$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/caa83562-c0d8-38d3-a4b4-baaf0b63702c.roa File: caa83562-c0d8-38d3-a4b4-baaf0b63702c.roa (raw, json) Hash identifier: cXhQACQr9OLSgt8XreloMk1XA/yZYjtI3IKdL/oNJKQ= Subject key identifier: 0F:4D:4F:31:EE:C7:9C:ED:EB:4B:FB:20:18:4C:28:2F:90:88:05:D4 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584B110C003C9F51D3C7135CF480 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/caa83562-c0d8-38d3-a4b4-baaf0b63702c.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 170.176.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:00:3c:9f:51:d3:c7:13:5c:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=dab1d93a-94cc-4d1e-ab51-ae1e3df699d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:52:24:58:13:c7:44:97:3b:f1:d9:a4:43: 73:f6:fb:8b:e5:f8:27:0b:a0:2f:3f:00:a9:19:ae: 76:93:e8:d3:9c:5b:5c:d0:c0:56:3a:37:e9:e5:44: de:72:56:a5:b8:46:a1:3b:99:a7:da:80:26:8f:a5: 6e:ab:6b:a8:68:6b:0f:7b:11:4b:2b:0c:47:4b:bd: 77:76:97:42:46:26:47:8a:04:52:86:2e:be:d6:89: 72:b7:77:ca:d1:63:f8:1f:28:bf:1a:51:d0:87:cc: e8:c1:d7:ed:a4:57:3b:aa:b3:a7:60:e2:b2:38:65: 72:54:e0:dc:3f:00:8f:9a:8b:1c:0c:ee:c5:53:35: 00:80:44:93:6a:76:30:1e:31:8e:65:c7:7e:d2:96: dd:f6:d3:21:3b:ab:79:3d:a7:da:0b:ed:f6:64:d4: 42:9f:4a:ec:e2:2b:44:91:84:97:40:1b:8b:6a:83: e6:c4:15:36:b2:41:fc:ae:24:7d:c5:2b:87:7a:12: ed:02:48:a1:02:f7:58:20:72:06:73:04:17:84:d4: 37:a1:c1:22:28:1e:3a:94:2a:e0:10:72:2e:90:97: f1:64:f9:08:e6:75:93:b5:7a:f4:67:ea:ba:da:56: 08:d2:1e:8f:d4:e0:48:70:98:59:a5:e3:12:56:b5: 0b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4D:4F:31:EE:C7:9C:ED:EB:4B:FB:20:18:4C:28:2F:90:88:05:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/caa83562-c0d8-38d3-a4b4-baaf0b63702c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:50:8b:d2:10:86:96:40:9c:3a:5c:b6:46:dd:de:28:eb:da: ca:61:08:f5:51:96:97:a4:87:30:e5:a5:63:7a:82:b2:ab:22: 48:f7:8b:0f:f1:b3:fd:1c:a3:b6:57:34:e2:b3:e7:42:dc:90: b3:a3:d6:2e:b7:c7:8e:ee:c8:34:a0:83:00:ec:aa:3b:fd:93: 6a:5e:ba:77:58:37:f5:c4:bf:3a:2e:ce:77:eb:b3:7e:05:76: 9c:41:9f:47:84:d9:cf:52:b6:00:cf:e6:a6:c7:53:33:a6:2f: ca:48:aa:7a:1c:26:eb:03:9c:1e:ad:00:4a:b5:8b:ea:c8:19: 14:45:a1:a0:e8:d2:4a:86:4b:d4:0e:ee:44:c4:3c:2a:59:5c: c2:e3:da:86:c5:99:ee:d1:45:88:ac:08:1c:bc:2e:0d:f0:ea: 17:75:1f:7f:34:38:a9:43:3d:dd:4f:48:cc:f9:05:c8:9d:27: c9:ef:ea:c6:1e:d1:86:1b:26:f6:be:e6:91:01:3b:c8:7c:3f: a5:61:80:87:05:5b:48:11:31:23:1a:69:c6:84:03:f3:55:57: 60:81:28:af:da:ec:03:dd:00:89:06:54:fb:87:af:b3:13:55: ae:05:e9:98:c9:c5:8d:65:8a:3f:c3:f2:a9:17:30:86:0a:e6: 94:71:6a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDAA8n1HTxxNc9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGFiMWQ5M2EtOTRjYy00ZDFlLWFiNTEtYWUxZTNkZjY5OWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk1SJFgTx0SXO/HZpENz9vuL5fgnC6AvPwCp Ga52k+jTnFtc0MBWOjfp5UTeclaluEahO5mn2oAmj6Vuq2uoaGsPexFLKwxHS713 dpdCRiZHigRShi6+1olyt3fK0WP4Hyi/GlHQh8zowdftpFc7qrOnYOKyOGVyVODc PwCPmoscDO7FUzUAgESTanYwHjGOZcd+0pbd9tMhO6t5PafaC+32ZNRCn0rs4itE kYSXQBuLaoPmxBU2skH8riR9xSuHehLtAkihAvdYIHIGcwQXhNQ3ocEiKB46lCrg EHIukJfxZPkI5nWTtXr0Z+q62lYI0h6P1OBIcJhZpeMSVrULtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9NTzHux5zt60v7IBhMKC+QiAXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvY2FhODM1NjItYzBkOC0z OGQzLWE0YjQtYmFhZjBiNjM3MDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBQi9IQhpZAnDpctkbd3ijr2sphCPVRlpekhzDlpWN6grKrIkj3iw/x s/0co7ZXNOKz50LckLOj1i63x47uyDSggwDsqjv9k2peundYN/XEvzouznfrs34F dpxBn0eE2c9StgDP5qbHUzOmL8pIqnocJusDnB6tAEq1i+rIGRRFoaDo0kqGS9QO 7kTEPCpZXMLj2obFme7RRYisCBy8Lg3w6hd1H380OKlDPd1PSMz5BcidJ8nv6sYe 0YYbJva+5pEBO8h8P6VhgIcFW0gRMSMaacaEA/NVV2CBKK/a7APdAIkGVPuHr7MT Va4F6ZjJxY1lij/D8qkXMIYK5pRxatA= -----END CERTIFICATE-----Generated at Tue Nov 4 22:38:37 2025 by rpki-client