$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/f10dd7d9-2a17-35be-b4f7-566d1dd7a1b1.roa File: f10dd7d9-2a17-35be-b4f7-566d1dd7a1b1.roa (raw, json) Hash identifier: 3oAxvqrEQehL21CAkeAQNf/XJgKQnP56EzSYpzG7qwo= Subject key identifier: 83:45:71:37:0C:E6:F3:17:16:9F:11:B2:3B:F9:9F:7E:24:81:65:66 Certificate issuer: /CN=ff44f78c-6d70-421c-a422-92b3c44d921c Certificate serial: 010D0C9F4328584ADA9BCBB935EC7055E7382B00 Authority key identifier: 43:C5:A6:43:C3:B1:B3:7A:3F:E6:C8:A5:19:C2:52:4A:81:B1:A3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/f10dd7d9-2a17-35be-b4f7-566d1dd7a1b1.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 395967 IP address blocks: 170.76.237.0/24 maxlen: 24 2607:b9c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/ff44f78c-6d70-421c-a422-92b3c44d921c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/ff44f78c-6d70-421c-a422-92b3c44d921c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:cb:b9:35:ec:70:55:e7:38:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44f78c-6d70-421c-a422-92b3c44d921c Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=423fa93a-444c-4683-a724-433559a3e3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:46:07:ad:71:3e:04:2b:88:97:4a:55:8d:25: ac:36:19:c3:5f:be:45:52:51:e8:85:eb:ab:fb:f7: 54:b1:b8:2e:12:79:f2:e8:8d:5e:e1:27:71:67:5a: 8c:c1:57:a3:d3:b3:d9:a2:ca:29:a9:49:62:d3:91: 5c:40:8d:9a:33:ad:89:9c:7f:f7:da:6a:b0:ec:1d: c3:e7:3c:be:fd:c8:dc:ed:a2:72:6d:cc:14:98:1d: 94:63:2f:63:de:d1:cf:52:cd:9d:c3:f9:9d:bf:a1: 6b:44:99:76:c0:15:8c:b5:74:8e:e0:ed:89:70:eb: 4e:97:71:b8:a3:00:f1:99:75:7a:48:c4:8e:37:f4: 1e:74:0a:5e:e3:f2:b8:94:45:43:b2:10:a2:be:c5: 0a:4f:28:61:10:f7:05:2e:c5:8e:4b:b1:92:6c:02: e8:2b:18:e6:70:f1:72:b0:23:17:e5:28:a5:a0:53: f3:bb:42:49:4b:24:79:34:bf:e5:6d:8f:6b:5c:f3: e2:97:da:ee:fe:31:a1:19:4d:17:1b:f0:22:27:ae: bb:c0:c1:55:cf:2c:a8:f3:a0:b2:33:f2:ab:f4:bd: 3c:a0:65:37:23:4c:2e:43:1c:6e:84:11:7e:a0:e4: 05:29:8a:25:51:86:51:f6:29:a6:0b:79:c4:8c:5d: 73:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:45:71:37:0C:E6:F3:17:16:9F:11:B2:3B:F9:9F:7E:24:81:65:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/f10dd7d9-2a17-35be-b4f7-566d1dd7a1b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/ff44f78c-6d70-421c-a422-92b3c44d921c.crl X509v3 Authority Key Identifier: keyid:43:C5:A6:43:C3:B1:B3:7A:3F:E6:C8:A5:19:C2:52:4A:81:B1:A3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c.cer sbgp-ipAddrBlock: critical IPv4: 170.76.237.0/24 IPv6: 2607:b9c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c2:3b:0a:ac:bb:76:06:55:96:d4:f5:73:ce:ea:34:a4:3e: 