$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/50373ebd-ae92-37af-8eb4-a641a874f883.roa File: 50373ebd-ae92-37af-8eb4-a641a874f883.roa (raw, json) Hash identifier: Mj+bMnGuT00h4yfLfrFfOMm2FSnUY3OAmMupA4vMW78= Subject key identifier: 4B:7A:95:A2:8F:CA:36:D0:82:26:B7:E1:A3:73:2C:61:24:9B:58:DA Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584AADF10E2B9ABD6256DCB73960 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/50373ebd-ae92-37af-8eb4-a641a874f883.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 170.176.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:0e:2b:9a:bd:62:56:dc:b7:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=ec74e7f1-3f13-44c1-806b-ae88f86c6e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:87:e6:3c:ad:f3:cf:b4:f0:ff:56:63:9d:4c: 70:c9:99:46:58:18:2d:c5:f5:de:db:50:1e:a7:4b: 67:22:3c:37:7c:46:9f:dc:84:09:18:aa:c1:a3:21: fa:b1:78:75:1b:0a:59:eb:a4:14:af:ca:6f:dd:c9: 1d:45:53:d6:67:56:77:bb:5b:f4:c7:62:55:fd:ab: 40:a9:f7:f7:aa:43:e6:d3:8a:4a:b4:38:10:21:bb: 37:b9:f9:65:d8:6d:fe:70:14:02:23:fb:00:12:73: 34:9d:47:e6:d8:b3:68:f1:c3:3c:75:ac:6b:2a:61: f6:12:dd:f4:61:83:dd:ed:06:ac:bf:cb:9f:ab:85: cd:36:68:1c:71:8f:c6:de:2b:f2:ca:46:b3:4a:47: 80:ae:cc:16:d4:a6:5f:09:f2:65:2c:e7:d9:45:78: 53:53:77:7a:00:56:8a:4e:4a:fc:85:6c:e0:1f:1f: 63:c2:47:44:3a:2e:98:58:4e:92:f5:2c:38:83:85: 0c:0f:10:70:25:b3:9a:24:21:53:41:57:6a:aa:c7: 24:e0:a3:99:4a:bd:dd:c3:23:46:6d:5a:cf:9e:2b: 15:72:fc:5c:56:e2:ea:68:bf:da:51:e3:a1:42:d0: eb:9a:5f:65:96:c4:a4:92:d3:b7:09:ff:5e:87:f4: 46:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7A:95:A2:8F:CA:36:D0:82:26:B7:E1:A3:73:2C:61:24:9B:58:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/50373ebd-ae92-37af-8eb4-a641a874f883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:84:f7:a8:be:7d:91:8a:63:64:f9:9b:36:e3:ee:f7:9f:68: ff:e5:7c:a5:a9:09:6a:7d:8e:4b:23:9b:8f:13:0d:d8:9d:2c: 69:c3:18:99:46:91:86:ba:46:7b:2b:43:63:36:a1:ee:55:db: 40:c4:63:90:2c:ce:0a:38:f9:6b:f8:e4:75:19:c3:40:4e:62: b5:03:f8:60:2a:d1:3c:a8:a6:69:c7:b8:3c:47:e9:a5:7b:14: b4:2d:52:95:57:2f:7e:2b:b8:7b:a3:b6:d5:ab:fd:14:90:6b: 0f:b8:5e:ec:06:61:04:f5:2e:ed:38:d6:f5:74:42:4b:28:d0: 3e:f9:04:b5:97:24:46:0f:21:ca:e3:24:23:ee:e5:39:eb:90: ae:20:a3:3b:47:e4:28:76:25:12:02:b4:43:3e:fb:76:80:92: 42:dc:44:9a:7a:21:87:c7:f2:e8:ae:43:7c:91:e3:ec:cd:3d: 78:13:3d:e3:1b:3e:5a:79:8d:e2:47:14:76:b8:87:18:d6:3a: 6a:6a:59:e0:cb:ce:9a:25:10:84:df:10:cc:54:b5:be:74:bb: bd:b3:35:1b:6d:c2:8a:02:31:54:7b:d4:1f:38:bb:8e:e9:4e: 06:41:81:ec:19:06:9d:62:3a:9b:d0:bf:c8:e7:f6:39:5c:9e: 32:b0:ca:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8Q4rmr1iVty3OWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZWM3NGU3ZjEtM2YxMy00NGMxLTgwNmItYWU4OGY4NmM2ZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ofmPK3zz7Tw/1ZjnUxwyZlGWBgtxfXe21Ae p0tnIjw3fEaf3IQJGKrBoyH6sXh1GwpZ66QUr8pv3ckdRVPWZ1Z3u1v0x2JV/atA qff3qkPm04pKtDgQIbs3ufll2G3+cBQCI/sAEnM0nUfm2LNo8cM8daxrKmH2Et30 YYPd7Qasv8ufq4XNNmgccY/G3ivyykazSkeArswW1KZfCfJlLOfZRXhTU3d6AFaK Tkr8hWzgHx9jwkdEOi6YWE6S9Sw4g4UMDxBwJbOaJCFTQVdqqsck4KOZSr3dwyNG bVrPnisVcvxcVuLqaL/aUeOhQtDrml9llsSkktO3Cf9eh/RGIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEt6laKPyjbQgia34aNzLGEkm1jaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvNTAzNzNlYmQtYWU5Mi0z N2FmLThlYjQtYTY0MWE4NzRmODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqE96i+fZGKY2T5mzbj7vefaP/lfKWpCWp9jksjm48TDdidLGnDGJlG kYa6RnsrQ2M2oe5V20DEY5Aszgo4+Wv45HUZw0BOYrUD+GAq0TyopmnHuDxH6aV7 FLQtUpVXL34ruHujttWr/RSQaw+4XuwGYQT1Lu041vV0Qkso0D75BLWXJEYPIcrj JCPu5TnrkK4goztH5Ch2JRICtEM++3aAkkLcRJp6IYfH8uiuQ3yR4+zNPXgTPeMb Plp5jeJHFHa4hxjWOmpqWeDLzpolEITfEMxUtb50u72zNRttwooCMVR71B84u47p TgZBgewZBp1iOpvQv8jn9jlcnjKwyhY= -----END CERTIFICATE-----Generated at Mon Aug 4 07:55:36 2025 by rpki-client