$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/79491f66-a8dd-33cf-94b0-3d70315a3f72.roa File: 79491f66-a8dd-33cf-94b0-3d70315a3f72.roa (raw, json) Hash identifier: tsh6TC/64dh3gvtStXcco8d96q2wztf+/v9zhGAUsGI= Subject key identifier: 52:DA:DF:AD:CD:20:3A:7C:0A:C6:92:27:B2:E3:A1:82:59:3F:35:C1 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76BEA68013A7C01ECE6200 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/79491f66-a8dd-33cf-94b0-3d70315a3f72.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 104.202.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:be:a6:80:13:a7:c0:1e:ce:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=d6b0cea1-7cb7-48fb-b0df-91c8c5167f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1f:b7:95:17:d7:76:0e:60:77:1c:9c:41:6d: 17:34:d6:49:27:ff:22:ab:4f:7c:f3:ed:f7:5b:78: d8:16:92:0f:98:f5:f0:9e:d6:fb:d8:b1:e5:f0:47: 11:b7:89:5a:07:46:e0:7a:54:2c:dd:ba:7c:0f:a5: 06:03:c7:f5:b4:87:70:e4:28:0a:7d:e3:64:d2:0e: 78:6e:01:2f:ba:cb:b2:67:21:af:08:72:88:e1:12: 74:45:3f:67:ad:ee:f3:d6:39:87:9b:bd:7d:62:d6: 5e:50:ab:c3:d5:84:8c:f4:5f:ca:87:b9:30:c7:d9: b4:fe:81:98:8c:da:a2:29:1b:00:f4:65:db:84:85: a1:19:39:e0:e3:53:c7:5a:9e:af:07:02:e1:94:a0: e3:5f:98:0e:74:84:ec:82:c2:94:1b:44:cf:f5:5b: 4a:94:9a:2e:04:5d:a9:b9:a9:22:16:b4:03:1d:79: 84:f3:b8:f5:e4:b6:6a:15:cc:1f:b0:5f:e8:e7:43: f5:de:b0:26:50:66:9e:8a:1b:12:6e:72:b7:38:8d: c3:1f:6f:a7:34:ab:07:16:7b:25:0b:4e:77:11:2d: 9b:36:6b:54:9f:80:2f:ba:1e:4b:39:e3:e7:2b:55: f3:d0:bb:68:c3:72:03:39:4a:f8:a0:17:f3:79:bc: 45:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DA:DF:AD:CD:20:3A:7C:0A:C6:92:27:B2:E3:A1:82:59:3F:35:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/79491f66-a8dd-33cf-94b0-3d70315a3f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.202.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:cf:ee:0b:96:6d:46:b6:b6:bf:a3:29:24:88:75:d2:79:1d: 9e:d2:cc:13:87:b6:78:be:e6:fd:f5:8f:13:15:54:49:00:8f: a2:41:9d:dd:dc:22:43:1a:ea:54:5c:c1:a0:f8:e2:91:67:02: 18:31:d1:8e:31:ea:9a:cc:a3:56:04:77:9f:3d:37:4f:13:fb: 81:21:e7:81:4a:f9:c0:40:7e:05:63:fd:2b:19:c5:de:cd:0e: 6a:48:28:b0:70:c2:99:4f:d6:d1:f3:3a:1d:9d:d4:bd:05:e1: 80:0b:8c:5d:fc:c5:38:d5:41:bf:68:8d:32:ed:8f:30:38:1f: 50:47:f0:75:dd:55:ae:80:f8:92:d2:a9:f8:f2:05:9b:44:0a: 57:ad:d6:3b:ef:b2:04:a7:cc:15:bf:34:c9:71:62:b3:e3:f7: 74:5f:f8:fa:7c:9c:57:d3:c1:f0:be:cb:df:cc:a0:d8:f6:75: 6b:83:cc:9a:28:df:78:a4:67:64:c1:3b:64:58:c4:5b:3d:52: f0:2b:33:b3:a4:20:f7:b6:c6:07:44:83:d1:31:75:30:53:13: 36:23:39:05:1e:5d:64:2e:28:79:ba:0a:6b:18:9e:f9:fa:5a: a4:64:46:c6:a0:5d:24:59:da:84:d6:67:97:01:ba:71:3e:be: d5:9f:5c:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdr6mgBOnwB7OYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZDZiMGNlYTEtN2NiNy00OGZiLWIwZGYtOTFjOGM1MTY3ZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh+3lRfXdg5gdxycQW0XNNZJJ/8iq0988+33 W3jYFpIPmPXwntb72LHl8EcRt4laB0bgelQs3bp8D6UGA8f1tIdw5CgKfeNk0g54 bgEvusuyZyGvCHKI4RJ0RT9nre7z1jmHm719YtZeUKvD1YSM9F/Kh7kwx9m0/oGY jNqiKRsA9GXbhIWhGTng41PHWp6vBwLhlKDjX5gOdITsgsKUG0TP9VtKlJouBF2p uakiFrQDHXmE87j15LZqFcwfsF/o50P13rAmUGaeihsSbnK3OI3DH2+nNKsHFnsl C053ES2bNmtUn4Avuh5LOePnK1Xz0Ltow3IDOUr4oBfzebxFSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLa363NIDp8CsaSJ7LjoYJZPzXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNzk0OTFmNjYtYThkZC0z M2NmLTk0YjAtM2Q3MDMxNWEzZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHaMoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3P7guWbUa2tr+jKSSIddJ5HZ7SzBOHtni+5v31jxMVVEkAj6JBnd3c IkMa6lRcwaD44pFnAhgx0Y4x6prMo1YEd589N08T+4Eh54FK+cBAfgVj/SsZxd7N DmpIKLBwwplP1tHzOh2d1L0F4YALjF38xTjVQb9ojTLtjzA4H1BH8HXdVa6A+JLS qfjyBZtEClet1jvvsgSnzBW/NMlxYrPj93Rf+Pp8nFfTwfC+y9/MoNj2dWuDzJoo 33ikZ2TBO2RYxFs9UvArM7OkIPe2xgdEg9ExdTBTEzYjOQUeXWQuKHm6CmsYnvn6 WqRkRsagXSRZ2oTWZ5cBunE+vtWfXOc= -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:48 2025 by rpki-client