$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/7993d267-af3b-37cd-8527-dfc865e86277.roa File: 7993d267-af3b-37cd-8527-dfc865e86277.roa (raw, json) Hash identifier: ZdxL8H1xoSjyTPMR9rIu41+EF+lhUL1ll/Yjc1+FJW4= Subject key identifier: CC:08:EB:AE:F2:30:0E:7E:7D:02:71:05:1C:7A:8D:F9:EA:69:B8:80 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584AC016337CFCAD9F169C377680 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/7993d267-af3b-37cd-8527-dfc865e86277.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 16509 IP address blocks: 170.176.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:33:7c:fc:ad:9f:16:9c:37:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=1c17e470-d494-45ea-9158-f681976f5734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:60:ba:a6:0b:4c:58:5c:e7:e0:65:31:d7:fd: d0:f9:46:83:8e:be:cd:79:c1:d9:e3:33:c5:b9:27: f0:78:d0:aa:91:5c:10:e3:11:a5:68:c8:6c:99:f9: 8b:10:4a:4e:a6:16:65:95:20:c7:d0:ae:49:06:db: d9:f3:2b:00:ce:3f:29:4f:b8:9d:9c:cc:1d:b6:2c: a0:25:ae:a4:b6:8e:00:1e:71:0a:99:2a:51:86:91: 42:b0:fe:aa:8f:90:ff:a9:5b:78:36:7d:24:9f:07: cb:ad:f8:47:33:b7:f4:70:76:dc:c3:0a:91:83:72: 7a:e4:14:13:01:67:0e:8d:6a:b3:ca:66:0d:58:0b: d9:6e:62:99:64:a1:0e:78:5b:5d:e9:8a:0c:87:24: 4a:63:cf:8f:dc:6d:f9:47:3f:7c:a6:b5:ba:12:b0: 7b:e3:a6:1a:23:e3:1e:66:68:fe:3d:4c:8c:a1:0e: db:b6:78:03:61:ec:c1:50:9b:14:62:ff:fd:68:8b: 27:25:16:c4:15:19:08:91:71:03:5f:d2:1c:5e:1a: ea:93:65:da:cf:18:64:8d:0e:9c:35:85:bc:f8:63: 13:2e:7c:b4:65:5e:49:a2:9d:10:d1:2c:e6:0b:0a: d6:ae:66:ee:e9:d5:2a:4f:df:aa:d6:06:4d:5c:52: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:08:EB:AE:F2:30:0E:7E:7D:02:71:05:1C:7A:8D:F9:EA:69:B8:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/7993d267-af3b-37cd-8527-dfc865e86277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:1d:da:30:ac:96:f8:65:16:07:e2:a5:7a:29:60:4a:f3:39: 6f:c0:fe:f5:ec:4a:77:05:4b:c9:96:1d:7c:ce:03:39:93:e3: 06:e2:a2:19:93:2a:01:5e:2d:fe:8d:87:74:7e:50:f5:54:8f: 67:56:61:81:00:c1:17:37:c7:9a:e8:1f:23:a1:41:d2:df:2f: 68:e2:13:6d:b6:62:40:cf:35:71:1f:c3:95:9b:de:00:49:26: bb:f5:c1:81:a6:42:ba:b8:5c:c5:b4:a8:45:17:5d:cc:b6:a3: a5:34:a1:9a:b2:de:d6:8e:9d:0c:2b:20:d0:78:10:6e:b3:7c: f7:8e:ac:e5:de:aa:e7:32:56:ab:73:8e:83:49:24:64:9f:4b: fd:ec:50:8c:c4:cf:b5:94:3b:2c:9b:3e:13:4b:60:a4:ce:21: 94:27:0b:92:a2:94:f8:a4:53:cf:73:03:03:3d:7a:00:e5:b2: fc:53:de:b4:bc:73:33:22:16:ee:3d:e0:ca:cb:b0:60:3b:3f: b5:d7:af:a8:59:be:76:58:c1:1b:1b:bd:17:5f:47:f5:21:20: 76:92:81:aa:ad:85:0d:e1:91:5e:00:47:5b:d8:68:7a:72:e0: 6f:69:a2:6e:17:a8:a2:1e:59:4d:c1:92:97:45:5c:58:e2:32: 6a:5c:ad:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFjN8/K2fFpw3doAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MWMxN2U0NzAtZDQ5NC00NWVhLTkxNTgtZjY4MTk3NmY1NzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGC6pgtMWFzn4GUx1/3Q+UaDjr7NecHZ4zPF uSfweNCqkVwQ4xGlaMhsmfmLEEpOphZllSDH0K5JBtvZ8ysAzj8pT7idnMwdtiyg Ja6kto4AHnEKmSpRhpFCsP6qj5D/qVt4Nn0knwfLrfhHM7f0cHbcwwqRg3J65BQT AWcOjWqzymYNWAvZbmKZZKEOeFtd6YoMhyRKY8+P3G35Rz98prW6ErB746YaI+Me Zmj+PUyMoQ7btngDYezBUJsUYv/9aIsnJRbEFRkIkXEDX9IcXhrqk2XazxhkjQ6c NYW8+GMTLny0ZV5Jop0Q0SzmCwrWrmbu6dUqT9+q1gZNXFIxOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwI667yMA5+fQJxBRx6jfnqabiAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvNzk5M2QyNjctYWYzYi0z N2NkLTg1MjctZGZjODY1ZTg2Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8d2jCslvhlFgfipXopYErzOW/A/vXsSncFS8mWHXzOAzmT4wbiohmT KgFeLf6Nh3R+UPVUj2dWYYEAwRc3x5roHyOhQdLfL2jiE222YkDPNXEfw5Wb3gBJ Jrv1wYGmQrq4XMW0qEUXXcy2o6U0oZqy3taOnQwrINB4EG6zfPeOrOXequcyVqtz joNJJGSfS/3sUIzEz7WUOyybPhNLYKTOIZQnC5KilPikU89zAwM9egDlsvxT3rS8 czMiFu494MrLsGA7P7XXr6hZvnZYwRsbvRdfR/UhIHaSgaqthQ3hkV4AR1vYaHpy 4G9pom4XqKIeWU3BkpdFXFjiMmpcrWE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:35 2025 by rpki-client