$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa File: 67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa (raw, json) Hash identifier: FRatl/kVIEtorn9AWijPK2HmW049b0B/vmYbRL2NYMY= Subject key identifier: B7:B6:0D:1B:21:90:2C:11:8F:AB:7F:68:ED:D5:A1:46:87:71:18:C4 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D27F904066CFC4814450 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 199.59.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d2:7f:90:40:66:cf:c4:81:44:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=b9c6ba35-8e94-4b14-bbd6-e57ebf000619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a9:cc:9f:33:93:99:9d:d8:31:de:0d:e2:8d: bb:62:c1:4a:ab:fc:05:24:d0:7f:66:95:2b:c7:13: 10:10:4b:49:97:6d:0a:06:e4:34:28:23:dd:fc:b5: 12:5b:b7:90:bc:04:29:53:30:d2:41:f9:d3:b3:78: 58:02:0d:55:25:0f:11:04:fb:36:67:f2:50:7a:bb: fa:2e:2f:9a:da:3e:4b:25:49:94:90:19:16:2f:af: cc:5b:64:92:32:4a:19:53:06:33:d3:ff:e2:2e:0e: 95:4d:52:f8:07:1e:f4:b1:08:bc:61:42:c2:23:fa: 29:a7:d5:64:4f:6f:fe:7a:d8:49:76:6e:87:7f:ac: 0f:9b:e2:1d:d4:91:ed:ff:8f:74:b2:e7:ad:c9:5f: 21:70:31:73:8d:40:fd:e6:e9:cf:84:da:02:ce:6f: 37:c6:06:95:dc:d8:8d:58:08:69:00:c0:b5:94:c2: a6:87:fc:f6:c3:a2:e9:9a:11:62:c2:ab:3f:e9:81: 22:6d:80:cc:82:e0:9e:e3:b8:94:6a:a1:c4:fe:61: ad:53:ee:80:85:e4:d5:2d:81:f5:59:15:9b:73:5b: f5:0b:c4:da:03:d9:47:ca:7c:fb:5e:9b:b9:59:97: c5:0d:88:6d:ba:38:87:8d:a0:64:15:fe:81:b8:dc: 0e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B6:0D:1B:21:90:2C:11:8F:AB:7F:68:ED:D5:A1:46:87:71:18:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.59.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:da:45:e1:c2:fc:04:d8:c6:8d:4e:57:c3:98:51:d7:2c:f6: be:73:41:43:e8:79:1c:d7:c1:fe:cf:1d:a1:21:4f:55:2c:96: 66:0c:05:53:23:f9:16:a0:24:3c:47:1c:2b:af:6c:cf:ca:40: f1:85:5b:2c:0b:6c:41:15:7f:e3:69:c3:20:6a:99:12:97:cd: 90:6e:05:f9:b9:46:2e:68:62:b0:f0:64:08:34:58:f7:d8:34: f3:16:1b:dd:bc:ed:39:4b:f3:48:58:08:19:49:0c:0f:d1:92: 00:1e:db:45:4a:3b:c3:11:10:1e:40:1a:66:6c:f7:1a:2b:cf: 7c:42:c9:d4:3c:f9:bd:ed:34:0a:f0:d7:b3:01:61:ca:99:4c: f8:43:36:f5:38:37:3a:1e:bf:aa:b2:17:ce:6f:ac:82:7c:f7: c6:74:48:7f:de:47:dd:e7:59:bb:12:03:ca:90:03:58:59:c9: c5:36:bc:1b:26:fc:43:f6:21:69:2d:a1:13:2f:fe:3b:a3:9d: 63:53:84:99:fc:30:71:33:85:c1:d6:d5:12:7c:ad:85:c8:04: 86:48:7d:7b:30:29:d8:fe:cf:04:6e:53:9e:11:74:3e:d5:ed: 16:6a:30:de:9c:f2:7b:23:1a:6c:5b:a9:90:0f:55:89:75:a3: b3:41:05:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtJ/kEBmz8SBRFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YjljNmJhMzUtOGU5NC00YjE0LWJiZDYtZTU3ZWJmMDAwNjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKnMnzOTmZ3YMd4N4o27YsFKq/wFJNB/ZpUr xxMQEEtJl20KBuQ0KCPd/LUSW7eQvAQpUzDSQfnTs3hYAg1VJQ8RBPs2Z/JQerv6 Li+a2j5LJUmUkBkWL6/MW2SSMkoZUwYz0//iLg6VTVL4Bx70sQi8YULCI/opp9Vk T2/+ethJdm6Hf6wPm+Id1JHt/490suetyV8hcDFzjUD95unPhNoCzm83xgaV3NiN WAhpAMC1lMKmh/z2w6LpmhFiwqs/6YEibYDMguCe47iUaqHE/mGtU+6AheTVLYH1 WRWbc1v1C8TaA9lHynz7Xpu5WZfFDYhtujiHjaBkFf6BuNwOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLe2DRshkCwRj6t/aO3VoUaHcRjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNjdlZmUwYzEtMWU1OC0z YTI2LTk5ZDItOTg1NzZjMWE5NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxztoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3aReHC/ATYxo1OV8OYUdcs9r5zQUPoeRzXwf7PHaEhT1UslmYMBVMj +RagJDxHHCuvbM/KQPGFWywLbEEVf+NpwyBqmRKXzZBuBfm5Ri5oYrDwZAg0WPfY NPMWG9287TlL80hYCBlJDA/RkgAe20VKO8MREB5AGmZs9xorz3xCydQ8+b3tNArw 17MBYcqZTPhDNvU4Nzoev6qyF85vrIJ898Z0SH/eR93nWbsSA8qQA1hZycU2vBsm /EP2IWktoRMv/jujnWNThJn8MHEzhcHW1RJ8rYXIBIZIfXswKdj+zwRuU54RdD7V 7RZqMN6c8nsjGmxbqZAPVYl1o7NBBYY= -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:40 2025 by rpki-client