$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa File: a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa (raw, json) Hash identifier: K7cbaI5svd05ytVRwdbPJbXUu1JZ6jSR6tIaJ49myus= Subject key identifier: 30:AF:9B:9D:66:E6:E6:4B:0C:A3:BD:26:D4:4F:A9:C7:34:2B:90:67 Certificate issuer: /CN=61939bbc-e50f-4ced-8482-e7c4008e3583 Certificate serial: 010D0C9F4328584B031691E364A189037F8CDF00 Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 397453 IP address blocks: 170.117.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:91:e3:64:a1:89:03:7f:8c:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583 Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=5fa4dee5-276d-4d3e-b426-f15dd240e6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:44:cf:a2:3c:ce:5f:01:44:98:e3:aa:d6: 0c:d2:b1:0b:a7:12:de:b4:c9:1e:06:ea:dd:fe:49: ed:2d:46:3e:92:16:5a:7f:6a:5e:c3:89:5d:64:99: f0:57:3e:49:a0:a8:33:d7:8b:34:bf:7f:a6:c4:ab: 9f:1b:d2:41:d5:29:3d:eb:d7:f3:7e:41:23:44:bc: 41:b0:3c:bc:2c:7a:53:5f:ab:f3:8f:83:72:74:30: df:a0:2d:6d:45:56:b3:87:79:50:7c:26:61:6f:9f: 49:36:29:77:bb:3f:1d:e5:89:35:ac:fe:8f:78:6a: 10:c9:a6:04:b7:66:84:17:b4:ed:f1:5e:f4:43:2c: db:5a:bd:ea:7b:f6:3b:a4:b8:1b:ba:99:83:d0:3d: 25:cc:42:f6:cf:21:f3:3d:91:35:1c:96:d6:a6:17: 1b:2a:78:50:67:70:8d:7b:6d:6e:97:0c:bc:2a:04: 4b:23:62:eb:98:31:74:da:0f:fb:7a:70:73:e5:de: 27:21:c9:49:dc:d1:13:00:ea:e4:d4:fc:43:e2:fc: d3:5f:aa:f5:b5:28:14:f7:7d:68:9b:fa:28:60:81: 9c:67:76:20:2a:af:7d:00:96:59:84:22:9d:c0:99: ef:b6:73:1d:ed:7c:15:cb:42:73:6e:8d:8c:e0:76: 9b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AF:9B:9D:66:E6:E6:4B:0C:A3:BD:26:D4:4F:A9:C7:34:2B:90:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl X509v3 Authority Key Identifier: keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer sbgp-ipAddrBlock: critical IPv4: 170.117.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:fd:4f:8b:4c:e5:1c:85:9f:91:e6:b7:7c:7e:9b:27:c2:b3: df:48:13:61:61:15:2a:38:5d:58:16:1b:2d:5e:37:6e:4a:f8: 7c:d3:16:f6:70:a2:55:58:e7:18:28:31:a6:3f:dc:78:7d:32: ca:b0:ad:90:84:85:89:94:9e:ec:22:6b:83:2e:ba:a7:9b:db: 03:ed:95:ea:6c:e8:51:e1:f8:0a:25:3c:0b:ec:26:52:c1:27: ef:41:73:af:c2:5a:ed:9d:75:7c:83:1c:54:1b:db:54:0d:b7: 19:32:d6:a3:35:f8:fc:32:4c:b1:8a:9f:6b:37:bd:39:46:bb: 16:36:87:5b:77:d0:e8:f9:4f:e0:a3:de:5e:25:f7:de:bc:e4: ad:8f:64:d1:c0:f7:bd:ae:67:49:1b:99:ec:3f:2e:5e:cb:22: 24:d4:2f:9e:cd:ef:77:05:fd:d4:2f:a1:dd:a0:7e:f6:7b:84: 9b:46:06:5a:27:48:9d:b4:fd:4d:f1:bd:6d:59:23:a3:84:1f: 7e:d7:36:f6:8b:35:23:21:af:e8:d6:ed:b9:7e:e8:e4:2c:34: 1f:85:aa:45:1d:10:fd:39:ce:86:db:1d:48:e9:de:cd:f4:1f: 06:80:61:3d:31:a1:69:eb:3f:25:7d:17:0c:99:d0:c7:ce:28: 6a:79:22:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDFpHjZKGJA3+M3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE5MzliYmMtZTUwZi00Y2VkLTg0ODItZTdjNDAwOGUz NTgzMB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk NWZhNGRlZTUtMjc2ZC00ZDNlLWI0MjYtZjE1ZGQyNDBlNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW1Ez6I8zl8BRJjjqtYM0rELpxLetMkeBurd /kntLUY+khZaf2pew4ldZJnwVz5JoKgz14s0v3+mxKufG9JB1Sk969fzfkEjRLxB sDy8LHpTX6vzj4NydDDfoC1tRVazh3lQfCZhb59JNil3uz8d5Yk1rP6PeGoQyaYE t2aEF7Tt8V70QyzbWr3qe/Y7pLgbupmD0D0lzEL2zyHzPZE1HJbWphcbKnhQZ3CN e21ulwy8KgRLI2LrmDF02g/7enBz5d4nIclJ3NETAOrk1PxD4vzTX6r1tSgU931o m/ooYIGcZ3YgKq99AJZZhCKdwJnvtnMd7XwVy0Jzbo2M4HabzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCvm51m5uZLDKO9JtRPqcc0K5BnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTkz OWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0MDA4ZTM1ODMvYTdjYjk2ZjgtNzk4Yy0z MGIyLWI5NzEtZWEwMGZmZDRmOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE5MzliYmMtZTUwZi00Y2VkLTg0 ODItZTdjNDAwOGUzNTgzLzYxOTM5YmJjLWU1MGYtNGNlZC04NDgyLWU3YzQwMDhl MzU4My5jcmwwHwYDVR0jBBgwFoAUP434UbbjU/pqwc9K3Q6RzsPeSRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTkzOWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0 MDA4ZTM1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqnWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb9T4tM5RyFn5Hmt3x+myfCs99IE2FhFSo4XVgWGy1eN25K+HzTFvZw olVY5xgoMaY/3Hh9MsqwrZCEhYmUnuwia4Muuqeb2wPtleps6FHh+AolPAvsJlLB J+9Bc6/CWu2ddXyDHFQb21QNtxky1qM1+PwyTLGKn2s3vTlGuxY2h1t30Oj5T+Cj 3l4l99685K2PZNHA972uZ0kbmew/Ll7LIiTUL57N73cF/dQvod2gfvZ7hJtGBlon SJ20/U3xvW1ZI6OEH37XNvaLNSMhr+jW7bl+6OQsNB+FqkUdEP05zobbHUjp3s30 HwaAYT0xoWnrPyV9FwyZ0MfOKGp5Ims= -----END CERTIFICATE-----Generated at Wed Sep 17 00:44:07 2025 by rpki-client