$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e/4a1317b3-2257-3278-81c4-1ec5cb08a4d8.roa File: 4a1317b3-2257-3278-81c4-1ec5cb08a4d8.roa (raw, json) Hash identifier: QlT3951fOwqtF7vGW2UuZGyd48aArs+MRGVztjQwuqg= Subject key identifier: 42:63:CC:02:C2:35:E6:BA:AA:38:1A:D7:C4:30:A4:9B:19:DE:F6:C0 Certificate issuer: /CN=f5fedd98-99a2-4e17-b0a9-6871061bbe5e Certificate serial: 010D0C9F4328584AF9D3753CAE498EE440A88E00 Authority key identifier: 90:16:F1:4E:0B:EF:C1:73:26:8B:12:A4:1E:FB:3E:0D:CF:72:CB:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e/4a1317b3-2257-3278-81c4-1ec5cb08a4d8.roa Signing time: Mon 25 Aug 2025 17:23:06 +0000 ROA not before: Mon 25 Aug 2025 17:23:06 +0000 ROA not after: Sun 23 Nov 2025 18:23:06 +0000 asID: 10753 IP address blocks: 170.39.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e/f5fedd98-99a2-4e17-b0a9-6871061bbe5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e/f5fedd98-99a2-4e17-b0a9-6871061bbe5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:d3:75:3c:ae:49:8e:e4:40:a8:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fedd98-99a2-4e17-b0a9-6871061bbe5e Validity Not Before: Aug 25 17:23:06 2025 GMT Not After : Nov 23 18:23:06 2025 GMT Subject: CN=8c23c60c-f95a-4774-a728-9731b07b701e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d5:d9:3f:81:52:d8:b5:89:c6:2b:02:ab:fa: 14:d6:c9:48:f9:3b:22:11:f7:3c:28:14:58:8a:f9: 7c:25:37:51:20:d6:64:26:c8:c9:7b:b2:52:fe:c2: 8e:ed:5d:30:3c:db:28:39:ad:24:df:71:6b:8a:61: f7:54:69:95:d1:9f:d6:4f:04:83:d2:c3:46:ed:47: e4:63:3e:46:d3:78:8d:a2:ed:25:ac:9d:96:cd:1e: a2:c1:e4:9b:e6:e2:15:64:bf:59:94:66:ed:4b:96: 04:b4:e6:a1:44:48:d5:9b:b2:a2:99:71:ad:9c:a4: 54:3e:76:2c:fe:1c:c2:90:9b:60:d5:b6:1d:3e:ec: c9:8a:40:88:ec:e0:d9:d5:16:78:02:0e:8d:b3:8f: 73:05:27:55:c0:9a:fb:41:12:87:8d:a7:a2:83:2a: eb:ac:25:4b:05:12:bd:1f:38:99:e8:3b:a3:4c:79: 63:e8:3b:c4:de:10:71:99:77:6f:16:16:0c:39:40: 06:ba:2c:aa:4a:b2:7e:33:23:1b:87:bd:5d:b9:50: 0c:7e:6e:be:6a:02:2d:fc:24:68:6a:fb:a7:6e:31: d7:ad:f9:b2:7f:db:41:2e:a1:15:54:be:2c:bb:7a: 13:43:2a:81:88:cf:50:ac:af:b5:01:bc:f3:e8:76: 7e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:63:CC:02:C2:35:E6:BA:AA:38:1A:D7:C4:30:A4:9B:19:DE:F6:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e/4a1317b3-2257-3278-81c4-1ec5cb08a4d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e/f5fedd98-99a2-4e17-b0a9-6871061bbe5e.crl X509v3 Authority Key Identifier: keyid:90:16:F1:4E:0B:EF:C1:73:26:8B:12:A4:1E:FB:3E:0D:CF:72:CB:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e.cer sbgp-ipAddrBlock: critical IPv4: 170.39.