$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/31087add-e607-36b0-8d31-ad7c14d91fbb.roa File: 31087add-e607-36b0-8d31-ad7c14d91fbb.roa (raw, json) Hash identifier: yfFtfaHuSn1mFbOU1LC8IJTv1t7WWrURk2Q3uRzfDQo= Subject key identifier: EC:07:57:B9:20:ED:BC:3A:0C:5E:B0:B4:04:96:67:4D:DF:16:70:F5 Certificate issuer: /CN=1fe8849b-66cd-4afe-9b0b-970eafad1175 Certificate serial: 010D0C9F4328584B84E780B6C19EE6F9624E0510 Authority key identifier: BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/31087add-e607-36b0-8d31-ad7c14d91fbb.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 1008 IP address blocks: 170.205.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:80:b6:c1:9e:e6:f9:62:4e:05:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe8849b-66cd-4afe-9b0b-970eafad1175 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=d830cec0-2362-4075-bdd9-e4466071c004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6d:6f:27:9e:6c:5c:ad:73:3b:a1:42:76:65: db:46:58:d6:97:b0:74:5a:ed:a1:a6:44:b2:cf:6a: 91:8d:f3:e0:c4:7b:6f:5e:d6:d4:4f:38:a2:7c:3e: 06:cb:8f:6e:7a:7f:f2:1f:4b:c0:00:4c:52:eb:5c: f4:cf:ee:e7:c2:2c:69:7c:50:8d:8d:01:26:3e:ba: f0:f2:d2:93:bb:32:67:74:6a:b1:9d:9b:7b:9f:91: 0c:1a:08:bd:c2:2d:37:8c:96:7d:7f:db:39:56:83: cf:65:0a:80:b6:ce:09:20:63:2b:7e:44:58:3a:7e: 1c:00:2a:49:61:40:96:65:80:01:c1:29:5e:fa:da: e6:d6:d4:ea:24:f6:b2:69:be:57:d5:c9:d3:a1:04: 0d:f1:1a:99:5a:61:a2:26:14:e1:52:82:49:d9:5f: e4:ba:b8:25:d7:25:84:37:81:d0:5c:60:e0:64:d0: 80:7e:ed:6a:e5:bf:4b:a4:c2:a5:d2:da:ea:46:10: 86:b3:62:1e:4a:8b:10:0b:48:bb:28:1a:9f:b6:3d: e1:3f:1a:4c:e0:00:e0:c9:16:0a:0f:e0:76:8c:b8: 94:94:cb:63:0b:40:1a:f2:2b:2a:3c:95:21:50:cf: d8:5a:e5:22:d5:e5:6a:94:03:36:90:07:6e:33:2a: a7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:07:57:B9:20:ED:BC:3A:0C:5E:B0:B4:04:96:67:4D:DF:16:70:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/31087add-e607-36b0-8d31-ad7c14d91fbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl X509v3 Authority Key Identifier: keyid:BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer sbgp-ipAddrBlock: critical IPv4: 170.205.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:b4:c3:f6:98:04:58:6a:b7:4a:2e:46:cf:c9:73:5a:04:48: 1f:6b:5a:49:71:4d:b3:7e:8a:28:2e:fa:7e:a7:c6:b1:90:53: 0b:65:99:6f:82:e2:3d:fa:d2:7b:3f:f9:99:48:49:98:04:ea: 9e:c1:e8:02:d9:14:7b:d5:cb:fc:9f:57:68:4c:96:e1:fb:86: 47:ae:66:00:a5:a0:51:0b:ad:2f:67:8d:d4:fc:40:14:1b:bc: 0b:c6:74:c8:d2:ad:c3:e6:50:e5:9e:e6:c2:9a:57:ec:48:1e: 09:6f:c3:11:45:d3:f5:cf:dd:a8:38:53:f6:37:f4:20:47:6a: 9e:2b:77:55:4f:85:61:06:c5:a4:84:c8:b5:4e:b3:c7:4e:45: 98:e3:52:37:b5:e0:c1:6c:b5:78:83:d5:7b:09:26:d6:ad:f5: fc:21:96:04:34:33:d5:90:5d:55:5c:2d:1a:f3:21:41:c7:00: 36:f8:da:99:8d:72:31:23:47:7b:7f:ee:00:8f:48:b3:e2:63: 88:63:0c:a4:71:8e:b8:28:3b:88:ea:18:7a:36:6f:88:3b:36: 71:55:52:76:c7:35:1c:b0:f0:78:19:05:97:49:3e:90:74:6e: 70:e5:69:43:61:b6:86:3e:b4:4f:75:df:6b:28:f2:24:46:f2: 88:cc:94:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54C2wZ7m+WJOBRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlODg0OWItNjZjZC00YWZlLTliMGItOTcwZWFmYWQx MTc1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZDgzMGNlYzAtMjM2Mi00MDc1LWJkZDktZTQ0NjYwNzFjMDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG1vJ55sXK1zO6FCdmXbRljWl7B0Wu2hpkSy z2qRjfPgxHtvXtbUTziifD4Gy49uen/yH0vAAExS61z0z+7nwixpfFCNjQEmPrrw 8tKTuzJndGqxnZt7n5EMGgi9wi03jJZ9f9s5VoPPZQqAts4JIGMrfkRYOn4cACpJ YUCWZYABwSle+trm1tTqJPayab5X1cnToQQN8RqZWmGiJhThUoJJ2V/kurgl1yWE N4HQXGDgZNCAfu1q5b9LpMKl0trqRhCGs2IeSosQC0i7KBqftj3hPxpM4ADgyRYK D+B2jLiUlMtjC0Aa8isqPJUhUM/YWuUi1eVqlAM2kAduMyqnXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwHV7kg7bw6DF6wtASWZ03fFnD1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4 ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBlYWZhZDExNzUvMzEwODdhZGQtZTYwNy0z NmIwLThkMzEtYWQ3YzE0ZDkxZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWZlODg0OWItNjZjZC00YWZlLTli MGItOTcwZWFmYWQxMTc1LzFmZTg4NDliLTY2Y2QtNGFmZS05YjBiLTk3MGVhZmFk MTE3NS5jcmwwHwYDVR0jBBgwFoAUvqggnBNe/PnuaZjOhE646NyD9JUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBl YWZhZDExNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqs0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALq0w/aYBFhqt0ouRs/Jc1oESB9rWklxTbN+iigu+n6nxrGQUwtlmW+C 4j360ns/+ZlISZgE6p7B6ALZFHvVy/yfV2hMluH7hkeuZgCloFELrS9njdT8QBQb vAvGdMjSrcPmUOWe5sKaV+xIHglvwxFF0/XP3ag4U/Y39CBHap4rd1VPhWEGxaSE yLVOs8dORZjjUje14MFstXiD1XsJJtat9fwhlgQ0M9WQXVVcLRrzIUHHADb42pmN cjEjR3t/7gCPSLPiY4hjDKRxjrgoO4jqGHo2b4g7NnFVUnbHNRyw8HgZBZdJPpB0 bnDlaUNhtoY+tE9132so8iRG8ojMlPQ= -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:36 2025 by rpki-client