$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/00bfdc6f-8d00-3d44-8e6e-526a40918136.roa File: 00bfdc6f-8d00-3d44-8e6e-526a40918136.roa (raw, json) Hash identifier: gYdNw7RkUVymq9SvPjT+jV1A4ocYNmWUsiSrMN+1Ws4= Subject key identifier: 91:1B:9C:B3:52:65:F1:17:28:30:0C:D2:5B:EE:F7:F4:55:1B:AF:65 Certificate issuer: /CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb Certificate serial: 010D0C9F4328584B970CEED8CB2C218447DF3140 Authority key identifier: 17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/00bfdc6f-8d00-3d44-8e6e-526a40918136.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 170.52.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ee:d8:cb:2c:21:84:47:df:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=e7e369d2-7e68-4eb6-967d-79dd2ed75bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:51:ed:10:2a:f7:5b:85:f7:16:47:bf:f7:ae: c3:e1:cd:9b:0b:9a:11:4f:ae:d9:2d:3e:c8:1c:ee: 25:60:23:09:7f:94:4b:4f:1b:59:e4:4e:8e:e1:04: 47:f6:5f:34:b0:48:65:2b:c8:1a:b6:3b:d6:73:35: bd:29:16:fe:26:09:19:01:a2:b8:ad:47:4e:e2:f6: f7:69:19:ac:46:d8:09:d5:46:77:c9:6b:04:00:42: b1:a8:ca:7f:d7:fa:b0:ff:34:f4:20:c3:f9:cd:05: c7:92:0a:ad:0b:68:83:55:54:16:81:d1:ea:96:e9: 9b:42:e4:5f:2c:2c:6a:45:1f:32:c0:3f:b5:b2:79: 97:1f:8c:a6:1e:54:70:20:c0:d4:68:5c:84:74:d1: 1f:8c:b1:3f:99:3f:13:5d:a2:f1:49:c7:94:57:2e: 49:ca:4b:03:8d:c6:31:45:77:32:4c:fc:bf:f3:f0: 61:a8:4e:ea:34:b0:d3:ae:ba:ad:e8:5a:98:8b:28: d6:53:99:9a:eb:ed:b0:42:78:37:81:80:34:a2:d9: 96:4c:86:ba:d7:25:32:75:39:98:90:00:3a:31:f3: 94:55:91:16:82:16:2c:60:b1:19:8f:ce:69:c8:e2: 8f:32:ee:1c:54:bb:bb:48:25:89:cd:ce:10:ee:d9: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1B:9C:B3:52:65:F1:17:28:30:0C:D2:5B:EE:F7:F4:55:1B:AF:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/00bfdc6f-8d00-3d44-8e6e-526a40918136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl X509v3 Authority Key Identifier: keyid:17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer sbgp-ipAddrBlock: critical IPv4: 170.52.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:0c:27:29:2d:3c:36:11:79:af:84:72:24:14:78:68:0f:48: c4:d3:3d:db:76:1f:ad:f3:a1:55:28:2a:d9:1e:d8:a8:82:d5: 1d:fe:40:e2:ec:f2:24:3d:8d:33:54:3f:01:b1:fa:f5:17:82: 16:6b:16:81:e8:53:99:12:87:6c:c8:3c:e0:c2:20:f7:15:68: eb:45:3d:cf:f7:b6:8d:91:97:ed:a5:9d:32:10:2e:35:57:d0: 48:3a:a7:5c:a5:11:ed:84:88:13:aa:da:7d:58:00:fd:b4:dd: 63:cd:d0:23:f1:cd:4a:12:7b:99:a2:6b:22:f1:5f:35:03:18: 2f:8d:93:32:88:a2:00:40:b5:c6:a9:13:7e:67:23:91:5c:85: 5d:f0:e8:67:c5:20:7b:9e:dc:73:8e:a1:6c:49:c4:cc:36:11: 71:67:58:aa:7e:73:8b:7d:62:c5:6e:9a:61:31:c5:c1:8c:a0: 48:a9:2a:65:b5:42:45:69:1a:ab:70:db:fe:b2:a3:c7:2b:fa: 4a:6a:41:a9:56:be:8b:63:35:35:02:fb:0d:e6:13:0e:c1:3d: 64:29:2c:4f:56:b9:cb:4a:30:58:b5:02:47:c6:e0:0a:d3:12: 98:7d:31:ec:51:7f:3d:7c:8b:52:b2:bd:82:61:cb:c0:56:03: e4:f6:b0:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDO7YyywhhEffMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU4NmJhYjAtZWY3ZS00ZTIzLTg0ZmUtYmNkNWNlZTg2 OWJiMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZTdlMzY5ZDItN2U2OC00ZWI2LTk2N2QtNzlkZDJlZDc1YmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlHtECr3W4X3Fke/967D4c2bC5oRT67ZLT7I HO4lYCMJf5RLTxtZ5E6O4QRH9l80sEhlK8gatjvWczW9KRb+JgkZAaK4rUdO4vb3 aRmsRtgJ1UZ3yWsEAEKxqMp/1/qw/zT0IMP5zQXHkgqtC2iDVVQWgdHqlumbQuRf LCxqRR8ywD+1snmXH4ymHlRwIMDUaFyEdNEfjLE/mT8TXaLxSceUVy5JyksDjcYx RXcyTPy/8/BhqE7qNLDTrrqt6FqYiyjWU5ma6+2wQng3gYA0otmWTIa61yUydTmY kAA6MfOUVZEWghYsYLEZj85pyOKPMu4cVLu7SCWJzc4Q7tnFZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEbnLNSZfEXKDAM0lvu9/RVG69lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZTg2 YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1Y2VlODY5YmIvMDBiZmRjNmYtOGQwMC0z ZDQ0LThlNmUtNTI2YTQwOTE4MTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWU4NmJhYjAtZWY3ZS00ZTIzLTg0 ZmUtYmNkNWNlZTg2OWJiL2VlODZiYWIwLWVmN2UtNGUyMy04NGZlLWJjZDVjZWU4 NjliYi5jcmwwHwYDVR0jBBgwFoAUF9ODIac85idtB9uicC0blcLuLw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZTg2YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1 Y2VlODY5YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqjQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEMJyktPDYRea+EciQUeGgPSMTTPdt2H63zoVUoKtke2KiC1R3+QOLs 8iQ9jTNUPwGx+vUXghZrFoHoU5kSh2zIPODCIPcVaOtFPc/3to2Rl+2lnTIQLjVX 0Eg6p1ylEe2EiBOq2n1YAP203WPN0CPxzUoSe5miayLxXzUDGC+NkzKIogBAtcap E35nI5FchV3w6GfFIHue3HOOoWxJxMw2EXFnWKp+c4t9YsVummExxcGMoEipKmW1 QkVpGqtw2/6yo8cr+kpqQalWvotjNTUC+w3mEw7BPWQpLE9WuctKMFi1AkfG4ArT Eph9MexRfz18i1KyvYJhy8BWA+T2sIg= -----END CERTIFICATE-----Generated at Wed Nov 5 09:55:53 2025 by rpki-client