$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa File: 5c4f117d-45b9-3f38-be81-53b231ffe933.roa (raw, json) Hash identifier: +Ow2Vzq7HTEpyrJ+g/b3+IJliOyPvtc/v6xyVw+tTz4= Subject key identifier: A9:3E:43:B7:6D:04:43:49:5F:90:4E:AD:01:2C:32:ED:C5:1C:9E:C2 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584AA160E29F19E82B429203A000 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 46687 IP address blocks: 170.253.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:e2:9f:19:e8:2b:42:92:03:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=78bea6f9-91c4-46c7-a5f8-6282095d409f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e0:c8:15:1c:b6:9b:8a:9f:7d:0c:ce:81:47: 91:d5:01:31:c3:64:9e:55:ad:e6:8b:b8:4c:ae:5e: c1:4c:5c:43:a3:82:5e:ee:45:4a:65:2d:90:36:d7: ae:21:b1:31:7f:80:98:71:df:5c:ec:5d:1b:ef:a7: 95:61:97:24:9a:a2:ff:5c:fe:c6:15:9b:4e:e1:9e: de:61:e2:c4:f9:dc:16:eb:ec:bc:3c:28:f1:af:44: 72:19:fa:ed:7f:6d:b7:19:54:b8:ef:28:e4:31:14: dc:6b:4f:b7:b8:3e:51:b6:5a:85:94:38:bb:dc:24: ae:03:d7:04:2d:9b:a7:25:62:28:82:8e:d0:e1:74: b9:0b:07:93:84:cb:52:08:a5:85:49:44:ce:9c:0a: 27:1b:97:7e:7e:bb:1f:66:a4:74:28:d0:cb:05:05: 12:a7:70:ed:a3:4f:de:fb:0d:c8:3b:61:03:f2:aa: 50:11:a3:71:1b:8e:62:af:8b:70:89:da:39:5a:a0: 6d:64:f7:2a:85:1e:51:22:ab:6b:a5:a6:c0:dd:5c: 67:2d:e1:3b:d1:bd:ca:84:10:1f:a5:6c:f7:f2:76: c0:07:cc:a7:06:2c:a3:20:ae:fa:26:56:8b:c9:97: 90:c6:c4:a1:40:bc:4c:71:eb:ff:bc:35:e8:ad:cd: a0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3E:43:B7:6D:04:43:49:5F:90:4E:AD:01:2C:32:ED:C5:1C:9E:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 170.253.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:38:54:ca:2d:21:ab:5e:dc:02:13:56:dc:8a:36:b4:54:7d: 1b:2f:89:a0:34:f3:7a:a5:dd:1f:b2:76:6a:10:10:0d:e5:b6: 9a:ac:78:9a:23:b6:f3:89:e5:49:30:42:bc:8f:9b:79:b4:f3: 21:90:4d:f4:25:42:32:2f:6a:dc:22:ac:8e:18:94:11:15:c7: 41:0c:66:d4:cc:f7:cb:e0:98:90:e5:fd:b9:e6:a9:5d:0a:60: a7:27:03:f7:ad:17:d8:4a:91:15:5c:67:b5:dc:d1:c7:57:e9: b9:6c:ef:e6:23:28:de:61:88:a7:ff:0f:93:bb:f2:9c:13:81: 03:96:54:fc:0a:1c:a4:8b:d3:1d:10:e4:30:8e:b8:24:d0:cb: f0:8e:7e:38:8d:21:d4:82:b8:a1:2d:66:fc:94:e9:a3:16:f9: a8:e0:53:12:43:8d:b7:56:5d:f7:9c:28:05:c3:68:1d:2c:d5: c5:b1:bf:96:45:d5:21:c3:cc:ef:3d:a4:c4:8b:2a:ad:16:2c: ae:b7:1a:5c:f6:5e:4e:5f:dd:f9:be:f8:2a:2d:f2:d1:1d:6d: 07:9e:18:15:90:21:89:b7:21:2c:86:dd:74:2f:74:6e:19:8d: 43:d5:5e:ec:a4:bb:99:ee:8a:db:cd:ff:a7:de:f7:57:98:15: 5d:f5:b3:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOKfGegrQpIDoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NzhiZWE2ZjktOTFjNC00NmM3LWE1ZjgtNjI4MjA5NWQ0MDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApODIFRy2m4qffQzOgUeR1QExw2SeVa3mi7hM rl7BTFxDo4Je7kVKZS2QNteuIbExf4CYcd9c7F0b76eVYZckmqL/XP7GFZtO4Z7e YeLE+dwW6+y8PCjxr0RyGfrtf223GVS47yjkMRTca0+3uD5RtlqFlDi73CSuA9cE LZunJWIogo7Q4XS5CweThMtSCKWFSUTOnAonG5d+frsfZqR0KNDLBQUSp3Dto0/e +w3IO2ED8qpQEaNxG45ir4twido5WqBtZPcqhR5RIqtrpabA3VxnLeE70b3KhBAf pWz38nbAB8ynBiyjIK76JlaLyZeQxsShQLxMcev/vDXorc2gvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk+Q7dtBENJX5BOrQEsMu3FHJ7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvNWM0ZjExN2QtNDViOS0z ZjM4LWJlODEtNTNiMjMxZmZlOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqv2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI4VMotIate3AITVtyKNrRUfRsviaA083ql3R+ydmoQEA3ltpqseJoj tvOJ5UkwQryPm3m08yGQTfQlQjIvatwirI4YlBEVx0EMZtTM98vgmJDl/bnmqV0K YKcnA/etF9hKkRVcZ7Xc0cdX6bls7+YjKN5hiKf/D5O78pwTgQOWVPwKHKSL0x0Q 5DCOuCTQy/COfjiNIdSCuKEtZvyU6aMW+ajgUxJDjbdWXfecKAXDaB0s1cWxv5ZF 1SHDzO89pMSLKq0WLK63Glz2Xk5f3fm++Cot8tEdbQeeGBWQIYm3ISyG3XQvdG4Z jUPVXuyku5nuitvN/6fe91eYFV31s9M= -----END CERTIFICATE-----Generated at Sat Aug 9 20:42:33 2025 by rpki-client