$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/7cf08e17-a54b-3835-8100-17a3c8704db8.roa File: 7cf08e17-a54b-3835-8100-17a3c8704db8.roa (raw, json) Hash identifier: rLCct97TJjSlv4x/My+DUD2PYkuJKpzDIAr4sisSOA0= Subject key identifier: 0D:4C:35:54:E4:00:E0:4A:61:0D:FF:97:51:E6:1B:CE:1A:85:1E:6B Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584B823FBC19D7E7FF669CBFFF60 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/7cf08e17-a54b-3835-8100-17a3c8704db8.roa Signing time: Mon 13 Oct 2025 14:11:12 +0000 ROA not before: Mon 13 Oct 2025 14:11:12 +0000 ROA not after: Sun 11 Jan 2026 15:11:12 +0000 asID: 21433 IP address blocks: 170.248.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:3f:bc:19:d7:e7:ff:66:9c:bf:ff:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Oct 13 14:11:12 2025 GMT Not After : Jan 11 15:11:12 2026 GMT Subject: CN=8c3f4c8a-0302-4334-8d12-270641734956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:a7:6e:fc:72:84:a2:61:fd:26:99:0e:7e: 14:95:42:1c:a8:8a:c2:bc:2b:0d:21:84:a4:9f:7b: 15:da:90:18:a9:a4:33:89:9e:a7:f8:c2:07:28:f5: 31:b3:df:3c:e8:9d:ec:c6:f1:ec:aa:2c:ef:67:12: 6e:77:cb:8b:6c:23:eb:06:72:08:77:c3:7d:8c:5d: 6a:d4:23:eb:41:01:3e:32:66:8c:52:3e:eb:1b:19: 61:e7:1e:57:a5:04:c3:30:b4:4d:b4:60:fa:24:da: 26:fb:a6:39:6e:70:71:c9:26:6c:d7:e8:dd:61:b5: 5c:6a:84:50:28:a2:16:c8:2f:04:56:83:f2:4a:eb: 41:39:ec:22:c9:a8:01:d2:cd:6a:de:91:21:c1:7e: 17:c5:f2:8a:52:37:4e:9b:d6:14:4e:92:c1:0f:30: a5:49:88:5e:3b:f0:d7:bc:ed:c5:f3:6c:db:86:c5: 93:f1:88:01:4b:15:3f:d0:9f:c8:a6:0f:dd:a8:6f: 0a:20:b3:49:b0:96:38:dc:36:bf:6d:f4:8c:34:19: 8c:39:b3:d2:0a:98:ba:8a:d0:3b:0a:c8:f9:75:cb: 01:d7:66:4d:98:9e:d8:c4:cd:59:e8:e6:61:52:c4: db:f7:e3:da:15:2f:a4:3d:a8:cf:03:4d:ce:14:c8: 0a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4C:35:54:E4:00:E0:4A:61:0D:FF:97:51:E6:1B:CE:1A:85:1E:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/7cf08e17-a54b-3835-8100-17a3c8704db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:6f:98:a7:95:7e:6a:46:b1:89:c3:26:e4:9d:33:fc:33:b4: 42:12:1e:7a:47:d5:ee:c5:64:db:b7:6b:0b:cf:db:2d:f5:26: d1:0d:37:3f:90:e9:33:b1:99:99:da:26:17:4c:45:be:81:08: 50:e3:72:c4:00:a4:a8:31:34:0a:12:5c:41:b6:16:df:ce:d3: 62:8d:51:4b:e1:19:6e:41:c5:37:26:5e:f8:42:67:69:a5:ee: 66:6f:bc:81:e5:36:1d:6e:45:2a:b4:41:46:12:7c:3a:32:7c: b6:f9:5c:24:b0:6d:46:d9:36:1c:fa:02:b9:6a:d3:d0:04:da: bd:0f:a4:1b:9e:78:38:73:56:66:c6:1a:64:c2:43:08:1b:27: 2c:1f:cc:5e:3b:24:37:16:ce:9f:1c:b3:2f:f7:5b:cf:21:ac: c0:a5:4e:a8:92:ab:3f:b1:2a:b5:da:dc:13:30:84:5e:d2:4d: 2e:da:ec:48:60:5a:98:64:21:84:f9:96:4b:96:7d:a0:6e:b4: 3d:45:c4:f2:7e:66:1d:de:cc:8d:8b:2d:88:f7:da:1b:1a:89: e9:fd:ab:fe:7a:51:73:a0:d4:9c:89:d7:3d:ff:5c:c5:38:56: a5:74:18:b8:af:b1:b8:b5:15:da:dd:14:49:5f:01:c1:3a:16: a7:53:01:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCP7wZ1+f/Zpy//2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI1MTAxMzE0MTExMloXDTI2MDExMTE1MTExMlowLzEtMCsGA1UEAxMk OGMzZjRjOGEtMDMwMi00MzM0LThkMTItMjcwNjQxNzM0OTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC6nbvxyhKJh/SaZDn4UlUIcqIrCvCsNIYSk n3sV2pAYqaQziZ6n+MIHKPUxs9886J3sxvHsqizvZxJud8uLbCPrBnIId8N9jF1q 1CPrQQE+MmaMUj7rGxlh5x5XpQTDMLRNtGD6JNom+6Y5bnBxySZs1+jdYbVcaoRQ KKIWyC8EVoPySutBOewiyagB0s1q3pEhwX4XxfKKUjdOm9YUTpLBDzClSYheO/DX vO3F82zbhsWT8YgBSxU/0J/Ipg/dqG8KILNJsJY43Da/bfSMNBmMObPSCpi6itA7 Csj5dcsB12ZNmJ7YxM1Z6OZhUsTb9+PaFS+kPajPA03OFMgKiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1MNVTkAOBKYQ3/l1HmG84ahR5rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvN2NmMDhlMTctYTU0Yi0z ODM1LTgxMDAtMTdhM2M4NzA0ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxvmKeVfmpGsYnDJuSdM/wztEISHnpH1e7FZNu3awvP2y31JtENNz+Q 6TOxmZnaJhdMRb6BCFDjcsQApKgxNAoSXEG2Ft/O02KNUUvhGW5BxTcmXvhCZ2ml 7mZvvIHlNh1uRSq0QUYSfDoyfLb5XCSwbUbZNhz6Arlq09AE2r0PpBueeDhzVmbG GmTCQwgbJywfzF47JDcWzp8csy/3W88hrMClTqiSqz+xKrXa3BMwhF7STS7a7Ehg WphkIYT5lkuWfaButD1FxPJ+Zh3ezI2LLYj32hsaien9q/56UXOg1JyJ1z3/XMU4 VqV0GLivsbi1FdrdFElfAcE6FqdTAXU= -----END CERTIFICATE-----Generated at Mon Oct 20 13:18:45 2025 by rpki-client