$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/033f4d74-040b-38f6-8fdb-ba5b80f75c68.roa File: 033f4d74-040b-38f6-8fdb-ba5b80f75c68.roa (raw, json) Hash identifier: 5fkn6zHJbNrm737n8VXgaXcmnRaHpMLz4eUTqIJH7jU= Subject key identifier: 24:4C:27:E4:9E:3D:F1:E4:5C:4F:73:A4:5C:7C:41:55:57:03:ED:36 Certificate issuer: /CN=cb49febe-7885-4a3a-8290-3710b3f34905 Certificate serial: 010D0C9F4328584BB5C25389449EFD497E96D340 Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/033f4d74-040b-38f6-8fdb-ba5b80f75c68.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 376 IP address blocks: 206.167.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:53:89:44:9e:fd:49:7e:96:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=b2b5b21a-b907-47b3-bc9b-483180c2551e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:b4:12:91:50:ba:f6:e3:27:6e:f7:43:89: e4:73:62:aa:5d:04:af:44:94:33:c7:df:8e:9b:5c: 16:c7:5e:b9:cd:b8:e4:57:cb:45:50:f3:4b:da:42: 33:0a:23:f3:98:ef:31:81:ad:0e:0e:60:a2:63:77: c8:a1:59:2f:ff:ef:7c:f7:a2:f2:b3:f7:dd:ea:35: 5c:c5:cf:8d:13:e9:6e:25:f5:93:37:bc:1b:2d:cc: 4b:d1:16:30:fc:30:40:b6:4f:3c:67:89:0e:25:65: 3f:73:4a:cf:7d:64:1b:f3:f9:5a:3c:57:c2:31:a5: df:a3:55:97:47:51:72:b4:d5:a2:33:07:d6:4b:a3: 1b:47:c5:22:c1:eb:12:9c:c9:dc:fa:34:0d:03:1a: af:3b:62:b8:bf:65:d9:d8:b3:03:1e:4c:89:3c:37: 91:06:2e:67:6c:c0:fb:29:13:86:63:ac:ec:ff:17: 64:c9:1a:a5:ca:6f:47:8b:c4:51:30:1e:fb:80:96: 06:5e:12:1b:37:da:0c:38:aa:c2:de:d0:bb:49:05: f9:0a:a0:e5:c7:83:bd:f7:e5:dc:66:64:c9:6d:12: 65:0f:58:89:7a:c2:41:d5:fd:61:e3:2e:5e:b8:ba: cd:4c:eb:52:26:4b:9f:94:87:47:c6:d7:ef:0a:56: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4C:27:E4:9E:3D:F1:E4:5C:4F:73:A4:5C:7C:41:55:57:03:ED:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/033f4d74-040b-38f6-8fdb-ba5b80f75c68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl X509v3 Authority Key Identifier: keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer sbgp-ipAddrBlock: critical IPv4: 206.167.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:4c:f3:e7:68:a2:53:59:0c:1b:57:90:ca:a1:49:26:d3:92: c0:ba:bf:b0:d7:8a:a1:da:e7:31:29:ec:2a:de:21:46:67:ec: dd:fd:2f:70:be:6c:9b:e0:bb:4a:d1:3c:bd:89:d3:6c:79:5c: 9e:17:0f:b0:3c:2b:f5:57:f7:74:15:35:b0:2e:7f:47:e9:1e: b6:b4:09:48:7c:23:43:d2:cc:97:84:e8:0d:e1:b3:35:ee:25: 50:3b:bb:76:98:05:71:23:c9:fd:58:f0:73:a4:c2:7d:4b:c1: 98:68:00:1d:97:57:d0:c1:b6:59:c8:dd:7f:68:04:66:9e:83: 8f:51:a5:f5:eb:02:52:d6:f6:30:2d:c2:4f:bc:38:84:29:08: 68:7f:be:02:2e:f4:cf:61:75:df:1b:ef:cb:b1:2b:6f:c5:10: 5a:65:1a:51:f0:42:4f:00:d3:42:46:f3:5b:bf:4f:c0:ef:6e: 15:da:8b:6b:60:ce:e6:da:ac:1d:f6:cf:f8:7f:6e:ae:91:18: 07:bf:d5:7d:9a:82:cb:b1:66:36:93:b1:89:41:f2:64:a9:af: 67:19:f4:df:16:f8:a9:ea:5b:59:49:dc:89:6d:2a:e7:f2:f5: 6e:d9:fc:2a:3b:d1:5e:15:19:27:6b:28:b0:70:91:06:47:cd: aa:b1:81:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wlOJRJ79SX6W00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OWZlYmUtNzg4NS00YTNhLTgyOTAtMzcxMGIzZjM0 OTA1MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk YjJiNWIyMWEtYjkwNy00N2IzLWJjOWItNDgzMTgwYzI1NTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymG0EpFQuvbjJ273Q4nkc2KqXQSvRJQzx9+O m1wWx165zbjkV8tFUPNL2kIzCiPzmO8xga0ODmCiY3fIoVkv/+9896Lys/fd6jVc xc+NE+luJfWTN7wbLcxL0RYw/DBAtk88Z4kOJWU/c0rPfWQb8/laPFfCMaXfo1WX R1FytNWiMwfWS6MbR8UiwesSnMnc+jQNAxqvO2K4v2XZ2LMDHkyJPDeRBi5nbMD7 KROGY6zs/xdkyRqlym9Hi8RRMB77gJYGXhIbN9oMOKrC3tC7SQX5CqDlx4O99+Xc ZmTJbRJlD1iJesJB1f1h4y5euLrNTOtSJkuflIdHxtfvClYK6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRMJ+SePfHkXE9zpFx8QVVXA+02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5 ZmViZS03ODg1LTRhM2EtODI5MC0zNzEwYjNmMzQ5MDUvMDMzZjRkNzQtMDQwYi0z OGY2LThmZGItYmE1YjgwZjc1YzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2I0OWZlYmUtNzg4NS00YTNhLTgy OTAtMzcxMGIzZjM0OTA1L2NiNDlmZWJlLTc4ODUtNGEzYS04MjkwLTM3MTBiM2Yz NDkwNS5jcmwwHwYDVR0jBBgwFoAUvOGzZkw5m0aMDRmG67KX3JfQGd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5ZmViZS03ODg1LTRhM2EtODI5MC0zNzEw YjNmMzQ5MDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBM8+doolNZDBtXkMqhSSbTksC6v7DXiqHa5zEp7CreIUZn7N39L3C+ bJvgu0rRPL2J02x5XJ4XD7A8K/VX93QVNbAuf0fpHra0CUh8I0PSzJeE6A3hszXu JVA7u3aYBXEjyf1Y8HOkwn1LwZhoAB2XV9DBtlnI3X9oBGaeg49RpfXrAlLW9jAt wk+8OIQpCGh/vgIu9M9hdd8b78uxK2/FEFplGlHwQk8A00JG81u/T8DvbhXai2tg zubarB32z/h/bq6RGAe/1X2agsuxZjaTsYlB8mSpr2cZ9N8W+KnqW1lJ3IltKufy 9W7Z/Co70V4VGSdrKLBwkQZHzaqxgfY= -----END CERTIFICATE-----Generated at Mon Nov 3 14:29:39 2025 by rpki-client