$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a3af340a-151f-3e65-b202-a86ab76e7ddc.roa File: a3af340a-151f-3e65-b202-a86ab76e7ddc.roa (raw, json) Hash identifier: lCtplMfZ8+177BfgkhHm6YYUzvm9xZoK/JiCZvTuKZU= Subject key identifier: 37:B2:4F:FF:23:AB:21:22:A4:15:DF:FA:7E:FF:5C:7A:B6:F6:4A:DE Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584B6A61E193D2CCAD718324E080 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a3af340a-151f-3e65-b202-a86ab76e7ddc.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 16433 IP address blocks: 170.176.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:e1:93:d2:cc:ad:71:83:24:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=11cf5170-9f77-4e72-b7d3-bbd953943b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6b:2e:bb:ca:64:c3:dd:73:1f:66:d9:d7:fc: a7:ee:0f:ac:43:d9:2c:5f:6a:ef:10:5b:5e:f7:27: 11:89:76:04:97:b0:d3:01:89:06:ea:ef:1a:8a:43: 57:24:e1:7f:62:4c:9e:c6:84:df:71:d7:38:65:38: 65:0f:63:9a:83:5a:7d:40:d1:f9:de:05:d6:ba:f6: b0:ec:49:b0:df:d0:e3:1c:b5:02:6b:40:78:49:97: 8c:1a:f6:af:1d:7a:7e:37:56:98:b3:cc:6e:1f:9f: c6:3a:a6:9b:78:1c:32:52:67:8e:2a:f5:10:95:dd: 24:91:55:28:6a:0c:f0:6d:8b:e6:f8:17:b0:72:dc: 1a:2e:57:8d:e4:1b:a6:8c:57:b0:aa:ae:a2:1c:d2: 0d:3c:da:c2:02:5e:cd:cf:45:96:75:8f:aa:a1:c4: 89:7e:08:8e:6e:ad:da:c1:f0:e9:c2:41:05:f1:23: b5:71:0c:1c:a9:3f:e3:7e:d3:53:18:ce:93:11:a1: be:87:ec:f1:de:8e:fe:a7:e9:ee:9b:5f:57:40:88: 4a:ed:20:57:1e:63:e3:88:1e:72:c2:e7:e7:f6:ea: f5:c7:3a:fd:a5:58:e7:da:85:dc:f7:14:4d:3c:f7: f7:a1:00:7e:96:b5:dd:81:b9:95:82:31:8a:d2:d2: 5a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B2:4F:FF:23:AB:21:22:A4:15:DF:FA:7E:FF:5C:7A:B6:F6:4A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a3af340a-151f-3e65-b202-a86ab76e7ddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 170.176.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:68:bb:ed:81:cd:1d:f1:d4:8d:14:f6:85:9c:e2:3b:a3:de: c4:8e:6a:f6:4b:6f:a7:82:e7:2c:2a:3b:c4:f3:34:22:10:a4: 62:cb:ac:0f:40:b1:02:d0:96:01:c7:46:af:aa:9a:74:04:45: 04:4b:39:29:e5:91:f6:31:38:20:97:1f:2a:82:59:a4:98:14: 76:3e:92:05:98:90:60:ce:19:d4:17:23:21:7a:e6:68:14:04: 77:fe:34:00:7e:a6:36:7a:50:93:22:f1:7b:7e:62:77:74:a5: 5c:47:5b:11:1c:e6:21:0f:31:db:e0:87:e1:01:65:cc:7e:d4: 2a:1f:c7:28:6e:b7:4d:35:a0:b4:6b:5f:6b:b9:92:0f:86:3f: af:aa:96:e8:e9:13:17:87:88:01:80:fc:8b:33:6c:76:4f:f2: db:df:f8:6b:24:90:5c:31:4d:64:81:c2:35:00:1e:27:14:70: 0d:bb:56:15:0f:98:90:e4:44:d5:0c:a3:58:93:66:e5:a2:c0: 82:e3:68:f6:fb:7c:ee:c1:9d:7b:00:a6:e7:b4:e0:b2:d9:9d: 29:d1:98:4b:94:26:7f:1c:af:f1:aa:0f:2e:3d:7a:d2:a8:7a: 70:71:38:a2:05:d6:8c:ee:65:2f:a0:49:3d:9d:6b:a4:c6:55: 85:19:4f:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYeGT0sytcYMk4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MTFjZjUxNzAtOWY3Ny00ZTcyLWI3ZDMtYmJkOTUzOTQzYjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmsuu8pkw91zH2bZ1/yn7g+sQ9ksX2rvEFte 9ycRiXYEl7DTAYkG6u8aikNXJOF/YkyexoTfcdc4ZThlD2Oag1p9QNH53gXWuvaw 7Emw39DjHLUCa0B4SZeMGvavHXp+N1aYs8xuH5/GOqabeBwyUmeOKvUQld0kkVUo agzwbYvm+BewctwaLleN5BumjFewqq6iHNINPNrCAl7Nz0WWdY+qocSJfgiObq3a wfDpwkEF8SO1cQwcqT/jftNTGM6TEaG+h+zx3o7+p+num19XQIhK7SBXHmPjiB5y wufn9ur1xzr9pVjn2oXc9xRNPPf3oQB+lrXdgbmVgjGK0tJaNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeyT/8jqyEipBXf+n7/XHq29kreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvYTNhZjM0MGEtMTUxZi0z ZTY1LWIyMDItYTg2YWI3NmU3ZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqrD4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARou+2BzR3x1I0U9oWc4juj3sSOavZLb6eC5ywqO8TzNCIQpGLLrA9A sQLQlgHHRq+qmnQERQRLOSnlkfYxOCCXHyqCWaSYFHY+kgWYkGDOGdQXIyF65mgU BHf+NAB+pjZ6UJMi8Xt+Ynd0pVxHWxEc5iEPMdvgh+EBZcx+1Cofxyhut001oLRr X2u5kg+GP6+qlujpExeHiAGA/IszbHZP8tvf+GskkFwxTWSBwjUAHicUcA27VhUP mJDkRNUMo1iTZuWiwILjaPb7fO7BnXsApue04LLZnSnRmEuUJn8cr/GqDy49etKo enBxOKIF1ozuZS+gST2da6TGVYUZT98= -----END CERTIFICATE-----Generated at Sun Oct 19 00:58:34 2025 by rpki-client