$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa File: 5eda4636-65ba-33d9-aa37-2ae89912698e.roa (raw, json) Hash identifier: UFQvHNhMVqFQ4iUc1wDYa30d9Y44YRugN/zAhPg4Slg= Subject key identifier: E7:57:AD:52:51:6B:F4:41:32:24:A4:07:47:A5:55:CF:26:4F:29:41 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584B1806DCBC5983272B3C045980 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 209242 IP address blocks: 170.176.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:dc:bc:59:83:27:2b:3c:04:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=aaaafa3d-ba6b-4be9-b2e3-b0663777bc30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1a:46:04:f3:41:56:b1:c0:3c:49:40:0a:da: cd:b8:bb:e8:f7:c0:58:1b:b2:ef:b1:8d:bc:22:0a: ec:9b:54:5c:c6:9a:13:42:a3:d7:20:d6:dd:ee:f1: b3:19:5d:5e:92:55:cc:9c:41:a1:ea:83:de:4f:7d: 2d:56:93:7c:64:df:84:f3:f6:12:bb:0e:1e:45:6e: 33:cd:23:07:32:2a:0f:c4:03:24:29:9c:f5:d2:3d: 53:16:96:0e:54:3c:12:19:b8:7a:67:94:81:a0:58: d4:41:e6:46:f9:98:13:a9:53:dd:27:f7:be:b9:cc: 4d:08:12:c4:41:6a:af:9e:19:5d:41:24:12:ca:44: cb:c7:fc:05:3d:3e:7d:a6:a7:49:29:f1:b6:e0:45: 47:c1:99:70:ad:de:6f:41:28:e4:26:df:70:75:07: 2f:2e:30:ee:1a:94:76:13:d8:c8:b0:3c:ec:02:dd: 71:a4:3b:26:7f:84:5b:10:33:72:e1:77:f4:61:f8: dd:c0:b8:59:b3:3e:f0:88:6e:cd:72:3d:aa:0b:f1: d1:86:32:d6:37:cd:1b:a6:42:bd:92:10:0a:81:cb: 57:6c:53:a3:e3:3f:31:76:3b:e3:f1:d1:23:09:f2: 87:42:29:fb:e0:92:84:3f:02:22:13:49:3b:a7:9f: 76:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:57:AD:52:51:6B:F4:41:32:24:A4:07:47:A5:55:CF:26:4F:29:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:9c:9d:2e:ba:4c:ae:01:86:23:5b:35:24:6a:18:65:13:cc: 6f:65:3a:e6:f3:7b:5e:7f:f7:9a:ff:a6:8e:0a:eb:df:16:9f: 5f:bc:b4:e8:c8:6b:b3:50:7b:51:16:44:10:6a:28:b5:e6:80: 38:b9:dd:5c:95:af:0c:1b:b8:15:df:19:65:70:2d:cb:73:a4: f5:e8:7b:e5:2b:6f:d0:ab:84:a7:e0:31:2c:4e:28:d8:c5:82: a0:e6:39:1b:bf:30:5d:9b:1f:b7:01:8b:12:bf:6d:4c:3e:40: 3b:81:75:5e:50:c9:b0:ad:3b:06:48:59:55:58:93:8a:b3:ac: 52:0e:6d:08:d4:d9:48:14:83:05:27:55:21:72:2b:57:cf:30: be:33:3b:30:46:9e:0d:8e:8d:0b:95:97:b9:83:31:c5:82:18: ec:c1:90:59:3b:c5:a3:d4:14:d4:2f:79:e5:68:f0:3b:9a:1b: 63:e5:c6:eb:64:86:c8:37:be:55:4b:85:56:cc:83:e0:e7:30: 02:5c:ad:0d:50:74:86:87:59:be:d1:ff:6f:11:81:a1:2d:b3: 98:48:13:86:c3:cc:a3:d3:9a:93:69:38:e8:f6:c6:ee:83:bf: ba:60:bb:96:ca:fa:c4:6d:3f:f6:82:51:db:7b:42:23:87:00: a9:b4:6f:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBty8WYMnKzwEWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YWFhYWZhM2QtYmE2Yi00YmU5LWIyZTMtYjA2NjM3NzdiYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hpGBPNBVrHAPElACtrNuLvo98BYG7LvsY28 Igrsm1RcxpoTQqPXINbd7vGzGV1eklXMnEGh6oPeT30tVpN8ZN+E8/YSuw4eRW4z zSMHMioPxAMkKZz10j1TFpYOVDwSGbh6Z5SBoFjUQeZG+ZgTqVPdJ/e+ucxNCBLE QWqvnhldQSQSykTLx/wFPT59pqdJKfG24EVHwZlwrd5vQSjkJt9wdQcvLjDuGpR2 E9jIsDzsAt1xpDsmf4RbEDNy4Xf0YfjdwLhZsz7wiG7Ncj2qC/HRhjLWN80bpkK9 khAKgctXbFOj4z8xdjvj8dEjCfKHQin74JKEPwIiE0k7p592TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdXrVJRa/RBMiSkB0elVc8mTylBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvNWVkYTQ2MzYtNjViYS0z M2Q5LWFhMzctMmFlODk5MTI2OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGcnS66TK4BhiNbNSRqGGUTzG9lOubze15/95r/po4K698Wn1+8tOjI a7NQe1EWRBBqKLXmgDi53VyVrwwbuBXfGWVwLctzpPXoe+Urb9CrhKfgMSxOKNjF gqDmORu/MF2bH7cBixK/bUw+QDuBdV5QybCtOwZIWVVYk4qzrFIObQjU2UgUgwUn VSFyK1fPML4zOzBGng2OjQuVl7mDMcWCGOzBkFk7xaPUFNQveeVo8DuaG2Plxutk hsg3vlVLhVbMg+DnMAJcrQ1QdIaHWb7R/28RgaEts5hIE4bDzKPTmpNpOOj2xu6D v7pgu5bK+sRtP/aCUdt7QiOHAKm0b14= -----END CERTIFICATE-----Generated at Sun Oct 19 23:39:38 2025 by rpki-client