$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/0a1ff368-ad7a-3f30-9fdc-0946412cf449.roa File: 0a1ff368-ad7a-3f30-9fdc-0946412cf449.roa (raw, json) Hash identifier: NCpWeJ8d8Ms4IMvzVfombzOfzs9UWlsJM3iUMyBgJ1Y= Subject key identifier: 44:C4:14:34:06:68:07:8C:82:3E:BB:50:35:80:34:34:3D:EA:F3:7E Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C954AF01B5EB84DF24800 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/0a1ff368-ad7a-3f30-9fdc-0946412cf449.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 213122 IP address blocks: 170.39.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:95:4a:f0:1b:5e:b8:4d:f2:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=a94837c3-a9f1-4588-8ebe-e744a6d25bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1b:40:5e:68:4f:88:a4:6e:d5:db:a4:17:68: e1:21:f9:b8:94:5a:34:fd:b5:1a:8e:eb:22:3f:5b: c9:e8:60:27:eb:f1:82:2e:c2:d1:a2:df:ac:b5:1a: d0:e1:29:13:77:c6:af:ec:a5:6c:2e:3a:ee:b8:0e: 1e:78:99:86:70:b7:5b:c4:c6:06:3a:0d:54:1b:18: a8:13:8e:c4:97:e9:30:95:a0:39:b8:26:50:b8:83: 3a:84:cf:a9:a9:3d:4b:9e:8b:8f:79:7d:b9:db:e0: 1b:3d:3a:6b:01:74:68:a7:5a:21:e6:14:6d:ca:1d: 2c:a7:bf:fc:ae:8c:48:1d:86:25:b9:1b:5c:7e:82: 1b:7a:b6:0b:da:ef:e7:e2:e3:d2:76:0d:df:55:9d: 4d:b3:66:46:8a:37:9e:33:de:a2:0e:34:88:73:86: 9a:17:0e:69:9c:0b:eb:d9:b0:a8:a9:9e:80:3d:e4: 4c:8a:53:23:e7:65:64:64:22:5f:6b:74:d6:e2:97: 6f:6a:c1:52:71:e6:2f:3c:05:3f:b2:27:20:9c:45: 0a:ae:1d:7a:90:c1:8c:7e:27:73:c8:c4:22:d0:2b: 01:6c:e4:b9:02:69:81:33:85:d7:ff:9c:18:66:83: 8a:2f:06:32:7e:eb:76:aa:db:cf:3a:db:27:d9:e1: ed:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C4:14:34:06:68:07:8C:82:3E:BB:50:35:80:34:34:3D:EA:F3:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/0a1ff368-ad7a-3f30-9fdc-0946412cf449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c9:85:3a:fd:b5:98:6d:7c:96:53:6d:77:ed:ee:30:35:7f: 93:bd:1d:f4:16:16:8f:e0:c2:a1:e6:47:42:57:14:fd:2a:66: 87:37:af:b9:81:7c:a9:2f:82:3c:e3:a1:8e:68:d5:5d:83:5f: d6:b9:69:c6:d0:ed:44:85:15:dd:0e:83:4c:40:74:86:12:d8: 6a:ef:a9:e2:c4:35:87:f9:1d:ab:8a:02:4f:c2:c6:8e:a1:cc: b4:30:0f:2c:b2:67:2c:bc:61:ba:99:11:0b:1c:10:ef:91:71: ec:59:10:d4:2c:2f:d5:67:f7:74:b3:94:47:ed:39:8e:48:ee: c4:2d:06:d2:ca:2e:a9:d3:c2:73:6b:85:48:e2:5c:a3:d5:80: ee:f1:e6:d5:75:d6:e7:3f:9e:96:ca:ff:18:18:31:74:1d:ce: b2:7f:44:c0:12:76:7c:b6:91:a3:76:bd:af:63:b2:b6:d1:09: 13:6a:32:bc:d0:e7:e2:d5:76:8c:53:70:a2:8b:40:34:62:93: b1:88:93:8d:5a:dc:cc:72:7e:c0:73:80:53:b7:c1:e0:0c:0a: 88:3c:f8:9e:95:10:6a:41:32:25:59:3e:46:d3:b4:25:c2:8c: ed:eb:bf:d3:40:22:36:2a:e1:9f:db:d3:5e:5b:9e:65:25:40: 9e:cf:6c:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJVK8BteuE3ySAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk YTk0ODM3YzMtYTlmMS00NTg4LThlYmUtZTc0NGE2ZDI1YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxtAXmhPiKRu1dukF2jhIfm4lFo0/bUajusi P1vJ6GAn6/GCLsLRot+stRrQ4SkTd8av7KVsLjruuA4eeJmGcLdbxMYGOg1UGxio E47El+kwlaA5uCZQuIM6hM+pqT1LnouPeX252+AbPTprAXRop1oh5hRtyh0sp7/8 roxIHYYluRtcfoIberYL2u/n4uPSdg3fVZ1Ns2ZGijeeM96iDjSIc4aaFw5pnAvr 2bCoqZ6APeRMilMj52VkZCJfa3TW4pdvasFSceYvPAU/sicgnEUKrh16kMGMfidz yMQi0CsBbOS5AmmBM4XX/5wYZoOKLwYyfut2qtvPOtsn2eHtUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETEFDQGaAeMgj67UDWANDQ96vN+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMGExZmYzNjgtYWQ3YS0z ZjMwLTlmZGMtMDk0NjQxMmNmNDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/JhTr9tZhtfJZTbXft7jA1f5O9HfQWFo/gwqHmR0JXFP0qZoc3r7mB fKkvgjzjoY5o1V2DX9a5acbQ7USFFd0Og0xAdIYS2GrvqeLENYf5HauKAk/Cxo6h zLQwDyyyZyy8YbqZEQscEO+RcexZENQsL9Vn93SzlEftOY5I7sQtBtLKLqnTwnNr hUjiXKPVgO7x5tV11uc/npbK/xgYMXQdzrJ/RMASdny2kaN2va9jsrbRCRNqMrzQ 5+LVdoxTcKKLQDRik7GIk41a3MxyfsBzgFO3weAMCog8+J6VEGpBMiVZPkbTtCXC jO3rv9NAIjYq4Z/b015bnmUlQJ7PbHg= -----END CERTIFICATE-----Generated at Mon Oct 20 10:40:29 2025 by rpki-client