$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/c46438d3-efc7-3a29-b024-983a8aaa71ec.roa File: c46438d3-efc7-3a29-b024-983a8aaa71ec.roa (raw, json) Hash identifier: hNso3EplhiBxnXey7+QXpagKKWS0Jz/b5Bazk4FV8/o= Subject key identifier: 2A:0F:AF:43:FD:47:AB:1D:16:E8:A6:FF:DE:6F:FF:DA:59:07:10:19 Certificate issuer: /CN=01e76461-567a-47c1-a387-9b9f7415be5f Certificate serial: 010D0C9F4328584ADECBB0586AAC73C9B05C7540 Authority key identifier: DA:98:D7:DC:C3:99:BA:24:EE:F1:1D:1E:63:35:EE:23:6E:88:2F:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/c46438d3-efc7-3a29-b024-983a8aaa71ec.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 21833 IP address blocks: 170.232.224.0/21 maxlen: 21 170.232.231.0/24 maxlen: 24 170.232.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/01e76461-567a-47c1-a387-9b9f7415be5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/01e76461-567a-47c1-a387-9b9f7415be5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:b0:58:6a:ac:73:c9:b0:5c:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01e76461-567a-47c1-a387-9b9f7415be5f Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=0c963016-a9cc-468f-be20-9390c1ab654c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d5:b4:d6:2b:e6:d1:74:ac:79:75:b2:bc:f1: 43:49:d4:0f:99:66:81:8b:9c:ef:dc:28:87:b6:31: 41:2f:84:2f:c8:60:dd:07:aa:74:2c:6b:96:28:88: e2:74:ec:77:62:c7:76:e7:77:63:af:e7:1c:c4:dd: 19:14:22:de:8e:df:66:22:5a:79:b4:23:4d:c3:3a: c4:c2:c3:e0:8a:8a:09:20:75:01:0b:3f:66:8d:db: 7b:8f:80:19:ea:14:b3:2b:b4:27:21:ec:7b:89:11: 15:17:d5:d5:2d:a7:df:87:ab:6e:77:72:42:89:4c: 69:31:12:0a:bd:28:65:f1:51:ec:68:23:8d:87:62: 33:65:4a:38:88:e2:a4:50:0b:fe:01:ad:12:34:f2: 58:2f:27:4f:55:8f:f4:79:46:62:c5:76:6f:b8:78: 92:41:00:ef:c0:9c:00:c3:de:7a:c0:ed:13:a3:00: 9d:df:0d:82:e6:1d:5f:23:e1:eb:06:94:48:d6:85: 04:2f:df:1c:e5:2f:44:e7:eb:27:c8:c3:3e:fe:43: bd:f4:87:eb:15:b8:f7:a6:17:5c:96:8b:71:c3:b8: 5c:2a:d5:0a:92:23:4f:04:7a:53:d7:a5:be:d7:dc: 36:1a:f4:80:82:61:e4:20:63:9d:a2:60:46:ce:a4: 7c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0F:AF:43:FD:47:AB:1D:16:E8:A6:FF:DE:6F:FF:DA:59:07:10:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/c46438d3-efc7-3a29-b024-983a8aaa71ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/01e76461-567a-47c1-a387-9b9f7415be5f.crl X509v3 Authority Key Identifier: keyid:DA:98:D7:DC:C3:99:BA:24:EE:F1:1D:1E:63:35:EE:23:6E:88:2F:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f.cer sbgp-ipAddrBlock: critical IPv4: 170.232.