$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9a9050dd-bc10-31b1-8c2b-5309ec1147ce.roa File: 9a9050dd-bc10-31b1-8c2b-5309ec1147ce.roa (raw, json) Hash identifier: 2KrMZkIBMq8E/WANCf5N8+9oq2l0D7RaeuLQN/uIt4g= Subject key identifier: BF:23:A9:50:DF:96:57:51:E1:1A:F9:A6:B2:53:81:94:E9:AD:C0:C1 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B64CE2C0FC129FD78EEFCA400 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9a9050dd-bc10-31b1-8c2b-5309ec1147ce.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.110.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:2c:0f:c1:29:fd:78:ee:fc:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=e8284df2-ae8b-4612-bc6b-fa688758c6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:22:9e:37:73:d7:4f:de:9e:0d:24:38:9f:6c: b6:a7:4f:1c:20:60:1d:ba:83:37:af:09:d1:29:35: f7:04:76:2a:60:ca:37:03:87:63:d1:9b:cb:00:85: 77:ce:09:46:f5:b8:63:f9:35:66:e9:a9:9a:35:01: f3:9d:81:83:40:b8:d6:fb:6a:1a:e8:ae:2a:96:1e: 44:dd:40:59:6f:e9:51:68:33:e0:30:b4:38:78:d6: b4:f4:d7:84:ba:47:8a:91:30:94:ed:36:b6:e5:34: 77:ed:68:97:26:f3:04:58:f0:27:2f:92:de:ea:44: 78:79:72:3c:06:c2:ee:e8:a4:96:07:fb:1a:e4:6e: 7f:84:49:4e:4e:82:87:5d:3c:7c:cd:d6:42:b4:99: b9:65:d6:1c:d9:bc:73:86:67:03:5c:e1:3b:f8:aa: 15:b6:26:a7:dd:03:ed:a3:92:02:9a:c4:3b:30:57: 20:f0:46:2d:ab:e1:ce:10:6e:97:50:57:09:9e:c0: 68:ab:26:f8:4f:d3:d8:a8:c9:22:c9:52:24:53:71: 64:01:90:4c:1a:72:67:4d:40:2a:a7:bc:20:fb:1f: 5b:10:0d:8f:b1:d5:fd:cf:73:7b:28:53:ff:0c:8d: dc:28:31:85:0e:98:f6:b2:52:8b:be:61:01:3f:ac: ec:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:23:A9:50:DF:96:57:51:E1:1A:F9:A6:B2:53:81:94:E9:AD:C0:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9a9050dd-bc10-31b1-8c2b-5309ec1147ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 172.110.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c7:8a:30:e4:f3:ea:8f:f1:13:fe:a9:62:6b:10:e9:64:ae: 70:cd:e5:0b:1c:01:76:6b:42:8c:6e:bb:f5:37:25:0b:5a:ea: 8a:4e:d0:3e:4a:02:01:9e:ee:e4:78:7e:9a:d5:83:99:5e:b4: cf:71:d6:4a:93:0a:5b:89:a1:8b:54:20:34:94:b0:0a:ce:0e: de:21:f5:27:f9:49:07:7a:4a:e2:83:ca:ca:68:ab:79:1a:d6: f8:68:82:45:a5:bd:e7:29:94:05:67:31:4e:c2:57:77:bf:7e: d5:40:e2:b7:76:21:34:f9:11:f7:c5:c2:3a:ec:dc:b8:d8:95: 8d:6a:5d:9a:8e:9c:25:02:97:93:60:b2:80:9d:b2:dd:55:c3: ed:f3:c8:78:41:4f:87:3d:c9:a4:dd:b7:eb:0e:8f:2b:68:ab: d2:df:f9:b4:58:d8:c6:b7:58:82:dd:02:26:3d:92:8f:02:a5: 95:ad:63:ff:28:cf:05:d3:78:18:f9:82:5e:b7:58:ed:39:c8: 84:cc:b6:9f:4c:07:34:6e:26:e3:67:62:9d:33:29:16:ec:64: f7:76:ca:6c:f1:61:be:4e:35:36:e9:c5:90:fc:95:fa:6d:cf: e8:bc:99:48:a9:0e:e4:7c:e7:83:17:c5:f4:f2:a7:a4:03:a4: f3:42:af:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziwPwSn9eO78pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTgyODRkZjItYWU4Yi00NjEyLWJjNmItZmE2ODg3NThjNmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSKeN3PXT96eDSQ4n2y2p08cIGAduoM3rwnR KTX3BHYqYMo3A4dj0ZvLAIV3zglG9bhj+TVm6amaNQHznYGDQLjW+2oa6K4qlh5E 3UBZb+lRaDPgMLQ4eNa09NeEukeKkTCU7Ta25TR37WiXJvMEWPAnL5Le6kR4eXI8 BsLu6KSWB/sa5G5/hElOToKHXTx8zdZCtJm5ZdYc2bxzhmcDXOE7+KoVtian3QPt o5ICmsQ7MFcg8EYtq+HOEG6XUFcJnsBoqyb4T9PYqMkiyVIkU3FkAZBMGnJnTUAq p7wg+x9bEA2PsdX9z3N7KFP/DI3cKDGFDpj2slKLvmEBP6zsEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8jqVDflldR4Rr5prJTgZTprcDBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvOWE5MDUwZGQtYmMxMC0z MWIxLThjMmItNTMwOWVjMTE0N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrG4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbHijDk8+qP8RP+qWJrEOlkrnDN5QscAXZrQoxuu/U3JQta6opO0D5K AgGe7uR4fprVg5letM9x1kqTCluJoYtUIDSUsArODt4h9Sf5SQd6SuKDyspoq3ka 1vhogkWlvecplAVnMU7CV3e/ftVA4rd2ITT5EffFwjrs3LjYlY1qXZqOnCUCl5Ng soCdst1Vw+3zyHhBT4c9yaTdt+sOjytoq9Lf+bRY2Ma3WILdAiY9ko8CpZWtY/8o zwXTeBj5gl63WO05yITMtp9MBzRuJuNnYp0zKRbsZPd2ymzxYb5ONTbpxZD8lfpt z+i8mUipDuR854MXxfTyp6QDpPNCr3s= -----END CERTIFICATE-----Generated at Mon Oct 20 00:04:49 2025 by rpki-client