$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/970f160a-2451-3f79-8736-d3f6126072d1.roa File: 970f160a-2451-3f79-8736-d3f6126072d1.roa (raw, json) Hash identifier: KLnE7AtR0C5Ds7LCYYMyypyvKO1hNcX+3nmufwZF9ck= Subject key identifier: 0D:6C:DD:E4:1B:0D:0B:60:D0:DF:00:CF:3E:4E:75:25:45:54:5A:7B Certificate issuer: /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Certificate serial: 010D0C9F4328584B2B918DA7C93C980505D06000 Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/970f160a-2451-3f79-8736-d3f6126072d1.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 40244 IP address blocks: 173.233.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:8d:a7:c9:3c:98:05:05:d0:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=20271bdc-ac7c-49b5-a96f-86e18783428f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:01:1e:77:f4:63:fc:f7:2b:8b:ea:7b:6e: 72:3f:af:c4:01:f2:75:14:7d:2a:8d:65:6b:69:d2: 8e:86:06:7b:8f:bf:08:71:5e:e7:24:d1:4b:27:37: 9b:ec:62:27:66:79:d9:30:ec:a3:e2:71:a7:41:e0: 58:43:2d:d5:3b:d5:4d:3d:bb:c4:f8:b1:c9:b0:c4: e2:35:d7:08:68:da:97:61:e6:70:77:5e:ca:6e:32: 4e:d1:20:ab:3c:aa:25:99:db:8a:83:74:21:88:6a: 62:03:fc:b2:4e:09:bf:15:53:d6:a3:fe:12:82:61: e9:d5:b3:35:24:76:b0:33:d7:2e:59:f8:3f:25:96: 7a:51:27:78:91:a5:4c:f2:57:61:32:47:17:de:61: b8:2b:af:21:cd:84:80:d8:fe:ef:09:ca:e0:2d:3f: 77:d6:5d:2f:fe:8e:54:41:67:b0:87:e6:a8:03:41: fb:af:fd:de:a1:54:5b:1d:d4:2a:17:da:12:8e:e2: be:72:35:c3:49:25:64:03:4e:ce:13:c0:d6:c8:f7: 5a:ed:23:2c:5b:29:c1:eb:a2:bd:85:32:49:ae:72: 54:1c:0c:63:58:5c:7e:f2:e1:cc:a2:e1:88:8b:04: 15:0e:fc:3c:dc:4e:fd:cd:70:4d:4b:24:cc:f2:de: cb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6C:DD:E4:1B:0D:0B:60:D0:DF:00:CF:3E:4E:75:25:45:54:5A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/970f160a-2451-3f79-8736-d3f6126072d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl X509v3 Authority Key Identifier: keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer sbgp-ipAddrBlock: critical IPv4: 173.233.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:37:35:07:cd:a1:b5:c2:a1:de:7d:18:b0:71:1e:c1:b9:a7: 36:e8:df:38:a0:27:20:a4:e1:05:6a:34:8a:5c:5d:1b:a8:6d: 09:3d:97:2f:40:58:86:c0:89:dc:31:b9:43:6e:6d:61:a3:37: 08:17:a2:7d:79:85:01:08:9b:6f:d2:25:4b:62:41:ef:e8:6c: f1:7e:ae:1c:c1:32:6b:8a:b7:b4:27:7f:b1:0b:1e:70:de:7b: 44:65:f7:48:96:25:e2:40:34:6e:5d:8b:f0:ed:69:73:4a:8d: a1:1d:53:26:cb:36:30:44:08:ba:28:3d:f4:c8:b1:a1:86:62: a2:1f:c5:59:0f:90:29:bf:95:e5:70:38:ce:e5:be:b8:60:3f: 31:8b:2e:30:a6:ac:bd:72:04:5b:d1:bf:00:d6:6b:4a:ee:70: 12:87:57:9a:10:83:ab:1e:72:1a:9f:bf:fa:b4:da:e7:76:52: 7b:b3:39:55:86:81:06:1f:35:ca:14:59:49:74:71:53:2b:a7: 5b:e1:5a:4f:9c:ce:d4:ec:17:89:19:b1:c0:71:73:f9:58:71: 48:ac:de:2f:d3:d7:4c:d6:a8:ae:a4:b7:e7:3e:65:1b:99:8b: e6:f7:38:b7:90:40:ce:e8:b4:9a:d4:82:4f:e0:19:33:58:0d: 49:2e:41:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkY2nyTyYBQXQYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc0OTdhM2ItYTBmOS00NWJkLWFiMGItNGU3MzdjODgw NjNjMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk MjAyNzFiZGMtYWM3Yy00OWI1LWE5NmYtODZlMTg3ODM0MjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo54BHnf0Y/z3K4vqe25yP6/EAfJ1FH0qjWVr adKOhgZ7j78IcV7nJNFLJzeb7GInZnnZMOyj4nGnQeBYQy3VO9VNPbvE+LHJsMTi NdcIaNqXYeZwd17KbjJO0SCrPKolmduKg3QhiGpiA/yyTgm/FVPWo/4SgmHp1bM1 JHawM9cuWfg/JZZ6USd4kaVM8ldhMkcX3mG4K68hzYSA2P7vCcrgLT931l0v/o5U QWewh+aoA0H7r/3eoVRbHdQqF9oSjuK+cjXDSSVkA07OE8DWyPda7SMsWynB66K9 hTJJrnJUHAxjWFx+8uHMouGIiwQVDvw83E79zXBNSyTM8t7L9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1s3eQbDQtg0N8Azz5OdSVFVFp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5 N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTczN2M4ODA2M2MvOTcwZjE2MGEtMjQ1MS0z Zjc5LTg3MzYtZDNmNjEyNjA3MmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjc0OTdhM2ItYTBmOS00NWJkLWFi MGItNGU3MzdjODgwNjNjL2I3NDk3YTNiLWEwZjktNDViZC1hYjBiLTRlNzM3Yzg4 MDYzYy5jcmwwHwYDVR0jBBgwFoAU5diIGp8HiJED/JAy72HfTKkW/RYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTcz N2M4ODA2M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrelAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADs3NQfNobXCod59GLBxHsG5pzbo3zigJyCk4QVqNIpcXRuobQk9ly9A WIbAidwxuUNubWGjNwgXon15hQEIm2/SJUtiQe/obPF+rhzBMmuKt7Qnf7ELHnDe e0Rl90iWJeJANG5di/DtaXNKjaEdUybLNjBECLooPfTIsaGGYqIfxVkPkCm/leVw OM7lvrhgPzGLLjCmrL1yBFvRvwDWa0rucBKHV5oQg6sechqfv/q02ud2UnuzOVWG gQYfNcoUWUl0cVMrp1vhWk+cztTsF4kZscBxc/lYcUis3i/T10zWqK6kt+c+ZRuZ i+b3OLeQQM7otJrUgk/gGTNYDUkuQYk= -----END CERTIFICATE-----Generated at Fri Oct 10 21:35:28 2025 by rpki-client