$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b681d5f7-8589-3579-b73d-94d9991c87f2.roa File: b681d5f7-8589-3579-b73d-94d9991c87f2.roa (raw, json) Hash identifier: 9I+4lzFf8iMXUuv5V3UEoAuYfZzUc8PQBi44XDpfMyQ= Subject key identifier: 70:D9:14:4E:FF:A9:46:9A:CC:C0:C0:A5:AC:3C:58:ED:A5:1E:BF:6C Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584B823FBB2CF9B47565875DED80 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b681d5f7-8589-3579-b73d-94d9991c87f2.roa Signing time: Mon 13 Oct 2025 14:11:12 +0000 ROA not before: Mon 13 Oct 2025 14:11:12 +0000 ROA not after: Sun 11 Jan 2026 15:11:12 +0000 asID: 21433 IP address blocks: 170.252.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:3f:bb:2c:f9:b4:75:65:87:5d:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Oct 13 14:11:12 2025 GMT Not After : Jan 11 15:11:12 2026 GMT Subject: CN=627e8347-f400-4bb9-9440-c566ad9e905e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0c:1b:a5:f2:12:4f:42:60:80:79:ff:8c:44: 85:db:17:62:14:03:87:e4:32:9d:0c:20:96:30:7c: 59:92:dd:78:63:82:56:d6:55:9e:1a:c5:72:7c:09: 5d:83:81:11:fc:19:47:c3:45:20:b9:1c:7b:fb:e1: c9:a7:42:e9:8c:df:c7:44:b8:40:e7:e1:b8:47:c5: 0f:e7:f9:cb:30:b2:cc:b1:3f:7d:e2:d4:4d:7e:8c: 16:25:94:86:5b:08:1b:98:39:77:ca:93:03:00:12: 2c:06:0d:b5:93:11:64:7a:5e:8f:17:42:bb:09:d3: 7b:95:80:a1:4a:bd:20:79:49:d8:c9:71:be:f8:78: 53:09:eb:a7:66:b0:a7:b8:f8:d8:6a:cb:36:1e:53: e1:f3:e1:bd:89:d3:ad:78:ea:a2:c6:95:7c:a2:42: f9:4f:33:3f:90:91:cb:b7:31:95:26:83:74:c4:f6: fe:8d:47:06:de:dc:0a:f5:7a:87:21:39:f3:e1:80: f1:7e:03:af:cd:86:7e:cd:71:b0:65:09:ba:51:90: 06:b1:8c:d9:58:ae:71:e9:d2:ec:29:85:41:b4:0b: 2b:91:4d:c4:fc:35:5c:3b:ea:a6:c8:bd:56:3d:64: 6f:95:d4:67:d9:dc:1f:80:dc:47:d5:e8:4c:71:7d: 67:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D9:14:4E:FF:A9:46:9A:CC:C0:C0:A5:AC:3C:58:ED:A5:1E:BF:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b681d5f7-8589-3579-b73d-94d9991c87f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.252.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1d:26:48:60:39:94:ff:34:84:21:7e:cd:db:63:30:c3:f3: 70:a1:31:2f:e1:2b:e8:6b:30:f7:0e:10:59:11:01:e8:d6:5f: c3:5a:7e:00:01:3d:6a:08:2b:bc:48:21:82:d8:54:ab:cd:97: e5:ef:1c:71:7d:2c:02:0b:45:88:e6:86:f0:76:c1:62:d5:bb: 5b:69:45:ba:88:a6:27:b3:df:b3:ba:e2:69:ca:f5:1f:c7:d0: 34:57:cd:3e:0c:b7:c7:b5:c3:53:f1:5b:0b:82:c0:78:d2:07: 26:24:f2:ac:52:b5:94:64:a9:2e:58:2c:77:1e:36:fa:b4:46: b5:9e:3d:d0:a3:36:91:d8:28:84:26:10:74:70:a5:85:da:5e: 5f:fb:be:29:a3:90:00:ad:e7:2b:31:ca:2d:c0:0e:40:6c:ed: 46:1b:47:93:d2:e6:c1:31:59:29:3c:56:69:9e:ce:0c:11:89: a9:b8:23:59:1f:f5:5c:65:16:27:5e:42:f4:23:26:f3:a4:e1: aa:5e:44:2d:3d:8a:75:43:ee:d0:df:2f:11:86:bb:0b:c9:a7: ec:1f:6d:78:aa:4e:46:57:04:85:0e:dc:74:5c:b3:49:3e:3e: 94:7e:8c:4e:9c:c9:29:ce:cd:a1:9e:84:0a:31:08:3c:5a:fd: ae:43:43:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCP7ss+bR1ZYdd7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI1MTAxMzE0MTExMloXDTI2MDExMTE1MTExMlowLzEtMCsGA1UEAxMk NjI3ZTgzNDctZjQwMC00YmI5LTk0NDAtYzU2NmFkOWU5MDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAwbpfIST0JggHn/jESF2xdiFAOH5DKdDCCW MHxZkt14Y4JW1lWeGsVyfAldg4ER/BlHw0UguRx7++HJp0LpjN/HRLhA5+G4R8UP 5/nLMLLMsT994tRNfowWJZSGWwgbmDl3ypMDABIsBg21kxFkel6PF0K7CdN7lYCh Sr0geUnYyXG++HhTCeunZrCnuPjYass2HlPh8+G9idOteOqixpV8okL5TzM/kJHL tzGVJoN0xPb+jUcG3twK9XqHITnz4YDxfgOvzYZ+zXGwZQm6UZAGsYzZWK5x6dLs KYVBtAsrkU3E/DVcO+qmyL1WPWRvldRn2dwfgNxH1ehMcX1nhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDZFE7/qUaazMDApaw8WO2lHr9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvYjY4MWQ1ZjctODU4OS0z NTc5LWI3M2QtOTRkOTk5MWM4N2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFodJkhgOZT/NIQhfs3bYzDD83ChMS/hK+hrMPcOEFkRAejWX8NafgAB PWoIK7xIIYLYVKvNl+XvHHF9LAILRYjmhvB2wWLVu1tpRbqIpiez37O64mnK9R/H 0DRXzT4Mt8e1w1PxWwuCwHjSByYk8qxStZRkqS5YLHceNvq0RrWePdCjNpHYKIQm EHRwpYXaXl/7vimjkACt5ysxyi3ADkBs7UYbR5PS5sExWSk8VmmezgwRiam4I1kf 9VxlFideQvQjJvOk4apeRC09inVD7tDfLxGGuwvJp+wfbXiqTkZXBIUO3HRcs0k+ PpR+jE6cySnOzaGehAoxCDxa/a5DQ6Y= -----END CERTIFICATE-----Generated at Mon Oct 20 22:52:32 2025 by rpki-client