$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/9f5bba50-62bf-3c59-95c8-6aaee8d1e73c.roa File: 9f5bba50-62bf-3c59-95c8-6aaee8d1e73c.roa (raw, json) Hash identifier: /dwotZl9x7ipt+WPFUjRmTYvw8NmxG0Tsw8MN8lVSMs= Subject key identifier: 21:32:9D:ED:C1:05:A1:D0:87:06:BE:98:D2:21:29:00:19:8C:87:18 Certificate issuer: /CN=c6dce4dd-aa4a-4077-aa50-8e935d660edc Certificate serial: 010D0C9F4328584B3D46A7D907914CFB2DEC3EC0 Authority key identifier: E0:47:A7:1C:8B:EF:3B:F3:70:6B:6D:40:6B:ED:03:01:E9:5F:D3:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/9f5bba50-62bf-3c59-95c8-6aaee8d1e73c.roa Signing time: Thu 18 Sep 2025 21:14:22 +0000 ROA not before: Thu 18 Sep 2025 21:14:22 +0000 ROA not after: Wed 17 Dec 2025 22:14:22 +0000 asID: 46592 IP address blocks: 170.199.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/c6dce4dd-aa4a-4077-aa50-8e935d660edc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/c6dce4dd-aa4a-4077-aa50-8e935d660edc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:46:a7:d9:07:91:4c:fb:2d:ec:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6dce4dd-aa4a-4077-aa50-8e935d660edc Validity Not Before: Sep 18 21:14:22 2025 GMT Not After : Dec 17 22:14:22 2025 GMT Subject: CN=e8ed897f-f491-41a9-80b1-e19c41f87519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4e:8e:3e:ef:63:d6:a9:27:cc:82:14:78:bd: 16:7b:74:70:2f:33:cf:dd:c2:39:e4:75:fa:2e:d7: e9:58:eb:3a:dd:ea:36:4f:5e:5f:6b:ce:a1:b9:c7: 59:a2:24:57:8a:61:8a:a8:a6:96:6d:c0:0a:64:39: f2:19:ca:be:be:44:eb:03:44:ab:ee:c0:51:7a:8d: 65:f2:bf:ed:ab:fb:8f:45:99:02:46:f4:29:c2:d5: 24:3f:71:2b:55:18:a6:6f:fe:39:f1:e2:b8:f0:08: 0a:07:be:61:ab:d7:cc:b6:cb:33:a6:2c:d4:75:27: 74:ef:dc:a1:56:24:24:cf:b2:0a:38:47:c3:7b:ad: 15:f9:7f:06:d2:f2:98:c0:09:9b:f5:df:b7:1c:05: 72:36:61:5b:a7:fa:5c:64:03:03:ee:92:c1:c2:ac: e8:3c:0d:21:ca:ee:12:55:86:45:6c:67:6d:c0:96: 33:2f:95:9b:92:c6:d9:70:f4:46:d5:88:60:ae:60: aa:d7:61:5d:18:39:c7:82:1c:18:81:3a:2f:83:ec: b0:ca:aa:74:7d:c8:dd:8c:ec:f7:8d:f4:2f:45:9a: 03:33:71:5f:82:7c:2c:f3:9b:4b:49:a0:00:c8:cd: e0:68:83:17:95:35:cc:ac:28:90:5b:1c:aa:b0:1a: 0f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:32:9D:ED:C1:05:A1:D0:87:06:BE:98:D2:21:29:00:19:8C:87:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/9f5bba50-62bf-3c59-95c8-6aaee8d1e73c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/c6dce4dd-aa4a-4077-aa50-8e935d660edc.crl X509v3 Authority Key Identifier: keyid:E0:47:A7:1C:8B:EF:3B:F3:70:6B:6D:40:6B:ED:03:01:E9:5F:D3:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc.cer sbgp-ipAddrBlock: critical IPv4: 170.199.