$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa File: 8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa (raw, json) Hash identifier: SExFjxsrynZGVSOpCsMdV2Ftj//xpc6sdVNMU+jKGqQ= Subject key identifier: 16:7C:52:36:D5:27:3C:0A:7B:0E:CE:63:73:A7:4C:F1:FC:DC:BC:B0 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76BF6917C3580DD5F02680 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 152.44.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:bf:69:17:c3:58:0d:d5:f0:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=2de1d704-252d-466e-9832-fdb3524242d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a0:93:a4:00:dc:e2:c3:00:fd:0d:aa:bb:5a: 8c:27:01:6a:6f:6d:23:86:0f:d3:d1:78:6e:c3:34: 78:1c:2d:2e:9f:40:16:9f:aa:15:ec:72:62:e3:7b: e0:8c:2b:fe:fb:2d:ef:31:d7:4e:3e:08:6b:e0:1c: f8:6b:9c:ee:27:c4:ed:e3:52:22:44:4b:47:01:c8: 65:72:cd:df:17:2c:89:5e:2c:16:e2:a0:8f:8c:b6: 21:7e:a1:45:4b:34:33:e0:25:9a:35:55:68:af:e9: 78:42:93:74:c1:8a:d9:32:6a:2a:10:13:21:d6:f0: 80:2a:2a:42:cb:35:f8:a7:30:d6:ee:59:ca:5f:39: 41:c3:73:33:d2:b3:28:26:4f:d6:39:a0:9e:16:41: b1:c3:29:32:77:71:e8:26:44:27:8b:4f:03:b2:40: 45:fb:2d:cf:92:f0:1c:ed:bf:bb:f9:c9:c5:cb:9c: 4c:ea:3f:35:5b:59:e9:e1:01:4b:26:ed:75:44:3a: 28:06:af:eb:bc:5e:e9:ca:b1:12:f4:29:03:dd:eb: 47:f6:77:bb:f8:d7:5b:97:46:e4:0a:7c:33:cb:6d: d4:a5:56:66:ea:a2:62:e5:47:db:ca:30:94:3f:9a: 25:6f:f7:53:83:38:7d:61:1d:0e:d7:5a:cd:96:a2: 4b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7C:52:36:D5:27:3C:0A:7B:0E:CE:63:73:A7:4C:F1:FC:DC:BC:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 152.44.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:39:ee:de:03:ec:e1:8b:2b:8b:ac:8e:d9:c8:0a:35:0e:45: c1:fd:b8:11:9c:47:33:55:14:e1:28:cf:40:d6:59:da:ce:57: df:c8:6f:07:ca:fe:5f:cd:7d:e4:7d:ba:1a:e7:2c:cd:bb:24: 42:5f:f6:e9:20:49:f8:a6:12:5d:f5:d9:56:5b:40:86:4b:c8: c8:9c:77:74:bc:51:4f:1d:c0:8f:20:bc:12:c7:65:73:91:8a: 45:5e:5e:ce:f5:83:8e:d2:b1:bb:f2:49:14:17:84:64:26:38: ae:45:3f:fd:65:ab:b7:2e:5e:31:5e:43:59:c1:71:1e:77:82: d7:fe:12:59:30:b5:90:55:2e:fb:fd:48:4c:51:05:43:1c:06: 99:c3:0c:25:0b:20:69:e3:57:62:25:6e:91:13:ab:a7:54:aa: c8:69:c7:55:e6:21:36:b0:6b:96:50:16:e5:15:86:e5:72:e3: 76:47:13:ba:74:a1:1c:cb:dc:94:33:b9:79:9a:44:cf:b0:84: 6d:4e:f5:63:74:01:bb:c9:0a:27:46:af:7b:d6:42:cb:71:5e: b7:43:4f:f4:43:a7:ca:e8:c6:8e:7b:4c:b6:29:4e:db:20:d6: c0:aa:85:93:2c:50:9e:70:70:b1:0d:cb:46:b1:bc:fa:49:34: 3d:37:eb:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdr9pF8NYDdXwJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MmRlMWQ3MDQtMjUyZC00NjZlLTk4MzItZmRiMzUyNDI0MmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaCTpADc4sMA/Q2qu1qMJwFqb20jhg/T0Xhu wzR4HC0un0AWn6oV7HJi43vgjCv++y3vMddOPghr4Bz4a5zuJ8Tt41IiREtHAchl cs3fFyyJXiwW4qCPjLYhfqFFSzQz4CWaNVVor+l4QpN0wYrZMmoqEBMh1vCAKipC yzX4pzDW7lnKXzlBw3Mz0rMoJk/WOaCeFkGxwykyd3HoJkQni08DskBF+y3PkvAc 7b+7+cnFy5xM6j81W1np4QFLJu11RDooBq/rvF7pyrES9CkD3etH9ne7+Ndbl0bk Cnwzy23UpVZm6qJi5UfbyjCUP5olb/dTgzh9YR0O11rNlqJLqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZ8UjbVJzwKew7OY3OnTPH83LywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOGU5OWQ2NDktMGIzYS0z OTNkLWE1Y2QtYzc5NzFjYWJmYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmCyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAw57t4D7OGLK4usjtnICjUORcH9uBGcRzNVFOEoz0DWWdrOV9/IbwfK /l/NfeR9uhrnLM27JEJf9ukgSfimEl312VZbQIZLyMicd3S8UU8dwI8gvBLHZXOR ikVeXs71g47SsbvySRQXhGQmOK5FP/1lq7cuXjFeQ1nBcR53gtf+ElkwtZBVLvv9 SExRBUMcBpnDDCULIGnjV2IlbpETq6dUqshpx1XmITawa5ZQFuUVhuVy43ZHE7p0 oRzL3JQzuXmaRM+whG1O9WN0AbvJCidGr3vWQstxXrdDT/RDp8roxo57TLYpTtsg 1sCqhZMsUJ5wcLENy0axvPpJND0360w= -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:40 2025 by rpki-client