$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/e9ddd58f-d402-3228-8842-fe9c4e665a35.roa File: e9ddd58f-d402-3228-8842-fe9c4e665a35.roa (raw, json) Hash identifier: djhjn4N4MIvGUnQw/yt7E9jZaYlOQytd2xKQ4UE8s4s= Subject key identifier: 68:74:83:EF:80:A3:9C:11:04:D1:1F:A5:DF:4A:7E:52:4D:AC:99:9D Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Certificate serial: 010D0C9F4328584B8A2566F30E9239B2E9162380 Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/e9ddd58f-d402-3228-8842-fe9c4e665a35.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 14555 IP address blocks: 170.10.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:25:66:f3:0e:92:39:b2:e9:16:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=04420bbb-2ab9-48f9-8f8b-ad0c471f916b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bd:06:9f:f1:c5:14:04:77:d0:52:26:4f:59: ab:e4:c3:70:a5:98:e4:13:76:37:eb:b6:84:8b:05: b7:65:22:83:40:d3:e9:f4:29:71:47:ac:88:e8:53: 8f:a2:e6:da:d1:a9:aa:70:0c:67:fb:16:ca:74:a7: 26:96:fc:63:12:a7:cc:43:b2:11:be:ac:99:49:bb: a7:a3:e9:5c:42:23:78:91:c9:19:49:37:15:64:cc: 47:a7:77:c9:ca:7f:06:be:1d:e2:ca:e7:47:5d:29: d8:e8:88:cd:54:c5:af:2d:fa:06:8a:4f:af:e4:77: cb:bf:5b:b0:5f:75:26:8c:f8:4a:21:ef:d0:3e:5a: 58:ef:20:0d:8b:06:fa:9c:1d:d5:f4:6f:ca:c9:6b: 68:9b:ce:68:d0:ae:bf:8a:fc:b9:5d:a4:49:7c:16: d9:5c:fb:39:33:6a:3c:bc:21:e7:e9:4f:4b:b3:e8: 69:ea:4f:2b:c1:ca:5f:40:34:90:64:79:ea:b0:cb: 51:15:8e:21:0f:ea:42:38:37:82:d9:e1:80:c2:1f: d8:d7:00:b6:6c:8a:1e:9d:50:01:9e:65:f0:e9:14: f9:2f:4a:56:ec:ec:61:25:58:be:58:3e:d4:73:06: 35:95:47:7a:de:8c:1b:d8:03:b3:a9:8a:34:84:f7: a2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:74:83:EF:80:A3:9C:11:04:D1:1F:A5:DF:4A:7E:52:4D:AC:99:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/e9ddd58f-d402-3228-8842-fe9c4e665a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl X509v3 Authority Key Identifier: keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer sbgp-ipAddrBlock: critical IPv4: 170.10.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:26:02:43:be:61:26:31:84:a8:f5:e0:e1:22:b1:68:82:3d: d8:b3:aa:05:64:f2:8b:3e:43:3a:36:54:63:50:d7:11:b8:4f: 11:e0:04:2e:b4:45:05:1f:67:fa:ae:ff:10:33:53:a5:a8:24: b7:e8:04:41:9d:fe:7f:2d:10:35:12:3d:4b:09:f2:88:ab:35: 63:88:75:e4:cd:1a:13:14:21:e8:44:72:20:2d:19:58:3c:f4: 13:c1:11:be:b7:b2:ee:49:e0:25:7b:a8:04:41:3b:ff:7f:4e: 68:36:a3:67:eb:82:48:d3:b4:93:0e:a3:ed:5e:15:27:9c:8d: 67:39:e5:db:30:57:db:03:e5:0c:54:d4:f0:06:00:c0:43:19: 76:ce:83:7c:58:34:af:45:32:f3:e5:b7:1a:10:32:e0:a1:97: 08:da:41:e6:63:a9:ef:ed:31:19:ba:64:35:ec:9c:e5:b2:d2: ba:cc:fd:b2:4e:73:2c:de:86:e1:f0:22:44:2b:5b:e4:5a:d3: a1:54:07:52:e7:0f:c5:57:8f:6a:b4:39:34:69:73:8d:f0:02: fa:c5:af:50:dd:47:ad:7b:97:e4:77:d4:83:39:9d:97:95:7a: 84:c1:59:d3:fd:a1:ac:77:c6:36:3b:b6:60:0b:21:f4:b3:fc: 76:4b:91:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKJWbzDpI5sukWI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh OWM5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MDQ0MjBiYmItMmFiOS00OGY5LThmOGItYWQwYzQ3MWY5MTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo70Gn/HFFAR30FImT1mr5MNwpZjkE3Y367aE iwW3ZSKDQNPp9ClxR6yI6FOPouba0amqcAxn+xbKdKcmlvxjEqfMQ7IRvqyZSbun o+lcQiN4kckZSTcVZMxHp3fJyn8Gvh3iyudHXSnY6IjNVMWvLfoGik+v5HfLv1uw X3UmjPhKIe/QPlpY7yANiwb6nB3V9G/KyWtom85o0K6/ivy5XaRJfBbZXPs5M2o8 vCHn6U9Ls+hp6k8rwcpfQDSQZHnqsMtRFY4hD+pCODeC2eGAwh/Y1wC2bIoenVAB nmXw6RT5L0pW7OxhJVi+WD7UcwY1lUd63owb2AOzqYo0hPeiQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh0g++Ao5wRBNEfpd9KflJNrJmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0 MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvZTlkZGQ1OGYtZDQwMi0z MjI4LTg4NDItZmU5YzRlNjY1YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0 NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1 Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYmAkO+YSYxhKj14OEisWiCPdizqgVk8os+Qzo2VGNQ1xG4TxHgBC60 RQUfZ/qu/xAzU6WoJLfoBEGd/n8tEDUSPUsJ8oirNWOIdeTNGhMUIehEciAtGVg8 9BPBEb63su5J4CV7qARBO/9/Tmg2o2frgkjTtJMOo+1eFSecjWc55dswV9sD5QxU 1PAGAMBDGXbOg3xYNK9FMvPltxoQMuChlwjaQeZjqe/tMRm6ZDXsnOWy0rrM/bJO cyzehuHwIkQrW+Ra06FUB1LnD8VXj2q0OTRpc43wAvrFr1DdR617l+R31IM5nZeV eoTBWdP9oax3xjY7tmALIfSz/HZLkTw= -----END CERTIFICATE-----Generated at Mon Oct 20 14:20:57 2025 by rpki-client