$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa File: e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa (raw, json) Hash identifier: Tx05IUr31n0lVQj2cukdTs9zO9uKVer5kbeIOVUplQc= Subject key identifier: 43:BF:5C:1D:48:6F:01:EF:E7:36:DB:E7:E6:46:E1:BE:7F:22:C7:B6 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C9394EC1ED553A8142100 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 931 IP address blocks: 170.39.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:93:94:ec:1e:d5:53:a8:14:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=439f2e4c-9152-4d5d-8c3f-013ddf46a3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d6:70:46:61:1d:6a:35:0b:a1:59:c9:5e:75: 61:1d:ca:92:c7:24:bf:5c:09:bc:95:b3:2e:b7:f4: 85:b2:8b:d1:18:91:e3:e6:78:c3:c3:75:c4:34:01: 47:61:7d:46:f2:bd:4e:68:95:1a:2c:bd:33:d3:34: d2:53:62:bd:1a:0d:27:25:9d:8a:69:9a:18:1a:b8: 63:c8:d2:da:e9:3e:1b:8b:3a:8c:02:da:8e:a1:e1: fe:06:6e:9d:f5:3e:3b:e8:c9:44:30:25:05:07:0e: 16:a7:d7:23:13:92:0f:a2:22:6b:32:32:75:66:68: 1f:f0:0c:46:a5:74:e6:ab:c3:39:2e:8c:fa:36:ae: 77:7c:d6:3c:44:8b:8a:41:ac:82:78:01:23:7a:94: 8e:8b:4d:65:a1:85:b3:a5:4c:01:5f:14:fc:7f:b9: e8:bd:e7:8e:b5:f0:1e:2b:30:e1:ee:60:5f:5a:88: f9:ee:78:db:42:bc:a8:38:89:a4:79:e5:84:b4:75: e0:09:e5:59:30:9c:d5:fa:68:3c:da:86:8e:fd:af: 7f:73:63:5b:f4:f8:fa:55:d5:ae:8d:8c:45:8d:db: 33:52:dc:50:27:36:5a:6b:de:91:74:e8:d1:21:f5: ad:f2:93:6e:ee:d1:cf:d4:7d:52:bd:16:68:52:e9: e1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BF:5C:1D:48:6F:01:EF:E7:36:DB:E7:E6:46:E1:BE:7F:22:C7:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:2d:85:5b:a5:93:af:48:1d:97:4f:1b:ed:7a:89:cf:60:75: 50:b7:8c:39:01:da:cc:ac:41:71:cf:9f:08:c2:70:d0:4b:42: f8:ed:b4:76:c4:dc:59:36:30:42:eb:a9:58:9b:52:66:72:a1: c3:89:e1:71:24:e7:41:e6:ce:d6:4c:b2:ac:46:4f:17:63:c9: 84:27:de:18:b7:43:53:96:02:b4:f1:e8:f1:1d:86:32:a7:a5: d5:8f:f5:13:54:e9:c2:b6:41:86:f6:b9:e2:0f:13:6a:21:71: f7:05:98:b7:11:19:33:a9:b3:71:74:70:d1:4d:23:5e:1d:8c: d5:bb:f4:31:d6:63:26:4f:cc:73:2c:d4:d3:5b:46:97:db:dd: 84:e6:11:51:ed:54:bf:75:58:57:0b:e3:26:de:3d:7f:66:6d: c9:69:07:05:f6:af:a2:98:a5:51:73:3f:37:ab:b9:7c:3b:0e: d0:fc:7f:b6:89:5e:82:bc:4c:91:a5:db:b4:77:f7:c3:2d:16: 2c:8f:e1:74:17:3d:20:2c:f4:e8:a6:7f:b5:e2:32:00:3e:a3: 4d:28:67:9b:24:e5:bf:78:c4:5d:49:21:a9:0e:61:f0:09:ff: ef:4d:d6:cb:77:58:aa:68:0d:25:82:f6:a3:a7:35:3e:17:d7: 1f:ae:9f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJOU7B7VU6gUIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NDM5ZjJlNGMtOTE1Mi00ZDVkLThjM2YtMDEzZGRmNDZhM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9ZwRmEdajULoVnJXnVhHcqSxyS/XAm8lbMu t/SFsovRGJHj5njDw3XENAFHYX1G8r1OaJUaLL0z0zTSU2K9Gg0nJZ2KaZoYGrhj yNLa6T4bizqMAtqOoeH+Bm6d9T476MlEMCUFBw4Wp9cjE5IPoiJrMjJ1Zmgf8AxG pXTmq8M5Loz6Nq53fNY8RIuKQayCeAEjepSOi01loYWzpUwBXxT8f7noveeOtfAe KzDh7mBfWoj57njbQryoOImkeeWEtHXgCeVZMJzV+mg82oaO/a9/c2Nb9Pj6VdWu jYxFjdszUtxQJzZaa96RdOjRIfWt8pNu7tHP1H1SvRZoUunh4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEO/XB1IbwHv5zbb5+ZG4b5/Ise2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZTNlZmNjOGQtNDczYy0z MzM3LWE3YjMtOTFjY2YyY2JkMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4thVulk69IHZdPG+16ic9gdVC3jDkB2sysQXHPnwjCcNBLQvjttHbE 3Fk2MELrqVibUmZyocOJ4XEk50HmztZMsqxGTxdjyYQn3hi3Q1OWArTx6PEdhjKn pdWP9RNU6cK2QYb2ueIPE2ohcfcFmLcRGTOps3F0cNFNI14djNW79DHWYyZPzHMs 1NNbRpfb3YTmEVHtVL91WFcL4ybePX9mbclpBwX2r6KYpVFzPzeruXw7DtD8f7aJ XoK8TJGl27R398MtFiyP4XQXPSAs9Oimf7XiMgA+o00oZ5sk5b94xF1JIakOYfAJ /+9N1st3WKpoDSWC9qOnNT4X1x+un1I= -----END CERTIFICATE-----Generated at Wed Nov 5 08:01:50 2025 by rpki-client