$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa File: 7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa (raw, json) Hash identifier: KUPqCinkihPXuPAi7wg/rCTk0CxjoLkzN3MR5CSGAkc= Subject key identifier: 40:11:AC:99:D7:07:BC:FE:3B:E2:09:52:10:50:13:D6:25:DD:48:78 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584AECC1295302CE64C3071BD540 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 397423 IP address blocks: 170.39.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:29:53:02:ce:64:c3:07:1b:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a5f46c53-eb91-4d2e-b615-4e8ca0dd73ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:8b:df:27:68:7b:d6:4c:51:ab:91:fb:08: 05:6e:fc:79:85:76:39:18:5c:ea:a6:d6:10:e9:ee: 3a:3a:b3:87:5c:dd:26:d5:13:9f:c9:5c:a3:6e:da: e9:94:b5:94:e5:a9:8e:f0:a5:6c:eb:69:2f:6f:e4: ef:a2:f8:1f:a7:03:bc:8f:27:27:33:49:36:bd:9f: 46:b9:7c:17:9f:25:dd:ae:9e:8a:ba:c9:45:da:73: 35:a5:bc:06:29:81:f0:4f:61:6d:34:db:07:17:53: 51:c1:06:1e:86:89:b8:c9:fd:d1:eb:61:4a:1c:8e: 10:6f:f3:81:f8:68:18:ea:bf:d9:66:cb:ba:58:8b: 29:b3:c9:4b:b3:5d:44:23:34:74:eb:ac:a1:4d:e2: 0c:16:9d:3b:29:19:de:06:3a:06:52:9f:62:dd:60: 6b:b7:df:a4:02:ba:03:b0:fc:f4:82:f9:49:4d:c4: 55:18:a7:8a:12:4d:c5:23:f5:2e:12:bb:47:9f:23: f2:a1:25:3c:50:39:3d:5d:16:0b:20:4b:9a:58:60: 55:99:66:a6:14:18:a0:bc:18:63:8b:39:c3:51:8f: bc:6c:cb:8a:48:9b:38:9b:24:d9:a1:f2:8e:ab:9b: e0:aa:c2:fa:aa:88:5d:a6:6d:5a:a4:6e:a3:fc:28: 02:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:11:AC:99:D7:07:BC:FE:3B:E2:09:52:10:50:13:D6:25:DD:48:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 170.39.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e8:10:a8:37:7f:50:82:b4:d2:82:1b:2a:63:4f:b8:16:b8:f2: 21:32:bc:55:11:d6:3f:6c:c0:25:72:59:9e:0e:45:7a:4b:fe: 46:b3:df:e4:52:4a:4f:4a:d9:7c:ba:95:97:8f:4f:a6:79:e7: da:c3:f0:bd:15:91:49:28:8a:38:eb:e3:5a:1e:7d:ff:38:73: ac:4d:b6:70:99:a4:b8:40:43:f0:70:23:4c:26:4d:cd:54:32: d6:cd:a6:89:46:41:a0:50:40:00:78:fe:fd:eb:78:14:60:29: ac:c8:55:84:3a:c7:74:40:09:5f:6c:1a:d5:ec:d0:08:6d:73: 56:4b:eb:35:14:8c:ce:3c:66:cb:50:63:32:47:42:13:65:21: ce:4f:ef:cb:a3:e9:c0:5f:00:60:75:bb:a4:9a:ee:d2:76:96: c7:dc:49:2d:7c:5b:4a:5f:3c:1b:38:57:64:00:92:c5:2f:07: cb:a0:98:65:9f:f0:b5:3e:d4:ac:cb:7d:ea:98:3e:c3:90:79: f8:7c:ac:8b:a5:82:49:7b:82:4b:2f:0f:c1:97:7c:31:be:11: 26:14:70:1e:b5:c8:60:d2:df:75:d1:38:86:34:84:15:05:22: a8:cd:24:92:3d:47:93:3a:f4:3a:24:22:94:6c:66:a8:6e:c2: 02:23:ac:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSlTAs5kwwcb1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTVmNDZjNTMtZWI5MS00ZDJlLWI2MTUtNGU4Y2EwZGQ3M2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBGL3ydoe9ZMUauR+wgFbvx5hXY5GFzqptYQ 6e46OrOHXN0m1ROfyVyjbtrplLWU5amO8KVs62kvb+TvovgfpwO8jycnM0k2vZ9G uXwXnyXdrp6KuslF2nM1pbwGKYHwT2FtNNsHF1NRwQYehom4yf3R62FKHI4Qb/OB +GgY6r/ZZsu6WIsps8lLs11EIzR066yhTeIMFp07KRneBjoGUp9i3WBrt9+kAroD sPz0gvlJTcRVGKeKEk3FI/UuErtHnyPyoSU8UDk9XRYLIEuaWGBVmWamFBigvBhj iznDUY+8bMuKSJs4myTZofKOq5vgqsL6qohdpm1apG6j/CgCUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEARrJnXB7z+O+IJUhBQE9Yl3Uh4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNzMyNmY0NWYtNmY3Ny0z OGM0LTkzNzItZTZmYmY0YTAyMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqifUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOgQqDd/UIK00oIbKmNPuBa48iEyvFUR1j9swCVyWZ4ORXpL/kaz3+RS Sk9K2Xy6lZePT6Z559rD8L0VkUkoijjr41oeff84c6xNtnCZpLhAQ/BwI0wmTc1U MtbNpolGQaBQQAB4/v3reBRgKazIVYQ6x3RACV9sGtXs0Ahtc1ZL6zUUjM48ZstQ YzJHQhNlIc5P78uj6cBfAGB1u6Sa7tJ2lsfcSS18W0pfPBs4V2QAksUvB8ugmGWf 8LU+1KzLfeqYPsOQefh8rIulgkl7gksvD8GXfDG+ESYUcB61yGDS33XROIY0hBUF IqjNJJI9R5M69DokIpRsZqhuwgIjrNk= -----END CERTIFICATE-----Generated at Sat Aug 23 08:12:10 2025 by rpki-client