$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5eabecf5-9f45-376b-83d0-ccd1a3b4a5b3.roa File: 5eabecf5-9f45-376b-83d0-ccd1a3b4a5b3.roa (raw, json) Hash identifier: bJLqyGx1yqkfHZJmOE6dddEgP+fit8eNOPDFN/hMLWA= Subject key identifier: D2:D1:2F:53:31:E6:AC:4A:5E:46:0E:09:25:79:11:E7:EF:9B:80:5D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D26E440942CC7DB87A00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5eabecf5-9f45-376b-83d0-ccd1a3b4a5b3.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 199.27.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d2:6e:44:09:42:cc:7d:b8:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=94fbafd4-a277-4909-9586-d763a87b1347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9c:d2:95:25:75:77:57:54:5e:ff:5c:b5:94: db:68:5b:5f:b0:76:5a:92:30:04:ea:20:13:06:7f: df:ba:16:a1:50:a1:9f:e4:c2:db:96:e5:97:5b:fc: d8:0e:d4:67:62:ba:e6:03:87:a3:ca:e3:64:ee:74: 78:13:3d:94:c0:54:25:fe:83:aa:97:7c:5d:4b:fa: 65:3b:f2:d5:c1:e4:39:a2:0e:7a:b3:7b:95:7a:b6: 1b:f3:01:fe:f9:98:c9:74:2d:04:de:e7:19:58:eb: 27:84:ff:70:a9:de:3a:5b:95:8b:5d:c5:43:0b:c3: b1:06:09:c3:34:45:85:d3:2d:1c:57:71:b9:e1:21: 6d:25:37:b5:58:cd:fc:b5:c7:86:92:e4:68:e8:8d: 18:86:94:22:2b:92:25:5b:d1:ee:7c:70:bd:63:a1: f4:34:3d:b4:42:8e:d3:f9:b9:be:d3:5b:2d:55:20: c2:d5:1b:59:ac:2f:08:29:2d:4c:d0:dc:c5:10:45: 75:af:5c:b4:82:5c:f5:5d:ed:92:f1:ad:be:ec:c9: fa:75:3d:eb:d5:1a:55:7a:ef:11:13:52:3d:cf:9d: 27:56:68:53:3a:ed:4d:d5:8f:e7:96:54:99:fe:fe: 98:42:ad:fc:0e:11:ea:e7:3b:7a:92:e9:6b:7b:d2: 9c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D1:2F:53:31:E6:AC:4A:5E:46:0E:09:25:79:11:E7:EF:9B:80:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5eabecf5-9f45-376b-83d0-ccd1a3b4a5b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.27.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:a0:ac:58:40:75:26:fb:f7:95:17:9b:53:85:ba:d1:48:b1: aa:f5:76:66:39:2c:f6:8d:44:e7:ca:6b:13:39:a7:5e:d9:d7: d1:31:a9:13:ee:9e:2d:23:7b:db:cf:f8:ed:06:90:c4:d3:1f: 06:a6:12:56:dd:8b:dd:15:be:b1:98:65:49:10:4b:18:3a:24: 27:98:fd:89:eb:6b:c0:ea:86:54:ac:00:76:91:06:04:22:50: e8:94:68:d1:c4:5c:23:44:b6:41:7c:d7:2e:3e:a1:f4:a8:42: 8f:25:ff:aa:85:d8:f8:05:69:98:65:26:6d:f7:26:ed:60:29: 49:bb:75:25:0c:29:7b:07:72:92:d7:43:74:e3:d5:ea:a9:c4: cd:49:3e:c5:76:10:f4:c6:c1:d1:6f:89:05:f3:11:d8:db:a6: 80:1d:3e:24:4b:5e:b4:43:2b:05:20:dc:24:b7:17:16:ac:d2: 91:eb:fe:ae:92:ed:af:d0:ce:30:34:d5:2e:8f:70:87:ec:fc: 46:6f:68:19:c8:69:d5:bf:52:01:23:15:33:fb:90:5c:70:41: 71:f9:a7:2a:06:17:42:a1:df:65:c3:13:1b:52:70:ae:c1:3f: 03:80:7b:c8:dc:ab:82:10:4f:ef:d2:4f:8f:71:f0:a4:f3:2f: c2:e2:e5:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtJuRAlCzH24egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk OTRmYmFmZDQtYTI3Ny00OTA5LTk1ODYtZDc2M2E4N2IxMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpzSlSV1d1dUXv9ctZTbaFtfsHZakjAE6iAT Bn/fuhahUKGf5MLbluWXW/zYDtRnYrrmA4ejyuNk7nR4Ez2UwFQl/oOql3xdS/pl O/LVweQ5og56s3uVerYb8wH++ZjJdC0E3ucZWOsnhP9wqd46W5WLXcVDC8OxBgnD NEWF0y0cV3G54SFtJTe1WM38tceGkuRo6I0YhpQiK5IlW9HufHC9Y6H0ND20Qo7T +bm+01stVSDC1RtZrC8IKS1M0NzFEEV1r1y0glz1Xe2S8a2+7Mn6dT3r1RpVeu8R E1I9z50nVmhTOu1N1Y/nllSZ/v6YQq38DhHq5zt6kulre9Kc0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLRL1Mx5qxKXkYOCSV5Eefvm4BdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNWVhYmVjZjUtOWY0NS0z NzZiLTgzZDAtY2NkMWEzYjRhNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOgrFhAdSb795UXm1OFutFIsar1dmY5LPaNROfKaxM5p17Z19ExqRPu ni0je9vP+O0GkMTTHwamElbdi90VvrGYZUkQSxg6JCeY/Ynra8DqhlSsAHaRBgQi UOiUaNHEXCNEtkF81y4+ofSoQo8l/6qF2PgFaZhlJm33Ju1gKUm7dSUMKXsHcpLX Q3Tj1eqpxM1JPsV2EPTGwdFviQXzEdjbpoAdPiRLXrRDKwUg3CS3Fxas0pHr/q6S 7a/QzjA01S6PcIfs/EZvaBnIadW/UgEjFTP7kFxwQXH5pyoGF0Kh32XDExtScK7B PwOAe8jcq4IQT+/ST49x8KTzL8Li5Ss= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:24 2025 by rpki-client