$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc7cf39c-b0aa-37be-a5b7-9842a4918576.roa File: cc7cf39c-b0aa-37be-a5b7-9842a4918576.roa (raw, json) Hash identifier: 3oJEQThz/RCHqx5q37Dz4Ki+cP9tubxHAE1heqB4RyA= Subject key identifier: 80:E3:17:49:A3:27:75:E4:85:07:DB:36:57:58:45:F9:E4:1D:BD:B8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B9F6CDAED6D81CCAB0C398800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc7cf39c-b0aa-37be-a5b7-9842a4918576.roa Signing time: Fri 24 Oct 2025 01:00:30 +0000 ROA not before: Fri 24 Oct 2025 01:00:30 +0000 ROA not after: Thu 22 Jan 2026 02:00:30 +0000 asID: 46558 IP address blocks: 136.248.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:6c:da:ed:6d:81:cc:ab:0c:39:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 24 01:00:30 2025 GMT Not After : Jan 22 02:00:30 2026 GMT Subject: CN=5536be35-c361-44e6-ab0a-3d14f2a88925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:37:4c:71:e6:dc:75:2c:0a:f5:4f:53:2b:b7: b6:c9:a5:10:0c:96:75:02:29:94:8b:d8:27:96:99: a7:9c:fb:9c:be:60:b1:19:07:28:d9:da:11:87:c3: 40:27:19:38:3f:a1:eb:57:18:cb:92:b9:45:6f:32: ec:f1:55:4d:1b:ad:65:cd:2e:f5:11:cd:a2:70:b7: 4a:00:9e:2f:a3:48:c6:4d:59:fd:d3:6e:a7:55:89: e3:7f:f9:27:f0:8c:75:0a:85:e0:03:81:f6:df:4e: 78:80:95:db:57:bc:af:c9:e0:71:c4:25:33:8a:4a: c5:6b:ea:7c:ce:bc:ca:97:2c:29:82:dd:b9:99:56: 37:f0:32:c4:80:bd:c2:71:fc:1a:8d:a0:06:91:58: 48:8c:68:19:a0:03:04:3d:17:91:cf:57:c6:05:ef: e4:1d:da:41:bc:99:4f:85:b7:fc:45:70:9e:ba:15: 47:aa:c2:4f:26:b6:52:84:25:b9:89:57:a5:c4:2a: e9:ea:27:fc:4d:a1:ef:bd:84:05:b5:04:fc:ac:ee: 83:18:25:76:16:a8:55:42:d3:b9:90:16:e7:e1:e9: 58:d8:87:aa:bb:32:67:4f:26:cd:07:c6:69:a3:ec: bd:0a:27:86:9e:24:70:be:e6:c6:69:57:2a:d3:f0: 26:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E3:17:49:A3:27:75:E4:85:07:DB:36:57:58:45:F9:E4:1D:BD:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc7cf39c-b0aa-37be-a5b7-9842a4918576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 136.248.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e5:ff:03:6a:87:db:96:41:7c:4e:e7:6c:d2:15:03:96:48: c4:f1:7f:d1:ca:dc:08:d3:8b:6f:66:ae:87:db:fd:61:be:33: 55:ee:11:71:be:fd:db:71:7f:ab:56:9a:67:81:85:8d:8a:79: 1b:fc:39:8c:a2:6f:51:26:0c:58:55:7c:f1:ee:d9:6e:b0:26: d5:48:9f:03:51:69:22:c7:8e:0a:a6:ea:a6:08:aa:7e:f7:53: a4:f8:35:6a:15:9b:45:57:fd:e7:07:74:f4:c3:f9:af:73:f0: 6f:ff:f1:89:f0:23:72:fa:0c:8e:c4:d0:f4:f6:55:bd:2e:ce: c7:f1:d5:a1:65:ba:15:36:e8:a0:7a:4b:37:a0:89:85:d4:5b: 32:bf:a0:60:d9:ce:73:64:b7:d4:ea:d3:39:ee:31:59:ef:d6: 59:01:7e:fa:8d:3e:9f:96:3e:5e:7c:a7:d4:3b:c5:71:28:a7: 4b:c5:10:bd:4e:fe:ca:3a:57:2b:60:59:cc:0d:d8:47:ef:b7: c0:f3:6c:6d:11:9f:fb:f8:c5:d9:28:dc:6d:c5:2f:f9:68:06: a3:0f:12:be:82:a0:11:1e:61:15:08:81:07:97:12:6c:4f:99: fd:22:c8:f6:fb:cd:2d:ad:69:88:49:d3:14:f1:b6:40:0b:30: 68:e2:16:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEufbNrtbYHMqww5iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyNDAxMDAzMFoXDTI2MDEyMjAyMDAzMFowLzEtMCsGA1UEAxMk NTUzNmJlMzUtYzM2MS00NGU2LWFiMGEtM2QxNGYyYTg4OTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjdMcebcdSwK9U9TK7e2yaUQDJZ1AimUi9gn lpmnnPucvmCxGQco2doRh8NAJxk4P6HrVxjLkrlFbzLs8VVNG61lzS71Ec2icLdK AJ4vo0jGTVn9026nVYnjf/kn8Ix1CoXgA4H23054gJXbV7yvyeBxxCUzikrFa+p8 zrzKlywpgt25mVY38DLEgL3CcfwajaAGkVhIjGgZoAMEPReRz1fGBe/kHdpBvJlP hbf8RXCeuhVHqsJPJrZShCW5iVelxCrp6if8TaHvvYQFtQT8rO6DGCV2FqhVQtO5 kBbn4elY2IequzJnTybNB8Zpo+y9CieGniRwvubGaVcq0/AmCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDjF0mjJ3XkhQfbNldYRfnkHb24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2M3Y2YzOWMtYjBhYS0z N2JlLWE1YjctOTg0MmE0OTE4NTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiPj/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjl/wNqh9uWQXxO52zSFQOWSMTxf9HK3AjTi29mrofb/WG+M1XuEXG+ /dtxf6tWmmeBhY2KeRv8OYyib1EmDFhVfPHu2W6wJtVInwNRaSLHjgqm6qYIqn73 U6T4NWoVm0VX/ecHdPTD+a9z8G//8YnwI3L6DI7E0PT2Vb0uzsfx1aFluhU26KB6 SzegiYXUWzK/oGDZznNkt9Tq0znuMVnv1lkBfvqNPp+WPl58p9Q7xXEop0vFEL1O /so6VytgWcwN2Efvt8DzbG0Rn/v4xdko3G3FL/loBqMPEr6CoBEeYRUIgQeXEmxP mf0iyPb7zS2taYhJ0xTxtkALMGjiFs8= -----END CERTIFICATE-----Generated at Wed Nov 5 04:51:04 2025 by rpki-client