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:eb:b7:b1:03:10:7a:66:49:44:fe:a2:5a:51:e4:86:2c:ee: 33:09:8e:bb:7e:e7:11:fc:99:b2:bd:25:d6:40:a5:8e:43:78: 61:03:98:cb:84:ff:e7:44:b6:2d:ac:cd:f9:86:b0:f8:04:b6: 1e:7c:d4:ac:b8:6e:15:b3:1b:5e:5c:08:07:31:0c:96:fd:3d: 0f:4e:9b:e2:cc:86:63:cc:5d:05:ca:fa:7f:4c:c7:9e:1d:ea: bc:b6:41:6c:aa:6b:27:be:c8:c6:9a:21:72:57:64:7e:bf:c1: 9a:4e:79:3f:13:2c:0b:d0:a5:4e:35:d0:26:f8:eb:0d:43:50: a4:2b:29:44:8f:b0:94:57:ab:bd:c4:68:b8:7f:2e:18:0e:7d: 81:9b:fd:9a:e0:f2:2b:07:2a:1c:41:96:39:6e:1b:de:41:4b: 79:de:07:e3:2c:b5:1f:c4:5e:81:bd:ba:2b:b1:0b:88:7a:74: d1:89:8c:6e:84:4d:5d:a6:ea:94:04:b4:87:73:c4:4c:c2:01: 31:e4:63:2d:8f:25:46:63:bc:ae:8f:fa:8f:0a:0e:b6:b9:bf: 81:43:e6:64:7a:09:05:e8:fb:60:42:cd:26:1c:c6:3e:b2:62: 18:b6:a4:bc:18:01:76:e6:11:23:a3:ca:f4:cb:54:dc:a4:2d: 3c:0a:5e:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7BYaqxzybBcdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDFlNzY0NjEtNTY3YS00N2MxLWEzODctOWI5Zjc0MTVi ZTVmMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MGM5NjMwMTYtYTljYy00NjhmLWJlMjAtOTM5MGMxYWI2NTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNW01ivm0XSseXWyvPFDSdQPmWaBi5zv3CiH tjFBL4QvyGDdB6p0LGuWKIjidOx3Ysd253djr+ccxN0ZFCLejt9mIlp5tCNNwzrE wsPgiooJIHUBCz9mjdt7j4AZ6hSzK7QnIex7iREVF9XVLaffh6tud3JCiUxpMRIK vShl8VHsaCONh2IzZUo4iOKkUAv+Aa0SNPJYLydPVY/0eUZixXZvuHiSQQDvwJwA w956wO0TowCd3w2C5h1fI+HrBpRI1oUEL98c5S9E5+snyMM+/kO99IfrFbj3phdc lotxw7hcKtUKkiNPBHpT16W+19w2GvSAgmHkIGOdomBGzqR8ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoPr0P9R6sdFuim/95v/9pZBxAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMWU3 NjQ2MS01NjdhLTQ3YzEtYTM4Ny05YjlmNzQxNWJlNWYvYzQ2NDM4ZDMtZWZjNy0z YTI5LWIwMjQtOTgzYThhYWE3MWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDFlNzY0NjEtNTY3YS00N2MxLWEz ODctOWI5Zjc0MTViZTVmLzAxZTc2NDYxLTU2N2EtNDdjMS1hMzg3LTliOWY3NDE1 YmU1Zi5jcmwwHwYDVR0jBBgwFoAU2pjX3MOZuiTu8R0eYzXuI26IL6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMWU3NjQ2MS01NjdhLTQ3YzEtYTM4Ny05Yjlm NzQxNWJlNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqujgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXrt7EDEHpmSUT+olpR5IYs7jMJjrt+5xH8mbK9JdZApY5DeGEDmMuE /+dEti2szfmGsPgEth581Ky4bhWzG15cCAcxDJb9PQ9Om+LMhmPMXQXK+n9Mx54d 6ry2QWyqaye+yMaaIXJXZH6/wZpOeT8TLAvQpU410Cb46w1DUKQrKUSPsJRXq73E aLh/LhgOfYGb/Zrg8isHKhxBljluG95BS3neB+MstR/EXoG9uiuxC4h6dNGJjG6E TV2m6pQEtIdzxEzCATHkYy2PJUZjvK6P+o8KDra5v4FD5mR6CQXo+2BCzSYcxj6y Yhi2pLwYAXbmESOjyvTLVNykLTwKXh0= -----END CERTIFICATE-----Generated at Wed Aug 20 23:08:22 2025 by rpki-client