$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/f8c13836-c165-39bc-9bda-e76385fde4be.roa File: f8c13836-c165-39bc-9bda-e76385fde4be.roa (raw, json) Hash identifier: GC6rRF0Rdk/lc+45pObXGTZGyOB0i0MTveTwuEHwiy4= Subject key identifier: A5:BE:4C:3A:C7:45:07:2A:62:41:A4:37:10:5C:78:4D:8A:C0:EE:38 Certificate issuer: /CN=1f1c0c08-444d-43e6-923b-55c2d71244e4 Certificate serial: 010D0C9F4328584B2A2C2E98C10FDE71ED336680 Authority key identifier: 4B:D4:90:27:6C:37:FF:DF:57:06:1E:69:C5:A0:95:7A:E8:06:FA:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/f8c13836-c165-39bc-9bda-e76385fde4be.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 397711 IP address blocks: 170.76.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:2e:98:c1:0f:de:71:ed:33:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1c0c08-444d-43e6-923b-55c2d71244e4 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=ddb1112f-f4f2-4c94-ad00-144c8d08453a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d4:4b:8a:ad:1e:0b:9d:8c:93:b9:c9:bf:e8: 2e:fa:df:27:39:57:9d:b6:96:3c:8f:ce:55:ae:4c: 47:dc:f6:11:c8:6a:10:40:55:9d:13:d9:aa:32:34: a5:f8:5a:df:e6:d8:10:30:27:34:8d:ed:8a:fe:ee: 02:35:af:d2:4a:18:b4:ca:d5:2c:44:64:5c:48:4a: 6b:ab:3d:9f:0c:75:6d:75:d2:17:f0:fb:3a:4b:7f: 61:16:a5:3d:d0:55:c5:8c:bd:98:60:7c:3d:34:51: 6f:3d:3e:06:4e:22:c8:a6:bb:1c:7e:10:d8:25:42: ad:64:eb:39:0d:c3:9b:a3:9c:4e:8b:ae:52:cf:05: 78:3e:07:91:e6:c0:9b:ed:64:eb:05:4b:18:00:62: e1:87:db:92:98:33:11:ba:37:25:cb:ec:f5:8d:e5: 99:f3:c7:61:95:8f:65:00:a2:ff:99:c3:51:ef:3b: 50:48:af:ac:ab:b3:33:14:bb:e0:86:01:5d:f4:74: 6f:08:23:fa:45:09:68:82:1e:7c:7d:fb:b8:3e:20: b2:32:fd:8a:d8:68:b4:aa:ee:4d:2b:98:8f:41:da: c7:08:76:a5:7a:cf:ac:7e:61:eb:97:9c:8a:f7:4d: c9:db:4b:e3:87:75:2e:c9:6d:13:94:6c:f5:31:7e: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BE:4C:3A:C7:45:07:2A:62:41:A4:37:10:5C:78:4D:8A:C0:EE:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/f8c13836-c165-39bc-9bda-e76385fde4be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.crl X509v3 Authority Key Identifier: keyid:4B:D4:90:27:6C:37:FF:DF:57:06:1E:69:C5:A0:95:7A:E8:06:FA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4.cer sbgp-ipAddrBlock: critical IPv4: 170.76.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:65:29:62:49:be:16:36:a7:e3:65:b2:86:1b:19:d9:8f:95: ff:f6:86:01:f9:19:2d:ec:30:e1:ec:44:f8:b6:50:19:cc:ab: b1:77:98:9d:d7:03:39:15:a0:17:ba:07:23:f7:d2:05:2c:78: 28:e2:bc:c6:80:18:0a:d0:82:ac:fd:75:fb:b6:07:7d:94:30: 8b:76:91:04:75:e2:61:44:f0:64:0e:ab:ac:8a:ad:bb:c7:2f: 63:cc:56:68:5f:35:71:1e:8d:71:14:3a:0e:f8:de:dc:db:0e: d4:f7:7f:c6:bf:0a:39:7d:7a:ad:d7:a1:d5:a5:5b:a1:6f:07: d8:79:46:19:9c:20:60:f4:46:55:b6:b1:76:3d:bb:eb:76:3d: 08:8c:52:07:06:05:8e:78:0d:5c:d5:21:7c:44:14:58:c4:25: fb:e5:ca:a1:bd:22:ee:67:af:e6:7c:78:14:0c:2c:1b:86:31: 1c:05:c7:c6:ae:71:27:3d:50:6f:3b:a5:7b:aa:81:29:2d:ad: 02:80:ef:c3:f6:73:97:53:a8:26:19:d8:dc:1c:65:e6:40:b3: 00:b0:a2:e7:c7:5e:8a:a3:4f:e4:bd:d6:81:6b:1b:4a:8e:4f: 2f:b3:2d:de:df:ac:ea:25:eb:3b:bf:a9:a3:93:73:c5:64:6b: 7b:49:b9:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLC6YwQ/ece0zZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYxYzBjMDgtNDQ0ZC00M2U2LTkyM2ItNTVjMmQ3MTI0 NGU0MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGRiMTExMmYtZjRmMi00Yzk0LWFkMDAtMTQ0YzhkMDg0NTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitRLiq0eC52Mk7nJv+gu+t8nOVedtpY8j85V rkxH3PYRyGoQQFWdE9mqMjSl+Frf5tgQMCc0je2K/u4CNa/SShi0ytUsRGRcSEpr qz2fDHVtddIX8Ps6S39hFqU90FXFjL2YYHw9NFFvPT4GTiLIprscfhDYJUKtZOs5 DcObo5xOi65SzwV4PgeR5sCb7WTrBUsYAGLhh9uSmDMRujcly+z1jeWZ88dhlY9l AKL/mcNR7ztQSK+sq7MzFLvghgFd9HRvCCP6RQlogh58ffu4PiCyMv2K2Gi0qu5N K5iPQdrHCHales+sfmHrl5yK903J20vjh3UuyW0TlGz1MX7E+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKW+TDrHRQcqYkGkNxBceE2KwO44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZjFj MGMwOC00NDRkLTQzZTYtOTIzYi01NWMyZDcxMjQ0ZTQvZjhjMTM4MzYtYzE2NS0z OWJjLTliZGEtZTc2Mzg1ZmRlNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWYxYzBjMDgtNDQ0ZC00M2U2LTky M2ItNTVjMmQ3MTI0NGU0LzFmMWMwYzA4LTQ0NGQtNDNlNi05MjNiLTU1YzJkNzEy NDRlNC5jcmwwHwYDVR0jBBgwFoAUS9SQJ2w3/99XBh5pxaCVeugG+hYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZjFjMGMwOC00NDRkLTQzZTYtOTIzYi01NWMy ZDcxMjQ0ZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqkzxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxlKWJJvhY2p+NlsoYbGdmPlf/2hgH5GS3sMOHsRPi2UBnMq7F3mJ3X AzkVoBe6ByP30gUseCjivMaAGArQgqz9dfu2B32UMIt2kQR14mFE8GQOq6yKrbvH L2PMVmhfNXEejXEUOg743tzbDtT3f8a/Cjl9eq3XodWlW6FvB9h5RhmcIGD0RlW2 sXY9u+t2PQiMUgcGBY54DVzVIXxEFFjEJfvlyqG9Iu5nr+Z8eBQMLBuGMRwFx8au cSc9UG87pXuqgSktrQKA78P2c5dTqCYZ2NwcZeZAswCwoufHXoqjT+S91oFrG0qO Ty+zLd7frOol6zu/qaOTc8Vka3tJub4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:44 2025 by rpki-client