$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/cb22155d-db2e-393b-81cf-71d00304cacb.roa File: cb22155d-db2e-393b-81cf-71d00304cacb.roa (raw, json) Hash identifier: /8Zke2Q1qDIVfgyIUEkBxkyofC3BMVtfetSfORGVDpE= Subject key identifier: 62:89:B2:87:A9:5A:91:65:DC:5F:06:8E:A1:C0:E2:A3:07:6D:BB:3D Certificate issuer: /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84 Certificate serial: 010D0C9F4328584BA7CCE92D5A6B2AB829E78300 Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/cb22155d-db2e-393b-81cf-71d00304cacb.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13451 IP address blocks: 172.86.128.0/20 maxlen: 20 208.90.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:e9:2d:5a:6b:2a:b8:29:e7:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=701d467a-ec4a-4429-add1-8dc2329a2215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bc:14:56:e4:3c:4e:67:df:ae:b2:41:b4:7e: a2:b8:e4:39:72:83:ec:dc:0f:39:8e:bf:1a:d2:6b: d2:54:61:df:d1:fd:fe:22:d4:2b:cd:18:97:c5:32: 2d:7c:db:71:3c:4f:a7:69:9a:ce:9e:66:a9:39:5c: 3e:9f:49:85:d7:88:d3:76:1e:80:9e:2e:a9:4e:40: 43:a2:c3:4d:5a:b5:06:b0:2f:25:85:88:67:95:c7: b5:e3:a2:f2:dc:1c:c3:a6:42:99:bc:80:83:15:5a: 67:33:bc:36:c4:10:df:f5:34:ea:ec:7c:d2:18:21: 55:56:f1:55:46:77:e4:b5:51:33:f9:79:79:e6:48: ae:15:d0:09:05:b0:21:5c:ba:e0:98:19:6b:2b:40: aa:58:23:32:9e:87:2b:90:f4:9c:78:70:98:da:03: 1d:3a:b3:ff:74:cc:5e:04:00:e7:60:d8:4e:91:77: 8d:f6:19:e7:d6:4c:b0:59:8f:2a:d6:5e:cb:09:62: 87:95:3b:ee:89:63:46:b3:b7:84:b3:f8:60:c2:4c: e3:94:f4:dc:57:95:c9:3b:d7:e0:d0:42:da:9b:9f: 79:3e:e0:57:78:44:62:25:72:b2:1e:f7:c9:1d:4f: 12:76:95:fa:9a:01:da:73:b4:7d:bf:9d:ef:60:ab: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:89:B2:87:A9:5A:91:65:DC:5F:06:8E:A1:C0:E2:A3:07:6D:BB:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/cb22155d-db2e-393b-81cf-71d00304cacb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl X509v3 Authority Key Identifier: keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer sbgp-ipAddrBlock: critical IPv4: 172.86.128.0/20 208.90.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:92:db:95:e5:26:54:e8:82:41:b8:04:e6:3f:25:c1:85:5f: 6b:4b:52:d2:0d:69:7a:6d:00:46:88:a6:3c:6d:00:06:50:ce: ed:3e:2e:e0:29:96:e2:af:cb:34:62:31:5c:ab:ed:ed:31:8d: 48:39:23:a4:ee:d9:d1:b3:7e:7a:34:2f:be:02:a9:7f:b8:da: 16:31:c2:2e:29:d0:ef:0c:1c:3f:1b:af:b3:25:33:98:82:55: b9:11:81:ae:c4:3b:56:de:47:af:6a:86:34:e9:23:43:52:65: 84:f5:a3:fd:24:bd:10:21:3b:0a:61:00:bd:dd:69:cc:81:39: 1a:3b:2a:31:71:12:7c:77:27:1c:cf:0d:8f:5a:f7:30:f7:4d: 8e:69:4e:6e:5e:89:f6:69:20:8e:ed:45:1c:a1:c1:91:cb:e2: 19:8a:cc:fd:ca:e3:b9:26:ae:4c:c7:81:63:48:36:8f:60:bf: e0:7f:f6:ba:e3:4f:d4:57:6f:5e:de:cf:66:e2:70:83:11:3e: b3:5a:4a:17:21:95:7d:01:d1:86:9a:68:31:b2:be:ab:b5:5e: 3e:63:39:5b:69:1c:43:2c:e1:10:47:ea:57:39:19:c8:0b:89: 90:3e:67:95:ed:a0:b5:e2:f0:55:d7:fb:c4:06:bf:65:59:27: 93:b8:ca:5a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEunzOktWmsquCnngwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFkM2EwNTAtM2VlNi00NWJmLTk5MmYtOWFjMDA1ZjNm Zjg0MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NzAxZDQ2N2EtZWM0YS00NDI5LWFkZDEtOGRjMjMyOWEyMjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7wUVuQ8TmffrrJBtH6iuOQ5coPs3A85jr8a 0mvSVGHf0f3+ItQrzRiXxTItfNtxPE+naZrOnmapOVw+n0mF14jTdh6Ani6pTkBD osNNWrUGsC8lhYhnlce146Ly3BzDpkKZvICDFVpnM7w2xBDf9TTq7HzSGCFVVvFV RnfktVEz+Xl55kiuFdAJBbAhXLrgmBlrK0CqWCMynocrkPSceHCY2gMdOrP/dMxe BADnYNhOkXeN9hnn1kywWY8q1l7LCWKHlTvuiWNGs7eEs/hgwkzjlPTcV5XJO9fg 0ELam595PuBXeERiJXKyHvfJHU8SdpX6mgHac7R9v53vYKtEcwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGKJsoepWpFl3F8GjqHA4qMHbbs9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQz YTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMwMDVmM2ZmODQvY2IyMjE1NWQtZGIyZS0z OTNiLTgxY2YtNzFkMDAzMDRjYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzFkM2EwNTAtM2VlNi00NWJmLTk5 MmYtOWFjMDA1ZjNmZjg0LzMxZDNhMDUwLTNlZTYtNDViZi05OTJmLTlhYzAwNWYz ZmY4NC5jcmwwHwYDVR0jBBgwFoAUqwDRM2gPLUxY5W+LXdxYiSD+kuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQzYTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMw MDVmM2ZmODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQErFaAAwQD 0FqgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGCS25XlJlTogkG4BOY/JcGFX2tLUtINaXptAEaIpjxtAAZQ zu0+LuApluKvyzRiMVyr7e0xjUg5I6Tu2dGzfno0L74CqX+42hYxwi4p0O8MHD8b r7MlM5iCVbkRga7EO1beR69qhjTpI0NSZYT1o/0kvRAhOwphAL3dacyBORo7KjFx Enx3JxzPDY9a9zD3TY5pTm5eifZpII7tRRyhwZHL4hmKzP3K47kmrkzHgWNINo9g v+B/9rrjT9RXb17ez2bicIMRPrNaShchlX0B0YaaaDGyvqu1Xj5jOVtpHEMs4RBH 6lc5GcgLiZA+Z5XtoLXi8FXX+8QGv2VZJ5O4ylo= -----END CERTIFICATE-----Generated at Wed Nov 5 22:52:47 2025 by rpki-client