$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/523cd05c-117b-3562-871f-67dc9bbb77e0.roa File: 523cd05c-117b-3562-871f-67dc9bbb77e0.roa (raw, json) Hash identifier: udYicwdLuCuhDrqWGud9q92Q9Rutbju2BrT7GhVhTvE= Subject key identifier: 14:9D:99:34:02:1B:81:EC:BE:47:C2:EE:EE:B1:DB:9D:E6:08:BF:E1 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584B1C372BAAB29693AE49739C80 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/523cd05c-117b-3562-871f-67dc9bbb77e0.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 9304 IP address blocks: 158.62.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:2b:aa:b2:96:93:ae:49:73:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=51f9d497-ade7-4359-b403-ac6b32c93fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:38:e7:e6:27:76:75:0d:6b:49:c2:64:d7:b9: e8:65:56:f9:bc:9c:cc:0c:b4:43:d1:62:7d:42:f1: 1e:84:2c:ef:6f:96:2f:7f:3d:a3:d3:3d:c9:4f:db: 66:fe:32:f9:eb:2a:13:bb:f7:8a:eb:1e:45:cf:fc: 62:35:d8:03:be:d0:33:ca:b5:0f:55:d0:cf:e6:f3: d7:4f:9c:72:a3:29:11:39:40:b9:5b:50:85:29:ad: d4:3c:e1:5a:b3:c7:f2:6e:e8:32:2a:18:15:93:68: 4c:a7:84:0d:14:d9:9b:44:41:67:92:84:3d:05:d7: db:db:86:7d:91:bc:f5:6f:6b:c6:a9:06:6b:a3:04: d2:35:60:37:59:47:da:16:d9:c2:be:b3:2f:1a:d1: c0:fe:4d:7f:82:09:80:10:f8:27:19:cb:17:13:f7: 32:f5:79:96:7a:2e:b6:96:bd:2d:46:ab:4b:e0:bb: a4:02:57:c0:c0:d6:9b:93:22:76:d7:83:86:a8:c1: ae:66:29:2b:3a:63:aa:e6:84:d6:ef:07:05:68:55: ab:07:ae:5c:c9:ce:ce:99:19:9e:6f:65:4a:94:05: d4:19:c2:98:33:8f:77:d6:ca:95:da:9c:f8:0a:eb: 87:c0:db:ba:46:c3:4e:b1:88:bf:11:bf:ae:8c:79: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9D:99:34:02:1B:81:EC:BE:47:C2:EE:EE:B1:DB:9D:E6:08:BF:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/523cd05c-117b-3562-871f-67dc9bbb77e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 158.62.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c2:67:ed:54:37:96:cf:5e:24:40:c9:af:5d:c0:94:4a:80: 41:e4:df:55:03:4d:ea:04:a2:3b:8c:0b:e4:d9:11:6e:a0:8a: e2:ca:f2:f9:f9:7a:5e:70:23:40:e4:f8:d3:79:aa:d2:07:20: 5b:39:08:81:ce:50:f2:2d:14:85:ca:40:31:c4:25:7a:26:ff: ae:41:c5:0b:31:f3:d2:42:20:67:16:6b:0d:c8:17:fb:5f:b5: d1:7d:63:df:e7:88:20:88:79:41:de:44:19:49:99:df:4a:da: 50:74:ee:93:30:12:44:f4:c9:76:01:04:7d:1b:df:8a:56:9d: ff:bd:15:8e:0a:29:be:b8:cc:0e:ee:80:43:12:20:e0:98:6e: 07:66:df:ac:32:81:8f:53:68:f9:4f:91:cc:73:ad:3e:34:61: ea:66:5e:95:ce:cf:61:01:d3:aa:ef:54:a4:78:63:2f:9c:cf: 76:39:a2:6d:5b:05:41:fe:3a:79:bc:4e:12:49:8f:20:c4:a4: 67:c3:c2:98:2b:32:9c:41:7f:c2:05:06:80:eb:24:c1:4f:55: 93:5b:f5:ff:7e:b1:ce:c9:82:61:8f:bd:b3:9e:83:66:91:40: a9:60:86:a1:75:65:c4:a7:5c:9b:a8:3d:fc:63:42:28:d0:0a: 4e:24:39:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNyuqspaTrklznIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NTFmOWQ0OTctYWRlNy00MzU5LWI0MDMtYWM2YjMyYzkzZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzjn5id2dQ1rScJk17noZVb5vJzMDLRD0WJ9 QvEehCzvb5Yvfz2j0z3JT9tm/jL56yoTu/eK6x5Fz/xiNdgDvtAzyrUPVdDP5vPX T5xyoykROUC5W1CFKa3UPOFas8fybugyKhgVk2hMp4QNFNmbREFnkoQ9Bdfb24Z9 kbz1b2vGqQZrowTSNWA3WUfaFtnCvrMvGtHA/k1/ggmAEPgnGcsXE/cy9XmWei62 lr0tRqtL4LukAlfAwNabkyJ214OGqMGuZikrOmOq5oTW7wcFaFWrB65cyc7OmRme b2VKlAXUGcKYM4931sqV2pz4CuuHwNu6RsNOsYi/Eb+ujHkIvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSdmTQCG4HsvkfC7u6x253mCL/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNTIzY2QwNWMtMTE3Yi0z NTYyLTg3MWYtNjdkYzliYmI3N2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbCZ+1UN5bPXiRAya9dwJRKgEHk31UDTeoEojuMC+TZEW6giuLK8vn5 el5wI0Dk+NN5qtIHIFs5CIHOUPItFIXKQDHEJXom/65BxQsx89JCIGcWaw3IF/tf tdF9Y9/niCCIeUHeRBlJmd9K2lB07pMwEkT0yXYBBH0b34pWnf+9FY4KKb64zA7u gEMSIOCYbgdm36wygY9TaPlPkcxzrT40YepmXpXOz2EB06rvVKR4Yy+cz3Y5om1b BUH+Onm8ThJJjyDEpGfDwpgrMpxBf8IFBoDrJMFPVZNb9f9+sc7JgmGPvbOeg2aR QKlghqF1ZcSnXJuoPfxjQijQCk4kORo= -----END CERTIFICATE-----Generated at Fri Oct 10 22:01:51 2025 by rpki-client