$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/d614f553-ef0e-317b-958d-60d296bb2f4c.roa File: d614f553-ef0e-317b-958d-60d296bb2f4c.roa (raw, json) Hash identifier: rEf+WqPGOihplcsv5iBsWvXVmRz7IszyPJMTkqlzntM= Subject key identifier: 6E:71:54:09:DB:D6:B2:E7:D9:38:20:EE:D1:71:33:80:74:3C:45:1F Certificate issuer: /CN=31671c23-3278-409b-837d-7dfe69606940 Certificate serial: 010D0C9F4328584BAD6251999E3FA5B160410610 Authority key identifier: 67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/d614f553-ef0e-317b-958d-60d296bb2f4c.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 170.62.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:51:99:9e:3f:a5:b1:60:41:06:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31671c23-3278-409b-837d-7dfe69606940 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=9c6755d9-4b8f-4aa3-920a-a2e52e1fce8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f7:1f:23:1e:c1:12:85:a9:6b:02:f4:3c:0c: ec:97:7e:f2:5b:8e:9d:92:93:2b:eb:b1:d2:1d:68: 50:94:2a:c1:c3:7c:4e:bc:87:9e:e6:30:e7:fb:e7: 8c:76:bc:f1:17:4f:be:be:a7:30:64:d6:8f:ca:76: ec:3b:7e:9d:75:49:69:0e:ae:67:b7:be:a2:dd:2b: e4:53:04:0e:c2:34:4b:e5:34:74:5b:21:07:5c:07: 40:42:b3:63:7b:47:1c:c4:53:09:06:11:5d:62:66: bb:4f:47:4f:30:64:2f:de:a8:88:e9:ad:8f:dc:a7: 41:8a:c9:46:57:30:37:ab:ed:c1:8d:54:7e:b8:3e: 86:77:5c:71:5b:7c:02:78:80:1f:c5:2b:c1:17:71: bc:68:e0:e4:fa:06:a2:db:1f:21:83:b2:b8:6f:97: 50:ba:7f:ae:f3:39:42:3b:c0:9b:1e:f7:8a:ed:15: 2d:ad:1e:ef:a1:e4:86:e7:f0:f1:e7:5e:ad:36:10: 18:c7:de:4f:32:e5:16:71:f7:40:5c:c0:ac:1f:02: 95:be:ce:b3:0a:16:6c:ca:f9:56:3c:73:5e:cc:25: 3a:16:55:ac:e3:d1:b3:84:50:36:5e:da:51:19:ba: 76:b2:c6:b9:24:8f:21:f9:11:39:d0:10:1e:84:75: f4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:71:54:09:DB:D6:B2:E7:D9:38:20:EE:D1:71:33:80:74:3C:45:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/d614f553-ef0e-317b-958d-60d296bb2f4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl X509v3 Authority Key Identifier: keyid:67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer sbgp-ipAddrBlock: critical IPv4: 170.62.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:2a:bf:da:dd:ff:99:19:81:e4:11:30:4b:6c:50:c3:6a:1d: 2a:31:bd:9b:00:97:1a:d6:31:df:f3:d8:aa:21:8c:47:bf:66: 7e:fc:0a:ac:b0:2a:6f:9f:93:33:b5:95:1f:e3:11:82:1b:f9: 79:e7:07:9d:93:fb:d5:00:bc:03:95:5c:1b:72:fe:22:c7:d6: 7c:dd:7e:a1:28:4c:1a:b2:06:11:b0:30:48:4f:a7:8f:63:1b: 54:cd:6c:21:c5:0f:d2:55:11:43:11:63:27:cb:da:fc:1c:f8: 26:66:18:1e:1e:55:b1:89:a0:16:c0:f1:83:0d:40:70:3f:9e: 8f:2b:21:fb:84:5e:54:55:2e:60:8a:03:c8:40:97:10:01:6d: f5:63:74:b8:cd:90:0c:dc:18:dc:2b:25:53:0c:76:ec:e7:ed: 50:b2:a3:fd:ef:67:33:51:62:f3:76:bf:5a:ef:f2:53:06:76: cf:87:84:13:4c:9a:e3:6b:fd:d3:d8:8e:49:39:dd:52:21:55: b2:d4:98:d6:f6:98:3d:4b:db:39:60:d4:14:68:5b:a1:c5:73: b4:81:f1:92:74:0b:61:c5:3b:c3:14:38:69:4c:64:85:bc:55: 83:0a:c4:fc:90:f6:19:db:31:30:68:3a:77:b7:2c:fe:9e:e9: 3a:14:5b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYlGZnj+lsWBBBhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE2NzFjMjMtMzI3OC00MDliLTgzN2QtN2RmZTY5NjA2 OTQwMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk OWM2NzU1ZDktNGI4Zi00YWEzLTkyMGEtYTJlNTJlMWZjZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPcfIx7BEoWpawL0PAzsl37yW46dkpMr67HS HWhQlCrBw3xOvIee5jDn++eMdrzxF0++vqcwZNaPynbsO36ddUlpDq5nt76i3Svk UwQOwjRL5TR0WyEHXAdAQrNje0ccxFMJBhFdYma7T0dPMGQv3qiI6a2P3KdBislG VzA3q+3BjVR+uD6Gd1xxW3wCeIAfxSvBF3G8aODk+gai2x8hg7K4b5dQun+u8zlC O8CbHveK7RUtrR7voeSG5/Dx516tNhAYx95PMuUWcfdAXMCsHwKVvs6zChZsyvlW PHNezCU6FlWs49GzhFA2XtpRGbp2ssa5JI8h+RE50BAehHX0EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5xVAnb1rLn2Tgg7tFxM4B0PEUfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMTY3 MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZlNjk2MDY5NDAvZDYxNGY1NTMtZWYwZS0z MTdiLTk1OGQtNjBkMjk2YmIyZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzE2NzFjMjMtMzI3OC00MDliLTgz N2QtN2RmZTY5NjA2OTQwLzMxNjcxYzIzLTMyNzgtNDA5Yi04MzdkLTdkZmU2OTYw Njk0MC5jcmwwHwYDVR0jBBgwFoAUZxYj4GdaMB9RUq8/Ry/8J86NPxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zMTY3MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZl Njk2MDY5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj4qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMqv9rd/5kZgeQRMEtsUMNqHSoxvZsAlxrWMd/z2KohjEe/Zn78Cqyw Km+fkzO1lR/jEYIb+XnnB52T+9UAvAOVXBty/iLH1nzdfqEoTBqyBhGwMEhPp49j G1TNbCHFD9JVEUMRYyfL2vwc+CZmGB4eVbGJoBbA8YMNQHA/no8rIfuEXlRVLmCK A8hAlxABbfVjdLjNkAzcGNwrJVMMduzn7VCyo/3vZzNRYvN2v1rv8lMGds+HhBNM muNr/dPYjkk53VIhVbLUmNb2mD1L2zlg1BRoW6HFc7SB8ZJ0C2HFO8MUOGlMZIW8 VYMKxPyQ9hnbMTBoOne3LP6e6ToUW8s= -----END CERTIFICATE-----Generated at Mon Nov 3 08:34:47 2025 by rpki-client