$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4989ecc3-7b1c-3a21-b1d9-cee199ddf8ff.roa File: 4989ecc3-7b1c-3a21-b1d9-cee199ddf8ff.roa (raw, json) Hash identifier: prfQtTztFEKNaOYQm3/S0zT3P9JeBS2qE9GuCzkfUt8= Subject key identifier: 30:4A:03:A0:94:0C:1A:4C:46:1C:8D:51:1B:EB:C5:0C:CB:EB:9E:B2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B26E5A5336A67F3667EE60320 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4989ecc3-7b1c-3a21-b1d9-cee199ddf8ff.roa Signing time: Wed 10 Sep 2025 20:51:07 +0000 ROA not before: Wed 10 Sep 2025 20:51:07 +0000 ROA not after: Tue 09 Dec 2025 21:51:07 +0000 asID: 54253 IP address blocks: 170.52.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:e5:a5:33:6a:67:f3:66:7e:e6:03:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 20:51:07 2025 GMT Not After : Dec 9 21:51:07 2025 GMT Subject: CN=3fc96b99-229c-45ac-b307-b30dd2c80b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b4:13:6e:83:b2:91:9b:80:79:1a:18:e9:12: 5d:b4:90:51:92:85:77:b8:36:5f:ee:5d:f2:2e:84: bb:64:95:8f:86:da:02:15:de:01:f6:7d:95:cd:40: 28:20:a2:3a:f3:61:9a:9a:f2:d5:26:79:07:b4:64: ab:a5:79:04:38:10:d9:54:ca:ca:0b:de:ee:70:00: fa:15:64:1f:77:47:f1:34:00:9c:23:23:0c:d8:d0: 67:c6:cf:5a:10:59:17:03:8b:f0:51:78:60:00:c6: 90:46:88:71:d3:09:76:48:9e:61:73:a9:e4:4b:42: 12:28:de:aa:2e:30:e2:9d:15:3a:56:03:5d:d3:2e: e6:8d:39:5f:5c:1b:05:a6:ec:17:9c:78:23:79:8b: ad:72:1a:26:d2:e8:1a:33:ff:78:25:5f:88:2b:da: 5d:36:08:35:32:49:d5:c4:95:56:50:3c:d7:60:63: f6:47:d0:42:d1:6e:bf:9b:08:6c:fa:a6:81:e7:8d: 12:e8:88:a9:3a:51:e9:a6:ac:2d:c1:8f:fd:21:bd: e4:4b:c0:81:02:5e:ce:e7:b3:14:04:06:85:4f:ef: a9:8f:8e:91:f4:c2:b9:42:e6:12:54:ee:af:79:2d: e6:16:b9:bf:52:b5:52:3a:31:46:10:ab:ac:4b:78: 18:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4A:03:A0:94:0C:1A:4C:46:1C:8D:51:1B:EB:C5:0C:CB:EB:9E:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4989ecc3-7b1c-3a21-b1d9-cee199ddf8ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.52.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:7d:31:93:44:e3:0f:9f:4f:cd:e3:eb:70:d4:ed:ae:f1:bb: d9:d2:15:0d:c8:03:2a:c2:c8:aa:0c:0d:92:b8:c6:05:6c:c5: 89:88:3a:50:d3:88:d0:ef:fb:e2:a8:ca:24:de:9a:a7:d6:ac: b5:fc:be:f7:8a:aa:f0:c0:51:9c:73:51:99:6c:de:a5:2f:fb: 0e:40:a0:77:ba:e3:c3:fc:d7:31:c8:21:2a:e2:6b:59:9b:c7: 0f:e2:78:f0:1a:1f:3d:5e:2c:37:c6:8f:cc:f7:19:b5:e8:51: 3f:3e:ed:34:c3:f4:19:8c:e0:dd:17:d1:25:3a:0f:9b:16:10: 58:24:26:0f:f4:ae:88:6f:c1:42:10:28:d8:15:fd:af:c0:ba: 4e:bc:86:29:76:70:56:bc:04:a1:32:c9:b2:25:7c:cd:a3:4a: fd:74:34:39:ae:88:c7:21:d6:9a:b4:b2:47:38:15:c9:dc:d0: 77:d3:5d:74:94:2a:34:e2:6f:4c:f9:e9:95:7a:62:e2:a5:ae: 45:77:f8:0d:82:11:38:89:ff:66:61:fb:59:db:96:99:0b:df: f6:8a:dc:3a:77:dd:bd:c5:83:02:6e:a4:92:c3:a1:4d:1d:56: 38:2c:88:b6:25:9f:df:2a:bb:68:83:d1:68:9a:cf:85:fe:06: 0b:e1:3d:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsm5aUzamfzZn7mAyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDIwNTEwN1oXDTI1MTIwOTIxNTEwN1owLzEtMCsGA1UEAxMk M2ZjOTZiOTktMjI5Yy00NWFjLWIzMDctYjMwZGQyYzgwYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLQTboOykZuAeRoY6RJdtJBRkoV3uDZf7l3y LoS7ZJWPhtoCFd4B9n2VzUAoIKI682GamvLVJnkHtGSrpXkEOBDZVMrKC97ucAD6 FWQfd0fxNACcIyMM2NBnxs9aEFkXA4vwUXhgAMaQRohx0wl2SJ5hc6nkS0ISKN6q LjDinRU6VgNd0y7mjTlfXBsFpuwXnHgjeYutchom0ugaM/94JV+IK9pdNgg1MknV xJVWUDzXYGP2R9BC0W6/mwhs+qaB540S6IipOlHppqwtwY/9Ib3kS8CBAl7O57MU BAaFT++pj46R9MK5QuYSVO6veS3mFrm/UrVSOjFGEKusS3gYKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBKA6CUDBpMRhyNURvrxQzL656yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDk4OWVjYzMtN2IxYy0z YTIxLWIxZDktY2VlMTk5ZGRmOGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqjQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB9MZNE4w+fT83j63DU7a7xu9nSFQ3IAyrCyKoMDZK4xgVsxYmIOlDT iNDv++KoyiTemqfWrLX8vveKqvDAUZxzUZls3qUv+w5AoHe648P81zHIISria1mb xw/iePAaHz1eLDfGj8z3GbXoUT8+7TTD9BmM4N0X0SU6D5sWEFgkJg/0rohvwUIQ KNgV/a/Auk68hil2cFa8BKEyybIlfM2jSv10NDmuiMch1pq0skc4Fcnc0HfTXXSU KjTib0z56ZV6YuKlrkV3+A2CETiJ/2Zh+1nblpkL3/aK3Dp33b3FgwJupJLDoU0d VjgsiLYln98qu2iD0Wiaz4X+BgvhPck= -----END CERTIFICATE-----Generated at Wed Nov 5 00:34:47 2025 by rpki-client