$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/1bc62835-53d3-3758-ab64-28f4099871ce.roa File: 1bc62835-53d3-3758-ab64-28f4099871ce.roa (raw, json) Hash identifier: xNgLIVOIe+8ZB3Tem3NtnQYfF7HaVIJXfwQaGh9l1M4= Subject key identifier: C5:7E:20:2E:BF:28:AD:B6:B1:50:4A:F4:4E:9C:77:E5:A4:73:AA:9B Certificate issuer: /CN=5570a1c9-b9da-44c0-96d8-c5b478b52a04 Certificate serial: 010D0C9F4328584B785749F9CAA63B47122B4980 Authority key identifier: 93:24:CC:12:9A:E9:0C:98:B7:F1:D4:F9:17:FA:6C:C6:19:2E:18:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/1bc62835-53d3-3758-ab64-28f4099871ce.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 208.81.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:49:f9:ca:a6:3b:47:12:2b:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5570a1c9-b9da-44c0-96d8-c5b478b52a04 Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=65648b12-a8eb-42e7-ba90-ef5101c33926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:56:4b:48:8a:71:03:8d:d3:d0:0c:1e:92:68: 1c:95:96:90:9f:3b:88:d9:cc:3f:ae:4a:3e:22:9a: 4a:14:83:51:ff:e2:fe:96:b3:64:1e:cd:32:9e:bd: 9f:5a:82:7e:c2:54:46:03:d0:d3:1e:b2:0b:45:38: 73:4a:c3:d7:2f:95:4f:fb:22:bf:46:4d:18:fc:c3: 5f:da:9e:bf:65:84:2b:4d:4e:7c:e1:c1:44:e5:f6: 68:c6:bf:92:8b:20:fd:da:34:97:ff:22:09:99:1b: 13:bc:35:e7:d3:a2:16:ff:67:b6:74:2c:66:f9:ad: 26:6c:20:1a:43:19:1b:ab:df:0f:4b:a0:06:db:a9: 69:cf:60:4c:24:7d:4d:12:05:10:81:72:a9:22:5f: 74:39:1c:3a:4b:39:57:73:77:8f:ec:d3:7a:ac:9b: d0:2f:d9:05:9e:a6:68:96:54:3e:69:e7:d4:3a:72: 3a:79:b0:c5:65:a6:1a:37:71:e9:68:11:4d:11:60: 73:37:34:ab:a9:b4:eb:06:de:79:52:01:20:6f:2d: ff:0f:56:6e:fa:23:fc:96:e0:d7:9b:9a:ac:f6:67: 5b:7a:54:5b:b7:93:c7:23:d4:a7:44:bd:f6:25:f1: c6:9b:39:a4:8b:21:21:8c:13:93:fd:92:61:c4:ef: 38:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7E:20:2E:BF:28:AD:B6:B1:50:4A:F4:4E:9C:77:E5:A4:73:AA:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/1bc62835-53d3-3758-ab64-28f4099871ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.crl X509v3 Authority Key Identifier: keyid:93:24:CC:12:9A:E9:0C:98:B7:F1:D4:F9:17:FA:6C:C6:19:2E:18:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer sbgp-ipAddrBlock: critical IPv4: 208.81.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0d:b6:20:5c:51:6d:28:d1:68:7f:d7:7d:82:06:49:c7:d3: 1b:e0:11:c5:e9:25:73:d2:af:db:9f:eb:fe:08:70:8e:6c:7d: bd:91:63:5f:c3:7d:ee:f2:85:ce:49:31:6b:6e:7b:2e:a1:c7: 1d:e1:c9:77:00:43:f3:af:72:bd:fb:92:b0:92:f8:30:d8:b2: 41:c7:98:f8:43:1f:1a:72:8d:a2:c3:6d:48:a2:cd:79:78:75: 4f:4e:28:4a:fb:62:73:87:e4:df:04:1e:a8:6e:c5:01:fb:4a: f0:65:01:78:29:0f:51:f0:84:ca:ad:fe:a7:85:a1:65:03:6e: 1e:e8:8e:ed:32:18:b0:3f:d2:21:d3:f6:ad:4a:cd:33:c5:b5: 89:ff:3e:bf:36:5b:05:0d:05:e9:7f:f1:19:a9:be:93:91:bb: 9a:f2:67:37:46:04:1d:c0:e3:5a:02:bb:34:ff:4d:58:cf:68: b1:75:12:80:41:19:b4:91:4a:f1:bb:d6:32:58:8b:04:52:f4: 80:a7:8a:f3:15:c3:d9:a6:8c:32:79:38:59:84:44:3e:ec:e9: d1:d0:f5:8d:ff:09:39:e4:b5:e5:86:c7:03:54:87:17:49:21: c6:35:68:d9:8d:8c:9a:1e:51:73:8f:cf:3a:55:e6:43:85:26: 08:a3:c5:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V0n5yqY7RxIrSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU3MGExYzktYjlkYS00NGMwLTk2ZDgtYzViNDc4YjUy YTA0MB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk NjU2NDhiMTItYThlYi00MmU3LWJhOTAtZWY1MTAxYzMzOTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1ZLSIpxA43T0AwekmgclZaQnzuI2cw/rko+ IppKFINR/+L+lrNkHs0ynr2fWoJ+wlRGA9DTHrILRThzSsPXL5VP+yK/Rk0Y/MNf 2p6/ZYQrTU584cFE5fZoxr+SiyD92jSX/yIJmRsTvDXn06IW/2e2dCxm+a0mbCAa Qxkbq98PS6AG26lpz2BMJH1NEgUQgXKpIl90ORw6SzlXc3eP7NN6rJvQL9kFnqZo llQ+aefUOnI6ebDFZaYaN3HpaBFNEWBzNzSrqbTrBt55UgEgby3/D1Zu+iP8luDX m5qs9mdbelRbt5PHI9SnRL32JfHGmzmkiyEhjBOT/ZJhxO84PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV+IC6/KK22sVBK9E6cd+Wkc6qbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81NTcw YTFjOS1iOWRhLTQ0YzAtOTZkOC1jNWI0NzhiNTJhMDQvMWJjNjI4MzUtNTNkMy0z NzU4LWFiNjQtMjhmNDA5OTg3MWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTU3MGExYzktYjlkYS00NGMwLTk2 ZDgtYzViNDc4YjUyYTA0LzU1NzBhMWM5LWI5ZGEtNDRjMC05NmQ4LWM1YjQ3OGI1 MmEwNC5jcmwwHwYDVR0jBBgwFoAUkyTMEprpDJi38dT5F/psxhkuGOAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81NTcwYTFjOS1iOWRhLTQ0YzAtOTZkOC1jNWI0 NzhiNTJhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFENtiBcUW0o0Wh/132CBknH0xvgEcXpJXPSr9uf6/4IcI5sfb2RY1/D fe7yhc5JMWtuey6hxx3hyXcAQ/Ovcr37krCS+DDYskHHmPhDHxpyjaLDbUiizXl4 dU9OKEr7YnOH5N8EHqhuxQH7SvBlAXgpD1HwhMqt/qeFoWUDbh7oju0yGLA/0iHT 9q1KzTPFtYn/Pr82WwUNBel/8RmpvpORu5ryZzdGBB3A41oCuzT/TVjPaLF1EoBB GbSRSvG71jJYiwRS9ICnivMVw9mmjDJ5OFmERD7s6dHQ9Y3/CTnkteWGxwNUhxdJ IcY1aNmNjJoeUXOPzzpV5kOFJgijxTM= -----END CERTIFICATE-----Generated at Sun Oct 19 23:23:30 2025 by rpki-client