$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/a805dcee-de5f-32cd-8460-f5c507fc9aac.roa File: a805dcee-de5f-32cd-8460-f5c507fc9aac.roa (raw, json) Hash identifier: O003HzZ1f+uGNTrcsPFMzI1cKFtUEFzDMT6joNu4KK4= Subject key identifier: 96:B5:1E:DC:D2:36:1C:B5:72:A4:7D:12:E9:6A:88:3D:B4:32:FE:E5 Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F4328584B0746BC954FFCC322F0B25640 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/a805dcee-de5f-32cd-8460-f5c507fc9aac.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 205627 IP address blocks: 170.2.122.0/23 maxlen: 24 170.2.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:bc:95:4f:fc:c3:22:f0:b2:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=9bcd74a9-4480-4f92-b722-01b3e67325d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:34:ba:b1:39:46:b3:84:f3:91:11:04:6b:1c: f0:4a:77:5b:60:3a:7e:cf:fb:93:4a:c4:30:b1:42: f1:9d:41:8e:15:d1:b6:36:7e:16:25:6b:30:46:50: 31:70:9a:b4:9b:4e:ed:bf:61:0e:ee:54:02:05:f5: 1d:ce:9c:6e:22:2b:c2:9d:ea:04:d6:2a:78:45:fc: 10:1f:84:05:c2:80:b8:13:6e:93:88:5a:db:4d:5e: ae:a5:db:a3:4d:08:38:db:c7:4b:6f:b7:d7:24:14: 6f:ed:cb:03:b2:fa:45:90:94:73:42:c9:d3:4b:de: 85:84:90:20:c5:4c:44:a9:fc:7e:26:a0:3a:4b:4a: ba:ca:f4:ab:93:3d:bc:f2:9b:2f:de:5f:2a:1c:94: 5a:7f:dd:2c:f6:a0:eb:b3:d7:77:c8:35:bb:72:1f: 5e:de:13:af:90:f5:cf:10:40:31:36:9d:85:1f:ec: eb:1b:0a:40:91:35:14:54:f0:4c:ad:71:9b:32:17: 6d:d4:53:e4:c9:41:00:2a:e4:44:b2:7a:18:e4:1d: 97:79:7b:87:59:a7:b3:2e:55:08:83:ca:9b:ec:71: da:64:6d:24:a5:4b:3a:62:d3:d4:ef:f7:6a:ef:fd: 46:6c:56:25:54:1b:b6:be:6a:99:19:30:c1:28:de: c2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B5:1E:DC:D2:36:1C:B5:72:A4:7D:12:E9:6A:88:3D:B4:32:FE:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/a805dcee-de5f-32cd-8460-f5c507fc9aac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.122.0-170.2.125.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:32:f1:66:f1:f2:a7:c2:8f:4a:be:f7:41:ab:25:5b:75:9b: 72:0f:3a:bb:f1:63:a0:62:10:45:a3:8e:83:5f:11:a3:0f:0a: 95:ac:32:37:30:53:57:48:19:8f:b8:af:99:2e:5a:f0:c7:66: 58:ee:0d:c7:bc:04:a1:35:1f:0e:ff:d0:38:bc:eb:4e:c6:1c: 01:66:11:8a:9a:d9:a9:b0:e2:09:50:94:ca:c3:68:dc:91:c0: 19:6a:d3:03:d9:54:4a:9b:96:d3:95:e8:5b:3f:da:d8:a5:22: ba:e8:7b:58:70:c0:af:1f:0f:b4:0c:8c:fc:40:d5:60:6e:49: 42:1d:4e:22:ba:8a:78:96:09:de:cb:2e:15:47:79:14:ff:0a: a2:38:9a:d7:58:15:50:8b:08:a7:4d:a2:13:f7:c2:46:88:fe: 72:12:89:a1:42:af:cc:36:aa:cf:28:a8:fe:6a:ee:56:4c:8a: 74:00:2e:45:0f:5a:b5:e4:8c:c1:7e:2e:28:29:5d:4f:fc:de: 3e:d6:58:e6:b8:c8:f4:3c:bf:80:7f:8e:df:67:f0:69:c2:24: 40:90:02:2e:5e:e8:da:7b:1b:88:e6:c3:58:41:ea:2d:a7:eb: 6a:78:26:71:ac:e4:e7:60:73:de:eb:dc:86:db:21:11:bc:2f: 83:bf:03:31 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEsHRryVT/zDIvCyVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk OWJjZDc0YTktNDQ4MC00ZjkyLWI3MjItMDFiM2U2NzMyNWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DS6sTlGs4TzkREEaxzwSndbYDp+z/uTSsQw sULxnUGOFdG2Nn4WJWswRlAxcJq0m07tv2EO7lQCBfUdzpxuIivCneoE1ip4RfwQ H4QFwoC4E26TiFrbTV6updujTQg428dLb7fXJBRv7csDsvpFkJRzQsnTS96FhJAg xUxEqfx+JqA6S0q6yvSrkz288psv3l8qHJRaf90s9qDrs9d3yDW7ch9e3hOvkPXP EEAxNp2FH+zrGwpAkTUUVPBMrXGbMhdt1FPkyUEAKuREsnoY5B2XeXuHWaezLlUI g8qb7HHaZG0kpUs6YtPU7/dq7/1GbFYlVBu2vmqZGTDBKN7C3QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJa1HtzSNhy1cqR9EulqiD20Mv7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvYTgwNWRjZWUtZGU1Zi0z MmNkLTg0NjAtZjVjNTA3ZmM5YWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGqAnoD BAGqAnwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEASzLxZvHyp8KPSr73QaslW3Wbcg86u/FjoGIQRaOOg18R ow8KlawyNzBTV0gZj7ivmS5a8MdmWO4Nx7wEoTUfDv/QOLzrTsYcAWYRiprZqbDi CVCUysNo3JHAGWrTA9lUSpuW05XoWz/a2KUiuuh7WHDArx8PtAyM/EDVYG5JQh1O IrqKeJYJ3ssuFUd5FP8Kojia11gVUIsIp02iE/fCRoj+chKJoUKvzDaqzyio/mru VkyKdAAuRQ9ateSMwX4uKCldT/zePtZY5rjI9Dy/gH+O32fwacIkQJACLl7o2nsb iObDWEHqLafrangmcazk52Bz3uvchtshEbwvg78DMQ== -----END CERTIFICATE-----Generated at Wed Nov 5 14:57:48 2025 by rpki-client