$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/e6bc8b59-9ec0-3bce-9613-5085d606d708.roa File: e6bc8b59-9ec0-3bce-9613-5085d606d708.roa (raw, json) Hash identifier: neIj+lWlWD+g2FBD8N3l2wnLd13J76OOOaqRwcFV7rQ= Subject key identifier: C5:F5:29:DB:8E:06:F2:83:7A:D7:72:A8:08:20:8D:D6:91:27:EB:38 Certificate issuer: /CN=5570a1c9-b9da-44c0-96d8-c5b478b52a04 Certificate serial: 010D0C9F4328584B785749E6D5BE414BBE696100 Authority key identifier: 93:24:CC:12:9A:E9:0C:98:B7:F1:D4:F9:17:FA:6C:C6:19:2E:18:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/e6bc8b59-9ec0-3bce-9613-5085d606d708.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 208.81.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:49:e6:d5:be:41:4b:be:69:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5570a1c9-b9da-44c0-96d8-c5b478b52a04 Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=8166cafb-7195-4552-8d6c-12680ff3d9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:44:6e:90:b4:8b:cc:ee:03:f1:9b:4c:38:5e: 6b:2b:1b:c0:d4:9a:f9:19:ce:c6:3d:3b:ad:7b:7f: 25:ed:94:d9:65:38:f5:2f:83:e7:d3:31:f8:61:36: f8:45:fb:81:77:35:82:f3:02:ac:81:b5:79:21:28: 44:b1:4e:60:77:90:09:8b:04:8d:27:e3:e0:9b:e7: f7:97:a9:e4:7b:86:db:c3:bd:c0:26:62:cc:96:6d: c6:fb:5f:ca:98:25:ae:85:4b:8d:83:6a:c5:bb:3b: c6:12:75:a2:f6:f7:17:e0:c9:e5:fe:a8:92:70:4a: 44:ef:9f:42:83:54:13:4a:80:e1:2c:e1:75:77:f2: dd:49:cc:c0:6c:61:6c:4a:a0:f4:a4:73:d3:02:d5: 67:d5:4f:9c:93:86:e2:43:02:cd:8b:d0:4d:f0:a6: dc:71:2d:0a:7a:4f:d1:73:5e:04:49:c6:ca:28:58: 00:ac:38:74:25:36:30:f2:b3:54:ff:5b:94:77:97: 59:19:37:20:59:6c:de:b9:8c:55:a3:37:a5:e3:48: 5c:ff:4c:2f:b1:f7:e2:5f:d9:8f:5f:74:63:f8:a9: 94:93:da:25:26:69:e7:b6:57:ce:4b:3c:00:14:81: 56:e0:8a:b3:e8:7d:a4:c3:6e:6c:73:27:63:69:d4: ad:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F5:29:DB:8E:06:F2:83:7A:D7:72:A8:08:20:8D:D6:91:27:EB:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/e6bc8b59-9ec0-3bce-9613-5085d606d708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.crl X509v3 Authority Key Identifier: keyid:93:24:CC:12:9A:E9:0C:98:B7:F1:D4:F9:17:FA:6C:C6:19:2E:18:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer sbgp-ipAddrBlock: critical IPv4: 208.81.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:1a:17:60:68:ea:5a:22:fa:03:ae:78:77:d3:03:b0:44:1c: 2d:b1:59:43:ba:0a:9c:c8:76:30:7b:9d:fa:ec:87:8c:ce:71: 46:fa:c8:76:4e:91:84:09:f0:bf:e0:d4:4a:45:0e:49:fa:e9: 89:bf:b2:09:9e:cd:30:1e:b8:03:38:54:ef:2f:38:f4:ab:c5: 56:1d:5d:7f:8d:e3:da:6a:6b:77:f3:a4:5b:d4:e2:2b:1f:a9: b7:de:46:d7:78:1a:7d:ef:0b:23:8b:dc:b8:67:11:6c:f1:88: 7c:3a:bb:d5:0c:1c:f1:53:97:9b:7d:ba:a1:69:32:11:bd:b8: 19:76:6f:f6:8b:2f:0d:ab:14:77:66:23:37:9b:90:63:d6:fb: 6f:47:ba:26:2c:79:ac:bf:e7:9b:ac:f3:d7:2a:43:d7:68:23: b8:60:2b:f4:a4:f4:57:83:72:16:c3:c9:8e:37:f2:0a:29:38: be:ff:34:16:88:a3:3f:2e:1e:9b:d9:e2:88:00:06:27:40:73: af:1d:1b:b8:18:b2:72:24:bc:1e:99:e8:58:5b:8e:2a:95:3d: f4:52:18:da:87:81:95:d6:8f:94:2c:6f:40:98:cf:74:ec:69: b4:6c:b0:20:22:a5:bb:6b:22:03:ae:d2:08:d4:bf:5f:c9:92: 9a:a7:82:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V0nm1b5BS75pYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU3MGExYzktYjlkYS00NGMwLTk2ZDgtYzViNDc4YjUy YTA0MB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk ODE2NmNhZmItNzE5NS00NTUyLThkNmMtMTI2ODBmZjNkOWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmERukLSLzO4D8ZtMOF5rKxvA1Jr5Gc7GPTut e38l7ZTZZTj1L4Pn0zH4YTb4RfuBdzWC8wKsgbV5IShEsU5gd5AJiwSNJ+Pgm+f3 l6nke4bbw73AJmLMlm3G+1/KmCWuhUuNg2rFuzvGEnWi9vcX4Mnl/qiScEpE759C g1QTSoDhLOF1d/LdSczAbGFsSqD0pHPTAtVn1U+ck4biQwLNi9BN8KbccS0Kek/R c14EScbKKFgArDh0JTYw8rNU/1uUd5dZGTcgWWzeuYxVozel40hc/0wvsffiX9mP X3Rj+KmUk9olJmnntlfOSzwAFIFW4Iqz6H2kw25scydjadSt/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX1KduOBvKDetdyqAggjdaRJ+s4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81NTcw YTFjOS1iOWRhLTQ0YzAtOTZkOC1jNWI0NzhiNTJhMDQvZTZiYzhiNTktOWVjMC0z YmNlLTk2MTMtNTA4NWQ2MDZkNzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTU3MGExYzktYjlkYS00NGMwLTk2 ZDgtYzViNDc4YjUyYTA0LzU1NzBhMWM5LWI5ZGEtNDRjMC05NmQ4LWM1YjQ3OGI1 MmEwNC5jcmwwHwYDVR0jBBgwFoAUkyTMEprpDJi38dT5F/psxhkuGOAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81NTcwYTFjOS1iOWRhLTQ0YzAtOTZkOC1jNWI0 NzhiNTJhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwaF2Bo6loi+gOueHfTA7BEHC2xWUO6CpzIdjB7nfrsh4zOcUb6yHZO kYQJ8L/g1EpFDkn66Ym/sgmezTAeuAM4VO8vOPSrxVYdXX+N49pqa3fzpFvU4isf qbfeRtd4Gn3vCyOL3LhnEWzxiHw6u9UMHPFTl5t9uqFpMhG9uBl2b/aLLw2rFHdm IzebkGPW+29HuiYseay/55us89cqQ9doI7hgK/Sk9FeDchbDyY438gopOL7/NBaI oz8uHpvZ4ogABidAc68dG7gYsnIkvB6Z6FhbjiqVPfRSGNqHgZXWj5Qsb0CYz3Ts abRssCAipbtrIgOu0gjUv1/JkpqnguA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:42:54 2025 by rpki-client