$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/845c934e-982e-391f-9cb4-1e7d4935e5ac.roa File: 845c934e-982e-391f-9cb4-1e7d4935e5ac.roa (raw, json) Hash identifier: baIjmXrx/15OCbHB9/j2eIy/5AGkou/Xuk937KqlRS0= Subject key identifier: 10:A8:A6:7B:D5:FF:F9:9B:A5:2F:08:A0:3C:FB:98:B1:04:88:43:C1 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76BF7960B61684B96FE700 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/845c934e-982e-391f-9cb4-1e7d4935e5ac.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 162.208.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:bf:79:60:b6:16:84:b9:6f:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=747645da-da6d-4832-9655-21e4d6004dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e9:24:57:d5:23:11:43:aa:ac:a7:39:4e:a2: 4a:9c:7d:ba:e5:1f:e9:14:bf:10:ed:50:d1:cc:0e: 83:bd:4b:c5:ad:43:cf:4d:18:e6:02:f2:55:94:a1: f5:4c:74:44:25:e0:f1:8b:61:83:b9:82:01:c2:0b: 92:cf:2b:86:e0:29:61:bf:a9:60:27:0a:80:41:3f: 10:bf:50:f1:32:54:30:d4:72:e8:c8:98:bb:f2:93: 77:9e:d3:e0:9b:59:ac:0b:19:f1:ae:c9:fc:05:80: 11:3e:da:51:3c:1c:00:46:72:7d:a6:80:97:d3:fe: 96:c1:45:d8:0f:ca:39:0d:f3:9c:49:e1:6a:2b:31: 56:2c:3b:0f:e1:2f:68:6f:ee:da:f8:1d:bb:cc:7d: e5:55:1a:49:68:8c:8e:18:e4:a3:a9:30:e1:bf:17: e9:7b:23:3c:c8:fa:fd:96:ce:91:28:5f:59:f0:48: ff:4b:50:9f:ac:1a:d6:55:8c:92:f3:79:37:a7:ae: dc:11:41:c0:69:ff:09:d8:f7:bc:16:bb:62:4c:2b: 05:96:a1:bc:ff:97:ff:e5:35:04:ed:15:f6:61:4e: 0e:c4:be:46:8a:6c:7d:e5:b5:c2:65:60:d2:e4:38: d6:fc:73:0e:f5:6d:45:32:37:4a:b5:3f:6a:c4:a7: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A8:A6:7B:D5:FF:F9:9B:A5:2F:08:A0:3C:FB:98:B1:04:88:43:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/845c934e-982e-391f-9cb4-1e7d4935e5ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 162.208.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:62:6e:54:64:8b:de:0a:18:97:f7:8e:c6:9a:c5:c5:36:ab: 32:b6:7f:c0:a1:4a:06:f6:a9:d4:09:1e:d3:ab:64:27:25:8a: ac:c5:9b:ce:63:aa:8c:79:d5:99:63:19:5e:9e:12:04:53:66: 58:29:aa:c5:6a:20:ed:b1:54:cc:1e:51:02:66:82:b4:c6:ae: 34:00:ad:0d:20:e7:f8:42:a9:5b:a4:96:e8:87:fd:1b:49:41: 3a:43:62:9d:55:3c:e9:22:2b:25:c7:89:2c:35:6f:c6:5b:fa: e0:a4:6c:47:db:17:6c:22:12:88:a6:7c:63:ed:09:71:8a:bb: d3:dc:ba:ef:c1:9e:02:59:e3:53:1a:94:58:09:a5:8c:fe:a1: 6b:78:d5:bc:c7:97:a3:4a:0c:02:6b:c8:73:10:f7:f5:bc:6e: 3d:f3:73:6e:44:f7:a5:d8:c3:00:e5:35:c7:52:d3:fe:14:b6: f6:2c:22:78:49:fe:04:15:da:a1:a5:16:43:c5:67:e9:f6:91: 81:37:16:81:95:31:fb:38:61:7e:2d:c5:10:2c:0b:0c:66:e3: fe:e8:3a:b0:45:1c:24:ef:cf:87:8a:10:3d:8b:75:82:96:b6: cc:46:27:09:0e:4b:12:2a:0c:85:f7:a3:4d:14:20:1e:58:0d: 89:50:86:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdr95YLYWhLlv5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NzQ3NjQ1ZGEtZGE2ZC00ODMyLTk2NTUtMjFlNGQ2MDA0ZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjukkV9UjEUOqrKc5TqJKnH265R/pFL8Q7VDR zA6DvUvFrUPPTRjmAvJVlKH1THREJeDxi2GDuYIBwguSzyuG4Clhv6lgJwqAQT8Q v1DxMlQw1HLoyJi78pN3ntPgm1msCxnxrsn8BYARPtpRPBwARnJ9poCX0/6WwUXY D8o5DfOcSeFqKzFWLDsP4S9ob+7a+B27zH3lVRpJaIyOGOSjqTDhvxfpeyM8yPr9 ls6RKF9Z8Ej/S1CfrBrWVYyS83k3p67cEUHAaf8J2Pe8FrtiTCsFlqG8/5f/5TUE 7RX2YU4OxL5Gimx95bXCZWDS5DjW/HMO9W1FMjdKtT9qxKezXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCopnvV//mbpS8IoDz7mLEEiEPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODQ1YzkzNGUtOTgyZS0z OTFmLTljYjQtMWU3ZDQ5MzVlNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJiblRki94KGJf3jsaaxcU2qzK2f8ChSgb2qdQJHtOrZCcliqzFm85j qox51ZljGV6eEgRTZlgpqsVqIO2xVMweUQJmgrTGrjQArQ0g5/hCqVukluiH/RtJ QTpDYp1VPOkiKyXHiSw1b8Zb+uCkbEfbF2wiEoimfGPtCXGKu9Pcuu/BngJZ41Ma lFgJpYz+oWt41bzHl6NKDAJryHMQ9/W8bj3zc25E96XYwwDlNcdS0/4UtvYsInhJ /gQV2qGlFkPFZ+n2kYE3FoGVMfs4YX4txRAsCwxm4/7oOrBFHCTvz4eKED2LdYKW tsxGJwkOSxIqDIX3o00UIB5YDYlQhkI= -----END CERTIFICATE-----Generated at Sat Sep 6 23:52:03 2025 by rpki-client