$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/df896777-0cda-39a9-97db-ae2acb4b9785.roa File: df896777-0cda-39a9-97db-ae2acb4b9785.roa (raw, json) Hash identifier: s8QC6qhL1ROp5sfGVac6TUX+72jIBOxlXZFG7KDCPQQ= Subject key identifier: 1D:EA:C4:5F:DF:95:A1:F7:AD:74:7C:70:E3:F2:E4:3A:2F:C5:10:11 Certificate issuer: /CN=4dfb879f-7966-496a-b35e-d766981846ee Certificate serial: 010D0C9F4328584B2FC1955EC28B71AC94164A00 Authority key identifier: 47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/df896777-0cda-39a9-97db-ae2acb4b9785.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 271 IP address blocks: 199.60.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:95:5e:c2:8b:71:ac:94:16:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dfb879f-7966-496a-b35e-d766981846ee Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=98ddd4ce-6dda-48ea-8e11-2f4004c81137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8f:07:01:ca:05:4a:39:bc:06:a1:b6:36:d9: 44:df:5a:1f:17:7f:40:5c:8a:29:09:63:50:a9:d9: a3:06:e2:35:b6:a4:02:f7:e7:c3:c8:f5:de:b1:1d: 55:b7:6d:4f:80:ed:bd:c0:22:aa:1d:9a:88:54:50: dc:7d:22:c7:4c:73:a3:ec:f7:73:83:1d:8d:97:e7: c3:c0:6a:f7:99:25:d1:1e:b6:54:5d:4f:d4:33:c5: 53:21:cf:8c:90:46:3f:66:69:d4:34:83:a3:30:b3: ec:4b:24:e5:69:8b:a7:10:e5:3f:32:62:7c:70:07: 9b:42:29:a4:a0:43:97:51:a0:ff:96:90:9e:70:83: a0:d3:34:58:13:1c:ef:59:ac:5d:84:58:57:9a:b2: 61:b5:c6:0b:ae:a7:32:cc:ba:64:2a:d2:75:2c:1d: a5:7c:a6:61:17:6a:d8:51:b6:4b:f3:81:a2:f5:26: 6a:e7:1f:06:6d:b6:63:8b:b3:c7:b3:29:89:cb:d8: 51:d3:d3:e2:57:72:80:b7:ea:25:f6:f5:e3:22:f8: b6:28:97:b4:be:53:87:76:54:0a:41:2a:14:f4:b5: a9:37:de:ec:9a:0b:50:44:24:d4:ac:86:ab:11:96: 9b:77:32:0d:42:90:7b:65:24:76:f6:d3:25:43:a8: e8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EA:C4:5F:DF:95:A1:F7:AD:74:7C:70:E3:F2:E4:3A:2F:C5:10:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/df896777-0cda-39a9-97db-ae2acb4b9785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.crl X509v3 Authority Key Identifier: keyid:47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer sbgp-ipAddrBlock: critical IPv4: 199.60.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:04:e4:13:4b:55:c4:fe:08:75:5e:82:d0:5e:92:a0:c8:e7: 86:1f:17:6f:e9:23:2c:33:77:f6:04:b1:94:f0:2c:36:3d:37: 0b:33:d3:45:59:26:e4:d9:f4:37:11:6b:6b:19:8c:42:69:b0: a1:bb:37:20:b4:b2:74:fe:70:1f:ae:95:62:2a:a5:1b:0a:72: ca:d0:69:b8:9f:4d:53:20:d9:97:13:2f:b3:6b:23:bc:4a:ea: f4:3c:2f:8b:92:23:0d:56:1b:32:17:3a:a5:0f:23:86:31:21: 1c:76:8f:98:29:d2:c8:07:63:f7:52:a5:aa:fa:fe:7a:0c:9e: 6b:a8:6f:43:cc:80:e6:37:a5:54:e7:d5:1a:e3:ca:e7:31:2a: fa:c0:67:4c:53:dc:a6:46:f0:38:8f:55:d9:c6:83:4f:7e:be: 77:eb:38:71:e9:94:12:1f:35:d0:06:27:92:cc:96:2c:49:5c: 53:fc:a8:fc:30:17:d3:05:b3:a2:06:2e:0f:3a:b9:f0:b7:58: 0d:bf:38:d4:1f:3a:ec:eb:2d:86:6f:51:2e:5e:5e:8f:80:1a: 7f:98:6a:55:cf:88:15:98:ca:d4:a3:b1:d7:fc:3d:ed:2b:eb: 7c:dc:b3:c8:51:ff:0a:3f:6e:0d:55:46:94:c8:05:d2:5d:ac: 06:a4:ff:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZVewotxrJQWSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRmYjg3OWYtNzk2Ni00OTZhLWIzNWUtZDc2Njk4MTg0 NmVlMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk OThkZGQ0Y2UtNmRkYS00OGVhLThlMTEtMmY0MDA0YzgxMTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY8HAcoFSjm8BqG2NtlE31ofF39AXIopCWNQ qdmjBuI1tqQC9+fDyPXesR1Vt21PgO29wCKqHZqIVFDcfSLHTHOj7Pdzgx2Nl+fD wGr3mSXRHrZUXU/UM8VTIc+MkEY/ZmnUNIOjMLPsSyTlaYunEOU/MmJ8cAebQimk oEOXUaD/lpCecIOg0zRYExzvWaxdhFhXmrJhtcYLrqcyzLpkKtJ1LB2lfKZhF2rY UbZL84Gi9SZq5x8GbbZji7PHsymJy9hR09PiV3KAt+ol9vXjIvi2KJe0vlOHdlQK QSoU9LWpN97smgtQRCTUrIarEZabdzINQpB7ZSR29tMlQ6joewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3qxF/flaH3rXR8cOPy5DovxRARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZGZi ODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2OTgxODQ2ZWUvZGY4OTY3NzctMGNkYS0z OWE5LTk3ZGItYWUyYWNiNGI5Nzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGRmYjg3OWYtNzk2Ni00OTZhLWIz NWUtZDc2Njk4MTg0NmVlLzRkZmI4NzlmLTc5NjYtNDk2YS1iMzVlLWQ3NjY5ODE4 NDZlZS5jcmwwHwYDVR0jBBgwFoAUR6CJkWx/R1P7uCj/Q02WxQ8CpR0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZGZiODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2 OTgxODQ2ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzx3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsE5BNLVcT+CHVegtBekqDI54YfF2/pIywzd/YEsZTwLDY9Nwsz00VZ JuTZ9DcRa2sZjEJpsKG7NyC0snT+cB+ulWIqpRsKcsrQabifTVMg2ZcTL7NrI7xK 6vQ8L4uSIw1WGzIXOqUPI4YxIRx2j5gp0sgHY/dSpar6/noMnmuob0PMgOY3pVTn 1RrjyucxKvrAZ0xT3KZG8DiPVdnGg09+vnfrOHHplBIfNdAGJ5LMlixJXFP8qPww F9MFs6IGLg86ufC3WA2/ONQfOuzrLYZvUS5eXo+AGn+YalXPiBWYytSjsdf8Pe0r 63zcs8hR/wo/bg1VRpTIBdJdrAak//Y= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:24 2025 by rpki-client