$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa File: 70876b56-c403-3345-8194-f6fcf917a625.roa (raw, json) Hash identifier: /H6CGKzHbIteQMvkqcsLovRVQzSoZvvCe05EIrmHpZE= Subject key identifier: 38:5F:45:34:AB:9A:45:92:70:4E:2F:06:EE:46:D1:3E:BB:C5:A6:95 Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F4328584BB2F7A6863EB04492F22467D0 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 22115 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a6:86:3e:b0:44:92:f2:24:67:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=9dfeef0b-8a7a-4cff-b3c6-db5973c18f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7a:0f:fd:4c:45:ce:20:1e:84:22:cf:6b:99: 42:c8:6d:cf:3d:73:c9:55:3b:b1:01:17:74:92:9a: eb:f5:8c:77:94:02:45:d6:74:1f:81:b1:9e:76:7d: 4d:c4:77:44:a7:3d:f9:e1:64:70:65:56:58:dc:6a: 6e:33:67:a5:64:4d:3c:f1:ef:7e:49:89:fe:b9:7f: 6c:2a:81:10:54:42:d9:be:9a:95:83:74:8a:d4:ca: 13:fd:c9:82:0d:c2:52:c8:28:8b:94:a5:58:14:43: 03:81:a6:d3:75:9a:ce:89:75:e1:67:2d:6b:78:76: a6:be:06:7e:7a:59:db:4c:d9:f1:f5:ce:91:47:42: 57:14:01:b4:9f:aa:ce:7f:29:a3:95:68:db:8b:9e: d8:6e:48:70:af:76:71:67:60:f6:1d:65:53:aa:1b: f8:fe:55:df:47:5c:4d:64:fe:fb:da:00:0f:69:e4: 38:0e:50:56:21:e0:5f:35:60:be:a8:e8:a3:2a:8a: b5:11:3a:30:d3:61:28:32:71:bc:ad:df:33:44:fd: 6f:e0:95:ae:f1:72:52:1d:ed:b6:8a:2e:e1:38:cd: 5a:5c:19:7d:ac:3b:10:b9:51:e5:76:4c:ed:80:97: 27:fc:dc:35:3d:01:56:18:cb:87:07:43:ce:2d:46: f3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5F:45:34:AB:9A:45:92:70:4E:2F:06:EE:46:D1:3E:BB:C5:A6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5c:44:2f:a4:df:aa:fb:a6:64:ab:88:81:35:07:47:20:0b: e4:96:fa:4d:3e:58:67:a7:84:0e:35:9b:00:20:78:97:19:34: fd:8f:ca:32:78:a3:d2:fd:1d:05:6c:15:87:5c:36:7b:f2:e6: 24:87:22:0f:d6:e0:73:33:a2:f9:4f:c7:bd:b7:1b:83:16:5e: 67:9e:4e:20:0f:16:43:75:16:d2:3e:ea:fc:8d:da:cc:c7:56: 88:c1:2d:aa:fe:09:65:47:80:12:8e:ca:01:e9:cc:91:74:46: c6:e3:1a:8f:a4:b9:d5:28:69:15:1f:10:42:a5:fe:ae:6e:c7: 0d:be:2a:68:ca:5a:96:98:bd:93:66:08:5e:14:1c:2c:9e:10: a6:5b:95:13:62:f7:e7:85:f1:70:6f:37:7c:f5:5b:17:29:a7: 4d:ce:fd:05:37:3c:0b:11:89:86:4d:0f:fe:9b:a3:2f:7e:8e: 65:af:77:5a:a4:1d:48:44:60:ba:8d:eb:1c:b9:ee:19:cc:e1: e3:fb:ff:29:66:bd:26:39:b0:9e:86:3d:93:88:09:f2:c6:e8: a7:52:2b:60:c2:67:e8:ac:f2:58:ab:42:72:f7:f8:b5:33:fd: 6e:9d:39:d6:d6:16:31:6a:65:7b:2c:90:a7:47:a2:c4:97:09: 91:d0:e2:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96aGPrBEkvIkZ9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OWRmZWVmMGItOGE3YS00Y2ZmLWIzYzYtZGI1OTczYzE4ZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3oP/UxFziAehCLPa5lCyG3PPXPJVTuxARd0 kprr9Yx3lAJF1nQfgbGedn1NxHdEpz354WRwZVZY3GpuM2elZE088e9+SYn+uX9s KoEQVELZvpqVg3SK1MoT/cmCDcJSyCiLlKVYFEMDgabTdZrOiXXhZy1reHamvgZ+ elnbTNnx9c6RR0JXFAG0n6rOfymjlWjbi57Ybkhwr3ZxZ2D2HWVTqhv4/lXfR1xN ZP772gAPaeQ4DlBWIeBfNWC+qOijKoq1ETow02EoMnG8rd8zRP1v4JWu8XJSHe22 ii7hOM1aXBl9rDsQuVHldkztgJcn/Nw1PQFWGMuHB0POLUbz0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhfRTSrmkWScE4vBu5G0T67xaaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvNzA4NzZiNTYtYzQwMy0z MzQ1LTgxOTQtZjZmY2Y5MTdhNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVcRC+k36r7pmSriIE1B0cgC+SW+k0+WGenhA41mwAgeJcZNP2PyjJ4 o9L9HQVsFYdcNnvy5iSHIg/W4HMzovlPx723G4MWXmeeTiAPFkN1FtI+6vyN2szH VojBLar+CWVHgBKOygHpzJF0RsbjGo+kudUoaRUfEEKl/q5uxw2+KmjKWpaYvZNm CF4UHCyeEKZblRNi9+eF8XBvN3z1Wxcpp03O/QU3PAsRiYZND/6boy9+jmWvd1qk HUhEYLqN6xy57hnM4eP7/ylmvSY5sJ6GPZOICfLG6KdSK2DCZ+is8lirQnL3+LUz /W6dOdbWFjFqZXsskKdHosSXCZHQ4vE= -----END CERTIFICATE-----Generated at Tue Nov 4 09:30:04 2025 by rpki-client