$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa File: 2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa (raw, json) Hash identifier: FxhMAVY8Nc0iXa8VKcj8nKqs3YOYTVG48lUpNQQbIUo= Subject key identifier: E6:DE:23:6B:A8:51:CF:2F:28:63:45:87:D5:CA:8A:4D:23:13:4C:C7 Certificate issuer: /CN=17436076-857b-4889-82e9-22151c59a4b1 Certificate serial: 010D0C9F4328584B4081B16C44CDAA20C8A1C900 Authority key identifier: 47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 46644 IP address blocks: 170.39.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:b1:6c:44:cd:aa:20:c8:a1:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17436076-857b-4889-82e9-22151c59a4b1 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=a79b35af-62d7-4af8-b50b-10d3df018449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:a4:41:40:da:c8:28:1b:cd:78:b1:c1:a8: 87:59:bd:a4:5d:5c:2e:a5:b5:78:61:ee:0e:d3:a9: 4c:08:8d:ea:f7:01:7a:54:3e:78:e8:54:7a:04:33: 54:19:7a:98:52:4e:ef:9c:3b:f1:e1:1b:42:60:94: e4:1a:aa:83:2d:d9:a4:41:8b:06:a7:f9:78:98:50: b6:52:98:70:a7:40:4e:a0:25:7a:9e:73:23:53:3c: 2e:7d:50:11:38:5a:37:18:bd:0c:bd:b1:85:65:af: 29:e6:06:f6:32:70:9a:cf:68:43:8f:c9:71:77:bd: bb:80:5b:00:7c:54:82:2c:2d:2e:92:e3:87:f0:ac: 8c:a9:5e:4b:ad:78:25:11:fa:c5:f2:96:0a:34:ad: 0c:4f:0d:f7:e2:8c:72:71:b5:a6:a3:a1:36:cc:f7: 00:19:61:f3:d2:34:9b:95:e2:fb:a2:cb:ea:12:ad: 72:c0:c6:14:c7:b2:1f:b6:8d:04:5e:86:c9:79:af: 21:cd:85:88:65:9f:c5:98:02:0e:57:69:26:3e:cd: 07:1f:7a:0a:ba:56:cf:79:27:61:88:a3:e5:4d:74: 51:ae:8a:3c:c0:23:dc:91:00:79:b0:36:21:95:79: 74:b1:ea:2e:a0:7e:f3:03:9c:bb:de:97:4e:3c:91: 6e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DE:23:6B:A8:51:CF:2F:28:63:45:87:D5:CA:8A:4D:23:13:4C:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl X509v3 Authority Key Identifier: keyid:47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer sbgp-ipAddrBlock: critical IPv4: 170.39.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d8:47:e6:34:7e:55:4f:f6:36:1c:89:2c:13:56:5e:71:e0: 97:d3:7d:53:b8:bf:0c:08:95:be:81:37:a4:fb:dc:57:bc:6e: a2:3a:39:01:94:49:33:f9:fc:e5:c1:89:7c:65:b9:1b:f4:2e: dc:78:8a:c2:47:41:c3:7f:12:92:85:3b:9a:c1:e8:ec:10:82: a0:d5:46:b1:cf:71:f8:15:d0:d7:68:04:88:c6:f6:a9:08:38: b5:c4:d5:3e:14:05:82:0e:1d:e2:3f:4f:c7:17:6d:a7:8d:6f: cb:f7:e1:7c:f6:64:d7:04:5a:03:0f:2c:77:67:0c:9c:c3:0e: a7:40:e0:51:d4:d7:d2:b9:cb:a8:6d:a1:97:f2:88:d3:a6:51: d7:d2:50:4c:d3:d4:89:89:a7:0e:21:15:7f:37:22:f7:f8:d5: 50:c6:c8:a7:d5:6f:3e:b9:4d:85:5a:1f:31:01:9a:78:0e:28: 88:ed:6d:d6:65:d7:66:43:4b:f7:90:ea:83:62:0f:63:fd:5d: 94:ba:f7:51:ec:0c:4a:0e:0c:79:da:98:e6:9e:ad:99:97:96: 9a:59:1e:70:47:af:15:12:59:84:a8:d6:17:a4:f0:46:30:67: d0:e6:4a:14:99:f3:ec:d5:74:27:ff:8d:41:9e:a6:07:ca:4d: 97:54:b2:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgbFsRM2qIMihyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc0MzYwNzYtODU3Yi00ODg5LTgyZTktMjIxNTFjNTlh NGIxMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YTc5YjM1YWYtNjJkNy00YWY4LWI1MGItMTBkM2RmMDE4NDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTmkQUDayCgbzXixwaiHWb2kXVwupbV4Ye4O 06lMCI3q9wF6VD546FR6BDNUGXqYUk7vnDvx4RtCYJTkGqqDLdmkQYsGp/l4mFC2 Uphwp0BOoCV6nnMjUzwufVAROFo3GL0MvbGFZa8p5gb2MnCaz2hDj8lxd727gFsA fFSCLC0ukuOH8KyMqV5LrXglEfrF8pYKNK0MTw334oxycbWmo6E2zPcAGWHz0jSb leL7osvqEq1ywMYUx7Ifto0EXobJea8hzYWIZZ/FmAIOV2kmPs0HH3oKulbPeSdh iKPlTXRRroo8wCPckQB5sDYhlXl0seouoH7zA5y73pdOPJFutwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObeI2uoUc8vKGNFh9XKik0jE0zHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xNzQz NjA3Ni04NTdiLTQ4ODktODJlOS0yMjE1MWM1OWE0YjEvMmQ0ZDhjZDctNGExNi0z YTVkLWFlNzktODJhOTE5MDg2ZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTc0MzYwNzYtODU3Yi00ODg5LTgy ZTktMjIxNTFjNTlhNGIxLzE3NDM2MDc2LTg1N2ItNDg4OS04MmU5LTIyMTUxYzU5 YTRiMS5jcmwwHwYDVR0jBBgwFoAURwr6VrkJyafubX7+uiMMy4AYHR0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xNzQzNjA3Ni04NTdiLTQ4ODktODJlOS0yMjE1 MWM1OWE0YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqifkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTYR+Y0flVP9jYciSwTVl5x4JfTfVO4vwwIlb6BN6T73Fe8bqI6OQGU STP5/OXBiXxluRv0Ltx4isJHQcN/EpKFO5rB6OwQgqDVRrHPcfgV0NdoBIjG9qkI OLXE1T4UBYIOHeI/T8cXbaeNb8v34Xz2ZNcEWgMPLHdnDJzDDqdA4FHU19K5y6ht oZfyiNOmUdfSUEzT1ImJpw4hFX83Ivf41VDGyKfVbz65TYVaHzEBmngOKIjtbdZl 12ZDS/eQ6oNiD2P9XZS691HsDEoODHnamOaerZmXlppZHnBHrxUSWYSo1hek8EYw Z9DmShSZ8+zVdCf/jUGepgfKTZdUsgk= -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:42 2025 by rpki-client