$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/d3444f5a-9653-3573-a9e8-b622fe731b30.roa File: d3444f5a-9653-3573-a9e8-b622fe731b30.roa (raw, json) Hash identifier: cMT3GCy4Wfy5ISTS5bIcX//lTK0cnEjKMBRkHKdK79A= Subject key identifier: 8E:6E:9E:4C:A4:41:61:99:90:AD:6A:A6:14:BA:20:69:3E:9F:95:43 Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584B13D6A9601CCF2290B39D95D0 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/d3444f5a-9653-3573-a9e8-b622fe731b30.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 23241 IP address blocks: 170.89.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:a9:60:1c:cf:22:90:b3:9d:95:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=b08ee811-aec8-4446-b6f9-6bd033a276f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2b:ae:07:83:f9:5e:3d:8e:a4:4a:ac:bc:1f: 56:1a:14:6e:2a:88:9e:c5:04:3f:c7:71:94:13:77: ba:da:84:ba:45:5b:8d:d0:63:61:80:df:ad:42:02: ba:7e:c9:cb:12:17:9c:f8:d2:25:4b:fb:17:57:d0: a3:a2:1e:c6:ad:cb:5d:1a:87:ca:38:5a:85:a0:2b: 60:26:9f:f6:f6:ad:2a:77:23:d0:2b:89:c6:41:b7: 6b:b3:b6:b9:99:b7:f1:cf:ee:1d:c5:03:b2:f1:ba: fe:81:80:07:01:de:b6:ab:bc:8e:00:ac:80:02:ad: b6:a7:f5:06:15:09:89:21:e5:27:e0:94:58:cf:6c: a2:d3:8d:4b:f1:bc:d5:00:74:ee:dc:30:ce:05:5f: 05:20:56:0e:39:a1:69:15:16:7d:c4:38:83:4b:20: b7:2e:7b:75:e4:2e:05:2d:7c:e4:2c:ce:49:f3:ec: d1:1d:8e:28:92:6f:0b:46:9d:95:7f:b1:f5:a2:89: 0b:b5:39:95:d7:60:a0:ed:5f:54:75:85:da:b0:4f: ef:22:af:73:bc:3f:ea:c0:a7:08:2a:99:77:96:84: b7:8c:46:7b:7b:ad:56:7e:77:d2:14:d5:46:8f:14: 58:d6:39:e1:6b:e4:8b:4e:c9:1c:4c:99:94:68:84: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6E:9E:4C:A4:41:61:99:90:AD:6A:A6:14:BA:20:69:3E:9F:95:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/d3444f5a-9653-3573-a9e8-b622fe731b30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:67:0e:3c:62:0f:f0:bb:a6:b6:c5:cc:8d:78:64:e2:76:03: 48:6a:5b:73:f3:be:fa:0a:23:c3:b8:29:01:4b:52:a2:f5:d9: ab:75:d9:75:69:e5:c2:d7:33:d7:f5:cb:50:e1:31:4f:3d:2e: ff:88:0a:40:3a:92:84:6e:1c:26:a6:a4:38:7f:32:3b:21:b6: 15:ad:19:85:eb:06:09:77:56:61:94:b6:f6:96:9d:d4:b9:cf: b9:46:ec:08:5e:71:5c:05:6a:0f:0b:78:15:7a:3a:db:ed:79: 77:3e:cf:ed:5b:da:b7:88:cb:e9:29:51:c2:aa:cd:5c:27:0d: d3:0e:99:d1:65:ce:75:b7:12:45:97:a0:d4:a4:53:17:b6:e8: 5f:7c:a9:b6:f6:1a:b8:08:a2:e1:c4:d4:76:51:1f:af:a2:24: 61:5f:82:dc:c2:01:76:e0:55:5d:4d:d3:d9:ec:f5:33:2a:f7: 84:6e:fb:c5:dc:31:6c:9c:29:3e:7f:e0:5f:fb:ce:50:dc:08: c8:8b:fd:1a:37:9b:61:b3:4d:00:6a:4d:92:cf:11:23:11:be: 2e:e5:e4:f0:fa:91:23:8a:42:0a:a3:45:0f:74:b8:41:fc:4f: 39:cd:54:41:23:4b:24:2b:cc:7c:96:e0:ed:4c:a9:cf:3f:17: 41:41:65:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1qlgHM8ikLOdldAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YjA4ZWU4MTEtYWVjOC00NDQ2LWI2ZjktNmJkMDMzYTI3NmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyuuB4P5Xj2OpEqsvB9WGhRuKoiexQQ/x3GU E3e62oS6RVuN0GNhgN+tQgK6fsnLEhec+NIlS/sXV9Cjoh7GrctdGofKOFqFoCtg Jp/29q0qdyPQK4nGQbdrs7a5mbfxz+4dxQOy8br+gYAHAd62q7yOAKyAAq22p/UG FQmJIeUn4JRYz2yi041L8bzVAHTu3DDOBV8FIFYOOaFpFRZ9xDiDSyC3Lnt15C4F LXzkLM5J8+zRHY4okm8LRp2Vf7H1ookLtTmV12Cg7V9UdYXasE/vIq9zvD/qwKcI Kpl3loS3jEZ7e61WfnfSFNVGjxRY1jnha+SLTskcTJmUaIRd1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5unkykQWGZkK1qphS6IGk+n5VDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvZDM0NDRmNWEtOTY1My0z NTczLWE5ZTgtYjYyMmZlNzMxYjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVnDjxiD/C7prbFzI14ZOJ2A0hqW3PzvvoKI8O4KQFLUqL12at12XVp 5cLXM9f1y1DhMU89Lv+ICkA6koRuHCampDh/MjshthWtGYXrBgl3VmGUtvaWndS5 z7lG7AhecVwFag8LeBV6OtvteXc+z+1b2reIy+kpUcKqzVwnDdMOmdFlznW3EkWX oNSkUxe26F98qbb2GrgIouHE1HZRH6+iJGFfgtzCAXbgVV1N09ns9TMq94Ru+8Xc MWycKT5/4F/7zlDcCMiL/Ro3m2GzTQBqTZLPESMRvi7l5PD6kSOKQgqjRQ90uEH8 TznNVEEjSyQrzHyW4O1Mqc8/F0FBZaE= -----END CERTIFICATE-----Generated at Thu Oct 9 03:37:29 2025 by rpki-client