$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/b090fc5f-3898-3c66-b20f-d906ad75a3c9.roa File: b090fc5f-3898-3c66-b20f-d906ad75a3c9.roa (raw, json) Hash identifier: xpAdbw0tFipVJsFxnEY4zZ6A1R2NaCpg/PTag/cBwU8= Subject key identifier: 88:2A:FA:CF:FD:75:B8:6B:64:CF:A5:D1:1E:42:81:63:49:C8:AC:44 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584AC016289D4BAA3BEE95954B00 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/b090fc5f-3898-3c66-b20f-d906ad75a3c9.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 14618 IP address blocks: 170.176.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:28:9d:4b:aa:3b:ee:95:95:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=8f820d95-40fd-4e9a-a629-8ea1b5ee99db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:34:87:d7:8e:0a:ac:8d:2c:c4:53:62:ab: 68:87:c3:d6:06:c0:36:eb:18:d4:22:06:de:56:b4: f5:1c:82:3a:c2:e8:de:44:ff:44:7c:aa:56:4c:ef: 09:1f:8e:42:60:1d:d0:b1:e6:37:b1:00:6b:be:3f: b5:0e:e4:34:60:1e:d4:84:6e:da:c9:03:f2:e9:b3: e7:ec:9a:38:73:9e:43:8c:2e:10:10:d9:a7:41:69: dd:ab:5c:ac:0f:7e:ad:39:9d:5a:d3:4c:87:6e:35: f6:3c:2f:3a:ce:e5:5f:b8:c2:b7:d5:39:ad:c4:23: 1a:66:14:60:5f:0a:90:bf:c6:c1:23:74:05:21:16: 88:e3:62:6e:e7:12:a7:ca:b9:75:77:55:cf:c8:b6: 62:36:b0:04:b7:d6:ba:c2:54:2d:bc:08:50:e6:da: b7:a4:3c:4a:ec:81:bf:ab:c4:c0:84:00:50:fb:0f: 74:ed:dc:56:46:3b:46:ab:49:7f:ff:2f:02:63:a9: 02:9f:cb:50:7c:7f:f0:d0:e5:43:be:b3:c1:cf:4a: 9b:1c:93:84:dc:d9:53:16:7a:e8:73:84:a5:89:25: 3a:e8:29:d0:c9:64:5a:71:77:09:9f:07:e0:68:fa: 2f:6b:b0:e2:2c:16:34:b4:d8:a6:4c:0d:f9:9c:a7: 0a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2A:FA:CF:FD:75:B8:6B:64:CF:A5:D1:1E:42:81:63:49:C8:AC:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/b090fc5f-3898-3c66-b20f-d906ad75a3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:0f:2e:38:b2:d9:5d:72:d2:3d:ac:66:3b:2a:c3:e9:40:ba: 91:5f:7a:a1:0f:82:5f:f1:49:3b:75:c1:2d:33:7c:4b:7e:78: b6:00:97:cd:48:4b:40:ec:c6:e8:40:a4:2c:76:24:9a:28:e6: 02:b7:39:98:86:ac:ae:5e:46:69:4a:bd:1f:94:3c:1f:f9:87: fd:d4:38:eb:1a:1c:0c:33:56:62:3c:f9:7a:88:b8:4b:c1:e5: 82:d2:16:1b:8c:dd:4f:5b:ad:4d:18:4f:d8:21:3d:e1:ff:3a: ef:37:f4:62:a2:1c:8d:07:69:55:33:4d:cd:c1:30:02:ce:14: cd:e6:78:20:f7:58:14:94:c5:a4:06:ac:85:ca:0d:03:4f:19: 2c:7f:c1:b1:9c:92:63:7e:21:01:90:7d:ae:88:e9:0d:e7:af: 5b:d0:3d:b9:a2:a8:0c:c2:23:53:a8:aa:8f:fa:f9:e6:bc:27: 61:ea:0e:31:67:98:15:e1:ba:aa:da:33:8e:53:9b:7b:fe:2f: df:e2:2a:2f:95:4a:54:67:6e:f1:ec:90:09:e8:43:3d:99:b2: 22:eb:2c:3c:dc:4a:85:d2:a6:bd:0d:1f:fa:44:01:59:a5:f3: 2b:65:f2:0c:77:40:f2:83:6d:c9:cb:f0:fc:67:57:de:21:88: c7:8c:93:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFiidS6o77pWVSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk OGY4MjBkOTUtNDBmZC00ZTlhLWE2MjktOGVhMWI1ZWU5OWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO40h9eOCqyNLMRTYqtoh8PWBsA26xjUIgbe VrT1HII6wujeRP9EfKpWTO8JH45CYB3QseY3sQBrvj+1DuQ0YB7UhG7ayQPy6bPn 7Jo4c55DjC4QENmnQWndq1ysD36tOZ1a00yHbjX2PC86zuVfuMK31TmtxCMaZhRg XwqQv8bBI3QFIRaI42Ju5xKnyrl1d1XPyLZiNrAEt9a6wlQtvAhQ5tq3pDxK7IG/ q8TAhABQ+w907dxWRjtGq0l//y8CY6kCn8tQfH/w0OVDvrPBz0qbHJOE3NlTFnro c4SliSU66CnQyWRacXcJnwfgaPova7DiLBY0tNimTA35nKcKywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgq+s/9dbhrZM+l0R5CgWNJyKxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvYjA5MGZjNWYtMzg5OC0z YzY2LWIyMGYtZDkwNmFkNzVhM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoPLjiy2V1y0j2sZjsqw+lAupFfeqEPgl/xSTt1wS0zfEt+eLYAl81I S0DsxuhApCx2JJoo5gK3OZiGrK5eRmlKvR+UPB/5h/3UOOsaHAwzVmI8+XqIuEvB 5YLSFhuM3U9brU0YT9ghPeH/Ou839GKiHI0HaVUzTc3BMALOFM3meCD3WBSUxaQG rIXKDQNPGSx/wbGckmN+IQGQfa6I6Q3nr1vQPbmiqAzCI1Ooqo/6+ea8J2HqDjFn mBXhuqraM45Tm3v+L9/iKi+VSlRnbvHskAnoQz2ZsiLrLDzcSoXSpr0NH/pEAVml 8ytl8gx3QPKDbcnL8PxnV94hiMeMkzM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:11:01 2025 by rpki-client