$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7fafc48a-67c4-3f2b-b12b-26df3b394690.roa File: 7fafc48a-67c4-3f2b-b12b-26df3b394690.roa (raw, json) Hash identifier: Hqw6rXtHH1gD3JLQKa9C3RW2uCoGK7vqRZa70tI75j8= Subject key identifier: A9:7F:23:D6:F4:9F:7D:F7:1E:2D:DC:DB:D2:55:ED:D8:49:59:0F:73 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D2355058A0006DC1EFC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7fafc48a-67c4-3f2b-b12b-26df3b394690.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 199.127.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d2:35:50:58:a0:00:6d:c1:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=2ab46f7b-45d2-44d6-b646-c20800c0586c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3d:ec:87:43:e5:9f:f0:7d:46:95:ef:62:ec: 8b:a9:e8:27:ca:47:02:1d:5b:dd:67:c7:5f:c5:c6: e0:73:3d:55:c1:b6:81:38:9c:c6:34:84:4f:c3:4f: 41:8c:ca:c3:7c:d1:81:a8:02:26:aa:ae:a0:75:a5: 60:73:6a:de:2a:e5:a4:5d:f3:c3:5a:0e:71:7b:3d: f9:ef:3d:dc:46:7b:ac:af:c0:56:04:c8:27:88:c5: 86:2b:1c:5e:5c:8a:d6:1f:f0:46:6d:09:cd:7e:e7: 39:a4:39:dc:d5:83:52:08:af:9d:3b:97:38:7f:86: ab:3d:0a:34:b5:01:83:78:26:48:4e:27:3f:1d:3f: ae:b1:8d:f1:45:1b:88:6b:fd:0c:b7:72:4e:c1:16: 24:3d:94:38:8f:c6:c8:f0:d5:da:f9:f2:79:9c:f0: 26:d1:ec:19:90:e1:8c:c4:1c:f9:7c:c3:9b:0c:37: 55:b6:ef:39:3e:25:23:17:ef:bb:b2:d3:f8:29:21: 1e:fd:18:41:2d:f0:f9:a1:2a:3e:7f:86:a1:8d:de: 86:4e:d4:9e:ec:4f:a0:5d:d2:17:04:3f:b9:f3:57: e0:5e:62:ac:d3:b8:03:20:41:0e:8f:1f:01:34:b0: 8c:da:bc:18:fb:42:46:da:e4:87:cd:81:26:ee:5e: 5b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7F:23:D6:F4:9F:7D:F7:1E:2D:DC:DB:D2:55:ED:D8:49:59:0F:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7fafc48a-67c4-3f2b-b12b-26df3b394690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.127.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ea:27:63:38:3e:71:a2:9a:46:79:df:2e:9a:65:f6:8a:2f: 72:7b:c9:9b:09:68:07:d0:62:71:70:76:4d:5b:13:37:a2:ca: 73:48:73:68:09:ef:bf:c9:09:a3:25:f3:5b:66:17:c4:d4:8f: b1:46:6c:a8:b9:bf:5e:33:ea:02:43:2d:4c:a6:cf:c6:8b:e7: cc:ee:c7:95:50:12:21:35:c3:4b:77:be:a3:cd:27:8b:20:f5: be:92:7a:c5:b8:c8:4f:d4:4e:a1:48:83:97:81:88:d8:14:91: c0:06:cb:d6:f8:e8:1b:33:1b:a9:5f:3e:de:89:a4:23:e8:0d: 68:73:25:e7:52:65:a1:60:c1:ac:03:10:4c:e3:ca:27:09:af: 33:1c:44:17:1d:79:a7:ad:aa:bc:51:e3:2a:ab:57:7e:33:11: d2:13:fd:9b:27:9a:39:21:b6:6f:07:a4:80:07:6f:4b:36:70: b5:33:97:94:e8:89:3e:af:fb:75:13:12:34:50:ce:ff:20:b3: 4c:c7:b6:10:96:0c:90:ca:02:86:75:0b:76:ea:18:8c:06:fe: 79:64:9e:52:6a:4c:6a:94:bb:e6:30:3f:a2:86:2f:5a:89:1c: b2:a9:fe:fb:05:51:80:a1:ed:65:1c:b9:42:f4:f4:be:e8:4e: b2:c9:9e:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtI1UFigAG3B78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MmFiNDZmN2ItNDVkMi00NGQ2LWI2NDYtYzIwODAwYzA1ODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T3sh0Pln/B9RpXvYuyLqegnykcCHVvdZ8df xcbgcz1VwbaBOJzGNIRPw09BjMrDfNGBqAImqq6gdaVgc2reKuWkXfPDWg5xez35 7z3cRnusr8BWBMgniMWGKxxeXIrWH/BGbQnNfuc5pDnc1YNSCK+dO5c4f4arPQo0 tQGDeCZITic/HT+usY3xRRuIa/0Mt3JOwRYkPZQ4j8bI8NXa+fJ5nPAm0ewZkOGM xBz5fMObDDdVtu85PiUjF++7stP4KSEe/RhBLfD5oSo+f4ahjd6GTtSe7E+gXdIX BD+581fgXmKs07gDIEEOjx8BNLCM2rwY+0JG2uSHzYEm7l5bAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl/I9b0n333Hi3c29JV7dhJWQ9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvN2ZhZmM0OGEtNjdjNC0z ZjJiLWIxMmItMjZkZjNiMzk0NjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx39oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3qJ2M4PnGimkZ53y6aZfaKL3J7yZsJaAfQYnFwdk1bEzeiynNIc2gJ 77/JCaMl81tmF8TUj7FGbKi5v14z6gJDLUymz8aL58zux5VQEiE1w0t3vqPNJ4sg 9b6SesW4yE/UTqFIg5eBiNgUkcAGy9b46BszG6lfPt6JpCPoDWhzJedSZaFgwawD EEzjyicJrzMcRBcdeaetqrxR4yqrV34zEdIT/Zsnmjkhtm8HpIAHb0s2cLUzl5To iT6v+3UTEjRQzv8gs0zHthCWDJDKAoZ1C3bqGIwG/nlknlJqTGqUu+YwP6KGL1qJ HLKp/vsFUYCh7WUcuUL09L7oTrLJnrw= -----END CERTIFICATE-----Generated at Fri Oct 10 21:35:39 2025 by rpki-client