$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/beb65aaa-554e-3dad-9bca-51bf7fc1ee35.roa File: beb65aaa-554e-3dad-9bca-51bf7fc1ee35.roa (raw, json) Hash identifier: 0ANGa9gXrgltAH8TN1mJKvtWw6z7dIxFMA8QlFmnnVc= Subject key identifier: 04:8F:0E:EA:98:8B:A4:FD:2D:46:36:AA:B3:1F:E5:FA:E6:DB:27:5D Certificate issuer: /CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc Certificate serial: 010D0C9F4328584B13D6B771DB265811E3358BC0 Authority key identifier: EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/beb65aaa-554e-3dad-9bca-51bf7fc1ee35.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 174 IP address blocks: 170.75.160.0/20 maxlen: 20 172.81.176.0/21 maxlen: 21 2602:ffb6::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:b7:71:db:26:58:11:e3:35:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=4cfe92a5-4d93-4dc3-af33-4771cc492b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:75:e5:b2:4d:5e:67:fd:79:72:8c:e9:b1: ac:de:33:b9:72:6c:18:3c:04:2b:be:1b:55:38:b0: 4a:9a:2b:b7:9e:ef:8c:6d:51:f8:77:b4:4f:b5:5f: 73:85:55:6e:61:7a:95:ce:c6:18:70:b6:3f:dc:c3: c6:0f:aa:e8:97:86:1d:6e:7a:8c:fc:d5:ee:29:80: a7:6c:8c:bf:2b:01:11:d9:5a:f5:fc:e7:c9:a6:f5: 74:88:8a:44:0f:a6:64:37:e3:7b:93:d6:56:60:3a: 8e:e6:a5:f3:53:91:10:14:f4:4f:c3:15:6c:cc:b8: a7:2c:7e:95:82:6e:d1:1d:23:62:7d:14:e4:5c:fe: 4b:82:c7:52:98:65:86:51:4c:3c:65:cc:94:0d:dd: 92:e3:12:75:52:40:09:52:7c:45:23:c9:33:91:8e: 7f:e4:17:d1:30:d0:1f:54:3f:b1:dc:3f:51:ba:54: 8d:c8:48:75:cd:b4:03:86:8d:bd:d2:76:43:09:d6: d9:b9:8d:6c:f3:0b:73:c4:28:28:88:88:41:9f:49: 63:88:5f:98:97:93:64:05:cb:23:31:2e:8c:83:a0: be:ce:37:ab:ab:e1:ec:1a:5c:b2:64:d5:03:78:78: a9:ea:9f:7a:eb:97:9e:f0:14:c9:b3:5b:f2:1a:01: 97:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8F:0E:EA:98:8B:A4:FD:2D:46:36:AA:B3:1F:E5:FA:E6:DB:27:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/beb65aaa-554e-3dad-9bca-51bf7fc1ee35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl X509v3 Authority Key Identifier: keyid:EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer sbgp-ipAddrBlock: critical IPv4: 170.75.160.0/20 172.81.176.0/21 IPv6: 2602:ffb6::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ba:b6:dc:f6:a0:6a:3c:49:d8:f5:37:35:ca:8d:22:4e:9a: 12:4f:80:a3:9d:8e:95:43:2a:58:c7:f6:b0:ef:92:99:37:dd: de:f3:d8:66:5b:09:e7:e9:13:40:15:03:45:c2:82:62:a1:62: 8e:37:21:2e:9a:ad:21:83:4c:6e:18:dd:2e:2b:a9:52:3d:08: d2:6c:fe:38:99:bb:e4:48:5e:2e:46:e1:a3:0d:95:3d:bb:f4: d7:03:ad:7e:54:ef:b6:3f:3d:73:67:14:0b:ce:c9:82:82:f0: a3:62:3b:7a:a7:a5:59:a5:e4:77:07:7c:ef:c9:83:0b:06:ee: 55:a9:a6:d4:da:15:97:59:87:79:17:df:af:b0:21:4c:0f:5d: 6c:b1:44:98:fe:b0:a7:65:f2:e3:fc:f8:2f:90:6b:1e:b0:e6: 92:3b:14:ef:e4:3b:66:82:48:de:54:87:4e:b1:d1:3b:a9:d0: a9:0c:b7:1f:22:e7:dc:34:ac:ad:ab:18:1e:7f:a0:8a:57:a2: a9:4d:9a:28:2a:cf:1f:e5:46:93:eb:61:3c:c1:81:e1:54:13: dd:8b:35:04:70:f6:e8:d6:da:e6:49:a5:fd:ff:85:0e:e0:b2: b6:30:da:0b:e8:ae:d4:8c:ae:52:5e:ba:7f:ea:0a:5f:15:09: 4f:65:40:4e -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEsT1rdx2yZYEeM1i8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZhNjA0YzItYmQ5Yy00ZDBlLWJmYjAtZGFhYzhjZDFj M2ZjMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NGNmZTkyYTUtNGQ5My00ZGMzLWFmMzMtNDc3MWNjNDkyYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI515bJNXmf9eXKM6bGs3jO5cmwYPAQrvhtV OLBKmiu3nu+MbVH4d7RPtV9zhVVuYXqVzsYYcLY/3MPGD6rol4YdbnqM/NXuKYCn bIy/KwER2Vr1/OfJpvV0iIpED6ZkN+N7k9ZWYDqO5qXzU5EQFPRPwxVszLinLH6V gm7RHSNifRTkXP5LgsdSmGWGUUw8ZcyUDd2S4xJ1UkAJUnxFI8kzkY5/5BfRMNAf VD+x3D9RulSNyEh1zbQDho290nZDCdbZuY1s8wtzxCgoiIhBn0ljiF+Yl5NkBcsj MS6Mg6C+zjerq+HsGlyyZNUDeHip6p9665ee8BTJs1vyGgGXfwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFASPDuqYi6T9LUY2qrMf5frm2yddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZmE2 MDRjMi1iZDljLTRkMGUtYmZiMC1kYWFjOGNkMWMzZmMvYmViNjVhYWEtNTU0ZS0z ZGFkLTliY2EtNTFiZjdmYzFlZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWZhNjA0YzItYmQ5Yy00ZDBlLWJm YjAtZGFhYzhjZDFjM2ZjLzFmYTYwNGMyLWJkOWMtNGQwZS1iZmIwLWRhYWM4Y2Qx YzNmYy5jcmwwHwYDVR0jBBgwFoAU6uuVQNAUCiOlEBgO4kiYg3XNvEgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZmE2MDRjMi1iZDljLTRkMGUtYmZiMC1kYWFj OGNkMWMzZmMuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQEqkugAwQD rFGwMA4EAgACMAgDBgQmAv+2ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdurbc9qBqPEnY9Tc1yo0iTpoS T4CjnY6VQypYx/aw75KZN93e89hmWwnn6RNAFQNFwoJioWKONyEumq0hg0xuGN0u K6lSPQjSbP44mbvkSF4uRuGjDZU9u/TXA61+VO+2Pz1zZxQLzsmCgvCjYjt6p6VZ peR3B3zvyYMLBu5VqabU2hWXWYd5F9+vsCFMD11ssUSY/rCnZfLj/PgvkGsesOaS OxTv5DtmgkjeVIdOsdE7qdCpDLcfIufcNKytqxgef6CKV6KpTZooKs8f5UaT62E8 wYHhVBPdizUEcPbo1trmSaX9/4UO4LK2MNoL6K7UjK5SXrp/6gpfFQlPZUBO -----END CERTIFICATE-----Generated at Mon Oct 13 22:09:10 2025 by rpki-client