$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa File: 5c3108b3-4900-35c3-86a1-e25092452588.roa (raw, json) Hash identifier: qSWadWGpQBW/M/GvMA1ikJ8fSZPoXX9eDIq+AroDm3Q= Subject key identifier: E1:CE:BB:DD:0E:0A:B6:79:F7:FC:23:EF:37:E6:A6:FF:A7:3C:53:18 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C93B5710ADB12C61C7080 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 931 IP address blocks: 170.39.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:93:b5:71:0a:db:12:c6:1c:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=bcc307c2-e8b5-4589-a133-457bd2502fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:24:ca:04:73:16:c4:ff:84:9f:43:a4:7f:97: 72:94:87:d5:28:2f:43:88:27:72:15:89:f8:17:5e: e3:23:d9:63:5c:67:92:8e:21:fd:41:74:68:bd:7a: 21:a8:0c:8c:08:1d:78:3a:26:1b:f0:d7:a7:9b:b7: e5:af:c3:94:f6:5d:ee:13:df:d0:81:fc:20:ad:51: f4:a3:c6:1f:23:83:9d:c0:c4:10:85:21:5d:57:72: f5:cb:85:06:e7:19:20:0b:88:88:a5:c8:58:33:89: 71:e6:6c:44:31:2b:cf:4e:2a:19:66:38:3a:42:f7: 26:8f:28:57:4a:5f:ca:0e:19:93:88:87:21:4a:b6: bd:48:5a:d1:12:ef:31:22:3e:e2:ed:e5:e3:b4:a1: 99:cd:2c:b6:fd:7d:d7:b8:d3:cb:43:17:58:9a:7c: fb:58:82:ee:a4:98:74:02:15:ff:b9:6d:11:22:45: 16:5c:66:b9:49:56:74:e5:af:9f:92:fd:c9:8f:d8: 84:6d:d4:ae:d4:88:6b:7f:5e:cc:d7:19:62:e1:a6: fa:fe:51:ae:0e:5c:48:19:19:42:7b:08:69:1f:f5: 5d:86:92:ce:80:64:99:97:71:9b:9e:00:a3:48:85: 8f:c3:5d:87:c4:22:ab:a4:a7:dc:b6:bc:b1:76:2a: 39:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CE:BB:DD:0E:0A:B6:79:F7:FC:23:EF:37:E6:A6:FF:A7:3C:53:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:97:1b:65:74:23:c8:30:80:4e:8c:c6:b6:04:46:7c:91:3b: 03:db:74:eb:19:86:d0:66:e5:9d:70:17:bd:6d:5a:7b:c8:78: cc:7c:01:8e:85:56:29:47:53:f0:6c:5a:3e:cb:f1:69:ed:a7: c1:8e:19:f0:33:ef:86:c2:10:9b:c4:68:bc:e1:56:f6:83:86: a7:56:f5:9a:e7:2c:ad:60:2c:f1:54:72:a6:6c:99:49:a6:ee: f2:65:5d:71:51:ae:15:e7:13:68:54:4f:a2:a7:82:4e:27:24: 77:e3:ce:53:4d:3e:a0:a1:d3:0b:e0:e5:19:d0:7a:e6:8f:61: 0b:ef:fe:7b:9a:92:cb:e9:e2:77:7f:4c:50:98:3d:ec:e3:54: 3f:39:f5:b1:2a:4c:d4:0d:68:28:cb:73:7b:f2:6b:5e:32:02: 85:dc:e1:3d:14:0f:3f:71:1b:d0:dc:a8:39:0a:cf:48:b1:4b: c9:8e:3a:52:88:ca:7f:eb:09:75:43:24:d9:e2:90:a9:cc:cc: be:16:bb:62:4a:65:19:8f:fa:01:52:ed:de:33:a9:34:ec:f9: c8:4c:b5:56:0a:e6:63:eb:22:19:6e:c2:05:5f:20:20:1c:d5: 0a:2c:89:b4:23:59:55:4b:c9:f6:17:eb:bd:25:e8:5d:35:2c: 7f:26:14:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJO1cQrbEsYccIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk YmNjMzA3YzItZThiNS00NTg5LWExMzMtNDU3YmQyNTAyZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CTKBHMWxP+En0Okf5dylIfVKC9DiCdyFYn4 F17jI9ljXGeSjiH9QXRovXohqAyMCB14OiYb8Nenm7flr8OU9l3uE9/QgfwgrVH0 o8YfI4OdwMQQhSFdV3L1y4UG5xkgC4iIpchYM4lx5mxEMSvPTioZZjg6QvcmjyhX Sl/KDhmTiIchSra9SFrREu8xIj7i7eXjtKGZzSy2/X3XuNPLQxdYmnz7WILupJh0 AhX/uW0RIkUWXGa5SVZ05a+fkv3Jj9iEbdSu1Ihrf17M1xli4ab6/lGuDlxIGRlC ewhpH/VdhpLOgGSZl3GbngCjSIWPw12HxCKrpKfctryxdio5KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHOu90OCrZ59/wj7zfmpv+nPFMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNWMzMTA4YjMtNDkwMC0z NWMzLTg2YTEtZTI1MDkyNDUyNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmXG2V0I8gwgE6MxrYERnyROwPbdOsZhtBm5Z1wF71tWnvIeMx8AY6F VilHU/BsWj7L8Wntp8GOGfAz74bCEJvEaLzhVvaDhqdW9ZrnLK1gLPFUcqZsmUmm 7vJlXXFRrhXnE2hUT6Kngk4nJHfjzlNNPqCh0wvg5RnQeuaPYQvv/nuaksvp4nd/ TFCYPezjVD859bEqTNQNaCjLc3vya14yAoXc4T0UDz9xG9DcqDkKz0ixS8mOOlKI yn/rCXVDJNnikKnMzL4Wu2JKZRmP+gFS7d4zqTTs+chMtVYK5mPrIhluwgVfICAc 1QosibQjWVVLyfYX670l6F01LH8mFEE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:32:29 2025 by rpki-client