$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/0f033822-dbaf-3e8e-b8b6-0084fd0f7245.roa File: 0f033822-dbaf-3e8e-b8b6-0084fd0f7245.roa (raw, json) Hash identifier: S+1bZCOBYq7Nm+7wFYIKbZTQBw7ZITnwwVTkNfAUVWA= Subject key identifier: E7:3F:19:C9:0B:B3:89:74:B9:BE:DE:BD:43:23:79:9E:C6:DD:31:15 Certificate issuer: /CN=63dfa533-829d-4752-9f73-458a9e42bd9e Certificate serial: 010D0C9F4328584B004BE9228885735D04115030 Authority key identifier: 8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/0f033822-dbaf-3e8e-b8b6-0084fd0f7245.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 400490 IP address blocks: 170.39.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e9:22:88:85:73:5d:04:11:50:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63dfa533-829d-4752-9f73-458a9e42bd9e Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=3f51fdff-8465-4693-b358-5da2c39571fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:17:42:f4:e3:37:db:e1:4b:a9:34:07:ea: 09:5d:42:6f:36:d1:fb:ba:50:4a:bc:5f:fc:52:d9: 7f:78:04:69:9b:46:89:45:56:92:96:d0:4b:eb:12: 05:9c:02:7f:0f:75:eb:1f:f0:aa:7a:8a:f8:af:c8: 6b:37:93:14:13:fa:67:39:33:40:04:04:93:56:47: d5:42:67:1b:ec:90:0f:e8:26:dc:38:34:03:53:34: 3b:33:79:39:fa:ba:e5:58:91:71:63:4b:38:4a:cd: d9:f2:52:68:50:1c:12:e2:07:7f:c4:8d:5e:aa:39: e7:14:bc:04:59:2e:ba:9f:fa:c8:e3:5a:25:10:78: 0b:a3:43:1a:89:3a:9f:5e:bc:73:f5:a2:d5:e0:17: 84:68:ab:f2:7a:a2:f8:22:5d:f0:90:18:fe:4d:c4: 5c:a1:ba:d1:a5:46:34:3c:b3:f1:62:83:fe:2f:27: 7d:5c:67:c3:ae:f8:60:60:23:d3:9b:35:ea:4a:24: 5e:8c:dc:7b:c4:3b:e4:f6:30:80:2c:c3:06:c6:15: f8:87:fd:6c:c6:ca:0d:f1:2b:c4:36:50:99:70:6c: 1c:92:3b:4a:87:a2:c1:c6:0a:aa:4b:8b:a2:0a:90: 5b:e8:f3:58:93:a2:09:30:e1:e0:5b:c5:2b:89:13: a0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3F:19:C9:0B:B3:89:74:B9:BE:DE:BD:43:23:79:9E:C6:DD:31:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/0f033822-dbaf-3e8e-b8b6-0084fd0f7245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl X509v3 Authority Key Identifier: keyid:8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer sbgp-ipAddrBlock: critical IPv4: 170.39.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:bf:6a:6d:c0:87:f5:81:34:43:a6:f1:e3:37:1a:4c:9a:7f: 37:57:08:de:9e:41:a3:8a:b5:69:af:71:31:6d:a4:b0:b1:b6: a4:a4:15:56:e5:16:92:ab:1a:15:6e:2d:51:e6:d2:7f:f7:10: f2:0b:23:12:4c:8e:db:dd:15:1c:33:0d:5e:1f:54:32:9e:f1: 8d:2a:ed:bd:52:6b:08:76:20:a0:f6:b8:52:05:c1:a9:1a:2d: ba:e2:fe:a9:a8:ff:10:de:0c:74:20:8f:60:df:41:5a:c8:5b: 04:72:96:93:e2:29:11:5f:e9:1d:d9:35:91:43:0a:a6:c2:0e: 96:25:20:b7:4a:46:c2:0d:88:03:10:a0:ff:54:87:97:0c:02: 63:2f:45:d9:27:bf:b3:7c:30:ca:07:47:2b:f3:fe:b7:a0:55: c7:f2:5f:73:42:06:20:e0:7e:cc:b3:6d:d0:45:ce:f3:78:e3: ad:29:de:e1:4c:29:e1:14:69:06:17:7f:f3:06:96:06:b7:19: e0:2e:86:e0:ba:5f:ed:47:9b:39:08:20:29:32:fc:53:90:51: e2:2f:27:8f:f8:0e:8e:8c:85:f2:68:72:a5:ff:ea:fe:bb:90: f7:21:6c:0a:f0:7e:56:d5:18:17:8a:0f:22:c2:0b:58:9b:f9: 03:45:7b:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+kiiIVzXQQRUDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNkZmE1MzMtODI5ZC00NzUyLTlmNzMtNDU4YTllNDJi ZDllMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk M2Y1MWZkZmYtODQ2NS00NjkzLWIzNTgtNWRhMmMzOTU3MWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPYXQvTjN9vhS6k0B+oJXUJvNtH7ulBKvF/8 Utl/eARpm0aJRVaSltBL6xIFnAJ/D3XrH/Cqeor4r8hrN5MUE/pnOTNABASTVkfV Qmcb7JAP6CbcODQDUzQ7M3k5+rrlWJFxY0s4Ss3Z8lJoUBwS4gd/xI1eqjnnFLwE WS66n/rI41olEHgLo0MaiTqfXrxz9aLV4BeEaKvyeqL4Il3wkBj+TcRcobrRpUY0 PLPxYoP+Lyd9XGfDrvhgYCPTmzXqSiRejNx7xDvk9jCALMMGxhX4h/1sxsoN8SvE NlCZcGwckjtKh6LBxgqqS4uiCpBb6PNYk6IJMOHgW8UriROgFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOc/GckLs4l0ub7evUMjeZ7G3TEVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82M2Rm YTUzMy04MjlkLTQ3NTItOWY3My00NThhOWU0MmJkOWUvMGYwMzM4MjItZGJhZi0z ZThlLWI4YjYtMDA4NGZkMGY3MjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjNkZmE1MzMtODI5ZC00NzUyLTlm NzMtNDU4YTllNDJiZDllLzYzZGZhNTMzLTgyOWQtNDc1Mi05ZjczLTQ1OGE5ZTQy YmQ5ZS5jcmwwHwYDVR0jBBgwFoAUj4WaPPqYwBFnbTEZlB2VgyjiTN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82M2RmYTUzMy04MjlkLTQ3NTItOWY3My00NThh OWU0MmJkOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqieIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJS/am3Ah/WBNEOm8eM3GkyafzdXCN6eQaOKtWmvcTFtpLCxtqSkFVbl FpKrGhVuLVHm0n/3EPILIxJMjtvdFRwzDV4fVDKe8Y0q7b1Sawh2IKD2uFIFwaka Lbri/qmo/xDeDHQgj2DfQVrIWwRylpPiKRFf6R3ZNZFDCqbCDpYlILdKRsINiAMQ oP9Uh5cMAmMvRdknv7N8MMoHRyvz/regVcfyX3NCBiDgfsyzbdBFzvN4460p3uFM KeEUaQYXf/MGlga3GeAuhuC6X+1HmzkIICky/FOQUeIvJ4/4Do6MhfJocqX/6v67 kPchbArwflbVGBeKDyLCC1ib+QNFe18= -----END CERTIFICATE-----Generated at Wed Nov 5 02:19:28 2025 by rpki-client