$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ff94971f-87dc-357c-99a9-98110a2d1389.roa File: ff94971f-87dc-357c-99a9-98110a2d1389.roa (raw, json) Hash identifier: wK8a0lGBif8eIG3xwRk7PPbtHJP0Gx7APqVUaYiRY1M= Subject key identifier: AE:AB:41:BE:E9:E8:D8:9A:9A:A8:23:EB:17:33:2A:50:2B:0D:01:54 Certificate issuer: /CN=1d71aad6-87bb-4b95-b81e-5f6d95d05f03 Certificate serial: 010D0C9F4328584B4081E256CFE983F2DC4D7A80 Authority key identifier: 64:EB:9A:E0:63:A7:1F:14:5A:3B:C2:09:12:04:E7:85:81:F6:88:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ff94971f-87dc-357c-99a9-98110a2d1389.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 53548 IP address blocks: 170.39.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:e2:56:cf:e9:83:f2:dc:4d:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d71aad6-87bb-4b95-b81e-5f6d95d05f03 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=acd973f0-eed2-4757-b9a3-647526576d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:87:5c:a1:3a:ec:e0:10:17:29:c4:75:7d: dd:3c:e7:1c:2f:66:f8:2b:3f:01:d4:49:d8:aa:24: ad:76:ff:bc:57:37:7f:b5:61:a0:a7:00:59:d9:9c: 7a:d2:ea:f5:42:5e:af:3a:61:c6:c2:31:64:a6:6f: 7a:e0:f5:ea:d1:d1:7a:0f:06:a5:ea:fe:ce:de:e6: 04:9e:54:fc:a4:97:f7:82:72:6b:92:a8:d4:72:b7: 5c:6c:9f:8a:42:42:4f:ed:ed:cf:7e:76:2c:99:78: e0:6b:48:76:61:92:95:1b:f4:da:91:18:fc:48:4c: 39:28:8a:22:ed:0c:2a:42:02:25:86:79:e0:9a:cb: 72:b7:c8:69:2c:1f:27:6b:1d:08:8a:45:6e:be:d7: c5:3f:c6:da:b6:05:44:af:f4:27:3c:07:c1:cd:70: a4:8f:97:dd:2c:10:09:41:54:2c:30:f3:cd:47:7e: c5:1a:b5:a0:41:c0:75:66:74:59:cd:0a:f5:70:39: 01:64:f2:8f:93:a7:4a:dd:83:e6:9a:42:76:b9:1b: 9a:c6:83:a8:b8:d0:bf:d7:4d:3f:62:6e:d0:fa:29: 4d:cb:fa:5e:03:1e:35:57:de:96:91:0e:bb:73:d9: 9f:32:1b:b7:a6:59:d2:df:49:10:23:36:ca:b2:b2: 8c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AB:41:BE:E9:E8:D8:9A:9A:A8:23:EB:17:33:2A:50:2B:0D:01:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ff94971f-87dc-357c-99a9-98110a2d1389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.crl X509v3 Authority Key Identifier: keyid:64:EB:9A:E0:63:A7:1F:14:5A:3B:C2:09:12:04:E7:85:81:F6:88:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer sbgp-ipAddrBlock: critical IPv4: 170.39.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:1b:1e:aa:65:b0:75:52:bf:aa:9c:d9:f8:0a:a9:30:09:2d: b4:54:1c:17:d9:da:2b:5a:b2:eb:b7:68:ac:90:65:b3:de:5c: f6:b4:69:20:98:5e:51:53:1b:dc:8b:83:5c:7c:93:28:90:26: b3:42:10:78:2c:77:25:19:22:f6:39:e8:b7:6c:2b:91:d0:f3: 00:42:0b:7c:92:d1:12:0f:f1:64:89:e5:c7:2c:bf:0b:82:3b: ca:0d:42:99:9c:ac:67:b7:21:36:88:6e:02:1e:21:b1:f4:bd: 81:b2:fa:1f:ff:be:b8:6d:ae:71:c0:7e:75:3d:e6:6c:02:87: ee:60:69:86:2b:b0:32:61:7e:8d:d8:14:31:cd:61:31:d2:8d: 42:6b:eb:8e:1f:8a:ba:78:0c:b7:e2:0d:06:a8:14:e7:e8:45: 6d:11:68:29:37:8f:da:e1:e2:0b:9c:15:bc:49:25:db:0c:7d: 1c:85:5d:c8:0a:c7:4a:cd:ff:76:82:0e:2e:89:da:8d:63:aa: 12:16:79:cb:41:8c:71:15:93:6a:c0:c0:05:ea:c8:b0:46:f9: 1d:68:34:08:85:e4:ba:c0:7a:08:15:d6:b1:db:ce:b3:70:61: 37:c7:37:ac:92:5f:22:3f:c7:37:17:bf:e2:9f:60:8e:b7:84: 4a:9c:21:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgeJWz+mD8txNeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ3MWFhZDYtODdiYi00Yjk1LWI4MWUtNWY2ZDk1ZDA1 ZjAzMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YWNkOTczZjAtZWVkMi00NzU3LWI5YTMtNjQ3NTI2NTc2ZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUiHXKE67OAQFynEdX3dPOccL2b4Kz8B1EnY qiStdv+8Vzd/tWGgpwBZ2Zx60ur1Ql6vOmHGwjFkpm964PXq0dF6Dwal6v7O3uYE nlT8pJf3gnJrkqjUcrdcbJ+KQkJP7e3PfnYsmXjga0h2YZKVG/TakRj8SEw5KIoi 7QwqQgIlhnngmstyt8hpLB8nax0IikVuvtfFP8batgVEr/QnPAfBzXCkj5fdLBAJ QVQsMPPNR37FGrWgQcB1ZnRZzQr1cDkBZPKPk6dK3YPmmkJ2uRuaxoOouNC/100/ Ym7Q+ilNy/peAx41V96WkQ67c9mfMhu3plnS30kQIzbKsrKMBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6rQb7p6Niamqgj6xczKlArDQFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZDcx YWFkNi04N2JiLTRiOTUtYjgxZS01ZjZkOTVkMDVmMDMvZmY5NDk3MWYtODdkYy0z NTdjLTk5YTktOTgxMTBhMmQxMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWQ3MWFhZDYtODdiYi00Yjk1LWI4 MWUtNWY2ZDk1ZDA1ZjAzLzFkNzFhYWQ2LTg3YmItNGI5NS1iODFlLTVmNmQ5NWQw NWYwMy5jcmwwHwYDVR0jBBgwFoAUZOua4GOnHxRaO8IJEgTnhYH2iG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZDcxYWFkNi04N2JiLTRiOTUtYjgxZS01ZjZk OTVkMDVmMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqifwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEbHqplsHVSv6qc2fgKqTAJLbRUHBfZ2itasuu3aKyQZbPeXPa0aSCY XlFTG9yLg1x8kyiQJrNCEHgsdyUZIvY56LdsK5HQ8wBCC3yS0RIP8WSJ5ccsvwuC O8oNQpmcrGe3ITaIbgIeIbH0vYGy+h//vrhtrnHAfnU95mwCh+5gaYYrsDJhfo3Y FDHNYTHSjUJr644firp4DLfiDQaoFOfoRW0RaCk3j9rh4gucFbxJJdsMfRyFXcgK x0rN/3aCDi6J2o1jqhIWectBjHEVk2rAwAXqyLBG+R1oNAiF5LrAeggV1rHbzrNw YTfHN6ySXyI/xzcXv+KfYI63hEqcIVo= -----END CERTIFICATE-----Generated at Tue Oct 28 13:11:25 2025 by rpki-client