$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/d428c59e-2516-3824-8041-36df18452c2d.roa File: d428c59e-2516-3824-8041-36df18452c2d.roa (raw, json) Hash identifier: +ts+nTGNAfo0wK2EO948mUd/oCizG3OIHxKJcy9k44I= Subject key identifier: 14:14:45:97:4F:5C:33:65:E3:1B:68:7D:26:4A:FB:1B:17:A4:34:9C Certificate issuer: /CN=17321389-82c8-40ad-969d-f355a789f579 Certificate serial: 010D0C9F4328584B2CF6DD5135934A85E9472820 Authority key identifier: F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/d428c59e-2516-3824-8041-36df18452c2d.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 170.39.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:dd:51:35:93:4a:85:e9:47:28:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17321389-82c8-40ad-969d-f355a789f579 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=0077f8a1-cda3-4e1f-af5e-a99d656693e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:c0:0e:ef:60:28:2f:a6:40:63:2d:91:b9: 70:f1:76:1e:5d:b0:fa:79:4e:ee:87:bd:24:5b:a5: 8a:8f:93:30:c8:48:3e:6d:dd:f4:0f:2a:56:a8:53: 88:1a:df:8c:05:73:35:19:4b:0e:16:e6:d7:fe:3e: f9:eb:47:d5:8a:ee:ad:06:e7:10:aa:dd:37:ca:9f: 19:cd:55:32:34:8f:54:e3:e8:e2:9b:ec:9e:7f:89: f3:22:38:2b:57:46:b4:d7:cc:de:f5:25:66:87:ce: 0e:e3:5f:8d:4e:84:41:4b:35:39:2b:ea:14:fd:e5: 5d:d7:46:50:30:e0:9d:03:c6:de:54:93:1d:a0:4e: 8a:e4:b7:ae:67:b6:b7:36:9b:2f:64:38:7e:d1:39: 69:74:d8:7b:a6:0c:df:87:70:5a:9c:f5:c2:94:b9: 25:a4:ac:2c:86:d2:09:8b:03:d9:1c:34:80:e9:ac: 28:2c:a2:37:e9:68:c2:ff:b2:68:8b:67:14:76:58: 2e:16:75:e0:7a:ff:a4:98:0f:dd:06:46:80:9d:ee: 89:57:20:5b:d0:07:aa:bc:77:d8:2a:ac:b8:4a:3f: 92:aa:fc:56:da:27:fb:42:ab:10:cd:50:6c:e4:ba: 7f:84:76:dc:8a:a5:6d:86:98:dc:6b:58:bb:a7:53: 7d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:14:45:97:4F:5C:33:65:E3:1B:68:7D:26:4A:FB:1B:17:A4:34:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/d428c59e-2516-3824-8041-36df18452c2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl X509v3 Authority Key Identifier: keyid:F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer sbgp-ipAddrBlock: critical IPv4: 170.39.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a8:b0:1f:a1:5f:79:36:6d:05:5d:4a:10:79:c5:b6:00:dd: 91:f1:06:c9:1f:a2:e6:78:df:7d:f1:53:ad:c7:36:1c:df:c8: 28:4a:62:cd:12:c8:77:59:80:a8:93:c8:44:a3:25:b3:5c:85: 25:64:c3:23:33:9f:6b:da:e7:c6:84:9f:ee:09:7d:42:68:61: 6b:50:7b:2e:f7:09:04:4b:4f:2a:29:b5:c9:a9:57:b8:5d:c4: b3:ce:ed:0a:b2:c3:6a:46:c2:f1:d6:75:dd:5b:2d:08:61:6d: 9d:37:6d:73:d4:ee:15:2c:cd:cc:36:0f:bf:4f:7a:1c:79:1c: 98:c7:96:3c:d7:93:7e:19:56:52:df:2d:ed:7b:82:63:65:6a: 3d:e4:c9:ae:e8:ba:6b:0e:51:07:86:24:92:56:ba:34:64:13: 99:ad:62:f5:8f:ac:0d:83:6f:17:cc:e1:64:03:a6:98:8b:5d: bc:08:80:5a:05:9d:59:e7:86:da:cd:a1:c2:b0:1b:3f:7c:06: 5a:04:6e:2d:6f:81:c4:b9:96:4b:08:46:eb:4c:f2:57:c5:2b: db:6d:5d:64:5d:d5:25:c8:be:20:36:83:f6:2c:1a:83:80:16: 13:20:d0:1a:90:08:90:e9:bd:e8:fd:91:0b:70:2b:a0:0e:bf: 6b:f9:38:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9t1RNZNKhelHKCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTczMjEzODktODJjOC00MGFkLTk2OWQtZjM1NWE3ODlm NTc5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MDA3N2Y4YTEtY2RhMy00ZTFmLWFmNWUtYTk5ZDY1NjY5M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGnADu9gKC+mQGMtkblw8XYeXbD6eU7uh70k W6WKj5MwyEg+bd30DypWqFOIGt+MBXM1GUsOFubX/j7560fViu6tBucQqt03yp8Z zVUyNI9U4+jim+yef4nzIjgrV0a018ze9SVmh84O41+NToRBSzU5K+oU/eVd10ZQ MOCdA8beVJMdoE6K5LeuZ7a3NpsvZDh+0TlpdNh7pgzfh3BanPXClLklpKwshtIJ iwPZHDSA6awoLKI36WjC/7Joi2cUdlguFnXgev+kmA/dBkaAne6JVyBb0AeqvHfY Kqy4Sj+SqvxW2if7QqsQzVBs5Lp/hHbciqVthpjca1i7p1N9cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQURZdPXDNl4xtofSZK+xsXpDScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzMy MTM4OS04MmM4LTQwYWQtOTY5ZC1mMzU1YTc4OWY1NzkvZDQyOGM1OWUtMjUxNi0z ODI0LTgwNDEtMzZkZjE4NDUyYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTczMjEzODktODJjOC00MGFkLTk2 OWQtZjM1NWE3ODlmNTc5LzE3MzIxMzg5LTgyYzgtNDBhZC05NjlkLWYzNTVhNzg5 ZjU3OS5jcmwwHwYDVR0jBBgwFoAU8geygR3uIKMb0ocE2pwdgM76tF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzMyMTM4OS04MmM4LTQwYWQtOTY5ZC1mMzU1 YTc4OWY1NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqieDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaosB+hX3k2bQVdShB5xbYA3ZHxBskfouZ4333xU63HNhzfyChKYs0S yHdZgKiTyESjJbNchSVkwyMzn2va58aEn+4JfUJoYWtQey73CQRLTyoptcmpV7hd xLPO7Qqyw2pGwvHWdd1bLQhhbZ03bXPU7hUszcw2D79Pehx5HJjHljzXk34ZVlLf Le17gmNlaj3kya7oumsOUQeGJJJWujRkE5mtYvWPrA2DbxfM4WQDppiLXbwIgFoF nVnnhtrNocKwGz98BloEbi1vgcS5lksIRutM8lfFK9ttXWRd1SXIviA2g/YsGoOA FhMg0BqQCJDpvej9kQtwK6AOv2v5OD0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:09 2025 by rpki-client