$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/6b8167ae-4d0e-365f-8b41-54201852e793.roa File: 6b8167ae-4d0e-365f-8b41-54201852e793.roa (raw, json) Hash identifier: zl1cZDzry8OTGvWYT0qHlH62gfEashj/RLBa4DYpgX8= Subject key identifier: 36:21:BA:83:B3:63:60:AC:E5:1F:92:8C:7E:49:64:33:F0:36:2D:0E Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584B9872447D25DF48CDDC488300 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/6b8167ae-4d0e-365f-8b41-54201852e793.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 170.225.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:44:7d:25:df:48:cd:dc:48:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=1a95bba0-8114-4e93-814c-028ff2da9211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:12:f6:a5:b9:a7:af:a8:b7:21:1f:0d:c9:07: 9d:57:92:9b:11:12:4e:14:24:af:ee:5a:ce:0f:e2: 6b:da:91:f9:88:0b:26:0d:94:38:81:1d:65:04:34: 70:d2:93:82:c2:97:e4:a1:14:e3:bb:0c:31:80:7d: bc:ad:37:1a:5e:09:b2:11:24:f6:8a:ea:5e:8c:3b: 18:c6:49:00:fd:1c:ab:0a:85:d0:7d:65:df:cf:55: 18:80:c0:07:e0:b5:2d:77:ee:a0:82:28:f9:de:5e: b3:28:f0:39:d9:4b:ce:97:99:6f:3f:29:42:8d:5b: 78:4c:b0:c5:3c:4b:35:67:f9:84:dc:98:7a:c1:25: 70:73:12:c5:d6:af:4f:c0:60:81:e8:e1:63:f5:07: 26:53:28:a4:22:9e:82:0b:0e:42:68:f4:7a:c4:81: cb:a8:cf:1d:a6:b3:3d:17:c2:1b:ef:6a:ad:6f:05: 93:96:75:ac:dc:70:96:0a:b4:af:9f:ff:92:25:cd: 3d:01:3a:df:9a:4c:41:54:66:27:4c:92:46:2a:90: 40:aa:99:c2:92:b0:7f:17:b5:e6:2f:72:75:73:d8: ec:7b:a1:b7:21:be:1e:29:a3:0a:70:03:4f:77:67: c8:56:68:99:12:b7:f4:c6:aa:cc:16:02:03:7b:1b: e4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:21:BA:83:B3:63:60:AC:E5:1F:92:8C:7E:49:64:33:F0:36:2D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/6b8167ae-4d0e-365f-8b41-54201852e793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:6f:70:30:4c:1a:84:1b:f8:23:d1:e1:7d:fd:a6:51:95:d7: 73:c6:2c:2a:70:20:7b:59:48:c0:1d:06:a4:6d:b4:24:ea:50: 5b:42:19:b7:8d:26:7d:57:9b:39:2d:c6:1e:98:3c:36:e1:1f: 1b:66:4b:db:18:f5:94:78:db:08:2b:b3:c2:69:1f:97:d7:1f: 2e:b7:9a:a0:bb:de:bd:25:c6:44:69:08:04:13:18:7c:1c:0a: 6f:a3:fe:a0:96:27:8f:8d:5e:38:52:74:52:d2:a2:cb:b0:07: a6:cf:93:04:2f:32:aa:45:75:a8:a7:ce:96:85:ea:b6:e3:3a: 1b:d1:0c:e2:c6:7c:bd:e0:ec:f5:94:33:b6:2b:a6:25:2d:3c: 5d:3e:c7:76:8c:24:90:51:fc:85:e4:86:ad:0e:4a:b8:ab:85: 34:c3:25:8f:26:55:12:95:4e:0c:01:7e:30:8a:c0:da:b6:66: 42:9f:15:54:a6:ea:ff:1a:08:60:bc:50:e5:28:a3:d6:6c:ec: 01:76:ed:08:53:fb:76:ae:46:77:5c:af:dc:16:e0:b4:25:b7: b3:86:e1:10:93:e6:88:0c:89:b7:83:da:68:24:a7:fe:c3:3b: f0:a3:70:4e:a2:fc:98:32:2f:ee:5c:77:2f:ea:c1:03:13:bf: 07:7c:1e:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckR9Jd9IzdxIgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MWE5NWJiYTAtODExNC00ZTkzLTgxNGMtMDI4ZmYyZGE5MjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxL2pbmnr6i3IR8NyQedV5KbERJOFCSv7lrO D+Jr2pH5iAsmDZQ4gR1lBDRw0pOCwpfkoRTjuwwxgH28rTcaXgmyEST2iupejDsY xkkA/RyrCoXQfWXfz1UYgMAH4LUtd+6ggij53l6zKPA52UvOl5lvPylCjVt4TLDF PEs1Z/mE3Jh6wSVwcxLF1q9PwGCB6OFj9QcmUyikIp6CCw5CaPR6xIHLqM8dprM9 F8Ib72qtbwWTlnWs3HCWCrSvn/+SJc09ATrfmkxBVGYnTJJGKpBAqpnCkrB/F7Xm L3J1c9jse6G3Ib4eKaMKcANPd2fIVmiZErf0xqrMFgIDexvkiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYhuoOzY2Cs5R+SjH5JZDPwNi0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNmI4MTY3YWUtNGQwZS0z NjVmLThiNDEtNTQyMDE4NTJlNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquFzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1vcDBMGoQb+CPR4X39plGV13PGLCpwIHtZSMAdBqRttCTqUFtCGbeN Jn1Xmzktxh6YPDbhHxtmS9sY9ZR42wgrs8JpH5fXHy63mqC73r0lxkRpCAQTGHwc Cm+j/qCWJ4+NXjhSdFLSosuwB6bPkwQvMqpFdainzpaF6rbjOhvRDOLGfL3g7PWU M7YrpiUtPF0+x3aMJJBR/IXkhq0OSrirhTTDJY8mVRKVTgwBfjCKwNq2ZkKfFVSm 6v8aCGC8UOUoo9Zs7AF27QhT+3auRndcr9wW4LQlt7OG4RCT5ogMibeD2mgkp/7D O/CjcE6i/JgyL+5cdy/qwQMTvwd8Hrk= -----END CERTIFICATE-----Generated at Wed Nov 5 17:50:52 2025 by rpki-client