$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa File: 5c4f117d-45b9-3f38-be81-53b231ffe933.roa (raw, json) Hash identifier: YyZuos4Qflttx6phU02lCHxcvgoLGnPUwj3mPcS8s/E= Subject key identifier: 17:C1:B8:36:5B:3C:15:59:F4:E1:F6:14:CD:CF:5D:BF:B6:7F:1C:B7 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584B821CD827D052EFCA5FBD1640 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 46687 IP address blocks: 170.253.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d8:27:d0:52:ef:ca:5f:bd:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=5006f1cd-4c23-4f71-9035-43f840a783c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:52:d6:f3:8b:4c:93:1e:ee:9e:88:ef:5a: 1a:70:17:9b:4e:8f:31:58:64:44:7e:e8:2d:1c:2b: cd:c0:4d:11:07:1f:65:81:73:98:5b:37:45:92:53: 1d:aa:ca:14:ed:0a:58:78:46:cf:4c:bb:59:a2:42: 5d:23:f9:eb:58:11:9c:04:bf:62:a8:b8:12:c3:b7: d4:8b:2a:ef:50:2e:44:b9:8a:8c:2a:36:e3:50:eb: 1f:4d:16:d3:25:48:e4:e3:36:96:65:c2:9c:15:32: a8:88:6f:55:91:b6:61:8a:e1:e4:c8:02:5e:47:93: e5:3c:94:97:25:f7:04:c1:60:42:c2:c1:dc:6f:b3: 46:80:45:58:0b:50:cd:81:3c:c1:68:fb:56:ef:f6: d7:ce:55:68:89:af:56:89:11:67:74:dc:06:1f:08: 83:2f:86:61:34:55:99:1c:e1:2a:e2:dc:80:6e:11: 91:e6:b4:1a:8d:79:26:3b:40:43:00:ec:58:51:c6: f8:ac:7a:52:a3:b8:ba:c5:b8:ef:95:67:94:ce:6f: e0:e4:97:c6:14:0a:2d:ab:7e:68:d4:73:e4:98:06: 57:de:de:fe:85:37:72:74:d5:32:ca:97:bb:f1:e6: fb:0f:f9:45:0d:39:41:fe:92:d7:54:1c:7d:98:0d: 94:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C1:B8:36:5B:3C:15:59:F4:E1:F6:14:CD:CF:5D:BF:B6:7F:1C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 170.253.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:72:54:f8:b5:8d:db:98:21:df:b3:80:da:94:d9:b8:bc:d2: c7:48:be:e1:f6:4b:4e:1e:94:d7:e7:ac:9c:10:35:40:74:6b: cc:c6:31:be:7c:6e:22:37:5b:62:b3:4e:13:cb:0a:da:b7:cc: c9:56:58:c6:28:0f:ae:f4:76:91:5f:9b:1f:c7:df:d5:65:4f: c3:19:e2:9c:4a:75:a3:b2:9d:66:2e:2b:c1:fe:dd:e5:7a:e5: b6:10:92:fe:9a:c3:2a:b2:89:37:3f:48:fd:e6:d5:a1:d3:9b: 65:11:01:a1:b6:64:7c:59:a7:93:25:cc:a4:f5:13:91:f9:9f: 6a:a1:43:55:28:16:36:3e:4e:6b:00:ca:88:f4:86:5d:1c:26: 11:38:61:cc:3e:77:d7:85:79:b7:00:9d:f4:88:73:d9:29:27: 17:e5:a9:ca:31:2a:4d:9c:1a:00:8d:9c:e2:63:d2:de:ec:ad: 80:17:47:e1:8d:1e:8e:e0:d8:d4:4a:e6:db:6c:a2:64:65:5f: 4a:57:b3:7e:21:10:e2:de:37:5a:b9:1f:50:f7:a9:9c:fe:15: ce:ff:9e:85:c1:38:44:cb:05:f6:d2:67:e0:20:5e:d2:10:ed: 66:9f:45:aa:f3:c1:75:4c:69:fb:de:62:ef:5c:15:55:82:1e: e2:5b:39:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNgn0FLvyl+9FkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NTAwNmYxY2QtNGMyMy00ZjcxLTkwMzUtNDNmODQwYTc4M2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZxS1vOLTJMe7p6I71oacBebTo8xWGREfugt HCvNwE0RBx9lgXOYWzdFklMdqsoU7QpYeEbPTLtZokJdI/nrWBGcBL9iqLgSw7fU iyrvUC5EuYqMKjbjUOsfTRbTJUjk4zaWZcKcFTKoiG9VkbZhiuHkyAJeR5PlPJSX JfcEwWBCwsHcb7NGgEVYC1DNgTzBaPtW7/bXzlVoia9WiRFndNwGHwiDL4ZhNFWZ HOEq4tyAbhGR5rQajXkmO0BDAOxYUcb4rHpSo7i6xbjvlWeUzm/g5JfGFAotq35o 1HPkmAZX3t7+hTdydNUyype78eb7D/lFDTlB/pLXVBx9mA2UEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfBuDZbPBVZ9OH2FM3PXb+2fxy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvNWM0ZjExN2QtNDViOS0z ZjM4LWJlODEtNTNiMjMxZmZlOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqv2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhyVPi1jduYId+zgNqU2bi80sdIvuH2S04elNfnrJwQNUB0a8zGMb58 biI3W2KzThPLCtq3zMlWWMYoD670dpFfmx/H39VlT8MZ4pxKdaOynWYuK8H+3eV6 5bYQkv6awyqyiTc/SP3m1aHTm2URAaG2ZHxZp5MlzKT1E5H5n2qhQ1UoFjY+TmsA yoj0hl0cJhE4Ycw+d9eFebcAnfSIc9kpJxflqcoxKk2cGgCNnOJj0t7srYAXR+GN Ho7g2NRK5ttsomRlX0pXs34hEOLeN1q5H1D3qZz+Fc7/noXBOETLBfbSZ+AgXtIQ 7WafRarzwXVMafveYu9cFVWCHuJbOW4= -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:48 2025 by rpki-client