$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/d6db3ecf-dd02-3aa0-887b-b14be6ed0ad9.roa File: d6db3ecf-dd02-3aa0-887b-b14be6ed0ad9.roa (raw, json) Hash identifier: pM2aCjvPyE4E+V8e5qfX3fBbikT0bAaP130DNJC2f70= Subject key identifier: 23:CE:0E:21:96:B4:1F:5B:0C:E4:D7:E5:9D:88:66:C3:EA:0F:56:06 Certificate issuer: /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb Certificate serial: 010D0C9F4328584BB88D2AA4AE23A19B35DC8430 Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/d6db3ecf-dd02-3aa0-887b-b14be6ed0ad9.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 36666 IP address blocks: 173.209.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:2a:a4:ae:23:a1:9b:35:dc:84:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=e2ca70f0-20cd-4229-a90a-7e4d01254937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b6:a8:aa:32:b8:c5:7b:c0:77:40:6e:e7:e2: af:7a:d1:f2:cb:9f:fa:09:89:cc:d8:2c:ad:2d:10: 5b:5a:5d:9c:4e:fe:9c:81:9e:88:e1:00:1b:b6:24: 12:a1:52:d2:27:1e:2e:ba:2d:6f:4b:86:9b:e3:9e: a5:fa:55:81:43:fa:ae:78:8d:aa:ab:47:95:a8:eb: 54:7a:b1:73:4f:cb:4b:ba:58:b6:8c:bc:fa:54:5e: 11:c2:7b:80:f5:c7:3c:6e:01:53:27:eb:36:8a:d5: 92:2a:2c:3a:66:18:fb:d8:54:ca:2f:5c:cf:53:82: f0:fe:18:61:18:8b:2c:04:b5:59:da:1c:a1:d1:d0: dc:17:5c:73:e1:90:b8:f5:9d:9f:c2:df:5b:9a:04: 5f:33:76:f9:e7:4e:b6:55:96:21:04:4d:f8:4a:ad: ea:65:26:bc:91:d3:1e:c2:76:9d:fe:e4:9c:17:f3: 1e:6a:3e:16:fb:f1:d2:51:21:de:07:ee:2e:05:69: ea:a3:c1:8b:cb:32:e1:c3:fe:9a:e7:52:7f:0e:2b: 2c:9b:f4:6c:a3:2e:1f:66:4d:f5:d5:a1:26:05:88: e5:c2:5d:70:65:9c:9f:83:59:d7:70:e0:c3:b0:35: b1:97:6b:8e:74:bf:41:fa:d8:ab:7a:2b:54:e4:ea: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CE:0E:21:96:B4:1F:5B:0C:E4:D7:E5:9D:88:66:C3:EA:0F:56:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/d6db3ecf-dd02-3aa0-887b-b14be6ed0ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl X509v3 Authority Key Identifier: keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer sbgp-ipAddrBlock: critical IPv4: 173.209.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:dd:d3:83:5a:1f:5a:16:25:80:06:3a:a0:8a:60:98:8b:9f: 7a:6c:55:32:35:e6:e7:75:46:90:50:bc:8f:83:0a:e4:f0:d9: 4b:10:ab:41:a2:3b:e0:53:67:ff:cc:a6:93:91:90:dd:2d:a8: d0:5a:46:e8:24:8d:0b:d9:38:e9:d7:f1:1d:b1:96:fa:ea:2c: e1:9d:da:19:49:3d:52:77:00:42:37:67:fc:e3:ce:a7:52:12: bc:77:92:de:44:72:30:31:43:83:5f:31:2f:51:21:75:b0:8d: e2:57:27:32:0d:38:37:86:07:19:d9:60:35:81:43:ab:36:50: 39:eb:14:95:62:45:f9:c9:f6:d5:16:b5:e1:f1:1a:89:12:25: 6f:95:cb:5f:53:b0:25:08:64:1a:d9:55:d1:b4:10:2a:95:c6: b7:62:22:40:e0:ef:e0:90:b5:7f:22:db:6a:b9:d5:9f:ec:cf: 79:9e:de:e1:22:12:86:b8:15:f3:bf:06:0e:59:16:8c:42:ba: ac:42:f9:1d:a6:1c:f1:88:a4:e6:27:b9:b6:25:94:89:ec:29: a1:7d:53:e1:8d:c1:fe:fb:38:6b:b1:a9:8c:40:8f:8b:0f:df: da:00:00:1c:bc:5b:93:1a:90:fe:3f:7c:6d:4d:00:2b:29:df: 86:1d:d8:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSqkriOhmzXchDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBlMzM4YjktMmE2My00ZGZmLTkzNzEtYzhhOGU5MzUw ZWViMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTJjYTcwZjAtMjBjZC00MjI5LWE5MGEtN2U0ZDAxMjU0OTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibaoqjK4xXvAd0Bu5+KvetHyy5/6CYnM2Cyt LRBbWl2cTv6cgZ6I4QAbtiQSoVLSJx4uui1vS4ab456l+lWBQ/queI2qq0eVqOtU erFzT8tLuli2jLz6VF4RwnuA9cc8bgFTJ+s2itWSKiw6Zhj72FTKL1zPU4Lw/hhh GIssBLVZ2hyh0dDcF1xz4ZC49Z2fwt9bmgRfM3b55062VZYhBE34Sq3qZSa8kdMe wnad/uScF/Meaj4W+/HSUSHeB+4uBWnqo8GLyzLhw/6a51J/Dissm/Rsoy4fZk31 1aEmBYjlwl1wZZyfg1nXcODDsDWxl2uOdL9B+tireitU5Oq+bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPODiGWtB9bDOTX5Z2IZsPqD1YGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMGUz MzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4ZTkzNTBlZWIvZDZkYjNlY2YtZGQwMi0z YWEwLTg4N2ItYjE0YmU2ZWQwYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTBlMzM4YjktMmE2My00ZGZmLTkz NzEtYzhhOGU5MzUwZWViL2UwZTMzOGI5LTJhNjMtNGRmZi05MzcxLWM4YThlOTM1 MGVlYi5jcmwwHwYDVR0jBBgwFoAUNDUW6fpcIavP8B9lsDFncZERP8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMGUzMzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4 ZTkzNTBlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrdEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADd04NaH1oWJYAGOqCKYJiLn3psVTI15ud1RpBQvI+DCuTw2UsQq0Gi O+BTZ//MppORkN0tqNBaRugkjQvZOOnX8R2xlvrqLOGd2hlJPVJ3AEI3Z/zjzqdS Erx3kt5EcjAxQ4NfMS9RIXWwjeJXJzINODeGBxnZYDWBQ6s2UDnrFJViRfnJ9tUW teHxGokSJW+Vy19TsCUIZBrZVdG0ECqVxrdiIkDg7+CQtX8i22q51Z/sz3me3uEi Eoa4FfO/Bg5ZFoxCuqxC+R2mHPGIpOYnubYllInsKaF9U+GNwf77OGuxqYxAj4sP 39oAABy8W5MakP4/fG1NACsp34Yd2L8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:41:33 2025 by rpki-client