$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/e7e9def8-c759-3153-bb5f-ac78fd3a050a.roa File: e7e9def8-c759-3153-bb5f-ac78fd3a050a.roa (raw, json) Hash identifier: kIfUO84FiMXvK8NEat7ExZi+kxwU7kFH3Xotww2I9wE= Subject key identifier: 85:87:E0:5B:11:70:7B:E5:A9:17:7B:B4:67:16:9A:60:25:EE:4A:8A Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584ADECBAB36F26021878716E080 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/e7e9def8-c759-3153-bb5f-ac78fd3a050a.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 170.176.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:ab:36:f2:60:21:87:87:16:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=0bd58877-e066-41ca-bad6-0b063c67d0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b1:d0:aa:95:cf:3c:20:3f:15:38:82:e5:91: 1d:01:c2:de:50:d7:e5:ab:9a:4d:1f:f6:cf:dd:7f: 1e:1a:5f:27:37:d9:d8:f9:46:ed:ce:aa:83:a6:77: 91:79:4f:cb:63:ab:44:44:1a:cc:9b:9a:ae:66:e0: 29:14:ed:f8:c7:ce:39:2c:c4:70:32:78:44:9b:b6: 43:e5:07:5b:2a:ba:a8:3e:06:2b:9d:9d:64:6d:a0: 3c:31:24:72:ea:6d:83:30:bd:d3:13:22:30:aa:d9: 0f:d5:44:81:f1:69:85:11:45:9c:56:fb:b3:03:c5: 30:96:70:87:eb:3f:e7:84:88:c1:da:14:9f:f6:27: 1d:70:75:db:c9:e1:a9:53:07:a5:49:4b:10:b3:0b: 58:02:43:fc:0f:a0:c9:94:9d:0e:72:47:c5:5a:ea: 3b:f5:1d:84:b7:36:60:94:a2:94:a4:f2:25:45:cc: 13:84:52:e8:29:93:d8:3f:3e:d3:28:82:fa:23:47: 77:09:9b:f2:7d:42:69:43:11:ac:f2:a7:00:c3:87: 7b:e2:2b:19:f4:83:fe:0b:11:e7:e9:0c:aa:8c:50: 81:53:25:8f:cb:53:7c:25:af:51:7a:fa:c7:2e:08: af:02:ff:cd:e2:b5:30:f8:62:86:33:d5:ef:0a:f4: 77:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:87:E0:5B:11:70:7B:E5:A9:17:7B:B4:67:16:9A:60:25:EE:4A:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/e7e9def8-c759-3153-bb5f-ac78fd3a050a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:6f:58:10:57:4f:a1:11:27:69:f5:a4:71:bb:98:9b:73:1f: b3:00:3b:26:1f:f1:18:1b:d5:88:9a:20:24:08:e0:54:48:05: 96:27:2e:c0:1a:e7:93:7a:03:92:ee:ff:61:45:c9:1c:b0:e9: 56:8b:28:2d:84:96:b1:5a:b4:a9:2a:d2:aa:e5:25:d8:93:b9: 89:a3:9d:8d:5e:03:18:20:78:b8:79:b8:ce:2b:48:c9:98:33: fb:ba:b3:16:6a:c9:19:67:2a:8c:9c:f1:0d:1d:45:a8:62:8f: a1:23:71:26:8c:c3:5f:4c:98:7f:48:5a:bd:f1:76:e2:5d:74: d4:b6:7f:22:1d:05:e3:65:fe:13:69:94:a0:c7:b6:1c:76:9b: c0:2a:7b:04:36:e0:8f:90:b6:29:e7:d1:0a:8b:26:19:70:44: 5c:09:f9:5c:09:9f:3b:87:b3:53:65:ab:ce:92:bd:a4:0a:c2: 0a:b8:a2:08:c8:a9:f2:fa:48:93:43:d2:50:51:b6:2c:53:7d: a5:57:6d:9e:11:86:2b:a0:f6:39:31:d3:b9:d0:51:22:df:d2: f6:fa:56:03:7b:7e:92:c8:74:d6:b8:f4:24:30:39:67:c1:bc: 41:3c:c9:74:02:21:84:6f:19:2e:b6:28:0e:48:ac:cd:38:31: 77:78:e4:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey6s28mAhh4cW4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MGJkNTg4NzctZTA2Ni00MWNhLWJhZDYtMGIwNjNjNjdkMGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7HQqpXPPCA/FTiC5ZEdAcLeUNflq5pNH/bP 3X8eGl8nN9nY+UbtzqqDpneReU/LY6tERBrMm5quZuApFO34x845LMRwMnhEm7ZD 5QdbKrqoPgYrnZ1kbaA8MSRy6m2DML3TEyIwqtkP1USB8WmFEUWcVvuzA8UwlnCH 6z/nhIjB2hSf9icdcHXbyeGpUwelSUsQswtYAkP8D6DJlJ0OckfFWuo79R2EtzZg lKKUpPIlRcwThFLoKZPYPz7TKIL6I0d3CZvyfUJpQxGs8qcAw4d74isZ9IP+CxHn 6QyqjFCBUyWPy1N8Ja9RevrHLgivAv/N4rUw+GKGM9XvCvR33QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWH4FsRcHvlqRd7tGcWmmAl7kqKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvZTdlOWRlZjgtYzc1OS0z MTUzLWJiNWYtYWM3OGZkM2EwNTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMFvWBBXT6ERJ2n1pHG7mJtzH7MAOyYf8Rgb1YiaICQI4FRIBZYnLsAa 55N6A5Lu/2FFyRyw6VaLKC2ElrFatKkq0qrlJdiTuYmjnY1eAxggeLh5uM4rSMmY M/u6sxZqyRlnKoyc8Q0dRahij6EjcSaMw19MmH9IWr3xduJddNS2fyIdBeNl/hNp lKDHthx2m8AqewQ24I+Qtinn0QqLJhlwRFwJ+VwJnzuHs1Nlq86SvaQKwgq4ogjI qfL6SJND0lBRtixTfaVXbZ4Rhiug9jkx07nQUSLf0vb6VgN7fpLIdNa49CQwOWfB vEE8yXQCIYRvGS62KA5IrM04MXd45Cs= -----END CERTIFICATE-----Generated at Sat Aug 23 06:38:37 2025 by rpki-client