$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/3eff7925-cb5c-39cc-b9b9-04fa31cca8e9.roa File: 3eff7925-cb5c-39cc-b9b9-04fa31cca8e9.roa (raw, json) Hash identifier: U8fF99E5SA13jFfr2b8UaMB2iKgrhHYH2YA4iXC2LmA= Subject key identifier: 32:0D:31:C7:C3:70:D5:1E:A0:A8:00:FF:9A:8A:56:57:6C:EE:43:0C Certificate issuer: /CN=ee9986fc-001f-49c5-949c-333fec29fe66 Certificate serial: 010D0C9F4328584BB5C2694705F8619FC7A48880 Authority key identifier: 2C:6A:93:4E:58:18:37:EB:09:24:3D:FC:9A:24:D0:3A:36:A9:59:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/3eff7925-cb5c-39cc-b9b9-04fa31cca8e9.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 8075 IP address blocks: 170.170.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:69:47:05:f8:61:9f:c7:a4:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee9986fc-001f-49c5-949c-333fec29fe66 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=7ef0bef1-bfdf-4187-826e-8eb4ce73704e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:ed:f1:84:d1:2d:a2:aa:2c:e2:af:75:56: f8:6e:b8:2d:8f:29:02:1c:4a:3c:74:81:b0:39:89: 94:bf:b7:7a:bd:bf:88:ee:ec:98:4b:c0:4f:13:ef: 26:b3:a8:0b:51:c7:a6:70:8e:15:d1:d3:6e:85:fc: 69:83:ef:65:77:48:ff:6a:fa:bf:43:d1:f4:11:44: dc:38:27:1d:f0:5c:d5:1e:38:4a:01:df:a7:39:9d: a9:e6:92:66:91:c0:6d:08:68:6b:dc:a0:e9:90:d2: 8e:c1:cb:b7:eb:77:94:67:23:9a:4a:5c:16:21:b4: 36:a6:cb:6f:1a:1e:91:c2:ac:3b:c4:9b:cc:60:40: 7b:f0:f7:0e:07:c4:f2:15:f5:dc:47:f7:bf:86:18: 6a:61:51:9d:ef:58:69:6e:78:c6:ae:6d:38:4f:03: d8:06:d4:13:24:29:34:c0:d8:ec:80:2a:27:02:91: 64:0f:a3:c3:a0:43:56:6b:aa:37:23:20:f6:8c:2e: b5:8d:83:54:06:ae:5c:9f:7d:64:c8:26:b3:16:bc: f7:52:c5:cc:5c:2e:a0:b3:c0:cd:4e:8e:3b:c4:b1: a7:0e:30:1a:42:57:bd:c3:49:9b:b8:6e:aa:bc:7a: 70:b8:42:27:5c:6e:a5:87:51:72:47:c8:4c:bb:63: 7a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0D:31:C7:C3:70:D5:1E:A0:A8:00:FF:9A:8A:56:57:6C:EE:43:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/3eff7925-cb5c-39cc-b9b9-04fa31cca8e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.crl X509v3 Authority Key Identifier: keyid:2C:6A:93:4E:58:18:37:EB:09:24:3D:FC:9A:24:D0:3A:36:A9:59:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66.cer sbgp-ipAddrBlock: critical IPv4: 170.170.