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:bb:40:6e:35:60:68:83:cf:31:a8:86:63:f4:4a:9e:88:cc: 54:64:fa:49:ba:62:56:69:72:bc:62:9f:66:36:1e:e8:44:54: 22:df:92:83:22:97:5c:10:10:8f:01:2d:9a:c7:ac:cf:dd:91: 8d:64:6e:e1:d9:23:56:9a:41:9b:f1:fa:14:7f:21:e4:a6:16: 85:83:66:4d:6d:c6:a4:8c:45:40:f0:2e:7e:5c:1c:4c:41:a6: de:af:fb:8e:21:d5:9f:20:86:0c:f4:bf:8c:f2:08:0f:2c:51: c2:e0:3c:01:87:14:03:2c:71:55:19:90:21:e6:fb:b1:55:42: e8:cd:4d:74:06:78:57:7f:0c:a8:47:5b:6d:f3:b9:fa:23:d3: fb:0c:f2:b4:2a:c3:f0:72:3a:ef:1b:c7:23:92:a6:c2:38:98: b3:c6:34:ad:01:69:32:96:45:43:07:8e:0c:12:55:e6:e5:fd: 7f:55:13:fd:97:35:58:86:ec:dc:19:25:95:3e:1d:0c:bd:18: 77:88:c8:ad:cf:c8:75:1d:5c:97:a1:44:9b:80:70:70:e6:73: a5:71:28:1c:29:16:45:57:52:eb:dd:2e:df:97:e9:43:45:1f: bf:a7:17:ff:e0:c5:f6:7a:54:bb:8d:46:81:89:f8:fa:6f:f5: fa:90:02:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr503U8rkmO5ECojgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmZWRkOTgtOTlhMi00ZTE3LWIwYTktNjg3MTA2MWJi ZTVlMB4XDTI1MDgyNTE3MjMwNloXDTI1MTEyMzE4MjMwNlowLzEtMCsGA1UEAxMk OGMyM2M2MGMtZjk1YS00Nzc0LWE3MjgtOTczMWIwN2I3MDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtXZP4FS2LWJxisCq/oU1slI+TsiEfc8KBRY ivl8JTdRINZkJsjJe7JS/sKO7V0wPNsoOa0k33FrimH3VGmV0Z/WTwSD0sNG7Ufk Yz5G03iNou0lrJ2WzR6iweSb5uIVZL9ZlGbtS5YEtOahREjVm7KimXGtnKRUPnYs /hzCkJtg1bYdPuzJikCI7ODZ1RZ4Ag6Ns49zBSdVwJr7QRKHjaeigyrrrCVLBRK9 HziZ6DujTHlj6DvE3hBxmXdvFhYMOUAGuiyqSrJ+MyMbh71duVAMfm6+agIt/CRo avunbjHXrfmyf9tBLqEVVL4su3oTQyqBiM9QrK+1Abzz6HZ+8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJjzALCNea6qjga18QwpJsZ3vbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mNWZl ZGQ5OC05OWEyLTRlMTctYjBhOS02ODcxMDYxYmJlNWUvNGExMzE3YjMtMjI1Ny0z Mjc4LTgxYzQtMWVjNWNiMDhhNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjVmZWRkOTgtOTlhMi00ZTE3LWIw YTktNjg3MTA2MWJiZTVlL2Y1ZmVkZDk4LTk5YTItNGUxNy1iMGE5LTY4NzEwNjFi YmU1ZS5jcmwwHwYDVR0jBBgwFoAUkBbxTgvvwXMmixKkHvs+Dc9yy5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mNWZlZGQ5OC05OWEyLTRlMTctYjBhOS02ODcx MDYxYmJlNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqieaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy7QG41YGiDzzGohmP0Sp6IzFRk+km6YlZpcrxin2Y2HuhEVCLfkoMi l1wQEI8BLZrHrM/dkY1kbuHZI1aaQZvx+hR/IeSmFoWDZk1txqSMRUDwLn5cHExB pt6v+44h1Z8ghgz0v4zyCA8sUcLgPAGHFAMscVUZkCHm+7FVQujNTXQGeFd/DKhH W23zufoj0/sM8rQqw/ByOu8bxyOSpsI4mLPGNK0BaTKWRUMHjgwSVebl/X9VE/2X NViG7NwZJZU+HQy9GHeIyK3PyHUdXJehRJuAcHDmc6VxKBwpFkVXUuvdLt+X6UNF H7+nF//gxfZ6VLuNRoGJ+Ppv9fqQAso= -----END CERTIFICATE-----Generated at Tue Nov 4 21:47:17 2025 by rpki-client