$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/0ef2e685-962e-3c72-8903-9722df652b4a.roa File: 0ef2e685-962e-3c72-8903-9722df652b4a.roa (raw, json) Hash identifier: c4+mmllsMnWH2vgHTAMBueJxKAnrkuRjUouynt10VSQ= Subject key identifier: 2A:3F:58:47:EB:07:D9:F0:82:F1:2E:46:9B:E3:53:3D:B9:D3:8C:1A Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584B6A61E8B6333F3CB5ED6A0400 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/0ef2e685-962e-3c72-8903-9722df652b4a.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 55293 IP address blocks: 70.32.16.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:e8:b6:33:3f:3c:b5:ed:6a:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=3f574fc1-c99d-42b4-869e-9cc6ba837706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a0:d3:87:0b:44:f0:bb:1d:73:98:94:05:f7: 8e:8b:f4:a4:f7:c0:f8:1a:fa:5d:4a:88:0a:77:58: 49:90:cd:61:00:ac:33:4d:dc:c1:4c:e4:f7:43:fb: e3:73:f4:08:0e:b8:4f:23:15:9b:cd:ba:80:be:67: 75:d4:f6:26:60:c9:c0:17:be:15:2f:45:3b:20:55: 37:4a:22:38:f9:93:f2:c5:24:5d:42:3e:e1:6c:43: 13:47:9c:b4:b6:ba:9c:a1:8d:80:99:4f:fc:9d:b9: 41:54:97:ec:f7:5f:5e:7e:ef:6e:5b:7f:e9:d0:ed: ee:62:a1:2f:c4:ed:54:8e:1b:0a:a3:1d:b6:20:04: c0:d2:55:1e:00:7f:86:d9:21:67:84:a6:a9:27:f9: 08:94:e5:93:6b:f2:14:9b:be:cc:af:85:7e:5b:15: 7b:59:d9:9a:3f:87:38:3c:51:8c:9f:7b:1e:9e:40: 1a:32:e4:fc:b3:e1:bb:25:0f:a4:55:0c:94:c9:92: 28:ee:82:8b:bf:47:fe:8d:88:b3:50:39:ce:77:f8: 5c:0b:69:d7:af:27:38:64:44:85:0a:b6:b7:88:81: cd:bc:5d:96:9f:0f:b9:c2:8d:50:ee:69:c8:fe:5f: b7:2d:91:8d:9d:a0:98:0b:66:94:2d:92:ee:36:13: a2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3F:58:47:EB:07:D9:F0:82:F1:2E:46:9B:E3:53:3D:B9:D3:8C:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/0ef2e685-962e-3c72-8903-9722df652b4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 70.32.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2c:6f:0b:6d:1a:9d:3e:d9:f8:ce:19:dc:d2:a3:74:ac:d9: 9d:0c:5a:5c:be:ac:0a:eb:39:3c:a5:45:cc:ea:ed:b7:59:ee: ec:45:0b:55:3a:c1:b4:19:46:bd:44:b9:74:df:d0:d5:7c:38: da:48:2c:45:37:28:96:3f:7e:32:ec:64:64:38:f2:3f:23:bc: fa:21:ff:6b:a2:77:08:74:81:eb:55:98:d9:f6:7f:9e:93:9b: f1:80:94:3f:0c:96:15:ed:e0:77:c3:d0:92:17:b1:33:32:1a: d4:ea:33:66:0d:6b:fc:a4:7f:a4:41:2b:0d:ff:e5:5b:86:20: e2:80:7c:97:5e:44:79:c8:db:2d:d0:05:a5:91:d1:57:81:20: 71:45:5e:ca:a1:4f:35:00:3d:4a:54:27:0d:40:04:cb:61:e4: 72:01:fe:77:29:a7:20:6b:df:05:56:c2:f3:45:32:03:e8:66: 91:00:96:b9:f3:06:85:11:9a:31:95:cc:85:ce:0e:11:cf:b2: 07:a4:0d:ab:85:8a:46:c4:d4:80:73:71:45:5e:8c:e0:38:40: e3:e5:67:16:0e:d9:9f:77:8e:04:0b:45:be:65:7d:e3:f7:c1: d1:4f:b8:36:41:e5:ff:fb:c8:e7:ce:71:bc:da:dd:7d:a8:16: 1d:f0:49:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYei2Mz88te1qBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk M2Y1NzRmYzEtYzk5ZC00MmI0LTg2OWUtOWNjNmJhODM3NzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaDThwtE8Lsdc5iUBfeOi/Sk98D4GvpdSogK d1hJkM1hAKwzTdzBTOT3Q/vjc/QIDrhPIxWbzbqAvmd11PYmYMnAF74VL0U7IFU3 SiI4+ZPyxSRdQj7hbEMTR5y0trqcoY2AmU/8nblBVJfs919efu9uW3/p0O3uYqEv xO1UjhsKox22IATA0lUeAH+G2SFnhKapJ/kIlOWTa/IUm77Mr4V+WxV7WdmaP4c4 PFGMn3senkAaMuT8s+G7JQ+kVQyUyZIo7oKLv0f+jYizUDnOd/hcC2nXryc4ZESF Cra3iIHNvF2Wnw+5wo1Q7mnI/l+3LZGNnaCYC2aULZLuNhOiLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo/WEfrB9nwgvEuRpvjUz2504waMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvMGVmMmU2ODUtOTYyZS0z YzcyLTg5MDMtOTcyMmRmNjUyYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQsbwttGp0+2fjOGdzSo3Ss2Z0MWly+rArrOTylRczq7bdZ7uxFC1U6 wbQZRr1EuXTf0NV8ONpILEU3KJY/fjLsZGQ48j8jvPoh/2uidwh0getVmNn2f56T m/GAlD8MlhXt4HfD0JIXsTMyGtTqM2YNa/ykf6RBKw3/5VuGIOKAfJdeRHnI2y3Q BaWR0VeBIHFFXsqhTzUAPUpUJw1ABMth5HIB/ncppyBr3wVWwvNFMgPoZpEAlrnz BoURmjGVzIXODhHPsgekDauFikbE1IBzcUVejOA4QOPlZxYO2Z93jgQLRb5lfeP3 wdFPuDZB5f/7yOfOcbza3X2oFh3wSX4= -----END CERTIFICATE-----Generated at Sun Oct 19 20:31:42 2025 by rpki-client