$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d5c94cc-f193-3b5b-a4af-7951c6865f2a.roa File: 4d5c94cc-f193-3b5b-a4af-7951c6865f2a.roa (raw, json) Hash identifier: 2ZawN2ru8lE9ZHukKjAfeTX7+JhU/K3sFwidYimoIA0= Subject key identifier: CF:8B:C6:E1:E8:A4:35:55:A8:41:96:D3:38:0C:57:26:A4:0D:49:4E Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76BFB2CABE62520D694EF0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d5c94cc-f193-3b5b-a4af-7951c6865f2a.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 199.27.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:bf:b2:ca:be:62:52:0d:69:4e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=79ec5c3a-93f0-4e0f-b772-c44501f9a0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dd:ec:54:77:04:94:e5:43:f6:38:47:61:e4: 19:89:d3:1e:65:e4:e5:83:67:37:df:32:c8:1b:04: 14:78:06:66:1c:83:44:86:c0:fa:16:60:1e:2f:c1: 87:29:d4:1f:16:3e:de:3b:b0:d7:ec:d9:ae:fc:bb: 5c:72:06:3d:6a:f8:81:79:01:7f:d0:31:6a:eb:eb: c4:96:27:51:fc:17:9e:f4:06:bc:6f:08:4b:72:9a: cc:da:f4:48:6e:c1:5f:bf:d1:d4:5b:33:e2:e9:18: 06:32:e4:68:1c:0d:ba:c9:be:78:12:02:2c:a8:7c: af:71:dd:8b:27:fd:37:a1:1e:13:ad:86:3d:a7:20: 96:ef:9d:b3:81:c8:94:0c:c9:c7:6c:e7:b7:78:0d: e7:7f:02:0f:38:e1:fb:94:5e:bc:33:5f:2a:73:2b: d6:94:21:55:a4:44:7a:5c:d4:0e:87:1a:98:d7:bd: b7:5e:7d:de:b1:04:e6:c1:25:78:c3:dc:cd:93:58: ef:79:d4:f7:94:1c:8f:88:ab:29:f4:d8:15:f4:ea: 30:54:48:49:7c:35:e3:5e:f7:f8:9c:c8:6f:a6:fe: ea:5b:f4:12:ef:23:13:35:c6:92:8d:c3:2e:d5:98: 10:53:25:31:15:4f:da:80:cb:11:25:22:77:09:23: de:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8B:C6:E1:E8:A4:35:55:A8:41:96:D3:38:0C:57:26:A4:0D:49:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d5c94cc-f193-3b5b-a4af-7951c6865f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.27.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c3:73:b3:84:5c:78:ed:e0:2d:04:48:9d:00:b0:f8:e8:db: cc:9b:18:49:cc:25:3e:44:00:d9:cd:e9:76:c6:2a:a7:b6:ad: 70:c0:11:f7:b1:b5:90:ba:4b:38:11:05:8a:32:31:68:83:2b: df:d6:87:21:ca:38:f7:9d:a3:c7:d4:95:28:00:bc:14:3b:9e: d5:54:46:f0:31:ef:49:bb:5b:be:79:80:43:2b:cb:fe:94:9d: 29:78:2a:95:50:9d:2d:61:f1:e4:01:f3:12:33:c3:8b:24:19: 1b:40:39:cb:23:d2:8c:f3:ef:ab:3a:85:40:aa:81:c7:3b:95: ef:26:1b:b7:84:9d:3b:88:e0:92:e9:a5:71:07:5d:79:1e:d4: ac:01:bf:56:6b:d0:97:ad:08:8c:4c:c4:4a:93:d8:60:d7:4e: fb:e9:6a:14:70:cd:98:0f:8d:dc:64:e2:94:e5:bc:84:a0:22: ad:28:11:78:55:78:46:79:3a:23:bd:1f:c9:55:03:90:80:e0: e9:40:fa:a4:a9:24:0e:ae:86:40:3b:3f:5e:89:2e:44:3b:52: c4:ee:69:0d:9d:c8:a0:b4:6e:14:54:f7:ba:cb:00:03:45:72: 34:40:f9:a0:5d:8a:2b:5d:9b:a1:e1:0d:4f:0a:d8:2c:c4:63: a5:89:18:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdr+yyr5iUg1pTvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NzllYzVjM2EtOTNmMC00ZTBmLWI3NzItYzQ0NTAxZjlhMGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo93sVHcElOVD9jhHYeQZidMeZeTlg2c33zLI GwQUeAZmHINEhsD6FmAeL8GHKdQfFj7eO7DX7Nmu/LtccgY9aviBeQF/0DFq6+vE lidR/Bee9Aa8bwhLcprM2vRIbsFfv9HUWzPi6RgGMuRoHA26yb54EgIsqHyvcd2L J/03oR4TrYY9pyCW752zgciUDMnHbOe3eA3nfwIPOOH7lF68M18qcyvWlCFVpER6 XNQOhxqY1723Xn3esQTmwSV4w9zNk1jvedT3lByPiKsp9NgV9OowVEhJfDXjXvf4 nMhvpv7qW/QS7yMTNcaSjcMu1ZgQUyUxFU/agMsRJSJ3CSPeoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+LxuHopDVVqEGW0zgMVyakDUlOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNGQ1Yzk0Y2MtZjE5My0z YjViLWE0YWYtNzk1MWM2ODY1ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvDc7OEXHjt4C0ESJ0AsPjo28ybGEnMJT5EANnN6XbGKqe2rXDAEfex tZC6SzgRBYoyMWiDK9/WhyHKOPedo8fUlSgAvBQ7ntVURvAx70m7W755gEMry/6U nSl4KpVQnS1h8eQB8xIzw4skGRtAOcsj0ozz76s6hUCqgcc7le8mG7eEnTuI4JLp pXEHXXke1KwBv1Zr0JetCIxMxEqT2GDXTvvpahRwzZgPjdxk4pTlvISgIq0oEXhV eEZ5OiO9H8lVA5CA4OlA+qSpJA6uhkA7P16JLkQ7UsTuaQ2dyKC0bhRU97rLAANF cjRA+aBdiitdm6HhDU8K2CzEY6WJGNs= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:49 2025 by rpki-client