$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e246ca22-7044-3263-a3e0-914e48bd07ad.roa File: e246ca22-7044-3263-a3e0-914e48bd07ad.roa (raw, json) Hash identifier: Usq5n3pHU7fjQnpCCC0p2iAGRkf4Twk+sygCJqeHue8= Subject key identifier: EA:8A:FC:10:60:42:A7:6E:76:DD:1F:B9:0E:66:80:F7:8B:E6:69:2C Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76CF58EE7DA2C47D1AFD80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e246ca22-7044-3263-a3e0-914e48bd07ad.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 174.127.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:cf:58:ee:7d:a2:c4:7d:1a:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=57c82a0a-0c37-4392-9bce-014a328cd639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e1:58:c8:9f:ca:58:94:e0:51:13:ba:9d:46: d7:7f:9b:90:ed:bc:b7:1c:72:10:e6:ff:aa:60:2d: 87:5a:ac:5a:93:25:47:dd:8f:1b:ad:1b:78:99:38: 34:c5:9d:d4:fc:4a:e2:7a:d2:fe:fb:28:50:2c:00: 45:1a:80:8b:da:b0:ed:c9:ae:cc:cd:b7:af:2f:cc: 11:03:74:fb:73:da:fb:30:ec:6e:30:55:06:96:3a: 23:b6:05:f2:fb:31:0b:b5:25:86:13:71:71:1c:90: ae:59:db:89:ca:72:a8:41:92:a8:b4:a2:4d:fc:39: d9:9a:5d:ba:29:b5:92:15:2c:7f:ec:0a:05:f7:d3: d9:5c:19:a6:9f:67:e6:2a:c4:24:a4:24:df:a1:ec: 48:69:a6:f0:dc:a9:16:3b:d1:fd:76:c6:42:82:92: 2f:86:08:a4:ef:28:bf:cb:b9:c7:2c:ad:a1:e7:54: 3c:85:4d:a0:3c:c3:10:1d:af:b1:87:46:b6:fa:fc: 57:46:7f:b6:e5:45:20:ea:d4:8e:37:b9:58:db:2a: fe:29:6a:43:e0:6a:f2:d1:c7:59:06:6e:3f:53:31: 65:c1:73:99:e8:6e:85:56:dc:14:23:18:fb:73:39: bb:0f:60:30:20:5c:24:1c:a5:30:e9:ea:0d:27:c0: 87:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8A:FC:10:60:42:A7:6E:76:DD:1F:B9:0E:66:80:F7:8B:E6:69:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e246ca22-7044-3263-a3e0-914e48bd07ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 174.127.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:1c:46:45:31:4f:6a:33:9f:0e:9f:52:21:23:b0:fd:01:98: a1:63:3c:53:52:64:39:a4:00:32:68:f4:bd:b0:f0:15:0f:e3: 3e:2e:52:4a:c5:2f:7e:52:46:7e:18:1f:21:2c:27:d6:a5:52: 5b:fd:f3:70:3d:80:d3:bf:b7:44:ea:8b:4a:90:a9:aa:63:20: 4a:9f:70:03:02:88:52:d5:4e:0a:a3:4b:9c:d4:16:da:b0:16: 54:75:bd:76:47:6b:62:b3:4b:d0:9d:76:6f:31:36:ef:d9:56: d5:d7:4d:5a:0d:7f:68:e9:c8:d3:e8:28:7b:fa:53:0f:d7:f5: de:5d:4e:d1:4e:10:1f:69:f3:3e:91:51:1e:f6:96:c5:dc:9c: 28:c8:b6:38:a9:d0:3e:9d:7f:5e:2b:2d:c9:33:d3:09:87:96: c7:d7:3f:05:ef:a3:d4:8b:e5:f9:95:82:a7:f2:66:78:f2:9d: 33:25:72:33:a6:48:75:be:c2:28:b0:4d:f2:58:7f:a8:a1:e2: 6e:6e:8f:2a:60:22:77:f9:21:d7:0d:c5:e3:59:73:a8:d8:37: cd:d6:59:96:09:1a:c5:9f:17:f7:c6:c4:fa:63:4a:94:c3:61: 10:d7:3c:73:82:e1:3e:69:5d:45:81:82:d2:83:51:37:55:11: a1:80:32:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLds9Y7n2ixH0a/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NTdjODJhMGEtMGMzNy00MzkyLTliY2UtMDE0YTMyOGNkNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+FYyJ/KWJTgURO6nUbXf5uQ7by3HHIQ5v+q YC2HWqxakyVH3Y8brRt4mTg0xZ3U/ErietL++yhQLABFGoCL2rDtya7MzbevL8wR A3T7c9r7MOxuMFUGljojtgXy+zELtSWGE3FxHJCuWduJynKoQZKotKJN/DnZml26 KbWSFSx/7AoF99PZXBmmn2fmKsQkpCTfoexIaabw3KkWO9H9dsZCgpIvhgik7yi/ y7nHLK2h51Q8hU2gPMMQHa+xh0a2+vxXRn+25UUg6tSON7lY2yr+KWpD4Gry0cdZ Bm4/UzFlwXOZ6G6FVtwUIxj7czm7D2AwIFwkHKUw6eoNJ8CHjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqK/BBgQqdudt0fuQ5mgPeL5mksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZTI0NmNhMjItNzA0NC0z MjYzLWEzZTAtOTE0ZTQ4YmQwN2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrn+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwcRkUxT2oznw6fUiEjsP0BmKFjPFNSZDmkADJo9L2w8BUP4z4uUkrF L35SRn4YHyEsJ9alUlv983A9gNO/t0Tqi0qQqapjIEqfcAMCiFLVTgqjS5zUFtqw FlR1vXZHa2KzS9Cddm8xNu/ZVtXXTVoNf2jpyNPoKHv6Uw/X9d5dTtFOEB9p8z6R UR72lsXcnCjItjip0D6df14rLckz0wmHlsfXPwXvo9SL5fmVgqfyZnjynTMlcjOm SHW+wiiwTfJYf6ih4m5ujypgInf5IdcNxeNZc6jYN83WWZYJGsWfF/fGxPpjSpTD YRDXPHOC4T5pXUWBgtKDUTdVEaGAMhQ= -----END CERTIFICATE-----Generated at Sat Sep 6 23:52:48 2025 by rpki-client