32:af:aa:c2:8e:16:bf:2c:a1:d9:f2:9a:d9:19:f5:d8:fe:71: 9f:73:37:aa:95:80:ad:32:2a:81:06:75:b1:a7:7b:52:cd:94: 90:60:51:7c:0d:4a:49:63:7b:ab:1c:71:4b:d9:d3:06:ea:b4: 3c:25:c9:c9:87:51:6a:82:3c:90:f2:b7:77:f0:72:b7:57:bf: bc:c0:39:93:99:1f:b8:94:96:08:74:f2:a7:91:14:f7:9e:85: ec:1a:5c:1e:c0:13:f4:fd:7e:c5:64:1c:5a:66:67:e5:e8:ba: 67:11:c1:07:68:5b:ff:e0:fe:f7:2a:ce:f2:bd:62:c5:0b:af: 05:78:96:25:ee:45:8e:ef:22:c7:d0:41:1c:cf:46:43:c8:56: ee:28:50:01:c8:5a:c6:c1:b4:c5:c4:dc:7e:1e:74:56:35:0e: ef:fd:0e:6c:93:58:a2:2f:96:56:71:90:b3:2d:9a:b0:6a:43: b0:12:24:14:f0:f4:fb:5a:83:1b:1f:bb:dd:78:ee:b4:ca:fa: bc:62:06:59:de:98:8c:24:27:01:72:4a:be:dd:41:9d:b7:7c: d5:84:5e:30:50:2c:2b:3b:3f:f1:6e:0c:02:9f:80:67:91:60: e6:0a:34:69 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEram8u5NexwVec4KwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY0NGY3OGMtNmQ3MC00MjFjLWE0MjItOTJiM2M0NGQ5 MjFjMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk NDIzZmE5M2EtNDQ0Yy00NjgzLWE3MjQtNDMzNTU5YTNlM2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUYHrXE+BCuIl0pVjSWsNhnDX75FUlHoheur +/dUsbguEnny6I1e4SdxZ1qMwVej07PZosopqUli05FcQI2aM62JnH/32mqw7B3D 5zy+/cjc7aJybcwUmB2UYy9j3tHPUs2dw/mdv6FrRJl2wBWMtXSO4O2JcOtOl3G4 owDxmXV6SMSON/QedApe4/K4lEVDshCivsUKTyhhEPcFLsWOS7GSbALoKxjmcPFy sCMX5SiloFPzu0JJSyR5NL/lbY9rXPPil9ru/jGhGU0XG/AiJ667wMFVzyyo86Cy M/Kr9L08oGU3I0wuQxxuhBF+oOQFKYolUYZR9immC3nEjF1z5wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFINFcTcM5vMXFp8Rsjv5n34kgWVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mZjQ0 Zjc4Yy02ZDcwLTQyMWMtYTQyMi05MmIzYzQ0ZDkyMWMvZjEwZGQ3ZDktMmExNy0z NWJlLWI0ZjctNTY2ZDFkZDdhMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZmY0NGY3OGMtNmQ3MC00MjFjLWE0 MjItOTJiM2M0NGQ5MjFjL2ZmNDRmNzhjLTZkNzAtNDIxYy1hNDIyLTkyYjNjNDRk OTIxYy5jcmwwHwYDVR0jBBgwFoAUQ8WmQ8Oxs3o/5silGcJSSoGxoy0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mZjQ0Zjc4Yy02ZDcwLTQyMWMtYTQyMi05MmIz YzQ0ZDkyMWMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAqkztMA0E AgACMAcDBQAmB7nAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAAvCOwqsu3YGVZbU9XPO6jSkPjKvqsKOFr8s odnymtkZ9dj+cZ9zN6qVgK0yKoEGdbGne1LNlJBgUXwNSklje6sccUvZ0wbqtDwl ycmHUWqCPJDyt3fwcrdXv7zAOZOZH7iUlgh08qeRFPeehewaXB7AE/T9fsVkHFpm Z+XoumcRwQdoW//g/vcqzvK9YsULrwV4liXuRY7vIsfQQRzPRkPIVu4oUAHIWsbB tMXE3H4edFY1Du/9DmyTWKIvllZxkLMtmrBqQ7ASJBTw9Ptagxsfu9147rTK+rxi BlnemIwkJwFySr7dQZ23fNWEXjBQLCs7P/FuDAKfgGeRYOYKNGk= -----END CERTIFICATE-----Generated at Sun Aug 24 04:22:01 2025 by rpki-client