$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa File: bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa (raw, json) Hash identifier: ZGdUEEsmOpr61gi1T8e3PF7w4lb+FmlrgZG1Kbf7rus= Subject key identifier: 97:D3:9C:97:D9:FD:C3:68:0D:DA:9E:E3:BB:B3:2A:54:BE:A8:1D:E4 Certificate issuer: /CN=aac421ae-305b-4a29-aacc-176ba3fca213 Certificate serial: 010D0C9F4328584AC2E0F210ABF48BFFE63C3980 Authority key identifier: 5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 168.100.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:f2:10:ab:f4:8b:ff:e6:3c:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac421ae-305b-4a29-aacc-176ba3fca213 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=2487c4b6-88cc-444c-96e2-822f5098c688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7a:e9:b2:cf:07:70:8a:1b:07:fb:d6:81:73: cb:92:48:e6:2f:be:7d:2f:78:8c:d3:2b:30:b0:0b: 25:16:30:f8:42:69:ec:fa:9c:de:4b:33:c2:cb:f3: f2:07:8d:2a:a7:0e:51:a9:3e:1c:86:cc:50:4a:92: a8:c9:f5:21:fa:80:4b:89:2b:ac:74:3f:52:2a:1b: 33:d7:6e:5f:0f:2b:de:1a:c8:82:c6:1b:7b:06:b8: 3d:e2:9a:2e:a6:3f:65:d4:d6:14:6a:4b:f1:aa:dc: 89:37:7f:42:07:af:c6:07:5f:f6:ec:2c:10:5c:69: ff:39:a8:1e:79:4b:27:c1:8a:ec:cd:e1:7a:ff:70: 17:4e:4f:21:64:c0:8d:b6:5c:89:a9:5b:d7:0d:0d: f7:c6:5f:1f:41:4e:43:11:eb:a0:68:c5:54:7e:d0: bf:85:a7:f2:15:48:7b:2e:0e:46:d5:49:d7:f3:7d: 4c:e6:54:28:4f:f5:f5:80:8c:2b:da:b6:29:90:d2: a2:d1:80:74:4b:3d:b6:f9:e9:23:3d:af:1a:db:fe: c3:75:c4:ba:0d:5c:26:54:3f:fd:20:19:c7:15:63: 2b:5f:31:b9:f4:52:e9:57:62:03:d3:8d:1e:aa:85: 85:ff:2e:d2:7b:7c:24:05:24:34:6f:42:75:ab:11: 55:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D3:9C:97:D9:FD:C3:68:0D:DA:9E:E3:BB:B3:2A:54:BE:A8:1D:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl X509v3 Authority Key Identifier: keyid:5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer sbgp-ipAddrBlock: critical IPv4: 168.100.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b6:33:a4:d2:22:d4:5f:ec:9d:79:b6:2c:7f:ec:e0:2b:a9: 0b:7f:e3:2b:7a:cd:7e:bd:97:c9:ff:f2:a5:e5:12:ea:45:73: 09:8d:fd:d4:b7:69:5d:46:f7:cc:12:66:ed:11:ca:0a:07:3b: c1:0b:3c:5f:0e:85:0d:9b:29:5f:fb:b1:65:3a:62:51:b7:29: 48:23:74:b6:f6:43:99:91:30:ff:5b:f2:98:9f:af:b9:83:29: 69:be:de:f2:0d:3b:d2:2a:cf:b2:3c:f8:71:1d:f9:6e:c5:ef: 72:bb:ac:15:2c:ff:ff:cb:3f:f3:22:4f:5e:1f:55:4f:b8:79: 2f:ef:9c:a6:19:1a:cd:ea:b2:dd:92:87:97:35:fb:22:15:3a: 97:cf:e9:77:62:84:b2:3b:ce:34:f5:3b:2d:7c:1e:52:5b:91: a7:97:a6:86:8e:09:45:21:d8:9c:21:c1:35:1a:95:b5:9a:8c: 05:02:93:6c:3e:ee:02:bc:7f:67:bf:0e:b6:3f:82:c6:3f:24: 1a:08:cf:72:fc:20:f5:7e:f4:74:78:7f:f7:46:6b:0b:52:85: 8d:14:c4:bd:cd:c5:a9:ed:88:87:6b:3f:4f:c6:58:fb:d0:f5: fa:83:22:51:7c:63:e4:cb:19:74:c8:56:18:6f:d5:3c:a9:06: 25:f0:69:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4PIQq/SL/+Y8OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNDIxYWUtMzA1Yi00YTI5LWFhY2MtMTc2YmEzZmNh MjEzMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MjQ4N2M0YjYtODhjYy00NDRjLTk2ZTItODIyZjUwOThjNjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHrpss8HcIobB/vWgXPLkkjmL759L3iM0ysw sAslFjD4Qmns+pzeSzPCy/PyB40qpw5RqT4chsxQSpKoyfUh+oBLiSusdD9SKhsz 125fDyveGsiCxht7Brg94poupj9l1NYUakvxqtyJN39CB6/GB1/27CwQXGn/Oage eUsnwYrszeF6/3AXTk8hZMCNtlyJqVvXDQ33xl8fQU5DEeugaMVUftC/hafyFUh7 Lg5G1UnX831M5lQoT/X1gIwr2rYpkNKi0YB0Sz22+ekjPa8a2/7DdcS6DVwmVD/9 IBnHFWMrXzG59FLpV2ID040eqoWF/y7Se3wkBSQ0b0J1qxFVwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfTnJfZ/cNoDdqe47uzKlS+qB3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0 MjFhZS0zMDViLTRhMjktYWFjYy0xNzZiYTNmY2EyMTMvYmVjOGEyYzYtYzg3NC0z YjdjLTgwZmEtMDIzMzEyYTJjM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFjNDIxYWUtMzA1Yi00YTI5LWFh Y2MtMTc2YmEzZmNhMjEzL2FhYzQyMWFlLTMwNWItNGEyOS1hYWNjLTE3NmJhM2Zj YTIxMy5jcmwwHwYDVR0jBBgwFoAUXPhSV2pX13aToH/2eTD0JVpyHogwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0MjFhZS0zMDViLTRhMjktYWFjYy0xNzZi YTNmY2EyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu2M6TSItRf7J15tix/7OArqQt/4yt6zX69l8n/8qXlEupFcwmN/dS3 aV1G98wSZu0RygoHO8ELPF8OhQ2bKV/7sWU6YlG3KUgjdLb2Q5mRMP9b8pifr7mD KWm+3vINO9Iqz7I8+HEd+W7F73K7rBUs///LP/MiT14fVU+4eS/vnKYZGs3qst2S h5c1+yIVOpfP6XdihLI7zjT1Oy18HlJbkaeXpoaOCUUh2JwhwTUalbWajAUCk2w+ 7gK8f2e/DrY/gsY/JBoIz3L8IPV+9HR4f/dGawtShY0UxL3NxantiIdrP0/GWPvQ 9fqDIlF8Y+TLGXTIVhhv1TypBiXwacU= -----END CERTIFICATE-----Generated at Wed Aug 20 10:44:36 2025 by rpki-client