$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/4def8789-cdc6-3d70-8229-b14ec7907325.roa File: 4def8789-cdc6-3d70-8229-b14ec7907325.roa (raw, json) Hash identifier: JzTCpTuD7Y5p46aAGnBXvCP/lNGk4dV8LrxHnO4c8DA= Subject key identifier: AE:43:9F:F3:3B:56:23:47:0B:65:A3:1E:C1:29:88:42:52:6A:23:7A Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584B823FB65C3E103AF5686C3180 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/4def8789-cdc6-3d70-8229-b14ec7907325.roa Signing time: Mon 13 Oct 2025 14:11:09 +0000 ROA not before: Mon 13 Oct 2025 14:11:09 +0000 ROA not after: Sun 11 Jan 2026 15:11:09 +0000 asID: 21433 IP address blocks: 170.251.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:3f:b6:5c:3e:10:3a:f5:68:6c:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Oct 13 14:11:09 2025 GMT Not After : Jan 11 15:11:09 2026 GMT Subject: CN=262783c9-56f4-480f-a529-6a103b481418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6c:e7:f3:0f:ac:13:51:3e:e2:86:b2:75:27: f1:4b:54:33:19:61:3a:cb:c9:4e:e2:2b:e6:b2:a9: a3:c6:03:5d:c5:97:b7:8e:31:b4:59:81:fe:4b:8b: b4:05:b2:44:72:f8:8f:d8:ce:28:a3:fe:20:9b:77: e4:7f:ed:00:be:9d:5f:4f:f6:3d:77:f6:a3:b0:8f: c7:48:d2:78:de:bb:ac:70:e3:a9:ea:a0:79:61:7c: f3:20:fa:bc:2d:d2:05:81:79:55:a8:21:ba:6d:cd: 18:b7:f0:00:0c:07:a3:44:4e:7f:da:38:47:9f:a0: 63:39:dc:a9:e5:6d:02:61:fb:a9:74:ee:86:e3:7b: a7:de:e3:30:95:88:ec:83:8a:8c:82:46:2a:66:a2: 5e:c3:0d:d6:0e:73:a7:78:d0:c0:63:c5:b8:cc:9a: 15:30:53:a9:4a:41:df:e8:5c:c9:1e:68:7f:bd:a3: f4:3d:f9:90:b5:15:84:0f:be:3f:42:10:ff:bc:50: 31:3c:55:8d:f0:60:bd:70:c6:d2:50:6c:ed:9d:48: 27:8d:a9:91:1f:17:c8:e9:04:0e:15:97:2d:9f:df: 07:c0:ad:a9:fd:84:fa:b3:01:bc:fc:fa:ab:b7:c6: bd:2c:74:8d:2c:95:a5:31:b6:21:fc:f2:72:fd:cd: ee:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:43:9F:F3:3B:56:23:47:0B:65:A3:1E:C1:29:88:42:52:6A:23:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/4def8789-cdc6-3d70-8229-b14ec7907325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.251.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b5:91:45:a0:94:e8:bb:4f:45:39:4e:b9:f9:e9:6c:0a:33: ab:6a:33:6a:bb:ac:2c:0d:09:a9:40:7f:e4:01:fd:a2:58:45: 53:53:54:c6:bc:26:7b:f1:6b:32:3e:21:12:06:6a:82:74:05: 32:39:c3:ec:64:28:c0:bb:c4:02:20:f4:ff:df:c5:84:f2:b1: 75:47:90:32:be:f9:d3:8f:f4:30:55:0e:be:14:4b:5b:f4:e7: c8:f5:88:89:ab:10:4f:c8:58:bd:c2:63:a9:a1:d9:84:e2:56: 63:37:51:ed:c8:7a:f6:bb:eb:66:38:af:50:38:a4:46:5c:22: a1:5a:4b:4c:55:22:da:4e:d8:e2:d6:5c:94:3d:44:4c:87:9e: 9b:d2:6c:c3:61:39:3d:4f:9e:81:d7:04:60:48:c6:cd:48:ce: 4b:7b:82:82:18:56:32:b1:b1:49:f9:a7:86:6b:4a:02:16:29: 1b:e4:b2:05:12:cc:b9:3f:83:a6:f8:ea:de:4c:04:8b:6e:43: 52:d2:5e:43:aa:bc:cc:ee:e1:d1:dc:2b:eb:f2:ef:62:5d:f0: 91:67:bc:62:e2:e3:1c:d4:28:c2:1b:ba:25:29:cf:f2:f6:9f: a6:4b:50:e6:59:fd:bd:be:8d:01:24:8e:34:0b:64:62:52:8b: 41:39:27:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCP7ZcPhA69WhsMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI1MTAxMzE0MTEwOVoXDTI2MDExMTE1MTEwOVowLzEtMCsGA1UEAxMk MjYyNzgzYzktNTZmNC00ODBmLWE1MjktNmExMDNiNDgxNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGzn8w+sE1E+4oaydSfxS1QzGWE6y8lO4ivm sqmjxgNdxZe3jjG0WYH+S4u0BbJEcviP2M4oo/4gm3fkf+0Avp1fT/Y9d/ajsI/H SNJ43ruscOOp6qB5YXzzIPq8LdIFgXlVqCG6bc0Yt/AADAejRE5/2jhHn6BjOdyp 5W0CYfupdO6G43un3uMwlYjsg4qMgkYqZqJeww3WDnOneNDAY8W4zJoVMFOpSkHf 6FzJHmh/vaP0PfmQtRWED74/QhD/vFAxPFWN8GC9cMbSUGztnUgnjamRHxfI6QQO FZctn98HwK2p/YT6swG8/Pqrt8a9LHSNLJWlMbYh/PJy/c3udwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5Dn/M7ViNHC2WjHsEpiEJSaiN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvNGRlZjg3ODktY2RjNi0z ZDcwLTgyMjktYjE0ZWM3OTA3MzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvviMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu1kUWglOi7T0U5Trn56WwKM6tqM2q7rCwNCalAf+QB/aJYRVNTVMa8 JnvxazI+IRIGaoJ0BTI5w+xkKMC7xAIg9P/fxYTysXVHkDK++dOP9DBVDr4US1v0 58j1iImrEE/IWL3CY6mh2YTiVmM3Ue3Ieva762Y4r1A4pEZcIqFaS0xVItpO2OLW XJQ9REyHnpvSbMNhOT1PnoHXBGBIxs1Izkt7goIYVjKxsUn5p4ZrSgIWKRvksgUS zLk/g6b46t5MBItuQ1LSXkOqvMzu4dHcK+vy72Jd8JFnvGLi4xzUKMIbuiUpz/L2 n6ZLUOZZ/b2+jQEkjjQLZGJSi0E5J6s= -----END CERTIFICATE-----Generated at Mon Oct 20 13:18:43 2025 by rpki-client