$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/0227fc54-1b0f-33f6-9ce8-15d5f1a43033.roa File: 0227fc54-1b0f-33f6-9ce8-15d5f1a43033.roa (raw, json) Hash identifier: v8shlSKzJtAADO6Eg0g5Z3td6xaPxkannQmKHjeEgTU= Subject key identifier: 44:55:23:67:41:35:3D:AD:7E:8C:ED:DA:95:A0:DD:3C:E3:FB:C1:D9 Certificate issuer: /CN=b67bd843-21be-45d4-8f47-607465f96339 Certificate serial: 010D0C9F4328584B80B7650FF77AF18E35617280 Authority key identifier: 41:FB:14:8B:8D:51:1A:08:6E:4D:EA:94:E4:E1:6D:9F:B8:D4:AA:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/0227fc54-1b0f-33f6-9ce8-15d5f1a43033.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 10308 IP address blocks: 170.76.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/b67bd843-21be-45d4-8f47-607465f96339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/b67bd843-21be-45d4-8f47-607465f96339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:65:0f:f7:7a:f1:8e:35:61:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b67bd843-21be-45d4-8f47-607465f96339 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=1c42a62d-b490-4f05-a3db-5a70d39826fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:2d:b8:aa:e5:4d:19:fa:5f:c2:41:d9:9b: f2:11:7e:a0:01:db:29:5e:3d:5a:58:0b:12:ba:c6: 1c:2e:86:e6:5a:61:d7:4c:f8:a4:0e:4a:54:3a:a2: 64:b5:8e:e1:03:b4:6c:f9:28:a9:6d:bf:03:a2:6a: eb:03:56:ae:ce:94:36:5c:0d:69:c6:ce:fa:49:d3: a1:64:7b:69:e2:d4:36:86:93:36:35:73:9a:d8:b9: 23:1e:f1:0d:96:79:32:98:7c:1f:05:d0:a6:d5:61: 66:6e:9b:16:60:62:7a:02:c9:30:66:47:cb:2b:54: 23:f1:e8:fa:21:a5:57:5e:4c:2b:fd:50:23:86:3b: 98:f6:e6:3d:6d:66:d4:c6:52:57:5f:96:5f:f3:5d: c2:4e:92:ca:3d:ec:0c:7d:4f:d9:d6:00:1e:56:b7: d9:b5:8b:ec:8d:37:51:7e:58:d7:99:9e:af:4c:10: a5:5a:dd:da:e2:cb:15:f9:15:45:12:d5:32:93:84: 34:6f:3b:21:06:b3:41:de:14:97:e0:64:11:66:72: 26:2b:08:29:59:53:0f:90:81:35:57:2a:7b:c5:f4: 82:f8:29:9f:0f:4b:22:20:52:b8:6f:66:a3:40:96: ca:9e:23:af:b3:e5:e9:4b:67:1d:58:09:9d:f2:be: 33:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:55:23:67:41:35:3D:AD:7E:8C:ED:DA:95:A0:DD:3C:E3:FB:C1:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/0227fc54-1b0f-33f6-9ce8-15d5f1a43033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/b67bd843-21be-45d4-8f47-607465f96339.crl X509v3 Authority Key Identifier: keyid:41:FB:14:8B:8D:51:1A:08:6E:4D:EA:94:E4:E1:6D:9F:B8:D4:AA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339.cer sbgp-ipAddrBlock: critical IPv4: 170.76.