$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa File: cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa (raw, json) Hash identifier: 5zF/7KIAAbHbQnKutMFQmp8i6F+4yCK9JhgRkW29VRA= Subject key identifier: 05:4E:AF:14:12:B0:8E:21:B7:46:45:3A:B4:AA:FA:72:F1:72:DC:FE Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584B0746BD62BDC8623605DD6548 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 393878 IP address blocks: 170.133.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:bd:62:bd:c8:62:36:05:dd:65:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=3922a76e-5078-4770-92f5-8b5fe2101b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:37:dd:a4:9a:e8:b6:c9:bc:2e:7d:c5:b6:a8: d6:9c:26:27:ef:dd:c3:11:da:60:f8:14:2c:7e:96: 99:6c:82:55:ca:33:f4:1b:ae:46:d3:00:78:2d:61: cb:cc:28:40:7c:62:3d:71:86:b7:f9:9a:0a:fd:99: a1:2a:3c:15:f6:24:2e:ca:95:cb:4b:63:58:1e:c3: 7b:18:41:0c:9d:60:66:40:62:cf:74:24:91:73:85: 3f:8a:b8:3d:e2:e0:7c:07:ec:84:a4:b9:28:6c:db: 4b:14:14:71:97:68:2b:42:4f:b2:8a:d3:31:45:cc: a5:57:e3:cb:17:b3:9b:0c:9d:27:84:43:50:76:67: c7:9d:ac:17:d7:b7:20:65:4d:6c:bf:ee:17:23:b9: c4:12:87:84:46:62:79:da:b5:48:00:95:6e:91:05: ef:07:ac:7d:35:d2:a7:7d:2f:67:e2:ba:47:01:76: 93:8b:f1:e7:f8:5b:b7:6e:58:1d:bc:e4:0a:31:e7: ba:24:bb:a6:90:d4:66:db:aa:4a:9d:4b:b7:6e:11: cd:11:a3:74:56:79:5e:14:c8:fa:a2:1c:21:88:78: 76:5c:d7:65:b5:a8:02:ce:38:68:74:0a:12:f3:1d: ac:45:06:56:af:0e:6e:af:d4:11:8c:ca:e5:25:a7: b7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4E:AF:14:12:B0:8E:21:B7:46:45:3A:B4:AA:FA:72:F1:72:DC:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 170.133.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:78:9a:00:ce:0c:d5:08:28:e7:fe:7e:dd:ea:44:e0:f7:19: f0:9e:bf:87:b6:82:d8:29:bf:55:e3:67:da:10:90:10:4a:dc: f4:4c:43:6e:c4:f1:5e:e3:6a:17:62:bc:79:6c:d5:26:58:c9: 7c:35:0b:41:48:0b:62:36:6b:1c:a5:36:d6:33:9e:30:f9:47: 48:ec:74:83:9c:60:84:15:01:db:bc:e6:8f:68:a7:27:30:10: 10:8e:30:f6:f2:a3:42:4c:2c:c8:0f:71:fd:15:34:43:fa:f8: e8:2f:67:8f:66:61:dd:7c:09:5c:32:80:5e:a9:cf:b0:77:7d: 1c:4d:a9:c1:2c:7e:df:6a:39:b0:f0:9a:fa:3b:6e:93:fa:6a: 4f:55:f8:5f:d5:92:fb:d4:8d:44:d4:26:51:42:50:c1:88:60: b5:a9:4f:35:97:11:50:8f:3b:6b:da:d5:dd:fe:4c:1a:12:d3: c6:92:3c:2d:07:2b:5d:89:17:1f:83:11:02:dd:3f:48:ec:4a: 88:4f:a4:54:b7:49:d6:e1:29:71:d9:47:6a:72:14:6c:9c:ac: d5:12:50:b4:43:88:1e:bd:74:a7:ea:64:44:e4:e5:db:cf:f5: 7e:2c:ae:2e:c9:85:50:e3:43:76:d3:6d:8b:fd:c3:5a:c8:e5: c0:ca:9e:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRr1ivchiNgXdZUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MzkyMmE3NmUtNTA3OC00NzcwLTkyZjUtOGI1ZmUyMTAxYjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszfdpJrotsm8Ln3FtqjWnCYn793DEdpg+BQs fpaZbIJVyjP0G65G0wB4LWHLzChAfGI9cYa3+ZoK/ZmhKjwV9iQuypXLS2NYHsN7 GEEMnWBmQGLPdCSRc4U/irg94uB8B+yEpLkobNtLFBRxl2grQk+yitMxRcylV+PL F7ObDJ0nhENQdmfHnawX17cgZU1sv+4XI7nEEoeERmJ52rVIAJVukQXvB6x9NdKn fS9n4rpHAXaTi/Hn+Fu3blgdvOQKMee6JLumkNRm26pKnUu3bhHNEaN0VnleFMj6 ohwhiHh2XNdltagCzjhodAoS8x2sRQZWrw5ur9QRjMrlJae3/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVOrxQSsI4ht0ZFOrSq+nLxctz+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvY2QyNjExYzYtZmZjMy0z YzhkLWJiMTktYTUyZmM3Njg4NzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqoXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB4mgDODNUIKOf+ft3qROD3GfCev4e2gtgpv1XjZ9oQkBBK3PRMQ27E 8V7jahdivHls1SZYyXw1C0FIC2I2axylNtYznjD5R0jsdIOcYIQVAdu85o9opycw EBCOMPbyo0JMLMgPcf0VNEP6+OgvZ49mYd18CVwygF6pz7B3fRxNqcEsft9qObDw mvo7bpP6ak9V+F/VkvvUjUTUJlFCUMGIYLWpTzWXEVCPO2va1d3+TBoS08aSPC0H K12JFx+DEQLdP0jsSohPpFS3SdbhKXHZR2pyFGycrNUSULRDiB69dKfqZETk5dvP 9X4sri7JhVDjQ3bTbYv9w1rI5cDKnks= -----END CERTIFICATE-----Generated at Sun Oct 19 22:05:34 2025 by rpki-client