$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/aa36ebb5-8193-30ee-9eb4-0bb52b527a9b.roa File: aa36ebb5-8193-30ee-9eb4-0bb52b527a9b.roa (raw, json) Hash identifier: TDqH42KtoMWQZICqdSvV4AIJR9+f3yguStn5UgPBv3M= Subject key identifier: 9D:CA:B1:56:76:8B:6D:B7:D7:CD:9B:03:FB:82:19:EE:98:43:8D:E3 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584AD9365990F26942E72D0D3E00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/aa36ebb5-8193-30ee-9eb4-0bb52b527a9b.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 57.132.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:59:90:f2:69:42:e7:2d:0d:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=e56cfa73-83a5-4dbc-bd90-2c763c619f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6f:67:01:cd:9f:a5:d2:aa:c3:af:92:6d:10: c0:f6:44:b9:71:1b:0e:06:97:fa:bb:d0:92:62:bc: e1:26:07:93:85:ba:39:d5:c2:b1:53:bd:a4:38:59: be:b6:c3:98:33:ac:65:81:ca:2d:ed:ce:0f:29:82: 3c:59:4e:6a:67:03:91:e9:cb:cb:64:85:d9:61:07: 1b:44:cd:21:7d:91:56:59:93:00:0a:4e:87:7c:72: 2f:3c:31:1a:26:0d:58:eb:b7:f7:2f:f9:11:6e:5c: fc:ad:27:7d:9b:f1:1e:70:c2:5e:6f:83:a5:c2:bf: e6:62:1d:84:7d:34:4e:72:dd:f7:2b:bb:2b:ec:69: 0e:a8:6a:a9:44:4c:31:34:6a:c8:13:d3:39:82:b5: 4b:66:62:0e:d8:64:04:d7:54:25:65:49:6c:dc:e1: 6c:5d:0a:90:1c:35:30:0c:57:da:bc:b2:57:57:f6: 09:72:7c:28:0d:ca:5a:68:b1:b9:bb:d7:61:2c:65: a9:5e:69:4b:fb:b6:cc:80:de:54:6c:f5:98:7d:56: 1c:13:cf:66:ab:85:29:28:f7:d3:5d:c8:d8:be:05: 31:d6:40:b4:7b:83:ea:0e:c8:9e:3b:33:1a:7e:3b: 15:d8:49:9d:66:af:74:e8:2b:f8:00:e3:d3:09:b3: 59:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CA:B1:56:76:8B:6D:B7:D7:CD:9B:03:FB:82:19:EE:98:43:8D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/aa36ebb5-8193-30ee-9eb4-0bb52b527a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 57.132.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:09:aa:40:00:d3:f3:8b:0b:b4:50:bc:68:08:15:05:a9:62: 87:77:33:aa:7d:d1:f6:72:10:36:b8:22:87:32:02:58:f3:2f: 1c:3c:ed:47:76:28:78:b2:61:aa:87:ed:51:89:04:0b:12:df: e2:d7:a3:a5:2b:d3:f5:ea:2f:4d:57:8e:84:03:db:1d:26:36: 72:49:2a:29:2c:ce:f5:31:87:21:7e:6b:23:4a:60:1e:20:15: 61:7e:80:ef:89:a5:c3:21:c8:41:a7:c1:33:5b:3f:79:4c:7f: 62:16:26:fb:f6:83:3a:ec:0d:58:1a:eb:a4:c0:87:68:b2:57: a4:d6:13:bb:ba:1c:ad:78:64:89:b9:1c:29:a1:8b:e3:12:9c: 34:b9:27:df:8a:c3:66:b7:6c:86:f0:aa:91:48:63:b3:a2:a0: 83:6e:99:3b:4c:43:c5:e7:db:09:86:3c:48:8f:e7:ce:44:57: 7e:63:7c:3d:33:11:ca:c4:1a:3f:20:29:fc:47:ae:5d:41:89: e8:f4:0b:58:dc:2b:af:6e:9c:1b:b5:a6:9d:37:0c:b5:a5:5d: 77:b9:d4:60:3f:98:61:68:3a:79:2d:43:9d:8b:62:14:fb:ee: 74:31:1a:d8:f9:26:f5:fd:fc:a9:3c:3c:1d:fa:5c:91:a3:f8: 11:b6:fd:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNlmQ8mlC5y0NPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTU2Y2ZhNzMtODNhNS00ZGJjLWJkOTAtMmM3NjNjNjE5ZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW9nAc2fpdKqw6+SbRDA9kS5cRsOBpf6u9CS YrzhJgeThbo51cKxU72kOFm+tsOYM6xlgcot7c4PKYI8WU5qZwOR6cvLZIXZYQcb RM0hfZFWWZMACk6HfHIvPDEaJg1Y67f3L/kRblz8rSd9m/EecMJeb4Olwr/mYh2E fTROct33K7sr7GkOqGqpREwxNGrIE9M5grVLZmIO2GQE11QlZUls3OFsXQqQHDUw DFfavLJXV/YJcnwoDcpaaLG5u9dhLGWpXmlL+7bMgN5UbPWYfVYcE89mq4UpKPfT XcjYvgUx1kC0e4PqDsieOzMafjsV2EmdZq906Cv4AOPTCbNZIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3KsVZ2i223182bA/uCGe6YQ43jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYWEzNmViYjUtODE5My0z MGVlLTllYjQtMGJiNTJiNTI3YTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHOYQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwJqkAA0/OLC7RQvGgIFQWpYod3M6p90fZyEDa4IocyAljzLxw87Ud2 KHiyYaqH7VGJBAsS3+LXo6Ur0/XqL01XjoQD2x0mNnJJKikszvUxhyF+ayNKYB4g FWF+gO+JpcMhyEGnwTNbP3lMf2IWJvv2gzrsDVga66TAh2iyV6TWE7u6HK14ZIm5 HCmhi+MSnDS5J9+Kw2a3bIbwqpFIY7OioINumTtMQ8Xn2wmGPEiP585EV35jfD0z EcrEGj8gKfxHrl1Biej0C1jcK69unBu1pp03DLWlXXe51GA/mGFoOnktQ52LYhT7 7nQxGtj5JvX9/Kk8PB36XJGj+BG2/YA= -----END CERTIFICATE-----Generated at Sun Aug 24 05:30:28 2025 by rpki-client