$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/0aca10d1-6d54-3e58-9c39-60203235636a.roa File: 0aca10d1-6d54-3e58-9c39-60203235636a.roa (raw, json) Hash identifier: CwbzvCBOnd0ChVDQzf8rKrK9Lt9PZZMMx9b4h17yL0k= Subject key identifier: 1F:DA:99:F8:90:DA:92:1B:21:61:E7:97:4C:24:D5:DA:10:6A:BD:11 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584AADF112D91F3A6B4834A8FB80 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/0aca10d1-6d54-3e58-9c39-60203235636a.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 170.176.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:12:d9:1f:3a:6b:48:34:a8:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=d51cc599-84e3-43ae-baa2-b410b5229b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:89:d7:f9:ff:84:2e:e6:9d:03:a0:75:98:62: a5:29:bd:82:80:56:be:3d:ad:1a:43:77:22:69:f0: 80:3c:94:0a:09:93:88:37:cc:3b:8e:80:8b:24:9a: ed:8e:fe:92:83:86:34:f8:23:72:e6:2a:93:d3:17: 57:71:25:37:3f:89:4b:b7:5e:84:74:5b:a0:5d:63: 04:b8:50:75:8d:63:75:91:71:a4:99:d1:c9:8f:3c: a4:0f:83:13:1d:57:b2:03:e0:3b:6b:26:10:a1:b1: ae:17:ce:e3:44:ad:41:2a:e9:05:0b:5c:f7:d8:51: 56:21:16:12:14:19:13:b9:73:0e:3e:32:b7:85:4d: 6c:10:78:a0:a7:f4:d5:6b:00:e3:21:29:ad:8b:a6: 40:8c:59:71:1b:22:b1:5a:5b:30:1b:35:01:37:ad: b3:d9:80:85:05:fd:34:52:d8:06:90:2a:c9:9c:4f: d5:9b:6d:e9:c9:45:f8:08:a3:dc:51:42:48:a2:df: d7:43:5f:14:7a:ed:0e:4b:ab:47:bf:10:b3:57:88: 04:ce:42:6c:93:43:a2:17:92:f1:cc:ec:b0:d8:b1: 55:09:74:1b:db:df:18:54:fc:8d:4b:7d:dd:f8:9c: 8d:03:d3:4b:32:c0:35:f9:6e:42:06:97:5e:7e:e6: a8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DA:99:F8:90:DA:92:1B:21:61:E7:97:4C:24:D5:DA:10:6A:BD:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/0aca10d1-6d54-3e58-9c39-60203235636a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:52:8c:05:dd:85:8f:16:99:99:08:a0:d5:eb:8d:af:e6:52: d1:9e:d0:2e:93:26:9a:9a:a5:92:f1:46:da:06:1a:57:6d:3e: a8:2d:5a:52:50:8c:94:44:d1:9f:cb:9f:ac:32:c9:4c:14:85: d8:a2:51:08:67:cc:84:45:61:2b:31:9c:a9:1a:7c:69:16:68: 76:7a:c3:d8:3c:5d:44:2d:1b:1c:e9:f5:fa:ea:8b:c3:b5:3e: c0:1e:79:0b:06:81:4f:76:3c:74:7f:fa:cd:c6:4c:66:e4:a7: 86:53:ab:e4:a0:90:6d:f2:7f:b8:c3:54:34:cf:40:4a:21:91: 70:c3:64:d6:21:04:85:82:7f:09:38:3f:65:31:8a:32:14:3a: 20:7d:ea:e7:c5:5d:d9:43:54:1e:47:eb:7f:17:64:a0:46:54: 59:c6:5d:d0:9d:f3:f8:94:00:7b:b1:e2:19:c4:67:58:3a:1c: 4a:fa:aa:27:eb:74:93:b2:1b:a6:0b:6b:16:5a:cd:4f:37:bc: 06:a4:42:c1:ad:47:28:77:a8:7b:f0:64:2e:74:f7:96:49:cd: 67:4d:6f:f0:f5:ae:37:66:09:a5:b8:25:76:62:6b:ed:76:fe: 0a:8a:b3:ed:d3:8b:f1:e9:3d:1d:ee:5a:56:9c:13:c7:65:c1: 89:3c:e0:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8RLZHzprSDSo+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZDUxY2M1OTktODRlMy00M2FlLWJhYTItYjQxMGI1MjI5YjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3onX+f+ELuadA6B1mGKlKb2CgFa+Pa0aQ3ci afCAPJQKCZOIN8w7joCLJJrtjv6Sg4Y0+CNy5iqT0xdXcSU3P4lLt16EdFugXWME uFB1jWN1kXGkmdHJjzykD4MTHVeyA+A7ayYQobGuF87jRK1BKukFC1z32FFWIRYS FBkTuXMOPjK3hU1sEHigp/TVawDjISmti6ZAjFlxGyKxWlswGzUBN62z2YCFBf00 UtgGkCrJnE/Vm23pyUX4CKPcUUJIot/XQ18Ueu0OS6tHvxCzV4gEzkJsk0OiF5Lx zOyw2LFVCXQb298YVPyNS33d+JyNA9NLMsA1+W5CBpdefuaoqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/amfiQ2pIbIWHnl0wk1doQar0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvMGFjYTEwZDEtNmQ1NC0z ZTU4LTljMzktNjAyMDMyMzU2MzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZSjAXdhY8WmZkIoNXrja/mUtGe0C6TJpqapZLxRtoGGldtPqgtWlJQ jJRE0Z/Ln6wyyUwUhdiiUQhnzIRFYSsxnKkafGkWaHZ6w9g8XUQtGxzp9frqi8O1 PsAeeQsGgU92PHR/+s3GTGbkp4ZTq+SgkG3yf7jDVDTPQEohkXDDZNYhBIWCfwk4 P2UxijIUOiB96ufFXdlDVB5H638XZKBGVFnGXdCd8/iUAHux4hnEZ1g6HEr6qifr dJOyG6YLaxZazU83vAakQsGtRyh3qHvwZC5095ZJzWdNb/D1rjdmCaW4JXZia+12 /gqKs+3Ti/HpPR3uWlacE8dlwYk84JY= -----END CERTIFICATE-----Generated at Tue Aug 5 17:25:14 2025 by rpki-client