$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa File: b7751a83-4d77-3534-a692-22c9f15e2c5e.roa (raw, json) Hash identifier: DOTdR1EtRrn+8CxUqT3aOrh/VeMt3yfHPb7V4+FVqls= Subject key identifier: C2:A5:3F:9D:32:DB:E3:22:75:84:5A:89:0C:5F:7C:56:07:1F:E4:55 Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F4328584B1F017177247892E3F5E7D600 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 199.187.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:71:77:24:78:92:e3:f5:e7:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=2759f023-9bcc-42ce-a592-d84481c6b4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:a3:81:3b:d7:71:cd:55:5e:f7:d0:ae:3f: 9a:ce:87:c5:c8:d3:a3:bf:4f:84:4a:ad:4f:04:a8: 0b:30:fa:79:1f:f2:69:9c:96:bf:20:61:fb:6d:ef: e5:0a:18:e7:2a:0c:ca:40:cb:fd:60:10:a6:ac:65: c0:32:e8:86:3e:c7:73:31:94:a6:ba:eb:8a:d9:1b: db:75:b5:a4:ab:60:e2:a2:dc:a1:ee:03:fd:58:f8: 23:bb:27:0e:c2:42:f6:24:b6:e0:a2:ce:e4:92:f2: 86:c6:e1:77:53:e2:be:7a:74:70:cc:5a:9b:96:54: 74:9b:99:01:53:a6:8a:30:db:e1:ea:94:a1:8a:e1: 2a:c1:5f:bf:82:d3:ba:e5:fa:78:5b:50:bc:15:4a: 45:3d:30:c5:b5:2f:ab:6e:5c:ac:82:ac:42:fb:d3: 27:23:02:06:a6:11:07:51:42:dd:ee:44:2b:a2:f4: d5:c1:36:c4:bd:a7:63:6d:96:f4:93:50:49:23:20: 60:25:47:03:44:75:48:69:d5:4c:51:fc:c9:c2:1d: ee:d4:59:b5:70:0e:89:08:3a:6d:3a:e7:39:26:a8: ef:2d:f0:1e:86:e8:19:94:65:c1:34:0a:12:57:18: aa:7c:ee:6d:96:6d:bf:02:ac:17:3a:c1:66:25:1b: d8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A5:3F:9D:32:DB:E3:22:75:84:5A:89:0C:5F:7C:56:07:1F:E4:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:dd:50:38:85:d6:c9:3d:f1:e2:c8:85:08:97:40:07:99:79: ae:4c:86:3d:4e:9e:16:ba:8f:c7:de:18:64:ab:33:f2:5f:e5: de:88:e6:78:f4:23:3c:77:57:0c:72:cd:e7:e9:af:29:90:d3: 0d:42:2d:0b:f2:0f:14:d9:a8:ba:6a:c8:83:a1:0f:7b:4b:19: 87:4b:04:5e:4e:6e:64:ca:fd:f4:8a:d6:4f:cb:73:af:c1:a6: dd:4f:b6:f1:77:20:b6:db:69:e7:44:9c:1b:bf:8a:e0:88:ad: f8:36:cc:93:31:05:e8:cc:ec:f1:0b:42:ce:de:54:e0:32:ac: 19:b1:cf:2f:f6:dd:2f:b1:d7:bb:3c:fe:c4:3a:ca:59:34:5c: a9:5f:02:71:89:04:78:21:c5:fe:5c:ae:2d:ca:22:ab:2d:fb: ab:38:8d:3a:00:1f:96:0a:e4:a7:4f:7d:81:ef:15:08:f8:03: f5:c4:4b:7d:c8:b6:50:77:47:8a:b4:d2:26:77:67:d8:ef:3a: 6b:20:95:6f:4f:1d:ac:dd:95:d2:b1:e8:f7:ae:5c:52:a8:2d: 2c:97:1a:d8:ec:66:cd:b8:fe:24:55:6a:5a:21:37:eb:bc:b1: 25:8c:21:cb:5c:51:63:47:48:2a:56:11:db:3e:88:f4:2b:62: 39:07:f8:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAXF3JHiS4/Xn1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk Mjc1OWYwMjMtOWJjYy00MmNlLWE1OTItZDg0NDgxYzZiNGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHmjgTvXcc1VXvfQrj+azofFyNOjv0+ESq1P BKgLMPp5H/JpnJa/IGH7be/lChjnKgzKQMv9YBCmrGXAMuiGPsdzMZSmuuuK2Rvb dbWkq2Diotyh7gP9WPgjuycOwkL2JLbgos7kkvKGxuF3U+K+enRwzFqbllR0m5kB U6aKMNvh6pShiuEqwV+/gtO65fp4W1C8FUpFPTDFtS+rblysgqxC+9MnIwIGphEH UULd7kQrovTVwTbEvadjbZb0k1BJIyBgJUcDRHVIadVMUfzJwh3u1Fm1cA6JCDpt Ouc5JqjvLfAehugZlGXBNAoSVxiqfO5tlm2/AqwXOsFmJRvYRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKlP50y2+MidYRaiQxffFYHH+RVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvYjc3NTFhODMtNGQ3Ny0z NTM0LWE2OTItMjJjOWYxNWUyYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7uqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3dUDiF1sk98eLIhQiXQAeZea5Mhj1Onha6j8feGGSrM/Jf5d6I5nj0 Izx3VwxyzefprymQ0w1CLQvyDxTZqLpqyIOhD3tLGYdLBF5ObmTK/fSK1k/Lc6/B pt1PtvF3ILbbaedEnBu/iuCIrfg2zJMxBejM7PELQs7eVOAyrBmxzy/23S+x17s8 /sQ6ylk0XKlfAnGJBHghxf5cri3KIqst+6s4jToAH5YK5KdPfYHvFQj4A/XES33I tlB3R4q00iZ3Z9jvOmsglW9PHazdldKx6PeuXFKoLSyXGtjsZs24/iRValohN+u8 sSWMIctcUWNHSCpWEds+iPQrYjkH+Mw= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:25 2025 by rpki-client