$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e6eeda35-f4a8-3be9-be7d-f3ee87ab1f3d.roa File: e6eeda35-f4a8-3be9-be7d-f3ee87ab1f3d.roa (raw, json) Hash identifier: Pv36z6ZJKwn5PBUJ3jnDD0QX3fcE/KTLDR4BBmd5Bzs= Subject key identifier: 15:A8:1A:E1:BE:1D:B9:A6:C4:34:7E:28:BF:A4:B8:77:AF:83:E2:91 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAD628EA5DE45B8AB331C1500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e6eeda35-f4a8-3be9-be7d-f3ee87ab1f3d.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 152.67.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8e:a5:de:45:b8:ab:33:1c:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=b9766d3d-1dc7-422c-8644-50131ff29175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:83:93:de:83:95:a7:84:4f:d6:71:8e:54:39: af:67:c3:36:71:09:1e:a2:5d:5c:47:f7:78:4a:4f: 3b:f1:d5:66:dd:89:fa:02:4d:84:0e:79:2d:80:d9: f9:3c:2d:a5:9f:f0:b0:d6:bd:60:40:cc:40:92:e3: 51:e6:2d:e4:32:83:59:7d:6e:7b:12:c1:ad:78:47: 0e:a1:bd:28:99:b6:69:96:3b:09:f2:21:f4:d1:f7: 29:5a:15:d8:09:c1:00:49:af:b5:7b:b7:b3:ed:4f: 5a:b5:a8:1d:fc:07:7d:9a:87:c7:9c:a4:cb:cb:12: 14:8e:bf:31:a9:4b:d5:47:47:db:c1:00:96:21:48: a2:3b:8e:bd:d2:26:79:b0:bd:da:4d:31:ae:55:1f: c8:88:ef:c3:23:e8:49:a8:0a:46:53:6d:72:1c:68: 26:be:ff:40:ca:0f:a2:63:95:19:cb:1b:29:21:b4: 4a:d4:dc:a4:67:73:9e:19:72:70:07:97:2e:d8:bf: ce:97:25:2f:61:09:ea:46:7c:65:7c:c2:03:06:9f: ad:f1:df:74:41:60:d9:57:d3:a8:0a:0c:a7:d1:da: 68:e1:bc:46:29:b7:06:0a:1d:46:5e:53:24:3e:74: 11:ec:79:b1:fa:3e:b6:ca:86:49:f2:44:97:d1:5c: b9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A8:1A:E1:BE:1D:B9:A6:C4:34:7E:28:BF:A4:B8:77:AF:83:E2:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e6eeda35-f4a8-3be9-be7d-f3ee87ab1f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.67.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:60:53:15:fb:6f:ae:9a:ad:3e:8c:b5:22:d7:36:81:b2:21: a0:52:ee:61:bf:c4:4d:2d:0a:39:b8:87:5a:67:b9:e2:58:98: 98:9e:6b:0b:80:1a:cd:60:72:a9:3b:1d:3c:a8:8d:a9:62:95: 4f:47:2e:4f:25:52:99:44:2c:58:2c:ea:f4:d8:aa:b3:6e:61: f0:da:bd:5e:3c:b7:ab:c2:a9:88:13:4b:19:0a:26:e8:2e:88: 17:0d:9a:d2:c1:21:d4:70:ac:f0:34:c2:05:4d:3d:48:8e:29: eb:af:32:08:75:1d:f2:77:f1:7b:65:5c:03:06:cd:de:2e:24: 14:fa:35:be:99:60:85:e1:cb:5c:93:02:65:29:c0:c7:03:2a: f5:61:e8:ee:fd:58:57:8f:50:4b:b8:3c:2c:8c:6f:7b:78:29: 68:7e:3f:38:3d:a8:f6:ff:c7:10:cb:95:92:a9:e4:fc:b4:79: 6d:9a:4c:80:7e:bd:23:ee:2f:75:68:59:56:dd:8c:d8:63:76: d9:c3:7b:dd:37:cc:6c:a8:8a:47:4d:18:58:64:28:c1:35:74: 1a:8d:ee:61:66:8c:3c:25:23:9f:1c:1c:a5:fe:76:48:de:9a: cd:20:29:88:76:a8:18:0b:2f:76:a1:f9:c0:84:7b:0f:d1:17: 60:4a:59:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYo6l3kW4qzMcFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk Yjk3NjZkM2QtMWRjNy00MjJjLTg2NDQtNTAxMzFmZjI5MTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoOT3oOVp4RP1nGOVDmvZ8M2cQkeol1cR/d4 Sk878dVm3Yn6Ak2EDnktgNn5PC2ln/Cw1r1gQMxAkuNR5i3kMoNZfW57EsGteEcO ob0ombZpljsJ8iH00fcpWhXYCcEASa+1e7ez7U9atagd/Ad9mofHnKTLyxIUjr8x qUvVR0fbwQCWIUiiO4690iZ5sL3aTTGuVR/IiO/DI+hJqApGU21yHGgmvv9Ayg+i Y5UZyxspIbRK1NykZ3OeGXJwB5cu2L/OlyUvYQnqRnxlfMIDBp+t8d90QWDZV9Oo Cgyn0dpo4bxGKbcGCh1GXlMkPnQR7Hmx+j62yoZJ8kSX0Vy50QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWoGuG+HbmmxDR+KL+kuHevg+KRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTZlZWRhMzUtZjRhOC0z YmU5LWJlN2QtZjNlZTg3YWIxZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpgUxX7b66arT6MtSLXNoGyIaBS7mG/xE0tCjm4h1pnueJYmJieawuA Gs1gcqk7HTyojalilU9HLk8lUplELFgs6vTYqrNuYfDavV48t6vCqYgTSxkKJugu iBcNmtLBIdRwrPA0wgVNPUiOKeuvMgh1HfJ38XtlXAMGzd4uJBT6Nb6ZYIXhy1yT AmUpwMcDKvVh6O79WFePUEu4PCyMb3t4KWh+Pzg9qPb/xxDLlZKp5Py0eW2aTIB+ vSPuL3VoWVbdjNhjdtnDe903zGyoikdNGFhkKME1dBqN7mFmjDwlI58cHKX+dkje ms0gKYh2qBgLL3ah+cCEew/RF2BKWdY= -----END CERTIFICATE-----Generated at Wed Nov 5 08:51:40 2025 by rpki-client