$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa File: 99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa (raw, json) Hash identifier: rECpsFU2pdUBT2GUQbbEBmTqfgnGm67vo4NIXbYLJCY= Subject key identifier: 76:F5:08:31:4C:42:EC:ED:B0:EC:89:E3:92:BC:56:09:F7:6B:52:28 Certificate issuer: /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Certificate serial: 010D0C9F4328584B27617F641CA31FFAB3F6E120 Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 23675 IP address blocks: 208.70.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:7f:64:1c:a3:1f:fa:b3:f6:e1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=b34ad4b3-ab67-4f52-8e64-d5f99ad702d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:de:47:db:35:8e:23:fa:da:df:cf:bd:c4:fa: be:df:10:c4:16:c1:de:29:6a:6a:34:0c:a2:b9:f9: 4c:0e:dd:5c:2a:66:5f:0d:cd:d9:c3:71:2c:d4:e8: 1f:1a:aa:ec:2f:b1:73:83:0b:5e:60:dd:00:d4:de: 43:22:f0:39:ae:3c:0e:0a:28:b7:75:22:c5:ae:d4: 2c:cb:be:c7:f8:ee:51:45:b3:89:cc:63:23:65:c5: 97:f6:9a:c0:c1:73:57:05:05:ac:c1:f0:8f:85:6c: 81:29:8f:1d:dc:19:af:49:7b:ea:d2:7f:b8:1d:48: 30:5d:8e:d0:cf:05:9a:f3:de:f0:0b:9d:96:5a:2e: 1a:c3:e4:26:68:38:7e:7f:93:34:9a:81:11:3f:39: b9:df:e9:2a:a2:9c:78:f2:21:2c:5a:b7:b7:55:38: f6:d6:51:53:f1:62:34:69:96:bb:64:78:06:d4:96: b3:4f:0f:32:d5:f3:94:1e:86:2c:88:29:26:fe:59: 7f:de:b6:a4:a5:30:ea:96:bf:c1:3a:2b:68:a2:6b: 9b:2b:8f:f5:8a:85:c3:35:07:55:49:c9:7c:39:94: db:a7:5f:83:a9:ac:71:7f:94:97:0d:64:d1:ff:2f: ed:cd:84:55:e1:0e:62:c3:8e:0a:23:14:c3:f5:1c: 4c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F5:08:31:4C:42:EC:ED:B0:EC:89:E3:92:BC:56:09:F7:6B:52:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl X509v3 Authority Key Identifier: keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer sbgp-ipAddrBlock: critical IPv4: 208.70.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:9a:9a:d2:cf:c2:33:f0:0f:2e:78:1c:db:73:e6:2c:88:fb: 52:7a:1b:56:db:c5:db:3d:83:25:c7:7d:b6:77:b3:c4:87:3d: 9e:a3:73:8b:02:21:ae:ba:01:fb:a1:01:30:8a:46:8a:87:b2: 4d:27:2f:01:83:7a:2f:3e:82:88:f4:83:f3:98:93:51:82:6c: 6a:48:d8:0d:2a:d0:e9:74:ee:0c:c2:25:05:ff:bc:84:9e:43: 61:a0:bf:93:78:86:4e:1c:a3:84:16:6f:b2:03:4f:b1:8e:e4: ca:03:2c:a0:60:7a:47:f5:15:92:28:10:89:e8:54:7e:f1:62: 3d:46:5c:44:95:f9:92:12:f7:30:83:21:4a:10:83:82:b3:1c: 89:bb:db:56:e4:b7:b8:19:37:b9:9a:c3:e0:e1:8a:95:1d:7c: 34:a6:c5:4a:b2:2f:32:78:6a:c5:eb:14:a6:bd:a4:29:d2:cb: 1f:d2:80:05:ed:5e:1c:a7:96:d7:16:e5:02:41:93:26:2f:ec: ac:d1:bc:ff:b2:53:40:95:58:35:cc:71:02:a4:02:14:46:4d: e9:06:f2:4f:b2:dd:58:e5:ff:08:5f:28:12:af:ef:1a:14:a9: f7:13:ce:84:ce:04:f0:0e:f1:b5:49:ad:b4:94:53:aa:43:30: 13:a6:d9:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYX9kHKMf+rP24SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzdjNGM2MmEtM2Y2ZC00YzFjLThiZGItMzcwNjI0NmNi ZmQ2MB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk YjM0YWQ0YjMtYWI2Ny00ZjUyLThlNjQtZDVmOTlhZDcwMmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj95H2zWOI/ra38+9xPq+3xDEFsHeKWpqNAyi uflMDt1cKmZfDc3Zw3Es1OgfGqrsL7FzgwteYN0A1N5DIvA5rjwOCii3dSLFrtQs y77H+O5RRbOJzGMjZcWX9prAwXNXBQWswfCPhWyBKY8d3BmvSXvq0n+4HUgwXY7Q zwWa897wC52WWi4aw+QmaDh+f5M0moERPzm53+kqopx48iEsWre3VTj21lFT8WI0 aZa7ZHgG1JazTw8y1fOUHoYsiCkm/ll/3rakpTDqlr/BOitoomubK4/1ioXDNQdV Scl8OZTbp1+Dqaxxf5SXDWTR/y/tzYRV4Q5iw44KIxTD9RxM1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHb1CDFMQuztsOyJ45K8Vgn3a1IoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0 YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2MjQ2Y2JmZDYvOTllMGEyYjItYmI2Ny0z N2JhLTgzN2EtYjU0ZjBhYzY4NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzdjNGM2MmEtM2Y2ZC00YzFjLThi ZGItMzcwNjI0NmNiZmQ2Lzc3YzRjNjJhLTNmNmQtNGMxYy04YmRiLTM3MDYyNDZj YmZkNi5jcmwwHwYDVR0jBBgwFoAU4p3oDYbgi/0iz/5leJQg8L1y3xMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2 MjQ2Y2JmZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6amtLPwjPwDy54HNtz5iyI+1J6G1bbxds9gyXHfbZ3s8SHPZ6jc4sC Ia66AfuhATCKRoqHsk0nLwGDei8+goj0g/OYk1GCbGpI2A0q0Ol07gzCJQX/vISe Q2Ggv5N4hk4co4QWb7IDT7GO5MoDLKBgekf1FZIoEInoVH7xYj1GXESV+ZIS9zCD IUoQg4KzHIm721bkt7gZN7maw+DhipUdfDSmxUqyLzJ4asXrFKa9pCnSyx/SgAXt XhynltcW5QJBkyYv7KzRvP+yU0CVWDXMcQKkAhRGTekG8k+y3Vjl/whfKBKv7xoU qfcTzoTOBPAO8bVJrbSUU6pDMBOm2bw= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:15 2025 by rpki-client