$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38882b4b-5327-396f-8a55-5705a5084bba.roa File: 38882b4b-5327-396f-8a55-5705a5084bba.roa (raw, json) Hash identifier: 8eP1d3z5ginTC+vSRaU2cSmldf22tIYKe/3M38MsVsA= Subject key identifier: 6D:5B:29:F4:62:4B:85:10:11:47:63:58:08:0F:1A:78:E3:29:E8:1F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B5E910498CD09DB0CC26B3140 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38882b4b-5327-396f-8a55-5705a5084bba.roa Signing time: Tue 30 Sep 2025 19:25:53 +0000 ROA not before: Tue 30 Sep 2025 19:25:53 +0000 ROA not after: Mon 29 Dec 2025 20:25:53 +0000 asID: 401152 IP address blocks: 170.62.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:91:04:98:cd:09:db:0c:c2:6b:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 30 19:25:53 2025 GMT Not After : Dec 29 20:25:53 2025 GMT Subject: CN=1520902a-1808-44ad-aec2-cddc44add884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:4a:01:f9:2c:52:66:d7:42:f6:37:b6:37: 00:be:4f:00:fe:09:5f:a8:ee:cf:d3:bc:3d:5e:a6: 37:07:a5:89:bc:23:b5:e8:9f:23:b2:6c:99:22:f0: 0c:c5:37:c7:ad:d7:57:96:c0:41:94:25:7d:59:ee: 59:ca:73:07:97:8d:5a:90:78:ae:8b:07:6e:fc:0b: 3c:7a:76:d5:ec:03:02:d1:a7:60:cf:f5:14:4f:60: eb:01:1a:ac:b1:80:3e:a5:5e:11:24:e5:f2:bb:cf: 7c:2c:b6:57:b4:79:3b:ea:11:67:17:f4:34:9f:d6: 1b:8f:95:4d:49:5c:e3:d9:ad:e2:4e:da:78:9c:86: 02:c3:d7:24:52:05:e3:a3:e6:d8:91:26:51:7b:76: 4e:a8:85:08:e1:46:49:bd:3f:eb:38:54:ea:50:b0: 64:26:bb:70:e6:ad:7f:2f:80:f4:16:97:dd:56:08: dd:2c:2a:d9:32:8f:35:30:4e:b7:55:1a:6b:1b:6f: 43:35:96:c3:8f:2b:0e:a3:07:b4:39:ce:b4:72:8b: 3b:26:30:80:8a:d2:ba:63:95:63:d7:c9:05:38:67: 02:fe:c0:4f:df:59:3b:d5:50:8e:b0:63:a0:f4:d5: 6f:bf:8e:4e:a9:0d:f1:fd:ff:e5:38:a6:fc:c6:42: 7e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5B:29:F4:62:4B:85:10:11:47:63:58:08:0F:1A:78:E3:29:E8:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38882b4b-5327-396f-8a55-5705a5084bba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 170.62.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:76:61:14:00:b5:d5:25:68:4a:7a:27:bf:94:5a:2b:69:c5: a3:47:ab:e8:95:be:73:80:07:db:67:50:8d:da:42:f8:8e:c4: c9:ca:1d:05:81:f8:34:6d:67:df:a4:4c:d0:c4:1f:99:b9:86: be:26:07:95:f1:3a:5a:0a:e3:4e:98:28:5f:7c:20:74:92:65: e9:53:c8:e6:b1:4e:e5:d7:79:05:6d:0d:ba:16:1d:aa:22:48: bf:34:fe:03:2c:bb:bc:22:86:12:72:4d:4b:d6:08:42:47:25: 11:bd:38:ca:a0:c7:ba:1d:d5:59:e2:a9:1e:6c:c1:bc:c1:eb: 12:e2:c1:71:d3:62:c2:db:5c:8a:fb:28:2f:8d:a4:28:25:81: a2:32:1f:d0:23:d2:3e:00:22:f5:a2:79:13:27:0e:42:18:e0: 08:81:2c:ed:df:45:6e:34:37:b7:cb:65:a1:07:db:e3:be:2b: 41:1e:8f:76:2d:1a:53:74:51:99:7c:78:4e:fc:ea:b3:e0:bc: 0e:25:54:8a:69:24:2d:53:5c:1e:d7:2d:41:25:2d:b7:f1:f5: e8:45:9a:14:c2:bc:0a:0e:91:c7:91:61:d0:c6:c5:ff:47:26: 59:4e:ca:55:f2:67:b7:ae:08:1f:66:e7:59:13:63:d9:4d:be: 72:af:95:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtekQSYzQnbDMJrMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkzMDE5MjU1M1oXDTI1MTIyOTIwMjU1M1owLzEtMCsGA1UEAxMk MTUyMDkwMmEtMTgwOC00NGFkLWFlYzItY2RkYzQ0YWRkODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvVKAfksUmbXQvY3tjcAvk8A/glfqO7P07w9 XqY3B6WJvCO16J8jsmyZIvAMxTfHrddXlsBBlCV9We5ZynMHl41akHiuiwdu/As8 enbV7AMC0adgz/UUT2DrARqssYA+pV4RJOXyu898LLZXtHk76hFnF/Q0n9Ybj5VN SVzj2a3iTtp4nIYCw9ckUgXjo+bYkSZRe3ZOqIUI4UZJvT/rOFTqULBkJrtw5q1/ L4D0FpfdVgjdLCrZMo81ME63VRprG29DNZbDjysOowe0Oc60cos7JjCAitK6Y5Vj 18kFOGcC/sBP31k71VCOsGOg9NVvv45OqQ3x/f/lOKb8xkJ+kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1bKfRiS4UQEUdjWAgPGnjjKegfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzg4ODJiNGItNTMyNy0z OTZmLThhNTUtNTcwNWE1MDg0YmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqj6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG12YRQAtdUlaEp6J7+UWitpxaNHq+iVvnOAB9tnUI3aQviOxMnKHQWB +DRtZ9+kTNDEH5m5hr4mB5XxOloK406YKF98IHSSZelTyOaxTuXXeQVtDboWHaoi SL80/gMsu7wihhJyTUvWCEJHJRG9OMqgx7od1VniqR5swbzB6xLiwXHTYsLbXIr7 KC+NpCglgaIyH9Aj0j4AIvWieRMnDkIY4AiBLO3fRW40N7fLZaEH2+O+K0Eej3Yt GlN0UZl8eE786rPgvA4lVIppJC1TXB7XLUElLbfx9ehFmhTCvAoOkceRYdDGxf9H JllOylXyZ7euCB9m51kTY9lNvnKvlSA= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:03 2025 by rpki-client