$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa File: ec968a43-a3bc-35cd-9cae-298d0643c351.roa (raw, json) Hash identifier: Dy1vTtIQ8FXwQP47TLiwO8HQ6oMYWwh8Upzrg84CVhQ= Subject key identifier: C8:45:D5:77:32:0E:30:A0:B3:B9:D1:A9:13:04:32:D0:19:D7:FF:E9 Certificate issuer: /CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1 Certificate serial: 010D0C9F4328584AC87654F13F058C6F8D61F980 Authority key identifier: 65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 21693 IP address blocks: 170.152.0.0/16 maxlen: 24 192.234.136.0/24 maxlen: 24 192.234.137.0/24 maxlen: 24 192.234.138.0/24 maxlen: 24 192.234.139.0/24 maxlen: 24 192.234.140.0/24 maxlen: 24 198.179.151.0/24 maxlen: 24 198.179.152.0/24 maxlen: 24 198.179.153.0/24 maxlen: 24 198.179.154.0/24 maxlen: 24 198.179.155.0/24 maxlen: 24 198.179.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:54:f1:3f:05:8c:6f:8d:61:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=3663b9a0-eaa8-4834-b226-84f89728fa9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9e:8d:de:6e:2d:2b:f7:36:94:49:2b:01:58: 19:fb:5d:46:c3:37:d7:5d:04:b9:8b:51:d9:e6:27: 9a:7d:b7:00:f3:9a:71:7e:2c:08:10:19:5b:70:72: 61:18:ae:78:c6:46:53:7d:f8:3c:89:d6:ea:c2:3e: a3:56:d1:07:e9:30:cc:61:f5:b0:27:ff:51:73:d7: fd:de:32:a6:09:80:08:12:b7:71:5d:8a:b6:41:89: 3e:3f:97:a4:ad:15:5f:89:29:0f:6d:81:71:16:41: a1:43:87:8c:6f:77:ae:bb:9a:e5:5f:46:ae:90:5c: bf:22:2b:ec:80:27:f3:94:23:78:f1:d6:7f:2e:3a: c2:f5:f4:4f:87:3a:53:0d:70:58:b9:87:8c:bb:95: da:e2:8b:60:62:6f:96:2c:41:71:57:4d:c1:07:19: c1:79:37:72:a8:4d:93:bd:6f:58:94:21:77:54:62: bd:37:7c:5f:12:95:2a:1c:d0:85:0b:72:bb:0f:2a: 0b:cd:97:c4:69:09:eb:3f:22:d2:2f:43:26:84:e7: ca:8a:51:e2:e5:06:56:c3:d0:c6:08:bf:ea:03:3f: 19:5f:ba:c5:b6:c6:80:40:aa:2c:b9:9e:99:e4:05: 73:81:99:7a:1b:d1:05:04:26:d2:92:86:60:be:bb: 7c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:45:D5:77:32:0E:30:A0:B3:B9:D1:A9:13:04:32:D0:19:D7:FF:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl X509v3 Authority Key Identifier: keyid:65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer sbgp-ipAddrBlock: critical IPv4: 170.152.0.0/16 192.234.136.0-192.234.140.255 198.179.151.0-198.179.156.