$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/2eedcae8-232d-3b4e-9a2d-1bf50f9b333a.roa File: 2eedcae8-232d-3b4e-9a2d-1bf50f9b333a.roa (raw, json) Hash identifier: UPD6XeTrUxVFMhWzZtf7gYsr29xZHINdHKsfXMp3Pq4= Subject key identifier: 51:AB:DD:25:CC:8C:7B:77:B4:8A:90:39:4C:B9:1E:07:F5:11:44:59 Certificate issuer: /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Certificate serial: 010D0C9F4328584B970CE7CA81EF7137D443C3C0 Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/2eedcae8-232d-3b4e-9a2d-1bf50f9b333a.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 6360 IP address blocks: 128.171.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e7:ca:81:ef:71:37:d4:43:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=87410aca-8e8a-4b3b-97bd-8e803ec4fd09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:61:86:ba:39:79:f4:b4:52:00:0e:1f:9d:cb: 08:6e:42:46:91:fa:6d:d2:90:cf:e6:11:f5:b8:e8: c4:81:05:ed:f2:b9:04:f3:80:ce:bd:45:67:2c:82: 5e:5a:48:f7:8d:8e:cf:3d:94:74:15:8b:77:c9:fe: c5:4d:a9:62:70:fd:8b:e9:f3:36:9c:8c:ef:ca:74: 79:90:51:4c:1b:74:23:8e:1d:9e:40:b8:d3:e4:57: 8e:a4:66:c4:3d:41:20:38:63:4d:30:33:6b:66:29: 8e:80:cb:1f:06:7b:97:d6:78:2d:ff:ac:dd:b5:0d: 60:b3:1e:9f:f0:19:dd:10:0a:09:bf:2c:4d:41:04: bc:5a:be:d3:5d:d8:57:42:21:72:f0:48:b5:66:8b: 54:8d:14:86:a7:7f:18:49:68:8f:77:35:09:d2:d3: 7b:25:4a:82:d7:43:58:0e:11:6c:b9:b6:7a:18:d8: c2:26:83:89:08:25:8c:ec:18:70:72:20:c3:ab:cf: 1a:65:e2:c4:dc:c6:6d:b7:09:bc:ae:2c:ee:af:c3: b6:c8:9f:d3:d6:fe:dd:15:03:3b:36:66:6d:55:83: 98:f8:8a:4e:7d:10:13:a9:6b:43:fd:d0:fa:54:d7: 50:6e:2f:dd:99:18:a1:e4:53:06:16:a3:8e:27:c7: 63:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AB:DD:25:CC:8C:7B:77:B4:8A:90:39:4C:B9:1E:07:F5:11:44:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/2eedcae8-232d-3b4e-9a2d-1bf50f9b333a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl X509v3 Authority Key Identifier: keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer sbgp-ipAddrBlock: critical IPv4: 128.171.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b3:d3:87:11:f5:80:1e:06:72:8a:93:15:f7:a5:f1:e6:8b: a1:a3:01:1f:f5:a7:ee:82:a2:6b:c4:a4:be:e5:77:58:b4:7f: 84:fb:85:39:12:6b:2e:f7:e7:de:68:01:aa:81:b3:52:51:55: b6:58:50:03:22:df:74:75:5b:f5:2f:bf:bd:50:40:03:59:83: 9a:a2:04:27:18:ce:09:24:44:3a:b0:0c:4a:37:8f:53:c4:c8: b6:b5:69:6b:26:ac:44:83:24:44:5d:ee:62:a8:22:23:79:10: 43:1e:aa:89:16:08:63:95:35:ae:3f:4c:eb:68:8c:56:07:37: 18:05:6e:3d:fc:7a:2b:06:df:12:7d:4f:4b:2a:fd:f1:52:7a: f3:ad:88:c6:7d:4b:a6:dd:67:cf:ce:d3:04:b6:2c:5e:e8:e2: 44:95:c7:b4:c6:a0:99:51:c6:a6:51:03:ea:3e:40:70:31:df: 20:56:df:c0:22:39:07:64:21:95:b3:16:38:4c:15:53:4b:64: bc:42:d1:37:89:c1:16:30:3e:91:57:ff:26:18:7d:65:24:7b: 78:17:97:88:a6:ca:b6:c5:7d:45:14:1f:cc:be:5e:45:e7:b3: 77:ca:b8:56:60:3f:35:38:90:20:ee:b7:32:3f:e8:b3:cc:fd: 93:1b:5a:42 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuXDOfKge9xN9RDw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAxYzQ2NGQtOWQyMC00NmExLTg1OGItYzM2YzhjMWEz Nzc2MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ODc0MTBhY2EtOGU4YS00YjNiLTk3YmQtOGU4MDNlYzRmZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWGGujl59LRSAA4fncsIbkJGkfpt0pDP5hH1 uOjEgQXt8rkE84DOvUVnLIJeWkj3jY7PPZR0FYt3yf7FTalicP2L6fM2nIzvynR5 kFFMG3Qjjh2eQLjT5FeOpGbEPUEgOGNNMDNrZimOgMsfBnuX1ngt/6zdtQ1gsx6f 8BndEAoJvyxNQQS8Wr7TXdhXQiFy8Ei1ZotUjRSGp38YSWiPdzUJ0tN7JUqC10NY DhFsubZ6GNjCJoOJCCWM7BhwciDDq88aZeLE3MZttwm8rizur8O2yJ/T1v7dFQM7 NmZtVYOY+IpOfRATqWtD/dD6VNdQbi/dmRih5FMGFqOOJ8djTQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFGr3SXMjHt3tIqQOUy5Hgf1EURZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFj NDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMxYTM3NzYvMmVlZGNhZTgtMjMyZC0z YjRlLTlhMmQtMWJmNTBmOWIzMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxYzQ2NGQtOWQyMC00NmExLTg1 OGItYzM2YzhjMWEzNzc2L2EwMWM0NjRkLTlkMjAtNDZhMS04NThiLWMzNmM4YzFh Mzc3Ni5jcmwwHwYDVR0jBBgwFoAUQo2GNS7VIXZWdKOP4reK/APen14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZj OGMxYTM3NzYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgKswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAmbPThxH1gB4GcoqTFfel8eaLoaMBH/Wn7oKia8SkvuV3WLR/hPuFORJr Lvfn3mgBqoGzUlFVtlhQAyLfdHVb9S+/vVBAA1mDmqIEJxjOCSREOrAMSjePU8TI trVpayasRIMkRF3uYqgiI3kQQx6qiRYIY5U1rj9M62iMVgc3GAVuPfx6KwbfEn1P Syr98VJ6862Ixn1Lpt1nz87TBLYsXujiRJXHtMagmVHGplED6j5AcDHfIFbfwCI5 B2QhlbMWOEwVU0tkvELRN4nBFjA+kVf/Jhh9ZSR7eBeXiKbKtsV9RRQfzL5eReez d8q4VmA/NTiQIO63Mj/os8z9kxtaQg== -----END CERTIFICATE-----Generated at Tue Nov 4 09:41:49 2025 by rpki-client