:be:c5:ee:75:6c:5d:c4:2d: a7:be:65:69:c6:e3:85:4d:01:4a:1e:52:db:7f:a8: e7:d9:fa:37:3b:db:73:ef:bf:49:09:85:d8:fd:d1: 80:2f:66:03:8f:b5:c6:46:83:10:5c:2a:30:5b:97: 95:c4:c2:16:b9:6f:1c:40:8a:a1:31:ec:40:3f:dc: cc:ee:c8:9b:1b:cf:c4:0a:86:37:b2:59:69:41:64: d5:7f:8a:7f:6e:3a:ce:21:0b:01:63:98:cc:e3:24: 01:2a:25:cb:09:4c:03:a4:ab:64:01:f1:f7:b2:e4: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6E:94:C6:80:36:5C:5D:41:D9:33:2E:7C:2B:09:B4:9D:59:DE:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/33330f62-f621-30ef-aec0-b2d8fe0dc591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl X509v3 Authority Key Identifier: keyid:67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer sbgp-ipAddrBlock: critical IPv4: 170.62.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:5b:80:34:08:c7:ca:51:00:9b:f7:00:64:c7:c1:79:1d:07: 7b:e0:b3:9c:e8:d8:cd:64:35:97:df:89:c4:90:32:ed:f6:b0: b6:09:37:42:90:35:63:81:4d:19:f8:21:72:d1:99:3c:60:b4: a8:80:f0:b7:90:9b:2d:3d:1c:ce:4d:39:1e:f7:78:88:1d:79: b5:5d:e9:7a:2f:4e:44:34:df:ec:55:75:04:b6:cb:3a:13:8d: 95:ed:cc:5c:47:84:d8:36:bf:5b:a0:be:c3:b9:25:8f:c9:92: 15:55:b7:3a:e4:81:6d:e4:c4:dd:f7:ae:cf:25:2d:1a:93:33: 3c:f1:70:d9:e3:2e:60:22:b6:5f:75:a2:c4:ce:fc:22:4f:8f: ab:ca:e8:23:c1:cf:70:5c:a6:ce:9f:38:cc:87:53:2c:7e:74: cd:13:cb:84:36:92:f2:12:3a:64:1a:d1:b9:fa:30:02:83:b2: b2:9d:a8:fe:60:e1:50:31:fc:9e:18:6d:3d:eb:71:cd:84:95: 75:ec:7a:7e:32:ef:02:a6:ac:61:4d:84:92:3e:94:6e:8b:28: 71:97:1d:d2:a6:04:ea:d8:26:d3:25:e3:c6:df:03:8f:b7:4e: bd:b5:c9:ba:7a:5f:cb:91:38:44:29:7a:e5:ab:e6:57:1d:80: 25:ed:9b:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYlGsDMGBQz/FEhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE2NzFjMjMtMzI3OC00MDliLTgzN2QtN2RmZTY5NjA2 OTQwMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ODcyOGUwN2MtYTM4ZC00OTk5LTlkMWUtMTM5OTE4NzM1YmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgMShLdNfLaudGZU7kx7SiZCm6VMRjRMLbD9 u6mIW9ERO4GNpu3a6ztf7tG/WBatgoBmI8LUtJp0NYeLUmt0EhBFn2F+AebJe+hO VmKdKc22wHuVjfP1WOtvvL+od4Ht6qD3JCiNt93Bz1yboDApQ7yY1oO6gxLqBGCz MTV61y0b02d+VzO8aXBV1VIjvsXudWxdxC2nvmVpxuOFTQFKHlLbf6jn2fo3O9tz 779JCYXY/dGAL2YDj7XGRoMQXCowW5eVxMIWuW8cQIqhMexAP9zM7sibG8/ECoY3 sllpQWTVf4p/bjrOIQsBY5jM4yQBKiXLCUwDpKtkAfH3suSnuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5ulMaANlxdQdkzLnwrCbSdWd6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMTY3 MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZlNjk2MDY5NDAvMzMzMzBmNjItZjYyMS0z MGVmLWFlYzAtYjJkOGZlMGRjNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzE2NzFjMjMtMzI3OC00MDliLTgz N2QtN2RmZTY5NjA2OTQwLzMxNjcxYzIzLTMyNzgtNDA5Yi04MzdkLTdkZmU2OTYw Njk0MC5jcmwwHwYDVR0jBBgwFoAUZxYj4GdaMB9RUq8/Ry/8J86NPxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zMTY3MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZl Njk2MDY5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj4qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpbgDQIx8pRAJv3AGTHwXkdB3vgs5zo2M1kNZfficSQMu32sLYJN0KQ NWOBTRn4IXLRmTxgtKiA8LeQmy09HM5NOR73eIgdebVd6XovTkQ03+xVdQS2yzoT jZXtzFxHhNg2v1ugvsO5JY/JkhVVtzrkgW3kxN33rs8lLRqTMzzxcNnjLmAitl91 osTO/CJPj6vK6CPBz3Bcps6fOMyHUyx+dM0Ty4Q2kvISOmQa0bn6MAKDsrKdqP5g 4VAx/J4YbT3rcc2ElXXsen4y7wKmrGFNhJI+lG6LKHGXHdKmBOrYJtMl48bfA4+3 Tr21ybp6X8uROEQpeuWr5lcdgCXtmyY= -----END CERTIFICATE-----Generated at Mon Nov 3 08:34:48 2025 by rpki-client