$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa File: 5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa (raw, json) Hash identifier: 1ml4aQivf+D3lein9+hIm0dEnRUzB9kbIOkdfLjfMhM= Subject key identifier: E2:0C:63:3F:0F:3F:BA:D9:EE:BD:AB:BB:03:8A:74:D5:FB:A0:CF:84 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584AADF10E1F2D3D061E80239800 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 170.176.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:0e:1f:2d:3d:06:1e:80:23:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=03d237e7-9ffe-47c8-b3d7-3dce7a3b410a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2c:5d:d0:a0:86:ac:47:5f:99:d0:82:2b:09: c3:e6:3d:39:39:ce:99:06:3c:51:fe:79:e5:9d:58: 76:f9:78:89:64:c9:6d:b0:f7:2f:ed:fd:20:0b:0f: 53:38:c8:6c:7e:13:df:b0:0c:a9:34:4c:bf:39:40: ba:27:32:eb:cd:e1:43:dc:90:22:89:9c:54:80:ac: 4c:b9:af:0c:17:98:f5:fa:18:f8:f1:37:b7:0d:1d: 2a:02:29:9c:98:33:d3:3a:df:6f:bb:f9:e6:65:d3: 32:f0:26:57:27:cd:f5:87:3f:3a:63:85:f8:f3:95: 00:05:36:a2:d7:a0:c8:00:59:ac:9a:df:50:33:f4: 94:db:b4:d1:ca:0e:51:27:84:5c:2f:b4:88:68:c0: c1:14:14:d1:9d:4a:60:ce:63:d7:b4:a4:2a:fa:d5: 59:38:a2:3f:01:88:af:22:a4:be:c8:36:ac:07:5b: 1d:5c:c5:6b:c7:a9:02:0c:4a:63:fd:58:fd:f0:53: 64:9b:24:2d:af:fa:8e:e4:09:39:6b:cd:e8:f7:ca: e6:22:af:32:1a:69:2e:83:5b:b0:89:f3:78:94:c4: ff:1f:e8:4b:b1:d7:39:51:63:0f:c5:8f:cb:5e:9c: c4:00:16:e9:34:dc:c6:38:74:7e:97:79:54:e2:9b: fc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0C:63:3F:0F:3F:BA:D9:EE:BD:AB:BB:03:8A:74:D5:FB:A0:CF:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:17:97:8b:93:f1:0b:b9:7b:50:85:5a:0c:c9:51:ef:4b:30: c7:26:af:55:3c:d5:72:d4:a7:e7:b2:5d:d9:e2:d3:96:00:2e: fa:7f:87:60:37:06:65:3c:90:10:1e:a8:7b:a3:49:21:49:e4: 2c:31:ea:0f:f4:54:2e:9a:0c:d9:13:fe:29:90:42:3f:5c:b3: 01:28:f9:be:02:7f:47:b9:b2:78:75:58:86:e8:c7:9d:06:ac: d2:29:00:8d:47:9e:fe:bb:e2:38:87:7d:34:c2:ea:8a:d5:19: 68:65:48:1f:61:d8:4f:ef:b9:b6:c6:9c:ec:db:d9:8a:6a:e1: dc:31:0e:ab:23:57:a6:5d:bd:58:94:0c:1b:82:d5:68:fa:07: c5:99:74:ce:a6:ec:9f:ea:06:b8:2e:0f:85:77:01:8a:81:df: 74:73:c3:65:81:e0:b5:f9:7d:ff:94:cc:8d:96:c3:40:ff:da: 6c:73:c3:ec:b6:a4:20:a7:df:cb:ad:69:99:14:a4:87:36:92: 79:30:7a:bb:f9:b2:fb:2e:b8:3b:e9:9c:36:bb:1b:4a:5b:4e: 3e:3d:3c:58:f1:42:d9:a4:72:55:ea:77:27:aa:3d:ad:ab:4f: dd:73:7d:9a:ae:6d:3f:fd:00:51:33:89:a3:14:85:38:4c:20: 4d:3f:81:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8Q4fLT0GHoAjmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MDNkMjM3ZTctOWZmZS00N2M4LWIzZDctM2RjZTdhM2I0MTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhixd0KCGrEdfmdCCKwnD5j05Oc6ZBjxR/nnl nVh2+XiJZMltsPcv7f0gCw9TOMhsfhPfsAypNEy/OUC6JzLrzeFD3JAiiZxUgKxM ua8MF5j1+hj48Te3DR0qAimcmDPTOt9vu/nmZdMy8CZXJ831hz86Y4X485UABTai 16DIAFmsmt9QM/SU27TRyg5RJ4RcL7SIaMDBFBTRnUpgzmPXtKQq+tVZOKI/AYiv IqS+yDasB1sdXMVrx6kCDEpj/Vj98FNkmyQtr/qO5Ak5a83o98rmIq8yGmkug1uw ifN4lMT/H+hLsdc5UWMPxY/LXpzEABbpNNzGOHR+l3lU4pv82QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIMYz8PP7rZ7r2ruwOKdNX7oM+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvNTUzN2E1ZDgtYjcwMS0z ZjdhLTg0NmYtYTNhYmM0NzA5ZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4Xl4uT8Qu5e1CFWgzJUe9LMMcmr1U81XLUp+eyXdni05YALvp/h2A3 BmU8kBAeqHujSSFJ5Cwx6g/0VC6aDNkT/imQQj9cswEo+b4Cf0e5snh1WIbox50G rNIpAI1Hnv674jiHfTTC6orVGWhlSB9h2E/vubbGnOzb2Ypq4dwxDqsjV6ZdvViU DBuC1Wj6B8WZdM6m7J/qBrguD4V3AYqB33Rzw2WB4LX5ff+UzI2Ww0D/2mxzw+y2 pCCn38utaZkUpIc2knkwerv5svsuuDvpnDa7G0pbTj49PFjxQtmkclXqdyeqPa2r T91zfZqubT/9AFEziaMUhThMIE0/gWE= -----END CERTIFICATE-----Generated at Mon Aug 4 07:45:25 2025 by rpki-client