$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa File: b4e78078-a443-3edc-9dba-d33315b67c0b.roa (raw, json) Hash identifier: JLUx24FHh5SgKpTwBdvjCqZZAllJz8oxlK0uODOu6B4= Subject key identifier: 5C:78:82:C8:32:54:01:FC:66:B2:83:D6:4F:13:C9:D7:87:E8:BA:A9 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584AF5212DDF95775C359AF1DF40 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 33208 IP address blocks: 170.133.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2d:df:95:77:5c:35:9a:f1:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=706a45ee-9276-42d0-8f1a-b95444fab476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:23:18:59:18:b0:7e:42:48:e5:cd:65:30:96: b5:0f:bf:e4:03:0e:8d:73:f4:af:ec:be:6a:22:1d: 53:60:72:95:03:f9:f4:44:60:a4:ed:45:34:74:c5: 20:de:df:1c:e4:3e:ee:46:c5:c0:2b:f4:81:18:c8: e2:23:73:27:d7:73:ca:ac:eb:b8:36:8d:a2:f3:ba: e8:db:5d:aa:44:9a:4c:af:0c:36:c7:f6:da:06:bd: ab:d5:b3:a0:43:22:d0:2e:d5:49:b5:14:95:81:7c: 90:52:b6:2c:47:f5:53:3c:a1:eb:fb:61:61:0a:1f: b5:bc:5f:fa:b3:ca:7b:81:4f:99:ce:da:e9:af:5c: 60:70:0a:35:6f:6e:f5:46:6e:a2:ba:4a:aa:6d:37: c1:59:51:97:8a:90:5a:52:5e:54:c5:cf:ea:ab:3a: 83:35:5b:70:99:93:c1:b1:f7:fb:10:89:ab:6e:bc: 1f:88:78:d6:1e:09:30:2e:dc:0a:0f:26:6e:5d:db: 88:74:3b:a5:78:23:f3:06:0d:9e:41:10:65:37:d9: 78:ff:8a:c4:89:bd:f8:0f:2f:1b:76:2f:e0:af:19: 98:5d:15:17:ca:9f:81:9d:43:4e:ef:db:8d:6d:41: 41:df:f4:c3:6f:1c:cf:10:3a:a2:07:57:33:d9:e1: 0e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:78:82:C8:32:54:01:FC:66:B2:83:D6:4F:13:C9:D7:87:E8:BA:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 170.133.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b3:93:43:a4:ab:c0:f9:ee:d2:03:59:2b:9f:e6:e0:b5:85: 9e:bc:73:ab:de:c5:11:75:89:55:76:95:ea:68:13:8d:26:33: 24:a0:ec:bd:64:7d:87:1f:14:bd:ff:c1:01:ac:45:43:b9:f0: fa:d9:59:e5:fd:c0:14:d1:60:4e:b5:dd:62:69:35:22:2c:40: 7a:b3:e3:fe:bb:f7:87:c2:01:04:d1:2e:fb:b4:5b:d6:32:3b: b9:bd:f9:80:37:6b:77:e8:9b:f9:fa:d6:a5:43:5f:c3:ff:b3: 9d:1c:0f:10:d5:ad:1a:ff:d8:1d:7c:98:54:e6:81:6a:f8:65: c8:61:9f:74:7e:c3:be:cf:da:f4:cc:5f:02:43:bd:2a:10:fa: 7b:c1:46:56:42:3f:2c:c9:ff:03:f8:12:64:76:f7:ce:c8:0f: e5:cc:04:3b:7e:1c:1f:ad:cd:ad:3e:89:44:3e:9e:cb:4c:1b: 51:9f:e2:eb:af:ae:20:d2:6e:19:21:55:5c:1f:01:68:45:f5: d6:b5:fa:9e:f6:36:a6:66:38:e7:64:0e:48:23:85:ef:11:41: 07:89:3d:9f:f9:6a:af:4d:66:99:c7:58:7e:78:8d:c5:53:3f: 91:a0:49:45:19:6a:ad:d2:af:d3:5a:e3:5e:1c:f5:04:8f:98: 01:d3:fc:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IS3flXdcNZrx30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NzA2YTQ1ZWUtOTI3Ni00MmQwLThmMWEtYjk1NDQ0ZmFiNDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiMYWRiwfkJI5c1lMJa1D7/kAw6Nc/Sv7L5q Ih1TYHKVA/n0RGCk7UU0dMUg3t8c5D7uRsXAK/SBGMjiI3Mn13PKrOu4No2i87ro 212qRJpMrww2x/baBr2r1bOgQyLQLtVJtRSVgXyQUrYsR/VTPKHr+2FhCh+1vF/6 s8p7gU+Zztrpr1xgcAo1b271Rm6iukqqbTfBWVGXipBaUl5Uxc/qqzqDNVtwmZPB sff7EImrbrwfiHjWHgkwLtwKDyZuXduIdDuleCPzBg2eQRBlN9l4/4rEib34Dy8b di/grxmYXRUXyp+BnUNO79uNbUFB3/TDbxzPEDqiB1cz2eEORwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFx4gsgyVAH8ZrKD1k8TydeH6LqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvYjRlNzgwNzgtYTQ0My0z ZWRjLTlkYmEtZDMzMzE1YjY3YzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqoXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAazk0Okq8D57tIDWSuf5uC1hZ68c6vexRF1iVV2lepoE40mMySg7L1k fYcfFL3/wQGsRUO58PrZWeX9wBTRYE613WJpNSIsQHqz4/6794fCAQTRLvu0W9Yy O7m9+YA3a3fom/n61qVDX8P/s50cDxDVrRr/2B18mFTmgWr4Zchhn3R+w77P2vTM XwJDvSoQ+nvBRlZCPyzJ/wP4EmR2987ID+XMBDt+HB+tza0+iUQ+nstMG1Gf4uuv riDSbhkhVVwfAWhF9da1+p72NqZmOOdkDkgjhe8RQQeJPZ/5aq9NZpnHWH54jcVT P5GgSUUZaq3Sr9Na414c9QSPmAHT/EE= -----END CERTIFICATE-----Generated at Sun Oct 19 22:05:36 2025 by rpki-client