$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa File: 20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa (raw, json) Hash identifier: A/6bjfHfumAR+D28prSFT5DCDAccfLdJrL2iVnWsA0k= Subject key identifier: C9:75:23:BC:96:38:FF:DD:8B:AA:68:C7:E8:D3:82:90:EE:D6:87:27 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B970CED8D913EF81204D1C700 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 32181 IP address blocks: 98.159.224.0/24 maxlen: 24 173.239.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ed:8d:91:3e:f8:12:04:d1:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=0556c432-73f8-4a4f-888b-43b33a0798c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:15:b5:90:a7:0f:f8:4e:bb:5c:e3:52:3f: 0c:e2:8d:c9:99:d0:56:15:75:12:a7:c9:1b:e5:87: f5:a3:93:92:c6:80:0d:a4:8e:8d:ef:79:09:98:72: 08:1d:1e:6d:17:d5:d4:f4:b6:23:54:ac:53:39:49: d6:6f:ec:71:e4:6b:09:7a:39:17:ff:ad:f9:07:42: c3:c1:26:4a:2b:88:8e:87:c0:29:08:40:67:bc:1f: 0f:13:10:98:ed:bf:b9:5b:dd:c0:8c:7b:de:28:de: 11:3b:2d:1b:fb:32:9e:5b:d1:25:e6:93:22:9e:06: 2d:6e:d1:78:a0:9f:38:e6:da:ed:6b:80:85:0c:78: a1:15:29:48:54:36:d1:1b:8b:e8:80:1e:07:e0:ec: 72:eb:82:69:a5:4d:09:92:c7:fd:d5:90:4e:0a:fc: c8:e4:5b:4a:1b:a6:09:21:41:7d:9c:56:fb:40:78: e9:7a:e9:42:1d:84:49:bc:61:1d:73:4b:74:10:19: 50:0a:7b:95:af:93:ad:a1:cc:6a:fd:7a:fd:20:67: 8c:dc:2c:70:86:a5:46:9d:61:f1:54:65:d0:ec:a6: 02:87:9a:f3:7c:f7:f5:52:6f:8e:5e:8a:99:b0:b4: 27:12:53:48:9d:cf:32:5c:f3:b1:c3:bc:d3:03:9c: ca:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:75:23:BC:96:38:FF:DD:8B:AA:68:C7:E8:D3:82:90:EE:D6:87:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 98.159.224.0/24 173.239.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:09:db:31:4e:b5:27:81:cf:74:f8:38:aa:36:66:e5:49:e6: 4c:1e:26:10:8e:34:da:1c:83:d5:02:aa:a7:13:97:c4:cb:49: c2:4e:50:f2:36:73:60:3b:3d:57:dd:60:e4:e2:36:db:5e:43: 5f:7e:b9:71:ec:ba:62:49:8c:ec:2e:f1:7b:5d:f1:d0:2d:46: 95:4c:0e:b7:dd:5d:10:be:f0:7a:f0:17:2d:72:72:da:98:f7: ed:08:ce:11:21:0a:30:f7:9f:c3:78:81:7c:89:f8:29:ac:9b: df:d0:29:f0:d2:61:b6:9b:1b:54:56:92:d2:3e:a9:7a:a1:18: 6d:1c:60:1e:4a:7f:8c:f4:64:ce:60:e9:5f:44:97:74:da:6e: d0:27:17:ba:94:29:e1:da:ec:5e:48:5b:3c:10:3e:20:70:d8: e9:27:7f:29:f6:d2:bf:e4:e2:5c:1f:02:ba:2f:8b:d2:4f:79: f7:5d:1c:93:ea:93:e5:f9:ac:38:32:a3:b6:52:fe:ed:da:37: c4:d4:05:93:05:2c:98:06:f9:d3:84:74:1b:33:31:1b:b7:ba: 3f:83:2c:8f:c5:5a:d3:83:da:69:3f:19:83:53:26:6b:38:bd: 11:cf:69:79:36:7e:bb:b0:13:a0:56:a6:9d:9a:33:ee:81:19: a4:c0:4a:d0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuXDO2NkT74EgTRxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MDU1NmM0MzItNzNmOC00YTRmLTg4OGItNDNiMzNhMDc5OGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqcVtZCnD/hOu1zjUj8M4o3JmdBWFXUSp8kb 5Yf1o5OSxoANpI6N73kJmHIIHR5tF9XU9LYjVKxTOUnWb+xx5GsJejkX/635B0LD wSZKK4iOh8ApCEBnvB8PExCY7b+5W93AjHveKN4ROy0b+zKeW9El5pMingYtbtF4 oJ845trta4CFDHihFSlIVDbRG4vogB4H4Oxy64JppU0Jksf91ZBOCvzI5FtKG6YJ IUF9nFb7QHjpeulCHYRJvGEdc0t0EBlQCnuVr5Otocxq/Xr9IGeM3CxwhqVGnWHx VGXQ7KYCh5rzfPf1Um+OXoqZsLQnElNInc8yXPOxw7zTA5zKYQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMl1I7yWOP/di6pox+jTgpDu1ocnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMjBjZjY2NWEtMGI5OS0z ZTJhLTg4NzgtNTZmYjdlOGQ0MDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAYp/gAwQA re/MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACkJ2zFOtSeBz3T4OKo2ZuVJ5kweJhCONNocg9UCqqcTl8TL ScJOUPI2c2A7PVfdYOTiNtteQ19+uXHsumJJjOwu8Xtd8dAtRpVMDrfdXRC+8Hrw Fy1yctqY9+0IzhEhCjD3n8N4gXyJ+Cmsm9/QKfDSYbabG1RWktI+qXqhGG0cYB5K f4z0ZM5g6V9El3TabtAnF7qUKeHa7F5IWzwQPiBw2Oknfyn20r/k4lwfArovi9JP efddHJPqk+X5rDgyo7ZS/u3aN8TUBZMFLJgG+dOEdBszMRu3uj+DLI/FWtOD2mk/ GYNTJms4vRHPaXk2fruwE6BWpp2aM+6BGaTAStA= -----END CERTIFICATE-----Generated at Wed Nov 5 00:47:32 2025 by rpki-client