$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa File: ae2d7c57-9385-33b3-8fce-32b111842f86.roa (raw, json) Hash identifier: eAzCaIhRDWhLA8XVogJ38kXhUTemlVglmFFkHbOnT1M= Subject key identifier: 52:1A:97:5F:56:30:1E:83:98:54:1E:B5:1F:9F:48:EB:87:99:80:7D Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F4328584B2E5C5F94B2DED207069B5720 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 2386 IP address blocks: 170.2.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:5f:94:b2:de:d2:07:06:9b:57:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=44c9fd5f-238a-4085-a657-e2e0ae957ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:49:3f:81:12:49:fd:f6:76:9e:dd:f5:ec:62: 3e:e2:cd:fb:fd:1e:da:be:c2:17:db:78:42:e4:84: 17:dd:2d:aa:19:fd:17:df:e5:4e:77:94:86:48:30: 0a:0f:e0:9c:64:df:7b:8f:ca:d0:9e:3b:bc:1b:b2: d5:11:f1:41:84:49:cd:ee:57:ee:f2:f7:7b:d5:49: d5:04:75:00:58:17:88:37:16:fc:5e:98:c8:fe:7c: 5a:6e:ae:79:ca:31:77:36:8d:bb:93:03:ff:51:db: 03:9a:9a:72:93:02:cc:73:61:82:ff:b8:29:1f:41: c1:7b:3f:64:1b:1b:b7:d7:10:b0:21:3e:a4:32:3e: 5c:6f:19:73:f1:1a:f8:98:28:26:50:b8:77:5a:d8: 36:43:38:a9:81:20:c0:ba:e1:8b:62:9a:f6:83:34: 1a:94:88:76:0b:48:09:7b:01:2e:80:8e:62:ad:1e: c7:bc:b6:e3:6d:06:ee:41:70:28:17:c5:aa:cb:51: f0:5b:8e:f0:9a:f5:67:66:ff:9c:ba:d8:cf:1e:8d: 67:2f:31:f4:ee:b3:73:12:7c:e7:65:10:0e:c4:19: 58:a8:1d:20:ea:b2:0d:ec:1e:5c:fd:04:48:05:6f: 3b:44:e0:9f:4e:23:06:77:90:2c:0f:76:58:58:ac: 35:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1A:97:5F:56:30:1E:83:98:54:1E:B5:1F:9F:48:EB:87:99:80:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b7:69:cf:69:39:99:54:ed:75:44:21:70:29:70:09:69:46: b6:ca:a1:f3:b9:80:00:e4:9a:24:ad:8c:63:16:b0:45:a8:8e: fd:e7:7c:d6:98:47:dc:9c:38:62:6b:ba:04:f1:34:82:52:82: 10:24:4f:02:f3:96:44:e6:31:72:fe:a2:ff:1d:fa:43:91:ae: 15:6b:e9:64:48:ec:1f:fc:88:06:12:22:f9:96:a0:73:0f:d0: 8e:20:64:9a:21:59:dd:f5:49:36:11:cb:0b:5e:aa:cd:82:61: 9f:87:d4:a7:3b:6d:01:85:ef:5b:42:96:cd:40:7d:2f:6d:79: 43:cf:51:52:f1:b4:eb:ac:50:81:2a:01:7c:ce:ed:b9:1b:52: 12:dc:64:bd:92:13:62:50:7f:f5:df:5a:be:35:22:ae:60:af: 4e:b1:8d:d5:51:2b:61:56:d3:6d:a5:ae:a5:e2:c6:67:75:b6: ab:ba:78:2b:c2:af:f0:92:3d:c3:2b:2a:3e:ef:98:c8:10:d6: 9c:4e:2b:13:49:c1:7d:5e:ca:b2:de:8a:fb:4b:91:da:26:32: 26:5b:cf:23:d3:20:52:de:44:07:d3:96:bc:90:b9:25:b9:a3: 4a:5f:17:94:52:53:39:ce:e1:61:9b:cf:42:bb:21:6b:f6:5d: 92:d0:00:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXF+Ust7SBwabVyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk NDRjOWZkNWYtMjM4YS00MDg1LWE2NTctZTJlMGFlOTU3ZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkk/gRJJ/fZ2nt317GI+4s37/R7avsIX23hC 5IQX3S2qGf0X3+VOd5SGSDAKD+CcZN97j8rQnju8G7LVEfFBhEnN7lfu8vd71UnV BHUAWBeINxb8XpjI/nxabq55yjF3No27kwP/UdsDmppykwLMc2GC/7gpH0HBez9k Gxu31xCwIT6kMj5cbxlz8Rr4mCgmULh3Wtg2QzipgSDAuuGLYpr2gzQalIh2C0gJ ewEugI5irR7HvLbjbQbuQXAoF8Wqy1HwW47wmvVnZv+cutjPHo1nLzH07rNzEnzn ZRAOxBlYqB0g6rIN7B5c/QRIBW87ROCfTiMGd5AsD3ZYWKw1IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIal19WMB6DmFQetR+fSOuHmYB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvYWUyZDdjNTctOTM4NS0z M2IzLThmY2UtMzJiMTExODQyZjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgJ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK3ac9pOZlU7XVEIXApcAlpRrbKofO5gADkmiStjGMWsEWojv3nfNaY R9ycOGJrugTxNIJSghAkTwLzlkTmMXL+ov8d+kORrhVr6WRI7B/8iAYSIvmWoHMP 0I4gZJohWd31STYRywteqs2CYZ+H1Kc7bQGF71tCls1AfS9teUPPUVLxtOusUIEq AXzO7bkbUhLcZL2SE2JQf/XfWr41Iq5gr06xjdVRK2FW022lrqXixmd1tqu6eCvC r/CSPcMrKj7vmMgQ1pxOKxNJwX1eyrLeivtLkdomMiZbzyPTIFLeRAfTlryQuSW5 o0pfF5RSUznO4WGbz0K7IWv2XZLQAAc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:33:31 2025 by rpki-client