$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa File: 2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa (raw, json) Hash identifier: dFlx0pPG2vRBwnOwRiITU012BdVN7cBJs2bP9mj/6SI= Subject key identifier: 61:01:57:D7:0D:EB:24:AE:0A:10:41:01:7B:46:42:03:4C:F4:CB:6E Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584B1AD17FE941FE3D8C9FB72DE0 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 170.200.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:7f:e9:41:fe:3d:8c:9f:b7:2d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=afd07bb8-8b32-42c9-9f8f-8bf325d0565c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:32:fe:15:fa:22:57:dc:eb:80:0c:2d:2e:9e: ec:8f:02:b6:a7:96:3c:94:45:fd:be:20:21:e6:98: ff:92:31:dd:71:81:ae:88:65:95:0e:1f:4b:3d:17: f3:4e:30:12:1e:2a:3d:6b:75:10:ad:61:6b:6d:13: 29:1f:3e:68:f6:8e:06:c8:b3:c0:52:88:1b:bd:c6: 71:83:b2:82:84:ae:5e:d0:7b:58:ef:9b:52:50:ae: ce:52:f5:66:d3:5c:9c:88:3f:4b:4d:6c:81:5f:e7: b5:c6:e7:ae:34:8b:e4:e1:3c:39:7e:c7:df:46:17: fd:7c:4e:c4:dd:b6:d9:7d:6a:22:2b:d2:e1:48:c7: dc:93:6c:a2:5b:4c:34:82:76:cb:1d:70:4a:ea:6a: a8:db:43:34:d7:a1:44:cf:f0:d5:ee:ca:9d:03:92: d3:73:13:f4:c4:a4:72:c4:b7:96:d4:05:4c:20:1a: c8:ee:11:ff:f7:7e:45:28:83:d3:3f:ea:22:3a:45: 04:61:6a:8c:ce:de:10:4f:db:58:9b:36:72:65:d4: cb:e1:8e:32:68:30:be:75:c7:a4:46:1a:df:3d:2b: a4:75:0e:a3:66:05:bf:3a:3c:1a:23:e8:2c:d0:ae: 27:1f:9d:72:df:94:13:bd:75:8b:a6:7e:e0:4d:e8: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:01:57:D7:0D:EB:24:AE:0A:10:41:01:7B:46:42:03:4C:F4:CB:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:37:7e:7c:7b:1f:cf:01:08:f8:06:df:c1:2f:51:e8:c4:b3: b0:91:2d:d1:84:8d:22:19:82:0a:9a:7e:6c:8c:ba:ac:17:0a: 69:55:4f:05:61:87:98:7c:50:25:27:f2:30:da:b6:53:ad:3d: f8:aa:e8:f0:3c:35:c6:51:e8:e4:e1:e2:d1:84:d9:f4:d1:20: 8f:26:0a:28:3b:36:6f:44:e9:67:f6:44:fa:f7:76:57:ab:3a: b2:f9:5f:ce:0e:7d:64:3d:f1:66:e3:37:20:65:d0:0b:59:98: 38:d0:9d:ba:70:13:21:7f:d8:e5:4e:9a:28:19:35:5b:34:ef: ae:fc:56:12:b2:6e:cd:88:7d:ad:e6:be:68:93:f3:01:56:6c: ed:34:76:0d:5d:20:75:53:8f:12:9d:7b:74:5d:a0:a5:53:8d: e6:9c:a0:f4:1b:b1:45:33:df:37:81:78:88:c4:f1:a6:48:f8: e0:1c:ab:7b:36:86:89:e1:a2:68:8a:3e:43:54:92:1e:74:2d: 29:0f:b7:c0:57:45:a7:9e:80:89:7c:21:ed:0b:ba:44:6f:60: a3:bc:56:89:e1:b9:bc:98:3d:4f:24:77:cf:13:2c:66:80:4d: 50:11:d7:26:ad:80:01:ec:16:d4:1b:6e:d9:4f:dc:22:76:7d: 86:38:40:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0X/pQf49jJ+3LeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YWZkMDdiYjgtOGIzMi00MmM5LTlmOGYtOGJmMzI1ZDA1NjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jL+FfoiV9zrgAwtLp7sjwK2p5Y8lEX9viAh 5pj/kjHdcYGuiGWVDh9LPRfzTjASHio9a3UQrWFrbRMpHz5o9o4GyLPAUogbvcZx g7KChK5e0HtY75tSUK7OUvVm01yciD9LTWyBX+e1xueuNIvk4Tw5fsffRhf9fE7E 3bbZfWoiK9LhSMfck2yiW0w0gnbLHXBK6mqo20M016FEz/DV7sqdA5LTcxP0xKRy xLeW1AVMIBrI7hH/935FKIPTP+oiOkUEYWqMzt4QT9tYmzZyZdTL4Y4yaDC+dcek RhrfPSukdQ6jZgW/OjwaI+gs0K4nH51y35QTvXWLpn7gTehOvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEBV9cN6ySuChBBAXtGQgNM9MtuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvMjAwNWQ1OGEtOGI1OC0z NWEyLWJiZmItZGRhM2UwMmU0NDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsj3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQ3fnx7H88BCPgG38EvUejEs7CRLdGEjSIZggqafmyMuqwXCmlVTwVh h5h8UCUn8jDatlOtPfiq6PA8NcZR6OTh4tGE2fTRII8mCig7Nm9E6Wf2RPr3dler OrL5X84OfWQ98WbjNyBl0AtZmDjQnbpwEyF/2OVOmigZNVs07678VhKybs2Ifa3m vmiT8wFWbO00dg1dIHVTjxKde3RdoKVTjeacoPQbsUUz3zeBeIjE8aZI+OAcq3s2 honhomiKPkNUkh50LSkPt8BXRaeegIl8Ie0LukRvYKO8VonhubyYPU8kd88TLGaA TVAR1yatgAHsFtQbbtlP3CJ2fYY4QGg= -----END CERTIFICATE-----Generated at Fri Oct 10 21:30:08 2025 by rpki-client