$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa File: f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa (raw, json) Hash identifier: TJryS8nou9l9CY6l2QH+Yewg+UNXvQJbZr2tfVoF13Y= Subject key identifier: 35:16:84:28:2E:74:A3:F3:35:C7:D4:B5:44:22:25:E8:79:38:6F:0C Certificate issuer: /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Certificate serial: 010D0C9F4328584AECC1212A5504577CC394BD00 Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3561 IP address blocks: 207.170.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:21:2a:55:04:57:7c:c3:94:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a8256527-b9fc-4961-bbdd-8187135a3d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cb:d6:d7:e5:21:fb:a5:30:1e:dd:c0:7c:7f: 45:1f:b1:75:6a:cd:9c:bf:23:fd:ef:6a:23:61:25: 7e:a2:9b:53:b1:8e:44:5f:18:9b:1b:e1:42:2e:5c: b7:96:a7:9a:9a:42:f1:99:e6:47:1c:4e:f5:79:34: 65:7f:13:8f:25:d5:0d:51:5a:01:4a:12:3f:95:88: f6:76:c6:f0:da:1b:1f:c0:67:51:29:52:17:a1:97: f9:25:d2:47:54:3a:b7:ba:5d:17:8d:91:f5:f7:9f: 7f:80:30:dc:c3:ff:97:36:11:d0:e3:b1:cd:15:ce: 08:e4:f0:fc:c7:7a:de:a0:01:22:f7:c7:aa:b5:ee: 7a:5c:65:f5:47:e4:14:29:73:ea:97:2a:18:ee:85: 54:ac:c4:1b:b2:46:11:23:54:48:c6:1d:b8:ec:05: 52:56:10:aa:1b:9c:c4:4a:97:8e:4e:7b:a9:26:f6: 5b:d7:7f:28:b8:12:0e:62:f6:83:ef:1f:21:c7:77: 40:db:80:8c:4d:28:6b:37:6b:f5:c2:af:7e:9c:bf: e4:4a:c1:99:c7:84:2e:5d:44:db:4c:4f:28:64:39: 3a:ea:23:5b:93:22:22:e5:ec:6d:7b:ff:45:fd:2b: 8e:cb:38:4a:93:65:3d:e7:bc:24:ac:7e:d4:f6:1c: 79:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:16:84:28:2E:74:A3:F3:35:C7:D4:B5:44:22:25:E8:79:38:6F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl X509v3 Authority Key Identifier: keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer sbgp-ipAddrBlock: critical IPv4: 207.170.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:83:22:0c:5c:89:5a:56:3a:4f:ae:57:24:e1:da:a3:77:23: 27:d1:95:cd:6c:a6:b1:a7:8b:13:67:25:b3:28:75:fe:02:7c: b9:af:41:ff:f3:df:55:c6:04:79:8b:a0:aa:b6:b3:05:30:98: 2c:0b:1d:df:ed:f7:0e:67:f9:7e:72:3e:56:8c:bc:57:8a:f7: ea:19:fe:5e:17:4a:4d:9c:ca:88:ba:3d:44:16:84:f2:a2:b5: d5:29:03:38:ee:76:00:65:d0:5a:15:c1:01:54:5b:06:1d:3f: b2:18:87:f3:42:d0:ff:6c:de:c6:8d:f0:9e:36:e4:7e:5d:ee: c1:08:51:06:4a:a6:fa:40:9e:51:a5:ad:d3:d0:55:b4:40:e2: b8:cd:c2:87:a6:09:97:c2:76:4c:e0:d0:2a:c3:c0:46:7a:c9: 2c:0e:a1:01:4b:3e:82:7a:1d:1b:03:81:9c:45:2a:4e:53:db: 5d:04:a3:2e:d3:57:9c:ef:b0:f4:05:01:01:f0:08:c6:41:6d: 04:3a:85:9c:bd:38:cb:9e:cc:32:16:22:f4:9d:75:aa:6d:ad: 6e:8c:93:b5:a1:9d:51:96:b1:c9:c7:65:4a:84:9c:e4:a3:45: 37:60:02:4e:12:6b:9d:8e:49:1b:14:35:07:2a:0d:66:d3:ab: 01:52:f3:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSEqVQRXfMOUvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZhYjYzNzgtZTE1ZC00NDcxLWIwMWYtYmUxNWZjNWJm YTA0MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTgyNTY1MjctYjlmYy00OTYxLWJiZGQtODE4NzEzNWEzZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMvW1+Uh+6UwHt3AfH9FH7F1as2cvyP972oj YSV+optTsY5EXxibG+FCLly3lqeamkLxmeZHHE71eTRlfxOPJdUNUVoBShI/lYj2 dsbw2hsfwGdRKVIXoZf5JdJHVDq3ul0XjZH1959/gDDcw/+XNhHQ47HNFc4I5PD8 x3reoAEi98eqte56XGX1R+QUKXPqlyoY7oVUrMQbskYRI1RIxh247AVSVhCqG5zE SpeOTnupJvZb138ouBIOYvaD7x8hx3dA24CMTShrN2v1wq9+nL/kSsGZx4QuXUTb TE8oZDk66iNbkyIi5exte/9F/SuOyzhKk2U957wkrH7U9hx5hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUWhCgudKPzNcfUtUQiJeh5OG8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFi NjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1ZmM1YmZhMDQvZjlkYjNiODEtYzlhZS0z ZmM0LTlhMDktZGEyMzU3MTdmN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWZhYjYzNzgtZTE1ZC00NDcxLWIw MWYtYmUxNWZjNWJmYTA0LzVmYWI2Mzc4LWUxNWQtNDQ3MS1iMDFmLWJlMTVmYzVi ZmEwNC5jcmwwHwYDVR0jBBgwFoAUYUBDv+JQs0dk/NFzD2KYA1AyGNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFiNjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1 ZmM1YmZhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz6qwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSDIgxciVpWOk+uVyTh2qN3IyfRlc1sprGnixNnJbModf4CfLmvQf/z 31XGBHmLoKq2swUwmCwLHd/t9w5n+X5yPlaMvFeK9+oZ/l4XSk2cyoi6PUQWhPKi tdUpAzjudgBl0FoVwQFUWwYdP7IYh/NC0P9s3saN8J425H5d7sEIUQZKpvpAnlGl rdPQVbRA4rjNwoemCZfCdkzg0CrDwEZ6ySwOoQFLPoJ6HRsDgZxFKk5T210Eoy7T V5zvsPQFAQHwCMZBbQQ6hZy9OMuezDIWIvSddaptrW6Mk7WhnVGWscnHZUqEnOSj RTdgAk4Sa52OSRsUNQcqDWbTqwFS82Y= -----END CERTIFICATE-----Generated at Sat Aug 23 17:29:51 2025 by rpki-client