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:55:d7:21:65:65:44:fd:35:55:fe:02:30:4a:39:f5:05:27: 04:37:80:e6:1f:02:90:80:16:63:7c:14:40:2c:91:c6:fb:27: 57:3e:6e:9d:25:81:41:6a:d9:48:0b:2b:63:75:f3:6e:82:fe: d7:ff:a6:ac:c0:91:88:57:5a:8d:66:1e:c9:f7:1c:39:ec:97: 27:5d:fd:36:c4:ee:8c:86:92:5f:23:35:bc:e4:a4:13:b3:b6: e5:af:f5:ae:d5:57:73:bb:c2:a8:77:b9:4c:7a:48:ab:23:18: 57:69:fd:ea:9b:d9:88:fb:00:b0:91:98:cf:69:48:f9:4a:29: b8:71:24:a5:f3:dd:49:fb:5c:fc:3d:fb:f8:c2:06:d6:4b:39: ce:3a:44:2d:d4:fc:a7:cd:15:54:92:1e:88:71:12:45:81:56: 4f:4e:66:5f:ca:14:64:96:52:af:9f:58:17:09:ad:3b:f8:63: be:01:fa:dc:e3:79:ca:0b:f2:ec:58:ae:61:40:cb:c0:df:10: a7:b1:5a:de:00:13:8e:b5:bc:ad:32:67:73:41:a4:65:a0:11: 42:cc:b7:72:73:f3:44:49:61:e6:23:d1:88:76:60:76:af:67: 49:18:bc:7d:eb:49:13:97:bd:af:50:6c:45:d6:d7:78:8e:a2: 47:ef:b7:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9RqfZB5FM+y3sPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZkY2U0ZGQtYWE0YS00MDc3LWFhNTAtOGU5MzVkNjYw ZWRjMB4XDTI1MDkxODIxMTQyMloXDTI1MTIxNzIyMTQyMlowLzEtMCsGA1UEAxMk ZThlZDg5N2YtZjQ5MS00MWE5LTgwYjEtZTE5YzQxZjg3NTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik6OPu9j1qknzIIUeL0We3RwLzPP3cI55HX6 LtfpWOs63eo2T15fa86hucdZoiRXimGKqKaWbcAKZDnyGcq+vkTrA0Sr7sBReo1l 8r/tq/uPRZkCRvQpwtUkP3ErVRimb/458eK48AgKB75hq9fMtsszpizUdSd079yh ViQkz7IKOEfDe60V+X8G0vKYwAmb9d+3HAVyNmFbp/pcZAMD7pLBwqzoPA0hyu4S VYZFbGdtwJYzL5WbksbZcPRG1YhgrmCq12FdGDnHghwYgTovg+ywyqp0fcjdjOz3 jfQvRZoDM3Ffgnws85tLSaAAyM3gaIMXlTXMrCiQWxyqsBoPEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEyne3BBaHQhwa+mNIhKQAZjIcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNmRj ZTRkZC1hYTRhLTQwNzctYWE1MC04ZTkzNWQ2NjBlZGMvOWY1YmJhNTAtNjJiZi0z YzU5LTk1YzgtNmFhZWU4ZDFlNzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzZkY2U0ZGQtYWE0YS00MDc3LWFh NTAtOGU5MzVkNjYwZWRjL2M2ZGNlNGRkLWFhNGEtNDA3Ny1hYTUwLThlOTM1ZDY2 MGVkYy5jcmwwHwYDVR0jBBgwFoAU4EenHIvvO/Nwa21Aa+0DAelf01gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNmRjZTRkZC1hYTRhLTQwNzctYWE1MC04ZTkz NWQ2NjBlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqsf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdV1yFlZUT9NVX+AjBKOfUFJwQ3gOYfApCAFmN8FEAskcb7J1c+bp0l gUFq2UgLK2N1826C/tf/pqzAkYhXWo1mHsn3HDnslydd/TbE7oyGkl8jNbzkpBOz tuWv9a7VV3O7wqh3uUx6SKsjGFdp/eqb2Yj7ALCRmM9pSPlKKbhxJKXz3Un7XPw9 +/jCBtZLOc46RC3U/KfNFVSSHohxEkWBVk9OZl/KFGSWUq+fWBcJrTv4Y74B+tzj ecoL8uxYrmFAy8DfEKexWt4AE461vK0yZ3NBpGWgEULMt3Jz80RJYeYj0Yh2YHav Z0kYvH3rSROXva9QbEXW13iOokfvt+w= -----END CERTIFICATE-----Generated at Wed Nov 5 14:48:17 2025 by rpki-client