$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41892b78-f084-31ce-a4dc-a9a8d0fc47ca.roa File: 41892b78-f084-31ce-a4dc-a9a8d0fc47ca.roa (raw, json) Hash identifier: 3Xya9mVvSdwzUzP0KxjPaErM6i/UHK+gL20rxibIESI= Subject key identifier: 5B:9F:A1:C5:E9:A1:85:12:B0:14:02:AE:88:B1:CF:8F:9E:A4:2F:77 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAD628D84EC3E205233E6ED00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41892b78-f084-31ce-a4dc-a9a8d0fc47ca.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 158.101.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8d:84:ec:3e:20:52:33:e6:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=3dddcc6d-5e06-4894-9fcb-c9bb2318d0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4b:96:b2:0b:e7:63:c1:e4:11:90:5e:2d:69: 91:bd:e2:2a:f9:f4:f0:e2:70:b4:09:f1:9a:b7:5f: be:49:17:12:fb:cb:2b:33:e6:7d:2d:4d:c8:e7:1e: 6b:c2:e3:77:4c:2e:23:0c:86:20:0f:aa:a8:76:1a: 45:cd:d0:d0:7c:38:d3:2b:ae:07:34:fa:6e:4e:e0: a7:95:1b:d6:45:a6:b8:f6:4d:d7:5b:dc:ad:b2:d9: ed:00:43:45:91:d5:5b:c2:31:87:5f:87:e2:a9:3e: 7a:53:39:57:5f:c1:1e:f6:7e:7a:85:40:82:49:4f: fd:e6:6d:4a:0c:f7:75:ca:86:c3:b1:43:ba:2b:f6: a8:21:d5:5d:c4:e5:d6:e1:7f:b0:e7:19:50:a3:67: 18:ba:bf:5b:7c:0c:2e:7e:ff:0e:56:43:f2:03:12: 73:73:0e:35:55:08:4c:7b:cb:47:29:a3:42:bf:e4: 1a:c7:4d:b1:e4:98:53:d7:37:43:49:2e:13:4b:06: 27:52:48:e0:f1:15:bf:f0:33:51:74:cb:1c:12:58: e1:59:a9:e8:a7:7e:9e:ff:e5:cd:dd:21:ca:b9:8e: b6:14:52:24:99:6d:6a:97:86:8e:ae:91:96:de:81: d8:b7:be:35:ea:13:7c:4b:9c:a0:80:72:bb:d9:4f: b6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9F:A1:C5:E9:A1:85:12:B0:14:02:AE:88:B1:CF:8F:9E:A4:2F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41892b78-f084-31ce-a4dc-a9a8d0fc47ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.101.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:bc:b3:92:db:ca:0d:56:74:ed:7c:e2:42:76:2f:a5:c3:7b: 04:84:71:b7:52:3d:2f:33:19:ba:f7:13:7a:56:8a:1c:63:cb: c6:77:59:dd:f6:12:ee:28:97:51:e3:b6:56:a4:77:7a:c2:04: 36:53:62:3a:3b:2b:f4:03:ed:27:03:41:bd:56:3c:bc:06:12: ce:58:dc:8d:d0:95:cf:6f:b3:c5:9d:5e:33:dc:2a:db:53:f0: 95:e3:0d:73:be:ac:e4:9a:4f:10:b1:62:90:cc:3a:ad:0a:ce: 81:b7:1b:0b:f8:83:f5:5c:8d:e7:e8:d7:69:14:77:c0:01:cf: b5:07:eb:32:f4:ef:70:c2:90:4d:a4:11:29:3f:a2:fa:84:90: 15:ad:6e:79:2f:1c:98:2b:4c:d5:1c:81:fd:ff:90:ad:69:34: ca:d9:af:2c:29:1d:a1:95:87:19:26:3e:5a:cf:5a:0e:c4:eb: 61:fb:02:f3:91:ca:1c:3a:c4:ca:2e:d7:96:2e:70:4a:09:6b: 35:dc:90:fa:7e:4a:dc:ce:99:6b:e9:b1:b4:dd:1d:8f:b7:30: d2:89:54:17:20:a6:48:30:0b:05:7f:11:70:72:3c:43:f9:f0: 2a:31:bb:23:b2:13:7b:b7:ad:21:45:de:61:5a:48:bb:b8:ea: 8c:61:b7:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYo2E7D4gUjPm7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk M2RkZGNjNmQtNWUwNi00ODk0LTlmY2ItYzliYjIzMThkMGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEuWsgvnY8HkEZBeLWmRveIq+fTw4nC0CfGa t1++SRcS+8srM+Z9LU3I5x5rwuN3TC4jDIYgD6qodhpFzdDQfDjTK64HNPpuTuCn lRvWRaa49k3XW9ytstntAENFkdVbwjGHX4fiqT56UzlXX8Ee9n56hUCCSU/95m1K DPd1yobDsUO6K/aoIdVdxOXW4X+w5xlQo2cYur9bfAwufv8OVkPyAxJzcw41VQhM e8tHKaNCv+Qax02x5JhT1zdDSS4TSwYnUkjg8RW/8DNRdMscEljhWanop36e/+XN 3SHKuY62FFIkmW1ql4aOrpGW3oHYt7416hN8S5yggHK72U+2NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFufocXpoYUSsBQCroixz4+epC93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDE4OTJiNzgtZjA4NC0z MWNlLWE0ZGMtYTlhOGQwZmM0N2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnmVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS8s5Lbyg1WdO184kJ2L6XDewSEcbdSPS8zGbr3E3pWihxjy8Z3Wd32 Eu4ol1Hjtlakd3rCBDZTYjo7K/QD7ScDQb1WPLwGEs5Y3I3Qlc9vs8WdXjPcKttT 8JXjDXO+rOSaTxCxYpDMOq0KzoG3Gwv4g/Vcjefo12kUd8ABz7UH6zL073DCkE2k ESk/ovqEkBWtbnkvHJgrTNUcgf3/kK1pNMrZrywpHaGVhxkmPlrPWg7E62H7AvOR yhw6xMou15YucEoJazXckPp+StzOmWvpsbTdHY+3MNKJVBcgpkgwCwV/EXByPEP5 8CoxuyOyE3u3rSFF3mFaSLu46oxhtxw= -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:47 2025 by rpki-client