$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/587fa17e-6074-36b9-a166-4b4cac46f9a8.roa File: 587fa17e-6074-36b9-a166-4b4cac46f9a8.roa (raw, json) Hash identifier: 0hYnZmrEbsjZfZpiEuD6PGazxlB0tSXiSbMl/1Zs0b8= Subject key identifier: AE:03:65:68:4E:19:3F:05:02:25:5C:02:2A:7D:13:B2:66:9E:AE:42 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C95600CEB559C22845D80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/587fa17e-6074-36b9-a166-4b4cac46f9a8.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 213122 IP address blocks: 170.39.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:95:60:0c:eb:55:9c:22:84:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=1eeae53a-a366-4e31-bed1-02c2754dc993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:24:15:56:87:1a:e4:38:21:93:b0:fc:66:1c: 2d:ba:74:90:44:9d:56:95:a2:07:e6:dc:ad:71:69: 03:2d:61:c0:b2:f1:9c:3d:ef:e5:64:80:e4:e0:b8: f2:59:db:a3:15:d4:cb:19:62:9e:71:ba:cd:1d:fd: 50:a4:16:90:e1:cd:93:da:88:12:59:d7:10:cd:a3: 4f:31:8d:9b:eb:2e:6a:23:68:ce:3c:78:fe:25:56: 8a:0b:61:8f:b8:ef:49:ff:d3:ff:91:75:56:db:b7: ed:86:72:50:b1:77:29:df:9f:74:89:dc:d1:2c:03: e2:5b:fc:c2:04:76:49:42:bc:2c:2e:38:34:5b:9e: f9:d8:68:74:a9:4c:44:01:01:c7:76:29:7f:15:52: 64:60:4b:19:6f:44:32:be:e9:9d:c3:4c:25:5f:57: fb:f8:41:ff:38:ea:74:77:31:62:96:c7:85:59:5d: 34:df:3f:64:9c:54:60:89:d8:90:74:58:69:41:b3: ef:6a:da:a2:a8:32:b5:3e:09:2f:b6:48:f0:f7:b2: 59:b0:98:dc:b9:ab:64:28:db:9d:8a:ed:53:73:2b: a3:93:e6:4e:9f:99:69:58:45:08:76:10:6c:ba:64: cf:85:50:c0:ca:32:b0:05:06:15:e9:be:f7:9c:a9: 08:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:03:65:68:4E:19:3F:05:02:25:5C:02:2A:7D:13:B2:66:9E:AE:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/587fa17e-6074-36b9-a166-4b4cac46f9a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ca:80:2c:7e:81:74:10:55:b9:93:d9:da:95:e2:9d:06:81: f2:66:90:00:ad:d1:76:f1:17:03:ec:eb:0b:ce:d1:2e:7a:a9: 4f:49:33:4b:23:5b:af:07:e3:1f:7a:13:2a:11:bb:50:97:24: 8a:dd:1b:2f:b3:5a:6c:d8:35:04:f9:68:09:73:92:ec:80:53: 24:b8:f8:79:a5:e7:63:76:52:9f:5b:89:88:48:7b:f3:70:35: a6:27:6a:a7:8a:c9:a3:28:7a:ac:bf:25:73:f6:1a:bf:3c:ef: 54:f9:80:5d:44:4c:a6:4a:3c:a1:c6:25:00:06:89:5e:e6:be: 37:59:90:22:72:29:d3:dc:b7:e8:4b:2c:e2:e7:5d:fd:85:53: 23:44:05:b9:91:5c:a2:ca:3f:d5:be:25:b6:0a:f1:84:22:2a: 25:31:06:ff:0e:09:8d:ef:b8:14:1d:79:32:21:31:52:75:de: 9a:98:08:e5:a3:00:0f:79:89:d4:19:b8:92:31:83:2b:09:bf: 94:47:66:39:32:71:81:fc:6c:06:c2:b4:16:18:d8:2f:be:b4: 30:2d:08:17:ce:71:a8:47:70:57:52:16:7d:2a:24:40:eb:74: e2:e7:49:70:86:01:cf:c1:ab:27:96:62:e8:71:79:a8:66:ea: a8:5a:cf:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJVgDOtVnCKEXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk MWVlYWU1M2EtYTM2Ni00ZTMxLWJlZDEtMDJjMjc1NGRjOTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziQVVoca5Dghk7D8ZhwtunSQRJ1WlaIH5tyt cWkDLWHAsvGcPe/lZIDk4LjyWdujFdTLGWKecbrNHf1QpBaQ4c2T2ogSWdcQzaNP MY2b6y5qI2jOPHj+JVaKC2GPuO9J/9P/kXVW27fthnJQsXcp3590idzRLAPiW/zC BHZJQrwsLjg0W5752Gh0qUxEAQHHdil/FVJkYEsZb0Qyvumdw0wlX1f7+EH/OOp0 dzFilseFWV003z9knFRgidiQdFhpQbPvatqiqDK1Pgkvtkjw97JZsJjcuatkKNud iu1Tcyujk+ZOn5lpWEUIdhBsumTPhVDAyjKwBQYV6b73nKkIBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4DZWhOGT8FAiVcAip9E7Jmnq5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNTg3ZmExN2UtNjA3NC0z NmI5LWExNjYtNGI0Y2FjNDZmOWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjKgCx+gXQQVbmT2dqV4p0GgfJmkACt0XbxFwPs6wvO0S56qU9JM0sj W68H4x96EyoRu1CXJIrdGy+zWmzYNQT5aAlzkuyAUyS4+Hml52N2Up9biYhIe/Nw NaYnaqeKyaMoeqy/JXP2Gr8871T5gF1ETKZKPKHGJQAGiV7mvjdZkCJyKdPct+hL LOLnXf2FUyNEBbmRXKLKP9W+JbYK8YQiKiUxBv8OCY3vuBQdeTIhMVJ13pqYCOWj AA95idQZuJIxgysJv5RHZjkycYH8bAbCtBYY2C++tDAtCBfOcahHcFdSFn0qJEDr dOLnSXCGAc/BqyeWYuhxeahm6qhaz+I= -----END CERTIFICATE-----Generated at Mon Oct 20 02:54:27 2025 by rpki-client