$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/237c3bf2-7be3-3aed-bb3b-beb4300dcd4f.roa File: 237c3bf2-7be3-3aed-bb3b-beb4300dcd4f.roa (raw, json) Hash identifier: bcb84Px6lxJjU6QXFyuJquL7F73mZYlY228mQPx1rDs= Subject key identifier: 99:2E:CA:DA:07:FA:9C:EC:20:14:16:2D:1C:08:C8:2E:EE:65:5B:BE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BBE405F142CD83B03AC269700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/237c3bf2-7be3-3aed-bb3b-beb4300dcd4f.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 161.33.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:5f:14:2c:d8:3b:03:ac:26:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=cafafaf0-dc61-42c3-8e56-9d53115f3bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a6:09:3f:de:e8:f4:88:2a:39:66:b3:59:f4: e5:80:7d:40:81:12:f0:71:86:d9:31:d0:fb:c0:48: 8f:21:61:22:c2:3c:c8:01:33:4f:7b:31:03:4a:64: 2a:17:4a:14:48:3f:2f:9a:11:21:52:39:69:c2:b6: 3b:74:21:d6:ed:c4:4a:be:f3:60:e9:84:e5:46:34: 15:56:0b:f5:23:5d:6a:68:a1:33:e3:a1:c4:72:54: a4:ce:13:22:7c:a8:9a:16:6d:a3:e9:e4:e6:f6:bf: 07:21:24:d2:00:c8:a8:3a:c8:02:68:0f:f5:00:28: 2d:71:03:54:91:c9:4c:66:54:20:83:16:06:cc:eb: 45:9a:1d:96:2a:26:38:c0:28:b0:0a:e2:e5:88:71: a7:eb:d3:aa:4d:b9:24:14:ab:78:87:b1:26:56:2e: 89:cc:55:9e:cc:9b:c5:60:99:df:07:40:63:20:e6: 23:ba:46:06:13:73:6b:f9:c5:6f:c6:e5:56:90:c7: a8:13:b7:bd:ab:73:07:d3:79:51:8d:54:66:57:22: 7f:fa:7f:25:c4:06:61:27:e6:be:61:4e:b6:20:d8: a8:5f:63:51:d3:5e:8c:77:b1:bd:8f:2f:28:51:1b: 8a:21:47:1c:d4:df:ad:1d:9a:7c:6c:10:33:0a:42: 10:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2E:CA:DA:07:FA:9C:EC:20:14:16:2D:1C:08:C8:2E:EE:65:5B:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/237c3bf2-7be3-3aed-bb3b-beb4300dcd4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:3c:03:fe:0b:a0:cd:8f:81:fa:d9:ee:59:73:70:9b:da:f4: cb:f4:5a:41:f5:a3:76:cd:11:32:84:45:42:b1:a9:f7:0c:7d: 8f:42:07:33:ed:ff:a4:6a:e8:d0:8f:03:1a:e8:4f:ed:df:f3: 2f:81:b9:e9:0d:f9:a7:70:22:43:1a:58:a5:f4:b7:19:85:e9: d3:13:05:d8:e3:e8:73:8f:15:aa:32:b1:94:98:ee:08:92:09: ff:41:7d:90:91:8d:f4:8a:36:0e:6d:c9:45:3a:fa:8e:67:d1: bc:f6:a0:79:b1:87:b1:97:5e:c2:20:ac:46:d1:ee:7f:1e:1e: 85:ed:28:dd:b5:1a:5f:2a:f4:65:0c:f0:a9:8e:08:3e:e6:1b: b7:45:f4:f3:f5:da:38:e3:7a:84:15:ce:9e:a2:cb:77:84:56: 91:8a:c9:46:99:f5:3c:87:07:fe:ee:1d:b2:e1:2a:4d:dc:8e: 88:d4:f2:b7:a1:0e:f7:78:c6:df:35:7b:67:d2:8a:86:22:ee: e5:75:16:0d:23:bd:61:83:20:c6:0f:a7:cd:82:f6:1f:11:66: 49:72:b2:17:a7:84:77:ec:6d:3d:63:28:84:d1:1e:6f:00:ea: 65:e8:a6:25:73:42:95:bc:64:47:17:35:87:b3:1d:3a:f6:b8: 27:39:73:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QF8ULNg7A6wmlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk Y2FmYWZhZjAtZGM2MS00MmMzLThlNTYtOWQ1MzExNWYzYmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaYJP97o9IgqOWazWfTlgH1AgRLwcYbZMdD7 wEiPIWEiwjzIATNPezEDSmQqF0oUSD8vmhEhUjlpwrY7dCHW7cRKvvNg6YTlRjQV Vgv1I11qaKEz46HEclSkzhMifKiaFm2j6eTm9r8HISTSAMioOsgCaA/1ACgtcQNU kclMZlQggxYGzOtFmh2WKiY4wCiwCuLliHGn69OqTbkkFKt4h7EmVi6JzFWezJvF YJnfB0BjIOYjukYGE3Nr+cVvxuVWkMeoE7e9q3MH03lRjVRmVyJ/+n8lxAZhJ+a+ YU62INioX2NR016Md7G9jy8oURuKIUcc1N+tHZp8bBAzCkIQPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkuytoH+pzsIBQWLRwIyC7uZVu+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjM3YzNiZjItN2JlMy0z YWVkLWJiM2ItYmViNDMwMGRjZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFoSFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQ8A/4LoM2PgfrZ7llzcJva9Mv0WkH1o3bNETKERUKxqfcMfY9CBzPt /6Rq6NCPAxroT+3f8y+BuekN+adwIkMaWKX0txmF6dMTBdjj6HOPFaoysZSY7giS Cf9BfZCRjfSKNg5tyUU6+o5n0bz2oHmxh7GXXsIgrEbR7n8eHoXtKN21Gl8q9GUM 8KmOCD7mG7dF9PP12jjjeoQVzp6iy3eEVpGKyUaZ9TyHB/7uHbLhKk3cjojU8reh Dvd4xt81e2fSioYi7uV1Fg0jvWGDIMYPp82C9h8RZklyshenhHfsbT1jKITRHm8A 6mXopiVzQpW8ZEcXNYezHTr2uCc5c6g= -----END CERTIFICATE-----Generated at Wed Nov 5 10:31:08 2025 by rpki-client