$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9eb7b8e1-41cb-3fbe-8639-f169d466bc61.roa File: 9eb7b8e1-41cb-3fbe-8639-f169d466bc61.roa (raw, json) Hash identifier: 9ADp8QeiuVi0uR/0G0hsUkIx57ynS1vIhH6s34b3UVk= Subject key identifier: DA:E6:54:76:88:30:42:58:E8:A1:61:83:3A:DD:68:D2:31:75:3C:AB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAD628BD82089EC49F8395880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9eb7b8e1-41cb-3fbe-8639-f169d466bc61.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 168.138.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8b:d8:20:89:ec:49:f8:39:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=8dab2f52-686b-4465-8c8c-04c865659add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b7:49:3e:36:84:4c:74:be:80:fd:c5:fc:87: 20:a4:63:e9:d2:13:16:06:2c:bb:8f:74:2e:78:78: 7d:fb:fa:68:c2:af:7c:bd:2b:49:dd:67:7b:ab:28: 3c:76:2d:0d:cd:15:9a:c0:ac:84:d0:5c:8e:f5:e3: 39:e7:38:35:61:03:5b:c8:f1:da:c4:90:e4:3f:89: ec:64:40:d4:1a:34:53:91:10:cd:03:e4:84:e8:63: 4d:52:2b:a9:43:a7:2c:57:4d:95:e8:3e:27:c3:28: fb:3d:80:a5:1a:b4:27:e5:56:ac:a3:42:54:91:5a: 14:e3:3a:51:95:41:f6:be:39:66:ca:ad:33:9e:ba: 35:67:7e:ed:41:11:a8:7f:56:da:2f:c6:06:1e:dc: 2e:91:cb:61:0b:1d:e2:78:7e:96:74:52:74:8b:a8: 24:40:bc:89:af:43:7c:4c:ec:2b:c2:11:a1:a6:21: c3:72:49:36:3f:06:23:70:01:91:d6:7d:71:16:db: fb:2b:95:11:16:38:27:40:84:52:3f:b8:18:da:99: fd:5a:e3:39:68:a5:b9:e8:c7:21:a3:13:f8:b6:15: 8f:f1:fc:ca:11:3b:06:20:3b:4d:fc:f2:2c:e0:50: 8f:54:f3:61:ab:98:66:89:6b:52:12:c3:3b:e0:4d: 4c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E6:54:76:88:30:42:58:E8:A1:61:83:3A:DD:68:D2:31:75:3C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9eb7b8e1-41cb-3fbe-8639-f169d466bc61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1f:eb:00:27:2b:78:ab:b1:7d:8e:9d:39:38:95:1f:52:be: 66:32:30:ef:bb:85:cb:28:d1:7a:88:6f:7c:08:0c:60:94:f2: ad:5a:5c:e6:24:49:0f:ee:46:5e:91:21:0e:44:ab:71:70:6e: ce:0f:55:15:2c:f9:4a:52:45:0e:dd:0e:ff:2b:d4:f9:b0:04: c8:30:a2:b0:35:97:3d:e9:fa:69:a6:82:85:32:d4:40:d2:95: d1:7c:73:e1:9e:29:4c:6c:c9:81:43:05:33:94:66:7b:7e:54: 8f:d9:6e:43:3f:ed:20:c6:8e:63:a9:56:71:04:b9:ae:7b:43: 33:dd:b3:f1:6a:c9:d1:52:83:13:1e:86:4e:fc:c8:6e:ed:4a: cc:3a:ff:40:30:ae:c1:68:fe:97:fc:e9:a5:7c:2e:f5:3c:51: 9b:f8:71:28:c7:95:ec:19:1d:84:05:b3:b8:61:d9:cc:3b:3c: bb:98:f7:f1:a4:28:0e:16:68:eb:12:3e:bf:4e:13:0a:8e:bf: 3a:d8:6b:db:7c:c5:eb:f4:b3:3f:93:ed:d4:3e:b8:a2:b3:99: f6:19:47:59:0a:a7:27:a5:7f:b8:09:24:5e:51:04:c5:4d:6d: a5:e6:8a:a1:5f:35:cc:bd:4b:00:18:96:e4:5c:6a:88:8d:50: c5:69:07:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYovYIInsSfg5WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk OGRhYjJmNTItNjg2Yi00NDY1LThjOGMtMDRjODY1NjU5YWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7dJPjaETHS+gP3F/IcgpGPp0hMWBiy7j3Qu eHh9+/powq98vStJ3Wd7qyg8di0NzRWawKyE0FyO9eM55zg1YQNbyPHaxJDkP4ns ZEDUGjRTkRDNA+SE6GNNUiupQ6csV02V6D4nwyj7PYClGrQn5Vaso0JUkVoU4zpR lUH2vjlmyq0znro1Z37tQRGof1baL8YGHtwukcthCx3ieH6WdFJ0i6gkQLyJr0N8 TOwrwhGhpiHDckk2PwYjcAGR1n1xFtv7K5URFjgnQIRSP7gY2pn9WuM5aKW56Mch oxP4thWP8fzKETsGIDtN/PIs4FCPVPNhq5hmiWtSEsM74E1MvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrmVHaIMEJY6KFhgzrdaNIxdTyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWViN2I4ZTEtNDFjYi0z ZmJlLTg2MzktZjE2OWQ0NjZiYzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEf6wAnK3irsX2OnTk4lR9SvmYyMO+7hcso0XqIb3wIDGCU8q1aXOYk SQ/uRl6RIQ5Eq3Fwbs4PVRUs+UpSRQ7dDv8r1PmwBMgworA1lz3p+mmmgoUy1EDS ldF8c+GeKUxsyYFDBTOUZnt+VI/ZbkM/7SDGjmOpVnEEua57QzPds/FqydFSgxMe hk78yG7tSsw6/0AwrsFo/pf86aV8LvU8UZv4cSjHlewZHYQFs7hh2cw7PLuY9/Gk KA4WaOsSPr9OEwqOvzrYa9t8xev0sz+T7dQ+uKKzmfYZR1kKpyelf7gJJF5RBMVN baXmiqFfNcy9SwAYluRcaoiNUMVpByo= -----END CERTIFICATE-----Generated at Wed Nov 5 04:57:53 2025 by rpki-client