$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/132bdfca-908a-373e-94f1-acedba809c54.roa File: 132bdfca-908a-373e-94f1-acedba809c54.roa (raw, json) Hash identifier: Wf4afx8Qvtsxw+dj/17p+X+QlwmCGQ87rjxxnC5kssY= Subject key identifier: AA:28:53:57:07:F5:92:B6:EA:E5:01:5F:B7:29:2F:5A:65:C3:2D:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7C6A7A944F0AE4591C780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/132bdfca-908a-373e-94f1-acedba809c54.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33668 IP address blocks: 70.88.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:c6:a7:a9:44:f0:ae:45:91:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=1fa7bc1a-1f9b-48bc-b6c4-3e6677ede662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bb:e1:e2:3d:21:96:a8:5a:b9:1a:71:8b:a2: 88:6d:35:75:c0:59:1e:aa:46:b4:18:2d:c8:dc:89: 68:35:26:b0:e8:7e:91:5b:59:58:6e:e1:eb:29:eb: 32:db:8a:aa:ff:72:ea:ed:e6:58:4f:38:9d:73:d5: e1:31:c4:29:40:bc:32:60:25:15:80:08:68:ab:5e: 89:d3:dc:f6:8c:27:2a:21:d2:b2:11:20:06:00:65: 89:c9:a5:81:77:5b:67:9d:21:84:53:dd:61:c8:23: c2:3b:52:f9:6f:3c:c6:27:ef:ee:d9:fe:8e:1a:61: 73:73:e4:a8:8d:2e:a1:c3:b6:33:8a:91:18:10:62: 92:86:01:05:03:f1:24:4f:b3:a9:85:5c:80:2b:b6: 35:8b:8f:4e:85:0a:c9:63:31:5e:f4:ef:ad:de:3b: a9:c0:44:66:91:e0:e7:1b:2e:a5:26:d6:3b:32:b4: 91:0a:d6:e0:99:c8:7a:ee:a3:18:20:83:36:7e:ce: 3f:5f:18:5e:27:e3:71:6f:cb:a1:b5:bc:36:4d:04: 13:b5:91:42:2f:ec:79:8c:59:9d:9b:7d:33:f1:91: c8:a6:eb:ad:1f:bf:93:6c:5c:38:52:9a:f0:09:85: 47:79:33:53:87:73:18:c0:c2:6c:88:13:21:71:c0: eb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:28:53:57:07:F5:92:B6:EA:E5:01:5F:B7:29:2F:5A:65:C3:2D:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/132bdfca-908a-373e-94f1-acedba809c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.88.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:6d:33:f2:86:79:fb:58:1e:62:a1:68:d9:f7:6d:c0:87:d5: 62:19:cf:be:35:51:b5:06:48:14:bc:28:c4:59:21:39:ca:1c: c3:5c:82:f2:aa:c9:05:9d:c5:57:61:5b:a9:1e:90:bc:0b:a2: 4f:7d:10:0a:b8:99:ba:5d:d6:d5:de:fe:ee:6d:b9:17:38:d1: e7:9f:3e:2b:d3:c9:5f:3a:4a:e4:5e:1b:6a:27:9d:62:9b:56: dd:d6:a0:1e:4d:eb:e1:68:89:3d:66:0f:d6:c2:bd:cf:9e:78: ad:a6:1d:16:45:e3:52:d3:9e:e7:fd:a0:9c:f4:da:99:d0:84: 76:f2:5a:7d:7d:87:75:f5:6a:42:49:96:79:91:fa:98:b9:b5: 09:69:37:4c:8a:c1:dd:65:e3:ae:b7:a1:1b:30:6d:64:c2:68: da:54:d0:26:a7:12:a8:63:69:f2:ee:bd:d0:e9:5a:6b:2d:08: 88:27:3f:a7:f8:da:d1:c8:5c:8a:7d:ee:6d:c8:90:5e:59:c0: 7a:a8:f9:bc:b7:da:e4:f3:44:0a:69:17:99:a4:d1:9e:25:10: 6d:04:a9:6f:a5:97:b3:21:f9:a5:34:ed:4b:de:42:1a:7f:1d: 06:c7:b4:bd:99:c7:dd:5e:6a:82:23:a7:56:91:10:19:8a:58: cd:73:2d:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t8anqUTwrkWRx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MWZhN2JjMWEtMWY5Yi00OGJjLWI2YzQtM2U2Njc3ZWRlNjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrvh4j0hlqhauRpxi6KIbTV1wFkeqka0GC3I 3IloNSaw6H6RW1lYbuHrKesy24qq/3Lq7eZYTzidc9XhMcQpQLwyYCUVgAhoq16J 09z2jCcqIdKyESAGAGWJyaWBd1tnnSGEU91hyCPCO1L5bzzGJ+/u2f6OGmFzc+So jS6hw7YzipEYEGKShgEFA/EkT7OphVyAK7Y1i49OhQrJYzFe9O+t3jupwERmkeDn Gy6lJtY7MrSRCtbgmch67qMYIIM2fs4/XxheJ+Nxb8uhtbw2TQQTtZFCL+x5jFmd m30z8ZHIpuutH7+TbFw4UprwCYVHeTNTh3MYwMJsiBMhccDrcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKooU1cH9ZK26uUBX7cpL1plwy0NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTMyYmRmY2EtOTA4YS0z NzNlLTk0ZjEtYWNlZGJhODA5YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRlimMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxtM/KGeftYHmKhaNn3bcCH1WIZz741UbUGSBS8KMRZITnKHMNcgvKq yQWdxVdhW6kekLwLok99EAq4mbpd1tXe/u5tuRc40eefPivTyV86SuReG2onnWKb Vt3WoB5N6+FoiT1mD9bCvc+eeK2mHRZF41LTnuf9oJz02pnQhHbyWn19h3X1akJJ lnmR+pi5tQlpN0yKwd1l4663oRswbWTCaNpU0CanEqhjafLuvdDpWmstCIgnP6f4 2tHIXIp97m3IkF5ZwHqo+by32uTzRAppF5mk0Z4lEG0EqW+ll7Mh+aU07UveQhp/ HQbHtL2Zx91eaoIjp1aREBmKWM1zLS8= -----END CERTIFICATE-----Generated at Mon Oct 20 04:00:35 2025 by rpki-client