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:65:07:5d:7c:0b:19:10:38:e2:59:2b:ae:0e:95:2b:f8:b0: bd:07:fa:da:02:18:cd:4b:6a:89:ea:43:5a:3d:48:10:76:ea: 7a:61:dd:a9:d6:ab:58:01:de:7f:b8:08:66:3f:35:e0:01:f4: 96:67:b0:fa:03:3c:df:9b:95:ee:c1:56:c3:72:ed:5a:8b:2d: 11:1a:29:41:f3:c8:6b:24:c0:84:a8:6d:14:06:10:94:0e:de: da:89:52:cb:a3:49:7f:f3:b3:9a:5a:38:71:b6:15:11:71:69: 19:1d:32:81:27:30:94:a8:f8:22:70:81:bc:e2:2e:07:13:c8: be:f0:4f:ee:c0:d9:78:e9:9b:2e:bb:5f:85:1f:ca:5f:75:58: 57:e0:a5:da:21:2b:28:d1:1e:aa:d0:a1:d9:43:16:b8:30:71: 02:3f:58:c7:5e:01:06:eb:1a:7a:2f:4b:16:11:27:63:f2:86: 48:19:ad:d4:3c:f0:0e:54:71:b3:bc:fc:bb:9a:70:e4:fe:d2: b2:66:65:f1:64:90:c4:4f:57:44:d5:3b:ac:eb:31:a2:85:56: ac:27:0b:cc:66:79:56:01:1d:56:7c:ae:c6:b7:f6:8f:c4:df: 3e:4a:ff:58:96:65:1d:00:f0:76:4e:6f:22:06:04:7e:41:b1: 5e:15:2b:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2UP93rxjjVhcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY3YmQ4NDMtMjFiZS00NWQ0LThmNDctNjA3NDY1Zjk2 MzM5MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MWM0MmE2MmQtYjQ5MC00ZjA1LWEzZGItNWE3MGQzOTgyNmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshItuKrlTRn6X8JB2ZvyEX6gAdspXj1aWAsS usYcLobmWmHXTPikDkpUOqJktY7hA7Rs+Sipbb8DomrrA1auzpQ2XA1pxs76SdOh ZHtp4tQ2hpM2NXOa2LkjHvENlnkymHwfBdCm1WFmbpsWYGJ6AskwZkfLK1Qj8ej6 IaVXXkwr/VAjhjuY9uY9bWbUxlJXX5Zf813CTpLKPewMfU/Z1gAeVrfZtYvsjTdR fljXmZ6vTBClWt3a4ssV+RVFEtUyk4Q0bzshBrNB3hSX4GQRZnImKwgpWVMPkIE1 Vyp7xfSC+CmfD0siIFK4b2ajQJbKniOvs+XpS2cdWAmd8r4zHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERVI2dBNT2tfozt2pWg3Tzj+8HZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNjdi ZDg0My0yMWJlLTQ1ZDQtOGY0Ny02MDc0NjVmOTYzMzkvMDIyN2ZjNTQtMWIwZi0z M2Y2LTljZTgtMTVkNWYxYTQzMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjY3YmQ4NDMtMjFiZS00NWQ0LThm NDctNjA3NDY1Zjk2MzM5L2I2N2JkODQzLTIxYmUtNDVkNC04ZjQ3LTYwNzQ2NWY5 NjMzOS5jcmwwHwYDVR0jBBgwFoAUQfsUi41RGghuTeqU5OFtn7jUqvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNjdiZDg0My0yMWJlLTQ1ZDQtOGY0Ny02MDc0 NjVmOTYzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqkznMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJllB118CxkQOOJZK64OlSv4sL0H+toCGM1LaonqQ1o9SBB26nph3anW q1gB3n+4CGY/NeAB9JZnsPoDPN+ble7BVsNy7VqLLREaKUHzyGskwISobRQGEJQO 3tqJUsujSX/zs5paOHG2FRFxaRkdMoEnMJSo+CJwgbziLgcTyL7wT+7A2Xjpmy67 X4Ufyl91WFfgpdohKyjRHqrQodlDFrgwcQI/WMdeAQbrGnovSxYRJ2PyhkgZrdQ8 8A5UcbO8/LuacOT+0rJmZfFkkMRPV0TVO6zrMaKFVqwnC8xmeVYBHVZ8rsa39o/E 3z5K/1iWZR0A8HZObyIGBH5BsV4VK/g= -----END CERTIFICATE-----Generated at Mon Oct 20 22:45:47 2025 by rpki-client