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:71:f4:d5:9c:22:a5:da:54:74:3b:d1:cb:7e:36:cb:08:cf: 7a:4f:dc:d3:73:6b:ba:9b:5d:20:c8:5a:19:92:0f:96:29:e9: f1:d1:21:15:10:05:8a:a2:a7:77:43:61:db:be:9e:06:ff:69: b5:7d:de:98:c6:38:cc:72:54:32:b1:61:24:a3:81:8a:d7:2a: 1e:a1:a9:7d:40:b2:a1:1a:c9:01:50:3a:b6:d6:96:37:4c:4a: 74:68:4b:2f:15:81:3e:71:e2:3b:64:ef:82:43:9e:c2:ff:65: de:71:ad:d9:ab:61:6a:47:18:58:34:57:e2:77:ac:f6:52:16: 5d:48:49:56:0c:d3:a3:6e:9a:5f:8d:23:6d:4c:65:5f:a2:8b: 94:df:38:26:aa:95:74:07:fe:c3:b1:f2:28:9d:04:9f:5e:24: e7:be:fa:57:be:6c:95:26:8f:a5:07:26:54:c9:0a:8d:98:f8: 0b:28:6e:63:27:9f:cd:82:f3:7d:50:f9:53:f5:a4:ff:2e:88: cf:2e:5a:a2:86:3c:11:19:1e:48:90:4d:7c:fe:36:db:f5:06: 52:7d:0d:a3:39:d6:8e:1c:45:2a:3d:13:f8:87:fd:76:7c:33: 79:eb:01:37:73:ef:c7:c6:1a:67:67:42:d2:24:03:fc:8a:b4: b8:0b:f2:de -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWErIdlTxPwWMb41h+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk4MWY2YjgtYzMyMy00MTFkLWI2YjgtMDNiYjQ0ZDJh ZGIxMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MzY2M2I5YTAtZWFhOC00ODM0LWIyMjYtODRmODk3MjhmYTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ6N3m4tK/c2lEkrAVgZ+11GwzfXXQS5i1HZ 5ieafbcA85pxfiwIEBlbcHJhGK54xkZTffg8idbqwj6jVtEH6TDMYfWwJ/9Rc9f9 3jKmCYAIErdxXYq2QYk+P5ekrRVfiSkPbYFxFkGhQ4eMb3euu5rlX0aukFy/Iivs gCfzlCN48dZ/LjrC9fRPhzpTDXBYuYeMu5Xa4otgYm+WLEFxV03BBxnBeTdyqE2T vW9YlCF3VGK9N3xfEpUqHNCFC3K7DyoLzZfEaQnrPyLSL0MmhOfKilHi5QZWw9DG CL/qAz8ZX7rFtsaAQKosuZ6Z5AVzgZl6G9EFBCbSkoZgvrt8IwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFMhF1XcyDjCgs7nRqRMEMtAZ1//pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTgx ZjZiOC1jMzIzLTQxMWQtYjZiOC0wM2JiNDRkMmFkYjEvZWM5NjhhNDMtYTNiYy0z NWNkLTljYWUtMjk4ZDA2NDNjMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk4MWY2YjgtYzMyMy00MTFkLWI2 YjgtMDNiYjQ0ZDJhZGIxLzM5ODFmNmI4LWMzMjMtNDExZC1iNmI4LTAzYmI0NGQy YWRiMS5jcmwwHwYDVR0jBBgwFoAUZcFvpzmgevfeykEi3I5W4/e8dL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTgxZjZiOC1jMzIzLTQxMWQtYjZiOC0wM2Ji NDRkMmFkYjEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAqpgwDAME A8DqiAMEAMDqjDAMAwQAxrOXAwQAxrOcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF9x9NWcIqXaVHQ70ct+ NssIz3pP3NNza7qbXSDIWhmSD5Yp6fHRIRUQBYqip3dDYdu+ngb/abV93pjGOMxy VDKxYSSjgYrXKh6hqX1AsqEayQFQOrbWljdMSnRoSy8VgT5x4jtk74JDnsL/Zd5x rdmrYWpHGFg0V+J3rPZSFl1ISVYM06Numl+NI21MZV+ii5TfOCaqlXQH/sOx8iid BJ9eJOe++le+bJUmj6UHJlTJCo2Y+AsobmMnn82C831Q+VP1pP8uiM8uWqKGPBEZ HkiQTXz+Ntv1BlJ9DaM51o4cRSo9E/iH/XZ8M3nrATdz78fGGmdnQtIkA/yKtLgL 8t4= -----END CERTIFICATE-----Generated at Sun Aug 24 01:32:40 2025 by rpki-client