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a1:17:01:a1:e6:d1:87:c4:1d:81:57:74:22:34:d8:55:10: 6b:aa:66:76:5b:b6:3f:14:c4:5a:7c:4c:6e:b7:ac:9e:24:3c: 83:cd:db:05:0a:51:a4:e0:fc:6b:d0:85:c3:28:58:ff:bc:52: 61:11:be:24:59:ab:a6:f8:a3:cc:56:e4:a2:a9:29:45:26:39: 8e:09:cd:cb:04:fc:ee:d1:a4:55:86:6e:c0:49:96:81:5e:10: 7f:ca:57:e3:0a:59:2f:85:7a:cb:27:82:16:3e:5b:61:7f:48: 53:bb:88:fb:45:89:d7:38:5f:f8:58:f3:c8:6c:b1:25:0a:a2: 98:b4:28:59:5a:d2:d5:ff:d8:5e:45:bf:69:67:bc:3d:26:b3: db:5b:1a:03:3f:c1:84:68:b8:f9:3f:96:3f:8d:79:05:4a:c6: 30:c5:9f:71:c5:cf:bd:cc:8f:c0:ae:79:c6:35:66:89:6a:84: 2b:41:af:fd:43:8e:0e:1e:2c:20:54:7d:14:8f:9d:d1:6b:8b: d7:e8:31:6b:06:7f:bc:59:05:d4:a9:50:fe:6d:61:05:82:b7: 6b:3f:bb:c0:f7:9f:28:d9:31:a1:00:51:19:61:73:63:e2:23: 80:5e:3c:37:59:6e:45:fe:a7:19:b9:ae:88:2b:ac:6f:49:4d: a9:93:da:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmlHBfhhn8ekiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU5OTg2ZmMtMDAxZi00OWM1LTk0OWMtMzMzZmVjMjlm ZTY2MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk N2VmMGJlZjEtYmZkZi00MTg3LTgyNmUtOGViNGNlNzM3MDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfbt8YTRLaKqLOKvdVb4brgtjykCHEo8dIGw OYmUv7d6vb+I7uyYS8BPE+8ms6gLUcemcI4V0dNuhfxpg+9ld0j/avq/Q9H0EUTc OCcd8FzVHjhKAd+nOZ2p5pJmkcBtCGhr3KDpkNKOwcu363eUZyOaSlwWIbQ2pstv Gh6Rwqw7xJvMYEB78PcOB8TyFfXcR/e/hhhqYVGd71hpbnjGrm04TwPYBtQTJCk0 wNjsgConApFkD6PDoENWa6o3IyD2jC61jYNUBq5cn31kyCazFrz3UsXMXC6gs8DN To47xLGnDjAaQle9w0mbuG6qvHpwuEInXG6lh1FyR8hMu2N6GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDINMcfDcNUeoKgA/5qKVlds7kMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lZTk5 ODZmYy0wMDFmLTQ5YzUtOTQ5Yy0zMzNmZWMyOWZlNjYvM2VmZjc5MjUtY2I1Yy0z OWNjLWI5YjktMDRmYTMxY2NhOGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWU5OTg2ZmMtMDAxZi00OWM1LTk0 OWMtMzMzZmVjMjlmZTY2L2VlOTk4NmZjLTAwMWYtNDljNS05NDljLTMzM2ZlYzI5 ZmU2Ni5jcmwwHwYDVR0jBBgwFoAULGqTTlgYN+sJJD38miTQOjapWXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lZTk5ODZmYy0wMDFmLTQ5YzUtOTQ5Yy0zMzNm ZWMyOWZlNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqqp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACahFwGh5tGHxB2BV3QiNNhVEGuqZnZbtj8UxFp8TG63rJ4kPIPN2wUK UaTg/GvQhcMoWP+8UmERviRZq6b4o8xW5KKpKUUmOY4JzcsE/O7RpFWGbsBJloFe EH/KV+MKWS+FessnghY+W2F/SFO7iPtFidc4X/hY88hssSUKopi0KFla0tX/2F5F v2lnvD0ms9tbGgM/wYRouPk/lj+NeQVKxjDFn3HFz73Mj8CuecY1ZolqhCtBr/1D jg4eLCBUfRSPndFri9foMWsGf7xZBdSpUP5tYQWCt2s/u8D3nyjZMaEAURlhc2Pi I4BePDdZbkX+pxm5rogrrG9JTamT2qU= -----END CERTIFICATE-----Generated at Wed Nov 5 16:55:21 2025 by rpki-client