$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a463a089-b6dc-393a-8a58-dc0bc647c789.roa File: a463a089-b6dc-393a-8a58-dc0bc647c789.roa (raw, json) Hash identifier: cSvlcGzU7Azw2qS1/dMRyF4TuTdmxr6za3j+IWa5Tns= Subject key identifier: 91:3C:F6:E6:B9:33:2F:51:BE:E9:D0:F1:F3:B9:4E:BD:E5:47:D4:A5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91CB504E23EECA72F1BE200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a463a089-b6dc-393a-8a58-dc0bc647c789.roa Signing time: Tue 19 Aug 2025 17:41:57 +0000 ROA not before: Tue 19 Aug 2025 17:41:57 +0000 ROA not after: Mon 17 Nov 2025 18:41:57 +0000 asID: 31898 IP address blocks: 168.110.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1c:b5:04:e2:3e:ec:a7:2f:1b:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:41:57 2025 GMT Not After : Nov 17 18:41:57 2025 GMT Subject: CN=a03e894c-d3fe-46ed-b16f-e836515813c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b2:95:ca:62:5a:34:aa:bf:6e:4a:7f:b9:89: 11:33:93:28:a0:62:17:ae:ec:31:13:b2:8e:2a:42: 69:fd:ff:41:ef:f7:22:2b:b0:1a:b3:39:b3:28:c8: 64:e1:74:4a:f5:e8:99:32:99:e6:6e:ad:48:5b:eb: 9c:12:65:2b:d8:31:f8:5a:cd:6d:c1:02:a2:81:fd: 2a:57:06:ac:a2:0f:c2:ef:16:50:7b:94:1b:86:ac: 3f:96:19:c0:a3:ae:66:ee:52:68:a6:9b:06:ca:3d: 69:34:31:f6:18:d2:76:99:66:4b:b8:d1:a1:08:ce: cd:88:3e:42:78:d2:0a:47:83:3a:8b:9c:50:bd:6b: 8e:f7:2f:74:8a:fa:37:48:24:d1:5d:45:25:5d:de: e7:9c:3a:0b:bc:6b:33:ff:40:a0:39:62:0b:1c:ce: 99:28:a0:02:bb:f3:ea:c2:15:a5:db:e8:02:41:ac: 81:4d:58:ac:78:9b:d6:07:db:b6:b6:fd:c5:0e:ab: 8a:97:2b:f8:44:7d:dc:0a:2a:66:3f:1c:1c:6a:24: 74:07:79:4d:fd:24:84:76:f4:c2:fb:3c:3d:49:52: d7:bb:35:71:f6:e8:8c:19:da:51:4f:45:14:23:75: 91:2c:46:fe:6a:43:57:2b:6b:5c:e5:8b:ea:83:42: 9b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3C:F6:E6:B9:33:2F:51:BE:E9:D0:F1:F3:B9:4E:BD:E5:47:D4:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a463a089-b6dc-393a-8a58-dc0bc647c789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.110.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:77:49:56:80:4c:c8:68:8d:d6:25:c5:ce:0d:e1:d4:4b:4c: ab:4c:ed:9e:a8:46:35:3b:d4:a7:2f:0d:89:2a:04:f0:7f:0f: 3c:d5:a8:d4:c7:4e:ca:92:46:3a:24:ba:fd:a6:15:2d:cd:88: e3:06:8b:c3:94:62:d5:ed:80:6e:d5:3e:3d:e2:2a:fb:92:21: c9:9f:a3:a4:9c:ff:95:89:64:b1:05:2f:fb:4a:0f:1b:00:22: e2:79:44:14:c8:9e:7e:82:68:e9:d2:2a:d1:04:16:ef:0e:ec: a2:9e:fc:3e:38:f7:2f:63:27:f4:75:bc:2e:0f:d1:14:7d:ab: af:af:92:58:e1:54:56:70:11:53:d5:bc:c9:a7:ca:d3:d0:d6: b8:a9:77:34:8a:e6:4a:39:96:a0:04:ef:ea:c5:86:0c:f9:39: 4e:7f:20:57:7d:5d:ef:9d:10:3f:3f:7c:af:52:79:7a:4a:e6: 7e:fa:1c:27:e1:a4:48:fc:70:98:93:4e:ca:f7:6f:b8:b8:ac: 69:4d:a9:4c:07:da:56:b8:a9:2b:c9:7f:62:b6:9c:69:31:f2: e4:24:04:32:0f:b7:b8:d6:a7:e4:85:ff:2a:72:a9:9c:ae:c3: 6f:fb:65:ef:09:6f:dd:4b:a6:03:51:08:ef:ab:e8:de:62:97: 9c:4f:12:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpHLUE4j7spy8b4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3NDE1N1oXDTI1MTExNzE4NDE1N1owLzEtMCsGA1UEAxMk YTAzZTg5NGMtZDNmZS00NmVkLWIxNmYtZTgzNjUxNTgxM2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbKVymJaNKq/bkp/uYkRM5MooGIXruwxE7KO KkJp/f9B7/ciK7AaszmzKMhk4XRK9eiZMpnmbq1IW+ucEmUr2DH4Ws1twQKigf0q Vwasog/C7xZQe5Qbhqw/lhnAo65m7lJoppsGyj1pNDH2GNJ2mWZLuNGhCM7NiD5C eNIKR4M6i5xQvWuO9y90ivo3SCTRXUUlXd7nnDoLvGsz/0CgOWILHM6ZKKACu/Pq whWl2+gCQayBTViseJvWB9u2tv3FDquKlyv4RH3cCipmPxwcaiR0B3lN/SSEdvTC +zw9SVLXuzVx9uiMGdpRT0UUI3WRLEb+akNXK2tc5Yvqg0KbKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJE89ua5My9RvunQ8fO5Tr3lR9SlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTQ2M2EwODktYjZkYy0z OTNhLThhNTgtZGMwYmM2NDdjNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqG7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKp3SVaATMhojdYlxc4N4dRLTKtM7Z6oRjU71KcvDYkqBPB/DzzVqNTH TsqSRjokuv2mFS3NiOMGi8OUYtXtgG7VPj3iKvuSIcmfo6Sc/5WJZLEFL/tKDxsA IuJ5RBTInn6CaOnSKtEEFu8O7KKe/D449y9jJ/R1vC4P0RR9q6+vkljhVFZwEVPV vMmnytPQ1ripdzSK5ko5lqAE7+rFhgz5OU5/IFd9Xe+dED8/fK9SeXpK5n76HCfh pEj8cJiTTsr3b7i4rGlNqUwH2la4qSvJf2K2nGkx8uQkBDIPt7jWp+SF/ypyqZyu w2/7Ze8Jb91LpgNRCO+r6N5il5xPEr8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:31:39 2025 by rpki-client