$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/11f24f9b-8bee-3b72-adf1-f7a6486b7777.roa File: 11f24f9b-8bee-3b72-adf1-f7a6486b7777.roa (raw, json) Hash identifier: He9mqCh/EkX5KfJ1qGU1XMC6H+CX7WNkMEaKDzbNiDs= Subject key identifier: DE:36:44:83:97:C1:50:93:59:4B:38:8F:73:3C:94:45:4F:AC:D6:A7 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76C1CEC40F48AD830D3C80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/11f24f9b-8bee-3b72-adf1-f7a6486b7777.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 174.127.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c1:ce:c4:0f:48:ad:83:0d:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=77cc82d1-923a-4652-99a6-e71685a8ea65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:92:3b:88:66:6d:44:95:f5:3d:e0:a2:27:c5: 05:80:a3:b5:88:d7:66:8c:65:5b:b7:d9:29:dc:e1: fc:35:3b:12:a3:36:5d:9a:83:6f:1a:3c:57:47:69: 57:ca:eb:6e:28:91:ae:4a:68:fb:b1:28:b2:82:bc: b6:4f:dc:13:e9:92:08:09:c4:02:c0:1a:ff:c4:7a: 0a:2e:1b:b1:9d:16:7d:0b:a1:2e:3f:90:77:09:a3: ee:ed:b6:91:be:12:24:0f:55:7e:96:99:75:6b:de: a0:17:11:e9:1a:79:35:be:c7:4c:ba:47:bc:c2:21: 57:a8:73:9d:a3:bb:78:2e:d9:59:0a:3e:71:32:25: b5:a6:41:f8:6a:10:d5:f9:1b:db:2e:a2:8b:05:b8: d2:37:ea:1f:c3:64:39:80:b1:69:54:d4:b5:45:d7: 76:02:5b:08:7e:59:53:c3:48:a0:e3:84:3c:14:93: 7d:6d:35:5c:65:d2:9b:74:c0:97:b9:d7:34:7b:b6: f0:33:31:af:f4:4b:e0:7e:15:87:cc:b1:4c:eb:5a: f1:e6:da:b0:bd:d0:fb:46:37:b4:03:44:b7:13:7b: 70:78:35:45:f8:30:91:18:69:cb:19:17:8e:75:52: 2e:89:3c:3e:b8:2c:f0:a1:09:6c:b4:f6:b5:fa:6c: 18:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:36:44:83:97:C1:50:93:59:4B:38:8F:73:3C:94:45:4F:AC:D6:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/11f24f9b-8bee-3b72-adf1-f7a6486b7777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 174.127.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c2:79:95:2c:ca:05:7a:f4:9d:ed:7e:03:ee:0c:77:0d:17: 6d:ff:df:53:79:5d:bc:e7:b2:7e:bd:5a:64:ce:86:9d:c0:26: 81:40:b5:eb:fc:22:5d:ec:61:b7:8f:90:0a:87:64:4e:b7:38: ef:ec:77:49:d0:cd:52:55:f2:8e:be:ec:32:c2:dc:47:37:c1: ad:52:d5:94:52:ae:59:d5:6d:db:34:05:5f:54:1a:66:15:c4: 64:9c:32:3a:fa:04:83:72:23:a2:a6:92:10:ca:a7:ee:f1:10: c1:4f:da:f4:ee:95:cd:50:b3:30:cb:18:55:74:03:c0:ee:53: 45:9b:d4:b1:b3:db:30:95:be:15:87:2e:f0:4c:be:a9:d3:82: 49:9d:28:88:45:91:ba:ea:56:87:8e:06:04:da:63:88:db:24: b7:73:fd:2c:06:35:d7:ad:b4:4d:07:e1:b5:92:71:de:90:6f: ac:ce:c6:58:f6:bc:64:e0:c5:16:04:c1:58:36:52:cd:5c:5a: d9:7c:03:9c:4b:4e:7c:ed:1d:bb:39:b3:9e:72:ef:06:42:a7: 2b:ae:16:20:50:74:f9:5a:69:32:d7:a7:c5:e4:79:5c:1d:35: f3:45:e3:75:48:fa:a6:8f:c1:16:69:05:8f:db:97:bc:c9:7e: 71:8f:50:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsHOxA9IrYMNPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NzdjYzgyZDEtOTIzYS00NjUyLTk5YTYtZTcxNjg1YThlYTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5I7iGZtRJX1PeCiJ8UFgKO1iNdmjGVbt9kp 3OH8NTsSozZdmoNvGjxXR2lXyutuKJGuSmj7sSiygry2T9wT6ZIICcQCwBr/xHoK LhuxnRZ9C6EuP5B3CaPu7baRvhIkD1V+lpl1a96gFxHpGnk1vsdMuke8wiFXqHOd o7t4LtlZCj5xMiW1pkH4ahDV+RvbLqKLBbjSN+ofw2Q5gLFpVNS1Rdd2AlsIfllT w0ig44Q8FJN9bTVcZdKbdMCXudc0e7bwMzGv9EvgfhWHzLFM61rx5tqwvdD7Rje0 A0S3E3tweDVF+DCRGGnLGReOdVIuiTw+uCzwoQlstPa1+mwYnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN42RIOXwVCTWUs4j3M8lEVPrNanMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMTFmMjRmOWItOGJlZS0z YjcyLWFkZjEtZjdhNjQ4NmI3Nzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrn+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfCeZUsygV69J3tfgPuDHcNF23/31N5Xbznsn69WmTOhp3AJoFAtev8 Il3sYbePkAqHZE63OO/sd0nQzVJV8o6+7DLC3Ec3wa1S1ZRSrlnVbds0BV9UGmYV xGScMjr6BINyI6KmkhDKp+7xEMFP2vTulc1QszDLGFV0A8DuU0Wb1LGz2zCVvhWH LvBMvqnTgkmdKIhFkbrqVoeOBgTaY4jbJLdz/SwGNdettE0H4bWScd6Qb6zOxlj2 vGTgxRYEwVg2Us1cWtl8A5xLTnztHbs5s55y7wZCpyuuFiBQdPlaaTLXp8XkeVwd NfNF43VI+qaPwRZpBY/bl7zJfnGPUGU= -----END CERTIFICATE-----Generated at Fri Oct 10 21:30:09 2025 by rpki-client