$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa File: 834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa (raw, json) Hash identifier: Fb5rTRzjUSlNCoIx0XhqVDNpbBaQWKt9dLv/1ivEpYw= Subject key identifier: C8:D5:A2:32:E8:58:2B:5C:CC:D0:97:FE:0C:12:5D:7C:33:6B:B2:C0 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584BA9308A677F05C39C01CDFEB0 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa Signing time: Mon 27 Oct 2025 12:57:07 +0000 ROA not before: Mon 27 Oct 2025 12:57:07 +0000 ROA not after: Sun 25 Jan 2026 13:57:07 +0000 asID: 21433 IP address blocks: 170.248.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:30:8a:67:7f:05:c3:9c:01:cd:fe:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Oct 27 12:57:07 2025 GMT Not After : Jan 25 13:57:07 2026 GMT Subject: CN=c6f8e237-67d0-42f5-94c3-1d6579a689d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:33:e8:71:75:a4:ce:a1:f7:fa:e5:fa:a3:1a: b4:40:86:e8:00:0b:c3:31:2c:75:2c:41:54:1f:d1: 17:5e:31:01:be:c9:c1:56:1f:85:2a:3a:0d:1b:7e: 40:ad:cb:40:d9:c1:b5:a3:af:4b:63:01:09:94:9a: dc:60:c6:13:02:12:73:c8:ec:0b:6b:09:a3:14:d6: b6:b8:90:81:d0:61:72:6d:e8:d4:7e:83:66:a4:a4: 6c:60:0b:cd:eb:93:b6:e3:64:c7:2f:e4:fd:25:42: b9:90:68:a5:47:c8:9b:15:c4:27:6f:45:62:1b:6c: 8a:f1:ef:98:6e:d6:fe:5d:53:23:24:25:13:b3:db: b7:d2:aa:17:e1:ff:32:ad:9b:29:c4:17:a3:54:fa: c9:db:8e:57:8a:24:c1:ba:bc:97:e9:71:e3:42:8f: a9:f8:51:0b:8a:f6:a0:c4:f0:49:77:f2:34:6a:18: 85:c0:71:2a:09:ec:81:c5:47:c5:4b:07:4a:6e:b8: 2e:74:98:e7:3c:6f:98:68:91:56:69:43:23:69:9f: 46:cd:87:df:6e:d5:3f:18:ed:cb:d3:db:58:f8:72: 8f:57:78:71:ff:fe:d1:53:41:f5:ef:4a:06:d6:a2: 09:c3:e1:bf:86:a1:dc:90:0b:58:1b:88:4a:07:6b: fe:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D5:A2:32:E8:58:2B:5C:CC:D0:97:FE:0C:12:5D:7C:33:6B:B2:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d0:36:fd:c3:ef:48:3c:f9:d3:0a:d9:d1:ae:07:bd:f6:2f: 07:a3:29:ff:9c:c2:03:d0:45:28:65:d8:1c:18:34:3b:d8:6a: fe:46:c5:63:6d:ca:c9:40:f0:f7:34:cf:4c:b4:95:36:89:b4: e7:93:dc:4f:e4:c5:7f:df:8b:4f:b7:a4:43:3e:be:b9:ab:b9: 66:8f:c5:bf:d0:5e:8c:5c:13:8a:75:d5:16:01:92:89:57:13: ba:eb:7a:dc:73:bb:fc:0e:4a:ba:b5:01:ec:ab:2f:98:cc:11: d8:17:f7:66:88:76:32:59:b6:bc:89:56:ba:db:55:c7:f4:05: 0a:f9:94:f5:28:b6:28:b3:81:12:8b:c9:a9:91:c7:3d:4f:c8: 09:f1:b5:4b:87:c4:40:42:98:44:c5:2f:2e:e7:ec:59:e2:34: 08:61:24:bd:71:df:26:0b:10:b0:0e:41:e9:03:44:9a:e4:3b: c0:f4:92:6f:a5:51:9b:aa:77:c8:36:e4:38:8d:78:95:04:ef: f8:12:b7:9c:be:e1:30:7e:ce:b1:a0:d2:ef:15:aa:92:40:37: 5a:b0:67:c5:ad:f3:11:cf:7d:da:fe:ac:40:7b:44:1f:02:76: c5:d7:49:0d:8f:75:54:cb:ea:5b:23:06:eb:7c:66:27:ed:da: d2:dd:e6:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMIpnfwXDnAHN/rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI1MTAyNzEyNTcwN1oXDTI2MDEyNTEzNTcwN1owLzEtMCsGA1UEAxMk YzZmOGUyMzctNjdkMC00MmY1LTk0YzMtMWQ2NTc5YTY4OWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDPocXWkzqH3+uX6oxq0QIboAAvDMSx1LEFU H9EXXjEBvsnBVh+FKjoNG35ArctA2cG1o69LYwEJlJrcYMYTAhJzyOwLawmjFNa2 uJCB0GFybejUfoNmpKRsYAvN65O242THL+T9JUK5kGilR8ibFcQnb0ViG2yK8e+Y btb+XVMjJCUTs9u30qoX4f8yrZspxBejVPrJ245XiiTBuryX6XHjQo+p+FELivag xPBJd/I0ahiFwHEqCeyBxUfFSwdKbrgudJjnPG+YaJFWaUMjaZ9GzYffbtU/GO3L 09tY+HKPV3hx//7RU0H170oG1qIJw+G/hqHckAtYG4hKB2v+zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjVojLoWCtczNCX/gwSXXwza7LAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvODM0ZjliNDUtMDAwZC0z ODljLWIzNTktMGE1YjBlM2Y1Y2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqvjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALQNv3D70g8+dMK2dGuB732LwejKf+cwgPQRShl2BwYNDvYav5GxWNt yslA8Pc0z0y0lTaJtOeT3E/kxX/fi0+3pEM+vrmruWaPxb/QXoxcE4p11RYBkolX E7rretxzu/wOSrq1AeyrL5jMEdgX92aIdjJZtryJVrrbVcf0BQr5lPUotiizgRKL yamRxz1PyAnxtUuHxEBCmETFLy7n7FniNAhhJL1x3yYLELAOQekDRJrkO8D0km+l UZuqd8g25DiNeJUE7/gSt5y+4TB+zrGg0u8VqpJAN1qwZ8Wt8xHPfdr+rEB7RB8C dsXXSQ2PdVTL6lsjBut8Zift2tLd5ss= -----END CERTIFICATE-----Generated at Wed Nov 5 03:35:22 2025 by rpki-client