$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/0aca10d1-6d54-3e58-9c39-60203235636a.roa File: 0aca10d1-6d54-3e58-9c39-60203235636a.roa (raw, json) Hash identifier: xsTlfGoPwg3IGb7oLMBRg/nvga3WnmS+zh6gGQ60Xso= Subject key identifier: 5B:DF:7E:60:56:BD:E8:BC:F4:67:27:77:8F:C5:D3:44:66:7A:D6:50 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584B8EACDC1B09E1018E00383360 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/0aca10d1-6d54-3e58-9c39-60203235636a.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 170.176.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:dc:1b:09:e1:01:8e:00:38:33:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=04ade1e4-f0b1-498f-92c0-2f80528f1382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c4:40:97:a2:41:50:b7:95:0b:30:67:3d:0c: f5:97:73:fb:88:4d:f0:1b:3a:b9:df:8e:3e:94:e1: 0e:af:93:e2:3b:71:75:21:d2:c1:45:54:b0:79:52: 08:9d:19:3a:b4:96:34:4a:13:d9:d3:13:9d:30:4c: 4c:2b:8e:30:bc:85:5f:53:0f:80:99:ef:78:82:97: ec:1b:50:93:7c:fc:ae:a5:7f:07:8c:d7:ea:b8:5c: 01:79:c4:4e:05:ea:1d:3e:db:fa:dc:b8:de:50:28: 10:0b:e3:0f:fe:25:e8:b7:18:6b:b3:2a:a7:7b:be: b5:cd:cd:94:ca:fa:f9:52:bb:46:d1:81:39:2f:0f: ab:ca:d0:56:a8:f2:30:4f:c3:2d:e1:02:a2:0d:d7: 38:35:e1:9a:a3:1a:d6:af:5c:c5:3f:3f:58:9d:1d: 12:67:7b:2c:f4:72:37:32:d5:66:7b:41:82:07:73: dc:17:2a:00:4d:26:cd:58:64:bb:72:7d:0d:dc:eb: 35:d9:f0:3a:dc:c6:c3:e0:3a:c3:95:44:a9:b7:ae: bd:e7:12:0f:38:ad:3d:05:cf:78:86:34:e3:d7:1b: 8f:c9:fa:b1:1b:a6:60:90:82:da:b9:94:05:f8:cc: e9:39:dd:76:a9:95:b2:e8:e5:a0:5d:bb:7a:1a:eb: 2c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DF:7E:60:56:BD:E8:BC:F4:67:27:77:8F:C5:D3:44:66:7A:D6:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/0aca10d1-6d54-3e58-9c39-60203235636a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:31:13:ce:4d:1b:2f:81:06:6a:d5:24:ef:71:72:75:15:b0: df:31:e9:93:8e:e0:b0:ae:b9:e0:ba:25:8a:cb:da:ee:e6:c4: 16:19:a3:9c:36:df:f2:a0:1a:15:26:9d:84:d5:ee:81:c0:cd: 67:5e:fa:3b:b1:52:5e:da:7c:f8:c9:3d:cc:6e:ef:59:e0:73: d3:6a:56:78:fc:8b:1c:f0:01:29:21:1b:0e:62:d7:90:7c:c0: 48:4a:a5:e7:a8:a2:40:b8:00:b4:fa:b4:62:5c:bd:7c:43:0b: 14:7e:d5:82:d0:04:7b:1e:22:dd:c3:96:62:02:15:95:cf:58: af:d1:a1:1f:af:67:4e:2c:2d:83:b7:22:ed:3e:35:c3:99:24: b6:a9:e1:14:12:21:57:39:d2:fe:86:f6:32:32:05:fb:b8:a8: 7b:b0:3d:75:fd:7d:e7:e8:ae:bf:82:61:d8:c5:07:32:53:69: 4d:53:11:8c:97:93:0f:d7:ca:36:b8:cf:9d:9a:12:ce:8b:9e: 98:cd:d0:5f:d5:fa:3f:94:76:a3:38:09:8e:6d:d5:03:dc:cb: 23:34:fe:d7:b6:02:e0:e1:41:4c:a0:ab:3d:9d:3a:b4:34:09: c2:9f:9f:99:4b:db:64:3d:cc:87:3c:a9:f7:d5:3e:2b:cd:a0: 79:85:fa:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNwbCeEBjgA4M2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MDRhZGUxZTQtZjBiMS00OThmLTkyYzAtMmY4MDUyOGYxMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8RAl6JBULeVCzBnPQz1l3P7iE3wGzq5344+ lOEOr5PiO3F1IdLBRVSweVIInRk6tJY0ShPZ0xOdMExMK44wvIVfUw+Ame94gpfs G1CTfPyupX8HjNfquFwBecROBeodPtv63LjeUCgQC+MP/iXotxhrsyqne761zc2U yvr5UrtG0YE5Lw+rytBWqPIwT8Mt4QKiDdc4NeGaoxrWr1zFPz9YnR0SZ3ss9HI3 MtVme0GCB3PcFyoATSbNWGS7cn0N3Os12fA63MbD4DrDlUSpt6695xIPOK09Bc94 hjTj1xuPyfqxG6ZgkILauZQF+MzpOd12qZWy6OWgXbt6GussMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvffmBWvei89Gcnd4/F00RmetZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvMGFjYTEwZDEtNmQ1NC0z ZTU4LTljMzktNjAyMDMyMzU2MzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcxE85NGy+BBmrVJO9xcnUVsN8x6ZOO4LCuueC6JYrL2u7mxBYZo5w2 3/KgGhUmnYTV7oHAzWde+juxUl7afPjJPcxu71ngc9NqVnj8ixzwASkhGw5i15B8 wEhKpeeookC4ALT6tGJcvXxDCxR+1YLQBHseIt3DlmICFZXPWK/RoR+vZ04sLYO3 Iu0+NcOZJLap4RQSIVc50v6G9jIyBfu4qHuwPXX9feforr+CYdjFBzJTaU1TEYyX kw/Xyja4z52aEs6LnpjN0F/V+j+UdqM4CY5t1QPcyyM0/te2AuDhQUygqz2dOrQ0 CcKfn5lL22Q9zIc8qffVPivNoHmF+u4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:37 2025 by rpki-client