$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/b845b639-74a8-302e-ba71-b40514d5e445.roa File: b845b639-74a8-302e-ba71-b40514d5e445.roa (raw, json) Hash identifier: xuyYwI7T85dJ+4eEaExmHuTFkUk8Va8U09z1jQ1AOk0= Subject key identifier: C3:2B:13:BA:EC:0D:86:05:15:20:8F:24:68:82:A4:A5:85:FC:F7:C0 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584AE89124339DFB2CE168025780 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/b845b639-74a8-302e-ba71-b40514d5e445.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 170.176.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:24:33:9d:fb:2c:e1:68:02:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=011e33fa-b35c-4dcf-916e-f9e5e8384844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fb:fa:29:43:c4:37:de:da:18:1f:07:c1:00: 1e:77:17:ff:59:29:b5:0e:fa:ea:63:22:cc:84:64: 71:ad:21:3b:79:53:13:c5:bc:4b:26:80:66:06:e9: 55:11:5e:29:2d:6a:c3:1a:28:a9:a4:6b:2e:61:3b: e8:b9:2d:c3:cb:a0:58:52:f1:5e:44:68:d1:ad:af: 5f:97:07:66:8d:19:76:a7:22:fa:e5:68:2c:7b:24: c8:37:30:f2:32:06:1e:c1:de:7e:2d:61:72:97:70: f6:0b:43:b4:2b:a4:cb:66:62:88:66:8f:83:b8:dc: e5:5b:42:08:90:ac:90:47:2d:cb:d6:27:3a:0a:d8: da:3a:89:c1:36:d9:3a:9e:bf:e9:b7:05:d6:f4:fd: a5:cb:60:91:42:fb:b5:28:41:0a:8f:4a:a2:10:7a: 25:42:9b:44:08:91:4b:3b:a2:0f:49:78:e3:eb:af: 10:09:a0:57:ae:db:95:c6:58:01:1c:7f:ad:8d:02: e8:85:71:e8:ac:fb:c1:ee:71:51:42:bb:a6:12:71: b0:38:e6:09:61:2a:44:6b:9b:49:0b:b0:da:33:11: 10:e4:10:55:a4:87:b2:76:b9:2a:6d:b1:46:fd:84: af:49:04:b5:d6:68:2e:2f:ed:b5:86:3a:3b:e8:42: 41:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2B:13:BA:EC:0D:86:05:15:20:8F:24:68:82:A4:A5:85:FC:F7:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/b845b639-74a8-302e-ba71-b40514d5e445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:6a:9f:18:d3:c5:4b:ce:ef:66:1e:7b:31:5d:e3:49:f3:80: d7:bb:3d:82:f9:96:bd:ee:f6:35:a6:d8:df:6f:ac:86:65:50: 8d:9b:b0:39:4b:5b:ad:16:4d:34:e4:d1:d4:36:a3:7c:6f:9e: a8:66:ef:1a:2c:1b:d5:30:d9:28:01:09:3d:9a:cc:e6:6a:e4: 51:78:c0:eb:bc:e9:33:8b:50:f2:1d:51:37:2f:6c:d8:38:47: 65:26:19:41:36:d9:4e:89:6b:6a:40:e9:d1:b6:7f:1c:a0:e7: d7:35:9f:89:e3:8d:26:74:86:ad:df:51:a1:e7:07:60:e2:7c: c0:86:46:4e:4d:0e:f4:c2:0b:ac:52:a1:e6:00:d5:7e:c9:ae: 69:6c:46:70:be:44:07:e8:9c:ed:c5:83:c4:02:77:7d:7c:be: 36:83:91:c8:6a:1a:aa:29:27:c7:c6:1b:64:95:55:ac:8b:e1: de:57:d6:d6:7b:df:aa:79:dc:30:d6:7a:81:2e:03:39:38:c0: 56:64:fc:6b:ed:c2:ad:e9:23:50:22:55:cb:46:16:27:a5:f3: f3:eb:7d:f9:f4:03:09:dc:7d:c3:23:b2:2e:76:a8:d2:fd:57: 3d:19:5e:80:45:b5:82:24:43:8b:f9:37:de:b4:cf:78:61:f2: d3:78:30:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSQznfss4WgCV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk MDExZTMzZmEtYjM1Yy00ZGNmLTkxNmUtZjllNWU4Mzg0ODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvv6KUPEN97aGB8HwQAedxf/WSm1DvrqYyLM hGRxrSE7eVMTxbxLJoBmBulVEV4pLWrDGiippGsuYTvouS3Dy6BYUvFeRGjRra9f lwdmjRl2pyL65WgseyTINzDyMgYewd5+LWFyl3D2C0O0K6TLZmKIZo+DuNzlW0II kKyQRy3L1ic6CtjaOonBNtk6nr/ptwXW9P2ly2CRQvu1KEEKj0qiEHolQptECJFL O6IPSXjj668QCaBXrtuVxlgBHH+tjQLohXHorPvB7nFRQrumEnGwOOYJYSpEa5tJ C7DaMxEQ5BBVpIeydrkqbbFG/YSvSQS11mguL+21hjo76EJBEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMrE7rsDYYFFSCPJGiCpKWF/PfAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvYjg0NWI2MzktNzRhOC0z MDJlLWJhNzEtYjQwNTE0ZDVlNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVqnxjTxUvO72YeezFd40nzgNe7PYL5lr3u9jWm2N9vrIZlUI2bsDlL W60WTTTk0dQ2o3xvnqhm7xosG9Uw2SgBCT2azOZq5FF4wOu86TOLUPIdUTcvbNg4 R2UmGUE22U6Ja2pA6dG2fxyg59c1n4njjSZ0hq3fUaHnB2DifMCGRk5NDvTCC6xS oeYA1X7JrmlsRnC+RAfonO3Fg8QCd318vjaDkchqGqopJ8fGG2SVVayL4d5X1tZ7 36p53DDWeoEuAzk4wFZk/Gvtwq3pI1AiVctGFiel8/Prffn0AwncfcMjsi52qNL9 Vz0ZXoBFtYIkQ4v5N960z3hh8tN4MMc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:42 2025 by rpki-client