$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/7d3a6f69-a7a5-360a-9bae-570514940a1f.roa File: 7d3a6f69-a7a5-360a-9bae-570514940a1f.roa (raw, json) Hash identifier: PCfcmp76pXtnvNBa8OiN25iBctd5hTxd0071oZDkXEE= Subject key identifier: 49:BB:81:81:E1:95:07:D6:90:AF:F4:40:A0:47:22:E4:E0:7C:0F:3F Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584B1AD17FD645BECEE938474CF0 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/7d3a6f69-a7a5-360a-9bae-570514940a1f.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 170.200.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:7f:d6:45:be:ce:e9:38:47:4c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=7cb5b9b1-0c9a-4281-81c1-fc09489a78b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cd:8a:f2:c9:26:66:f9:a3:50:9a:c4:36:a1: 15:db:76:70:1a:28:23:37:bc:d7:1f:cc:eb:c9:e3: 91:59:00:da:dc:0c:a9:08:3d:b8:fc:2e:32:cf:10: 6e:de:f3:89:e7:cd:d4:5b:59:9c:c8:66:46:a8:11: 39:c8:5f:17:63:74:72:bb:d7:3c:75:40:80:71:24: 90:ba:0d:f7:fe:40:f5:dd:af:d8:c9:c7:dd:10:ab: 40:e0:40:42:b0:fb:9e:50:8f:52:01:ff:95:59:c0: 59:a6:b6:18:70:eb:34:77:ee:79:a1:51:b9:7d:e8: cb:07:82:b9:ce:08:47:05:3e:3c:9e:c4:1d:67:92: 6e:fd:0a:2b:72:d8:e7:95:17:da:c2:5c:32:38:69: 76:1a:6e:c7:a3:f9:2e:73:17:7a:eb:c7:b1:5a:67: c7:89:78:97:ce:7a:d8:d9:25:c9:63:88:4d:08:77: 9b:70:16:2c:92:d7:a3:80:2f:d2:bf:35:d4:18:e9: b1:df:c0:03:59:e4:c5:40:b2:ab:e3:c4:f6:4b:bd: 1a:c7:e8:ee:c9:c7:df:73:0b:4a:34:20:30:e3:db: d0:8c:02:26:dd:a7:4e:2b:95:3c:0d:a9:1a:a3:36: 67:e0:60:53:87:da:a0:db:03:08:8c:28:94:0f:ad: 77:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BB:81:81:E1:95:07:D6:90:AF:F4:40:A0:47:22:E4:E0:7C:0F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/7d3a6f69-a7a5-360a-9bae-570514940a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:20:36:15:0f:12:e4:f2:b5:99:3c:57:84:e9:68:ea:6b:10: e3:ed:0c:1c:c5:fa:ef:35:6e:b1:37:32:19:86:ae:f9:07:2d: dc:87:0b:6b:5e:7c:6d:cb:99:12:89:2e:35:00:66:c5:6f:52: 5a:97:e9:cf:d0:75:b6:c5:4e:53:94:87:72:0b:58:55:ab:51: ee:7c:50:a5:38:14:6c:b6:cf:48:fd:23:2c:c2:48:96:27:ba: 8e:10:67:32:ed:e6:99:2a:77:bf:7c:dd:c4:de:c4:c4:74:b8: 26:ab:b6:f6:2d:b5:4e:dd:b6:e1:ea:a0:7b:61:fc:07:20:84: 2c:93:f4:85:a2:f6:29:42:74:e6:d0:e0:32:42:e7:3b:44:8f: fa:e8:d3:3b:13:79:b0:9b:4f:89:89:53:b6:25:74:ce:08:b2: 49:e8:f7:30:c7:c2:b7:57:30:33:a8:cc:9c:62:e5:01:36:8a: a8:32:98:82:b4:39:a3:2b:e0:8a:16:b3:25:31:6a:12:15:0a: 12:f4:9c:fb:d2:e4:74:e5:83:21:46:3e:ab:30:e1:03:d5:d4: fb:73:fe:2b:97:aa:33:ca:69:c9:cf:4b:53:8d:cc:4d:bb:40: 67:9e:13:63:9b:c5:c6:9c:84:86:c8:75:03:38:7e:22:54:02: f6:a0:1c:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0X/WRb7O6ThHTPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk N2NiNWI5YjEtMGM5YS00MjgxLTgxYzEtZmMwOTQ4OWE3OGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM2K8skmZvmjUJrENqEV23ZwGigjN7zXH8zr yeORWQDa3AypCD24/C4yzxBu3vOJ583UW1mcyGZGqBE5yF8XY3Ryu9c8dUCAcSSQ ug33/kD13a/YycfdEKtA4EBCsPueUI9SAf+VWcBZprYYcOs0d+55oVG5fejLB4K5 zghHBT48nsQdZ5Ju/QorctjnlRfawlwyOGl2Gm7Ho/kucxd668exWmfHiXiXznrY 2SXJY4hNCHebcBYsktejgC/SvzXUGOmx38ADWeTFQLKr48T2S70ax+juycffcwtK NCAw49vQjAIm3adOK5U8DakaozZn4GBTh9qg2wMIjCiUD613twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm7gYHhlQfWkK/0QKBHIuTgfA8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvN2QzYTZmNjktYTdhNS0z NjBhLTliYWUtNTcwNTE0OTQwYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsj3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4gNhUPEuTytZk8V4TpaOprEOPtDBzF+u81brE3MhmGrvkHLdyHC2te fG3LmRKJLjUAZsVvUlqX6c/QdbbFTlOUh3ILWFWrUe58UKU4FGy2z0j9IyzCSJYn uo4QZzLt5pkqd7983cTexMR0uCartvYttU7dtuHqoHth/AcghCyT9IWi9ilCdObQ 4DJC5ztEj/ro0zsTebCbT4mJU7YldM4Iskno9zDHwrdXMDOozJxi5QE2iqgymIK0 OaMr4IoWsyUxahIVChL0nPvS5HTlgyFGPqsw4QPV1Ptz/iuXqjPKacnPS1ONzE27 QGeeE2ObxcachIbIdQM4fiJUAvagHLQ= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:06 2025 by rpki-client