$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa File: 98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa (raw, json) Hash identifier: sTQ+jOz3hxahUw78V3odicR7fY95Ikj22PgF3f/bIhg= Subject key identifier: 68:DE:8F:51:BE:93:20:87:47:A6:90:DA:9C:B9:94:BA:C7:70:99:8D Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Certificate serial: 010D0C9F4328584B434C6C99E6B9AF04487685E0 Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 14555 IP address blocks: 170.10.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:6c:99:e6:b9:af:04:48:76:85:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=05756b8b-9486-45f7-b533-86132e2074a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ba:59:60:c6:23:7a:11:c0:8f:7e:85:47:d5: 32:ad:af:99:9a:03:de:cb:0f:2e:85:25:66:c8:63: 68:5a:11:ef:a7:5f:4b:14:2b:78:48:7b:6b:09:45: 72:9a:9e:ec:0d:f0:d6:b9:57:af:ed:33:be:95:aa: 98:56:47:c3:29:42:23:df:e8:e1:b7:bd:2b:2d:6b: d6:75:d9:77:8b:c2:57:c1:5f:18:c5:4f:9b:87:83: 92:2a:33:bc:8f:ff:0a:1d:15:fc:a2:8c:db:5c:5f: ba:b0:e0:50:72:9d:dd:6d:6c:68:8e:40:74:19:15: e1:95:de:22:30:f9:be:04:6e:e7:60:f6:74:ee:96: 7c:b6:6c:22:fc:b1:04:25:eb:1f:24:19:5d:65:35: 58:3b:72:41:3d:60:4a:9f:53:e7:c5:b4:66:c4:ea: f4:af:88:d5:15:ae:a0:0f:1d:76:05:6a:41:39:9c: 4f:16:c1:ef:b9:d9:78:bf:11:bd:49:8d:a0:53:c9: da:66:38:19:3c:93:1c:88:b3:b9:83:3c:07:65:3c: d5:f1:1c:b9:15:26:b5:5a:68:50:b6:6e:03:e4:0c: d3:08:22:3d:d4:76:63:e5:46:38:27:13:c8:37:ea: 51:6d:e6:9f:cd:f0:5a:35:89:24:6d:f8:4e:fa:28: 09:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DE:8F:51:BE:93:20:87:47:A6:90:DA:9C:B9:94:BA:C7:70:99:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl X509v3 Authority Key Identifier: keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer sbgp-ipAddrBlock: critical IPv4: 170.10.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:51:12:4c:1d:c4:ed:30:d4:b5:ac:5f:c2:dc:69:f5:33:f5: ec:5d:d1:84:93:8a:32:5a:0d:ce:4c:88:81:ca:b3:97:f6:26: 23:92:78:eb:02:79:cd:b3:b0:0f:3a:4a:b4:af:43:e5:61:25: 6e:bb:ca:54:ed:4f:25:1f:14:f4:ca:08:2d:ce:4a:fb:5f:36: c0:8a:47:93:e9:8d:dd:c4:da:30:00:af:5e:b2:88:69:a6:2d: ca:82:04:5e:e7:2e:5a:6a:06:47:1a:1f:b5:d8:cd:48:cc:20: b5:02:29:04:df:1c:29:cd:e1:4d:c6:b7:19:82:44:42:6f:e6: 76:9e:be:e2:73:33:a8:e8:c2:50:18:92:a5:fb:ea:f8:81:f7: d4:50:d6:18:57:18:cc:c1:29:96:b4:48:24:22:02:1f:a6:54: ec:99:32:5c:02:1b:56:7f:5b:e7:0c:ab:ac:d7:47:a6:25:e8: 37:1d:29:3c:b5:4c:6e:4e:fa:d6:f8:36:28:61:45:57:fe:83: 77:ce:39:fb:3a:87:b2:e1:ba:22:77:e4:e6:67:dc:8d:0b:e6: fa:03:06:2d:f8:23:19:c8:af:63:e2:cc:e9:b3:f8:1b:18:ce: f8:cc:a4:9a:51:57:d7:04:65:a5:6c:50:80:78:5d:f2:a1:ab: ef:33:96:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGyZ5rmvBEh2heAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh OWM5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MDU3NTZiOGItOTQ4Ni00NWY3LWI1MzMtODYxMzJlMjA3NGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bpZYMYjehHAj36FR9Uyra+ZmgPeyw8uhSVm yGNoWhHvp19LFCt4SHtrCUVymp7sDfDWuVev7TO+laqYVkfDKUIj3+jht70rLWvW ddl3i8JXwV8YxU+bh4OSKjO8j/8KHRX8oozbXF+6sOBQcp3dbWxojkB0GRXhld4i MPm+BG7nYPZ07pZ8tmwi/LEEJesfJBldZTVYO3JBPWBKn1PnxbRmxOr0r4jVFa6g Dx12BWpBOZxPFsHvudl4vxG9SY2gU8naZjgZPJMciLO5gzwHZTzV8Ry5FSa1WmhQ tm4D5AzTCCI91HZj5UY4JxPIN+pRbeafzfBaNYkkbfhO+igJ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjej1G+kyCHR6aQ2py5lLrHcJmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0 MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvOThmN2NjM2QtNmY4ZS0z YTA2LWExOWYtYTBjMDM2NDBiYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0 NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1 Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdREkwdxO0w1LWsX8LcafUz9exd0YSTijJaDc5MiIHKs5f2JiOSeOsC ec2zsA86SrSvQ+VhJW67ylTtTyUfFPTKCC3OSvtfNsCKR5Ppjd3E2jAAr16yiGmm LcqCBF7nLlpqBkcaH7XYzUjMILUCKQTfHCnN4U3GtxmCREJv5naevuJzM6jowlAY kqX76viB99RQ1hhXGMzBKZa0SCQiAh+mVOyZMlwCG1Z/W+cMq6zXR6Yl6DcdKTy1 TG5O+tb4NihhRVf+g3fOOfs6h7LhuiJ35OZn3I0L5voDBi34IxnIr2PizOmz+BsY zvjMpJpRV9cEZaVsUIB4XfKhq+8zlj4= -----END CERTIFICATE-----Generated at Tue Oct 21 01:57:59 2025 by rpki-client