$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40242586-5c6a-3e3a-bf51-9363bb879d47.roa File: 40242586-5c6a-3e3a-bf51-9363bb879d47.roa (raw, json) Hash identifier: ksi1GB7yyNaRYafANsjtmJWJrpPqAPpxQqkXI8MUnpU= Subject key identifier: FC:A6:93:60:D5:F5:5A:8E:F5:D7:72:56:94:E1:EB:FF:BF:B1:DC:35 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAD628C048F0C07D35A0E6B98 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40242586-5c6a-3e3a-bf51-9363bb879d47.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 152.67.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8c:04:8f:0c:07:d3:5a:0e:6b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=e5a841a1-5095-4a89-91e6-54d7d95793c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:6b:c2:54:23:a0:54:69:a7:bb:61:f6:c5: 1b:fe:36:25:3f:5e:36:aa:66:c3:8e:0e:a3:5d:56: e3:e2:cc:38:d0:1b:72:41:25:09:7e:1d:ea:bc:49: 18:5d:60:06:0d:48:ac:0e:9b:f7:38:29:82:ae:6c: 53:4d:8f:b4:77:4a:80:7d:5e:89:94:e6:13:3f:1c: f7:b7:31:4c:64:27:7c:96:29:3d:f7:f7:42:2b:88: bf:04:ae:95:96:fe:d8:11:3d:59:70:73:ea:9a:66: 69:47:3c:68:4e:d6:2c:6d:c6:32:fd:69:af:70:78: 47:4a:8c:25:fc:ba:d2:e3:dc:10:84:07:f0:8c:64: 19:1a:83:23:c4:16:6a:bc:05:c7:d8:d5:0c:1d:ad: b4:03:05:e9:81:1f:45:0d:8d:95:d7:b2:b1:02:62: 53:2f:44:02:93:94:25:05:00:70:c1:4f:0d:0e:15: 5f:46:3b:fb:81:69:69:2a:47:d1:63:4c:a9:c8:d0: ef:91:4b:99:67:57:1a:84:b1:27:e6:0b:14:af:dc: 70:e1:fa:b7:f1:ee:6e:03:b0:2d:e6:aa:e6:33:d8: 5a:52:58:15:69:15:e5:c5:9e:39:b0:67:2d:9d:69: ed:30:43:9c:53:60:4b:00:6b:0f:b3:76:37:71:9d: bf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A6:93:60:D5:F5:5A:8E:F5:D7:72:56:94:E1:EB:FF:BF:B1:DC:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40242586-5c6a-3e3a-bf51-9363bb879d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.67.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:fa:1f:fd:88:c4:c0:c5:54:ba:6b:9a:31:43:a3:d7:35:70: fb:f2:d5:21:83:cc:94:16:0f:c7:7c:94:0a:28:eb:93:7a:3c: be:0c:85:f3:b5:a9:33:e5:84:81:c0:52:75:44:cd:43:33:09: bb:86:0d:13:e8:5b:7f:cf:cf:4b:b0:90:24:7f:18:18:8d:71: 45:bf:f3:f3:8f:bd:8f:32:52:b6:bf:a8:1f:8d:45:00:63:23: 4e:05:14:e0:49:df:e8:15:2b:fe:5e:12:f0:42:36:e4:20:54: 92:0d:c6:53:75:5c:0e:a2:13:32:bd:c1:a5:54:a8:1c:27:9f: cc:39:ee:b5:51:6c:c5:2f:c0:89:c0:fe:bf:7d:4d:95:87:c6: 37:da:08:65:4f:c8:4c:e9:0a:81:d3:87:bf:ab:2d:7b:ba:e5: c7:7d:a8:25:61:f5:1e:22:95:3a:fb:e5:0f:01:81:99:86:0a: d2:a0:37:97:20:af:97:62:60:bb:43:6a:26:cd:7d:c4:db:92: 92:1e:14:ff:c7:23:ee:62:b4:b0:24:85:09:e2:b0:02:43:05: f0:55:ff:22:9f:d4:bc:ce:00:17:5e:b7:cf:3a:86:02:db:ba: a4:23:f5:ec:5d:b4:07:d2:7e:bd:c7:a6:6e:92:d2:81:81:b9: 46:da:fc:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYowEjwwH01oOa5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZTVhODQxYTEtNTA5NS00YTg5LTkxZTYtNTRkN2Q5NTc5M2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6drwlQjoFRpp7th9sUb/jYlP142qmbDjg6j XVbj4sw40BtyQSUJfh3qvEkYXWAGDUisDpv3OCmCrmxTTY+0d0qAfV6JlOYTPxz3 tzFMZCd8lik99/dCK4i/BK6Vlv7YET1ZcHPqmmZpRzxoTtYsbcYy/WmvcHhHSowl /LrS49wQhAfwjGQZGoMjxBZqvAXH2NUMHa20AwXpgR9FDY2V17KxAmJTL0QCk5Ql BQBwwU8NDhVfRjv7gWlpKkfRY0ypyNDvkUuZZ1cahLEn5gsUr9xw4fq38e5uA7At 5qrmM9haUlgVaRXlxZ45sGctnWntMEOcU2BLAGsPs3Y3cZ2/0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPymk2DV9VqO9ddyVpTh6/+/sdw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDAyNDI1ODYtNWM2YS0z ZTNhLWJmNTEtOTM2M2JiODc5ZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmENgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGP6H/2IxMDFVLprmjFDo9c1cPvy1SGDzJQWD8d8lAoo65N6PL4MhfO1 qTPlhIHAUnVEzUMzCbuGDRPoW3/Pz0uwkCR/GBiNcUW/8/OPvY8yUra/qB+NRQBj I04FFOBJ3+gVK/5eEvBCNuQgVJINxlN1XA6iEzK9waVUqBwnn8w57rVRbMUvwInA /r99TZWHxjfaCGVPyEzpCoHTh7+rLXu65cd9qCVh9R4ilTr75Q8BgZmGCtKgN5cg r5diYLtDaibNfcTbkpIeFP/HI+5itLAkhQnisAJDBfBV/yKf1LzOABdet886hgLb uqQj9exdtAfSfr3Hpm6S0oGBuUba/O0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:33:07 2025 by rpki-client