$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/0ea2beb3-227e-3b15-a481-18704abb9d31.roa File: 0ea2beb3-227e-3b15-a481-18704abb9d31.roa (raw, json) Hash identifier: ExKdLtAa7Y1FBsYScoWL0/VVHtfzmld7C/lH/6iJy/U= Subject key identifier: 90:C3:85:61:9C:E9:6F:43:BB:A6:67:82:9A:50:B0:AB:C9:BD:09:B0 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584B9E5B9577509C6486FFD88100 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/0ea2beb3-227e-3b15-a481-18704abb9d31.roa Signing time: Thu 23 Oct 2025 15:49:20 +0000 ROA not before: Thu 23 Oct 2025 15:49:20 +0000 ROA not after: Wed 21 Jan 2026 16:49:20 +0000 asID: 8075 IP address blocks: 170.176.133.0/24 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:5b:95:77:50:9c:64:86:ff:d8:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Oct 23 15:49:20 2025 GMT Not After : Jan 21 16:49:20 2026 GMT Subject: CN=e5d737a1-0871-48d2-b733-50b3f4361831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e0:70:25:05:19:0f:34:cb:22:1b:4c:b7:27: 7e:f8:b1:4d:2c:59:ed:8d:d1:cd:45:44:28:2f:3c: f9:cc:75:05:19:81:2a:d4:5d:03:35:67:e3:d6:5e: 3b:06:3c:98:b3:f7:d6:88:fa:bd:b7:e4:75:03:87: 1c:32:90:cf:87:09:e7:c6:a1:17:4e:52:ee:c8:13: ab:fe:76:30:66:a3:d7:b3:f9:3b:6f:a5:5d:55:f1: 18:49:8e:31:9b:5c:6c:7b:89:db:e2:b3:d7:b7:12: e4:14:d2:37:ee:d8:1c:29:a9:f9:b3:f5:1d:2c:78: 0a:b8:b9:94:ad:a6:0d:62:63:25:fa:71:b1:aa:8f: 68:80:9a:c0:13:71:54:5a:1a:cc:07:0a:14:89:2a: 28:53:5a:32:c6:89:8f:6e:95:59:3b:c1:d1:29:ac: 30:8e:fc:b3:ef:51:58:19:05:09:88:e8:98:78:2b: f0:d9:0d:76:5d:b0:b3:96:02:d3:9e:7f:12:8f:ec: 71:9d:31:02:0b:9e:f1:8d:31:a8:1b:5d:21:74:3c: ca:f4:19:64:01:85:b8:0f:59:42:95:02:ce:c7:5a: 87:7d:19:43:c5:34:b6:d4:6a:70:48:3b:1a:e1:8d: 9e:8a:39:46:95:f8:76:46:ac:bf:d7:c3:31:14:5a: 77:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C3:85:61:9C:E9:6F:43:BB:A6:67:82:9A:50:B0:AB:C9:BD:09:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/0ea2beb3-227e-3b15-a481-18704abb9d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b8:3a:cd:0b:16:0f:b5:3f:da:8c:06:ab:2d:dd:11:f8:fc: 5b:4f:90:aa:06:89:a7:67:a5:1b:d3:a8:07:43:ae:13:6c:be: eb:c3:93:47:84:6f:54:91:07:76:23:5d:d7:55:cd:b1:33:e7: 5b:13:16:5b:0a:a3:c3:2d:74:f2:b3:90:e7:5f:be:0e:ff:50: 68:97:90:8f:7c:a4:f6:f6:c2:fb:07:a8:fd:99:72:80:bd:aa: 45:8b:b8:41:ba:36:a4:2c:16:fa:45:86:7b:ef:3a:c8:77:05: f4:ba:95:21:2e:84:25:4e:06:c8:89:7a:7e:a7:6b:4b:82:ac: 8b:4e:bf:85:94:93:39:76:ca:95:b2:ed:a6:cd:73:b3:c7:37: a8:84:08:3b:a3:74:16:a3:f0:b7:90:cb:72:ae:2b:b4:e9:a8: b9:d4:da:c9:6e:44:19:22:64:c9:2b:b9:01:d0:64:52:e2:ec: 98:3e:f4:1c:b4:c7:66:3b:1c:00:78:b2:30:73:71:55:61:23: de:f8:6f:4e:17:d7:a9:04:62:43:3c:08:71:77:ac:e1:27:43: 35:6c:c0:06:9d:49:7e:68:77:d2:b2:d6:66:b6:30:09:eb:30: 40:f9:0b:ac:70:8a:ab:c6:a9:ea:1a:0f:ad:59:cc:68:06:ff: 33:4d:70:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueW5V3UJxkhv/YgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MTAyMzE1NDkyMFoXDTI2MDEyMTE2NDkyMFowLzEtMCsGA1UEAxMk ZTVkNzM3YTEtMDg3MS00OGQyLWI3MzMtNTBiM2Y0MzYxODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeBwJQUZDzTLIhtMtyd++LFNLFntjdHNRUQo Lzz5zHUFGYEq1F0DNWfj1l47BjyYs/fWiPq9t+R1A4ccMpDPhwnnxqEXTlLuyBOr /nYwZqPXs/k7b6VdVfEYSY4xm1xse4nb4rPXtxLkFNI37tgcKan5s/UdLHgKuLmU raYNYmMl+nGxqo9ogJrAE3FUWhrMBwoUiSooU1oyxomPbpVZO8HRKawwjvyz71FY GQUJiOiYeCvw2Q12XbCzlgLTnn8Sj+xxnTECC57xjTGoG10hdDzK9BlkAYW4D1lC lQLOx1qHfRlDxTS21GpwSDsa4Y2eijlGlfh2Rqy/18MxFFp3iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDDhWGc6W9Du6ZngppQsKvJvQmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvMGVhMmJlYjMtMjI3ZS0z YjE1LWE0ODEtMTg3MDRhYmI5ZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa4Os0LFg+1P9qMBqst3RH4/FtPkKoGiadnpRvTqAdDrhNsvuvDk0eE b1SRB3YjXddVzbEz51sTFlsKo8MtdPKzkOdfvg7/UGiXkI98pPb2wvsHqP2ZcoC9 qkWLuEG6NqQsFvpFhnvvOsh3BfS6lSEuhCVOBsiJen6na0uCrItOv4WUkzl2ypWy 7abNc7PHN6iECDujdBaj8LeQy3KuK7TpqLnU2sluRBkiZMkruQHQZFLi7Jg+9By0 x2Y7HAB4sjBzcVVhI974b04X16kEYkM8CHF3rOEnQzVswAadSX5od9Ky1ma2MAnr MED5C6xwiqvGqeoaD61ZzGgG/zNNcAk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:44:44 2025 by rpki-client