$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/1b0cde98-02ad-30c8-af97-ddf231515a69.roa File: 1b0cde98-02ad-30c8-af97-ddf231515a69.roa (raw, json) Hash identifier: ZuMVyP5oGypSPNaH4pMGE4lXT/bIybIQvX0kVVUUAR4= Subject key identifier: 42:8D:54:68:28:07:4E:E1:38:47:00:33:40:44:36:E6:94:A0:29:F6 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584BBFA5924481619DD76660F300 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/1b0cde98-02ad-30c8-af97-ddf231515a69.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 14618 IP address blocks: 170.176.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:92:44:81:61:9d:d7:66:60:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=43a73586-c5c4-4bd8-97cf-6456fce62863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:31:28:6b:ee:be:04:8a:33:3f:4a:cb:b7:d0: 08:31:ea:04:c3:6b:2d:3a:ad:3a:44:bc:18:f1:77: 03:40:a8:4d:58:19:18:3d:b9:1f:3c:d0:af:b3:f9: 45:ab:fd:0a:f4:08:0a:2d:29:31:67:b0:4e:b8:0b: af:62:ae:ab:a2:72:ea:4b:77:20:03:db:5f:12:83: e3:54:71:7e:e1:c0:18:f1:6c:5b:3e:3d:5e:34:16: ec:f8:c0:33:c2:08:84:a5:fd:3a:7a:82:0f:21:fd: 52:03:ac:de:9b:7d:55:dd:45:6d:97:3e:fd:7c:45: 96:df:3d:02:2b:5a:f4:81:25:b3:ea:01:97:1b:13: 98:00:e4:2d:84:05:51:0d:b1:b7:a2:fa:b7:ba:93: a6:5d:7e:0a:c0:57:80:34:54:8c:ad:a7:1d:be:8d: fe:3c:e3:97:8c:50:38:a0:75:40:44:dc:e3:09:6c: 72:b3:0c:56:02:56:d5:6a:ad:2c:32:08:8a:d6:3b: 02:11:91:3f:42:cf:fa:3d:b8:f1:71:88:29:4a:03: 74:a3:35:95:c6:98:a9:04:73:66:06:fe:b4:fb:4c: 45:f3:e1:73:1e:9f:8b:66:6b:71:b2:05:e8:8f:e5: 04:cc:8c:00:e5:f5:c9:8c:45:c9:97:1e:38:13:88: a6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8D:54:68:28:07:4E:E1:38:47:00:33:40:44:36:E6:94:A0:29:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/1b0cde98-02ad-30c8-af97-ddf231515a69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c7:45:97:c4:03:77:52:0b:16:a2:6d:9a:94:61:fb:3e:e1: 0d:5b:96:88:25:d9:70:7e:20:ad:d3:44:0c:5d:e9:21:d0:0c: ed:e8:ac:34:18:09:d2:ed:f5:e0:0f:a6:3f:31:cb:9b:37:01: 25:28:c4:40:eb:1d:37:61:4f:b6:07:f1:c9:ca:a7:ac:f5:e1: d9:1d:e9:25:43:f9:a7:f4:7b:ff:d4:d0:74:39:6b:55:43:4d: ed:00:68:f3:86:29:2b:f1:77:49:3b:69:b9:2b:a7:93:0a:13: e5:44:f2:00:87:71:d4:f2:df:cf:52:c5:91:48:78:cd:4c:21: 4b:b2:7e:af:b5:5d:9b:1a:c9:8c:c6:5f:33:44:26:a8:b9:a6: 26:d9:0b:8f:cc:db:36:44:89:b0:ce:bc:2f:ec:dc:6e:b4:b5: 4e:4f:19:c9:1d:c8:48:71:68:7b:fa:13:36:f7:e5:35:66:e8: a5:51:06:e0:4f:ba:c8:aa:42:51:e6:6a:66:55:8a:4e:66:14: 9e:d5:3e:2b:6d:86:26:b4:d5:0d:b1:a0:5f:b4:5c:0f:f7:19: 7e:8a:d3:9e:bb:ba:b4:f1:74:2e:83:69:a3:6a:37:5c:8d:9a: bb:35:b5:5d:0e:e7:f9:9a:0b:25:53:0f:68:4c:00:52:d0:24: d9:1e:27:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZJEgWGd12Zg8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NDNhNzM1ODYtYzVjNC00YmQ4LTk3Y2YtNjQ1NmZjZTYyODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DEoa+6+BIozP0rLt9AIMeoEw2stOq06RLwY 8XcDQKhNWBkYPbkfPNCvs/lFq/0K9AgKLSkxZ7BOuAuvYq6ronLqS3cgA9tfEoPj VHF+4cAY8WxbPj1eNBbs+MAzwgiEpf06eoIPIf1SA6zem31V3UVtlz79fEWW3z0C K1r0gSWz6gGXGxOYAOQthAVRDbG3ovq3upOmXX4KwFeANFSMracdvo3+POOXjFA4 oHVARNzjCWxyswxWAlbVaq0sMgiK1jsCEZE/Qs/6PbjxcYgpSgN0ozWVxpipBHNm Bv60+0xF8+FzHp+LZmtxsgXoj+UEzIwA5fXJjEXJlx44E4im3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKNVGgoB07hOEcAM0BENuaUoCn2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvMWIwY2RlOTgtMDJhZC0z MGM4LWFmOTctZGRmMjMxNTE1YTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbHRZfEA3dSCxaibZqUYfs+4Q1blogl2XB+IK3TRAxd6SHQDO3orDQY CdLt9eAPpj8xy5s3ASUoxEDrHTdhT7YH8cnKp6z14dkd6SVD+af0e//U0HQ5a1VD Te0AaPOGKSvxd0k7abkrp5MKE+VE8gCHcdTy389SxZFIeM1MIUuyfq+1XZsayYzG XzNEJqi5pibZC4/M2zZEibDOvC/s3G60tU5PGckdyEhxaHv6Ezb35TVm6KVRBuBP usiqQlHmamZVik5mFJ7VPitthia01Q2xoF+0XA/3GX6K0567urTxdC6DaaNqN1yN mrs1tV0O5/maCyVTD2hMAFLQJNkeJx4= -----END CERTIFICATE-----Generated at Wed Nov 5 00:11:16 2025 by rpki-client