$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa File: f55d329b-e206-3311-9383-9e5491a7f00f.roa (raw, json) Hash identifier: ugya+x55sKfMqX4Fkp04r6vgAuh4miLKgJ+vVOTXYvU= Subject key identifier: E2:ED:BC:52:F3:80:EA:AB:14:77:89:A4:DE:8B:0F:1C:5D:B5:12:B0 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584AD23BD17FE5A08B7A74EDF280 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 15404 IP address blocks: 170.200.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d1:7f:e5:a0:8b:7a:74:ed:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=783a7e5e-e1b2-49aa-94c8-a5b36f80f3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:0c:a6:3d:58:44:0b:53:d4:c9:45:bc:2e: 2d:05:4d:a8:06:db:23:ff:90:0a:f6:da:20:c1:38: f6:fc:9c:de:2d:60:d7:35:9b:4f:4c:10:8c:22:2e: b3:f0:05:a8:22:e4:6f:4d:5f:e6:e9:b5:c7:b8:5b: 07:1d:05:4e:8f:3a:83:37:3c:73:06:bc:56:f5:1f: ff:4f:40:34:95:33:23:f6:e9:71:31:48:12:32:9b: 48:40:36:2c:5a:b9:7f:36:8c:81:2b:d1:a3:c4:30: 2f:f5:c3:fc:9d:d8:a9:06:31:32:9e:46:bd:58:94: 0d:c4:f2:c2:5e:e8:c9:f5:d2:b6:00:28:86:14:f7: fe:df:65:93:dc:eb:f0:52:ac:63:01:ee:b5:dd:70: 01:4b:b3:4c:18:c6:d1:fb:89:37:2c:4e:b9:c7:ed: aa:44:29:a5:57:25:c4:d9:96:2d:1a:e0:5e:6b:06: 35:94:cd:9c:54:06:9a:1b:82:04:0c:5d:80:67:55: 3b:b7:99:e6:d1:71:3a:2f:23:76:b9:2a:f7:22:24: 1b:39:f9:8c:57:0b:27:32:82:a4:d9:4d:c0:c3:70: e5:e2:ef:35:ce:cd:65:29:06:87:39:42:84:20:db: 01:0e:f9:d6:ff:ff:63:21:8e:ac:bb:09:e7:fa:ad: 50:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:ED:BC:52:F3:80:EA:AB:14:77:89:A4:DE:8B:0F:1C:5D:B5:12:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:52:c0:ef:65:c7:97:40:07:57:83:97:b4:70:1f:6f:8a:81: 19:d9:58:d2:ff:04:e5:61:b3:7d:64:4b:8c:d2:fe:4b:90:5f: fa:c6:99:fc:81:fb:37:9b:93:5e:88:5f:86:37:41:9e:1b:6b: 36:72:0a:06:14:27:a5:e0:f5:44:e7:43:55:48:a5:f3:75:3f: ae:2b:c8:0a:11:ad:63:69:c9:1d:f1:77:e5:ca:b4:b6:a4:39: c8:14:52:43:15:2d:78:05:ef:49:45:f9:75:d9:db:36:5c:9a: 14:f6:90:ef:1e:11:c5:7e:3a:6f:2f:c3:e1:48:be:55:fa:1e: 70:e7:be:d3:36:0d:17:e9:e8:15:de:ff:4e:c9:52:db:2b:f1: 20:04:47:30:07:ad:db:87:33:8e:de:00:00:3c:70:9e:f4:d4: 66:35:1d:39:f7:bf:08:1b:6d:4e:db:af:24:dc:1f:f3:10:9b: fc:4a:94:cc:14:0f:61:5d:03:c5:e0:07:d6:ca:0f:2d:7f:c2: 86:e8:27:ae:3a:00:9e:9c:51:88:9f:62:0e:54:34:c9:db:2a: 77:4e:53:bb:5f:b8:79:b4:39:59:ea:41:47:bb:c2:8c:d6:a6: 06:4d:7c:80:b5:58:65:67:da:6b:84:4e:fe:2d:52:54:c9:9a: a2:fd:d6:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9F/5aCLenTt8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NzgzYTdlNWUtZTFiMi00OWFhLTk0YzgtYTViMzZmODBmM2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkAMpj1YRAtT1MlFvC4tBU2oBtsj/5AK9tog wTj2/JzeLWDXNZtPTBCMIi6z8AWoIuRvTV/m6bXHuFsHHQVOjzqDNzxzBrxW9R// T0A0lTMj9ulxMUgSMptIQDYsWrl/NoyBK9GjxDAv9cP8ndipBjEynka9WJQNxPLC XujJ9dK2ACiGFPf+32WT3OvwUqxjAe613XABS7NMGMbR+4k3LE65x+2qRCmlVyXE 2ZYtGuBeawY1lM2cVAaaG4IEDF2AZ1U7t5nm0XE6LyN2uSr3IiQbOfmMVwsnMoKk 2U3Aw3Dl4u81zs1lKQaHOUKEINsBDvnW//9jIY6suwnn+q1Q7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLtvFLzgOqrFHeJpN6LDxxdtRKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvZjU1ZDMyOWItZTIwNi0z MzExLTkzODMtOWU1NDkxYTdmMDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsj9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJSwO9lx5dAB1eDl7RwH2+KgRnZWNL/BOVhs31kS4zS/kuQX/rGmfyB +zebk16IX4Y3QZ4bazZyCgYUJ6Xg9UTnQ1VIpfN1P64ryAoRrWNpyR3xd+XKtLak OcgUUkMVLXgF70lF+XXZ2zZcmhT2kO8eEcV+Om8vw+FIvlX6HnDnvtM2DRfp6BXe /07JUtsr8SAERzAHrduHM47eAAA8cJ701GY1HTn3vwgbbU7bryTcH/MQm/xKlMwU D2FdA8XgB9bKDy1/woboJ646AJ6cUYifYg5UNMnbKndOU7tfuHm0OVnqQUe7wozW pgZNfIC1WGVn2muETv4tUlTJmqL91qE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:48:34 2025 by rpki-client