$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4173deef-ef45-3ca1-90ff-a2212aa5790b.roa File: 4173deef-ef45-3ca1-90ff-a2212aa5790b.roa (raw, json) Hash identifier: brfrFjIyEkKU6pLnb7hmDNTrqFmilJP+BLxh485/Mro= Subject key identifier: D1:2C:11:30:82:05:F3:AC:16:81:8B:07:FA:D3:41:56:CF:49:B8:70 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE8DB6BDC589901125CFEB00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4173deef-ef45-3ca1-90ff-a2212aa5790b.roa Signing time: Thu 21 Aug 2025 16:28:41 +0000 ROA not before: Thu 21 Aug 2025 16:28:41 +0000 ROA not after: Wed 19 Nov 2025 17:28:41 +0000 asID: 31898 IP address blocks: 165.1.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:8d:b6:bd:c5:89:90:11:25:cf:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 16:28:41 2025 GMT Not After : Nov 19 17:28:41 2025 GMT Subject: CN=af6f6788-3e4d-43ea-a665-0e3430f99938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9c:c7:07:47:0c:9d:27:68:e0:c1:7e:ea:80: 0c:b4:e1:50:28:af:b0:b7:16:01:d9:eb:78:e1:63: 58:78:26:83:a3:69:40:1d:d2:eb:3b:0e:a7:69:2a: 32:f5:73:91:fa:66:8a:2c:eb:66:c1:e5:60:b6:18: 24:0c:ba:25:d9:60:e2:e5:b6:1e:e3:c0:75:52:3e: 28:52:10:cc:65:60:9a:a1:ec:2d:00:fa:c6:98:f0: ac:7e:59:90:5b:3f:26:95:f6:d9:d1:f6:cf:f4:ac: 1d:d7:33:e6:8b:b7:38:87:d6:5d:82:ef:de:04:b1: ab:03:57:92:81:52:3b:5c:7c:d4:49:f7:e3:9f:21: 91:70:8d:4d:47:cb:d9:c6:fe:1e:33:44:ad:30:68: 98:24:83:fd:02:02:29:b8:17:56:75:ce:5b:e4:3d: 01:f6:c2:27:8d:c3:74:67:d9:69:da:06:f6:6f:d4: 65:3a:22:96:cf:5d:4d:36:28:9c:53:72:d3:c4:68: 4c:3a:e4:2a:6f:d6:08:22:47:84:fa:2d:82:d2:81: b2:4d:61:25:38:39:4e:1d:48:67:08:01:ad:55:c5: 87:49:2d:df:b0:8d:4e:db:52:f2:42:24:07:0c:52: 89:2f:63:e8:07:ca:ab:04:78:e3:50:86:a5:e1:14: 62:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2C:11:30:82:05:F3:AC:16:81:8B:07:FA:D3:41:56:CF:49:B8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4173deef-ef45-3ca1-90ff-a2212aa5790b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 165.1.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:da:95:8d:a7:a5:c5:0e:23:6c:80:28:da:ec:a7:63:8d:ce: e3:29:e7:75:66:e6:6a:69:70:ff:43:fd:cc:42:b1:2a:ab:73: 7d:d3:1f:d1:48:f3:13:2b:c3:85:b5:cb:e8:f6:35:3c:f7:09: c6:9b:50:ef:00:9f:33:3a:fa:45:37:fb:d6:0b:37:bc:89:90: bb:9e:74:36:7a:4b:a8:f1:c3:33:ac:2b:bd:11:be:06:3e:94: 89:b7:8a:35:13:82:9f:04:27:ce:fd:96:3c:dd:12:e7:f9:1d: 10:9a:1d:3b:b9:fb:68:f8:17:e4:8e:5c:81:01:1b:10:34:a7: 4f:62:61:66:b7:96:a2:ae:0b:e3:b8:8f:9f:cf:cf:90:ed:09: ef:2b:4c:09:4f:09:68:a4:95:0d:8d:af:fa:4d:bd:3e:d7:a9: ee:bc:49:0b:23:00:27:7b:8b:e2:ef:4b:f1:ad:88:29:00:68: 62:fa:c4:0d:ef:bc:e6:55:f7:4f:05:47:dd:b0:ee:e9:a7:c8: e6:d8:2e:98:ad:a1:fd:b2:57:41:ef:97:06:29:70:04:36:39: e3:64:f5:3c:87:47:29:95:f0:0d:64:d0:31:ac:9a:b1:4b:7e: 1d:91:f3:b1:bc:7a:b3:e0:54:3c:0c:8c:f8:e3:3d:3d:9d:6c: 49:91:01:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErujba9xYmQESXP6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE2Mjg0MVoXDTI1MTExOTE3Mjg0MVowLzEtMCsGA1UEAxMk YWY2ZjY3ODgtM2U0ZC00M2VhLWE2NjUtMGUzNDMwZjk5OTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpzHB0cMnSdo4MF+6oAMtOFQKK+wtxYB2et4 4WNYeCaDo2lAHdLrOw6naSoy9XOR+maKLOtmweVgthgkDLol2WDi5bYe48B1Uj4o UhDMZWCaoewtAPrGmPCsflmQWz8mlfbZ0fbP9Kwd1zPmi7c4h9Zdgu/eBLGrA1eS gVI7XHzUSffjnyGRcI1NR8vZxv4eM0StMGiYJIP9AgIpuBdWdc5b5D0B9sInjcN0 Z9lp2gb2b9RlOiKWz11NNiicU3LTxGhMOuQqb9YIIkeE+i2C0oGyTWElODlOHUhn CAGtVcWHSS3fsI1O21LyQiQHDFKJL2PoB8qrBHjjUIal4RRiFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEsETCCBfOsFoGLB/rTQVbPSbhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDE3M2RlZWYtZWY0NS0z Y2ExLTkwZmYtYTIyMTJhYTU3OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpQFuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7alY2npcUOI2yAKNrsp2ONzuMp53Vm5mppcP9D/cxCsSqrc33TH9FI 8xMrw4W1y+j2NTz3CcabUO8AnzM6+kU3+9YLN7yJkLuedDZ6S6jxwzOsK70RvgY+ lIm3ijUTgp8EJ879ljzdEuf5HRCaHTu5+2j4F+SOXIEBGxA0p09iYWa3lqKuC+O4 j5/Pz5DtCe8rTAlPCWiklQ2Nr/pNvT7Xqe68SQsjACd7i+LvS/GtiCkAaGL6xA3v vOZV908FR92w7umnyObYLpitof2yV0HvlwYpcAQ2OeNk9TyHRymV8A1k0DGsmrFL fh2R87G8erPgVDwMjPjjPT2dbEmRAfM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:33:19 2025 by rpki-client