$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa File: b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa (raw, json) Hash identifier: tP4WJrkwLg3e++PoffyMHRoeqbmL6fPNFOKjClaE0Rg= Subject key identifier: C2:D5:6F:14:39:9F:0F:A9:49:2E:5D:3A:14:AE:5E:7E:FC:9A:97:6D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76BFD09C7131C60A191400 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 199.189.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:bf:d0:9c:71:31:c6:0a:19:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=d839c680-3eec-4056-95c4-56469cf80f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9f:ba:47:03:93:ea:37:91:16:79:e8:99:63: 5c:68:14:e4:d4:d3:72:ff:ad:52:ec:a7:13:c3:4d: 90:8f:39:49:f9:aa:63:0f:c5:78:56:27:76:65:0a: 6f:b8:08:eb:15:c1:41:7e:18:5f:cf:81:05:89:d7: 4b:45:51:4e:24:92:cd:86:2b:15:df:ee:12:cf:5a: a1:30:5f:eb:46:7c:56:08:58:ca:d6:00:d9:d4:5c: 2f:af:e7:c8:be:3e:3a:0d:c8:a6:db:45:10:e3:00: a7:e7:0e:78:48:4d:7a:57:77:f4:1c:69:22:4a:1c: 47:b2:20:33:5a:8c:ed:4f:23:46:97:8f:14:74:73: 88:11:e5:9a:15:1e:d4:a9:4a:3c:fc:10:f4:97:c1: 31:1b:1d:e9:ea:3b:76:5b:a6:f4:7c:06:cb:ca:7b: c4:2b:34:79:8f:53:d5:6a:db:b7:31:d0:c3:18:18: 6d:8b:43:ba:aa:8f:81:b6:84:de:9c:0c:47:21:0d: 8b:5e:23:99:11:b5:9b:9b:ce:b2:1b:0f:f8:5a:fb: fa:9a:0d:04:c9:7a:41:91:b8:bf:53:12:1c:fc:83: 17:7d:bd:b2:c9:40:d0:9c:4b:ae:98:1b:60:98:e6: ba:09:39:43:85:43:3e:2f:52:6d:44:bb:38:af:13: fc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D5:6F:14:39:9F:0F:A9:49:2E:5D:3A:14:AE:5E:7E:FC:9A:97:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.189.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f7:19:7d:1a:9b:07:be:12:93:b9:22:14:f1:1a:13:5c:e6: 5b:92:3a:01:66:4c:9d:92:83:6a:cb:6e:29:96:74:dd:8b:9e: 6f:8d:7e:88:71:59:65:8c:43:d3:49:03:53:7a:4c:82:9b:c5: 4d:e7:2b:2d:54:7b:27:bc:22:4b:e3:7c:41:cd:cb:9e:0d:1e: b4:b9:9e:1b:0c:7a:22:4f:de:91:f2:8f:44:16:d8:41:fe:0d: 5b:c8:d0:00:66:a2:4a:6d:08:7c:17:2f:50:f6:44:d2:97:c4: 1c:e5:b4:ae:64:90:4b:5e:ce:a5:63:e1:07:a5:61:d7:a8:38: 97:c0:54:87:7d:79:76:5d:e4:ed:75:61:72:d0:d6:83:6b:ab: 2a:f4:af:47:41:09:fb:bf:c5:39:50:60:f0:3d:3d:7d:eb:b4: 4a:8b:e4:56:33:52:eb:d2:2f:c1:91:ad:3d:2e:6b:34:62:2d: 06:14:e0:8c:5d:e9:fe:48:bb:96:46:b1:b5:9f:4d:aa:6c:38: af:0a:b7:67:ec:2e:f8:fa:82:83:cc:19:74:ab:62:1b:f3:96: 13:af:b1:69:98:4c:cc:53:25:b8:55:bf:ee:4e:38:25:4f:85: 4b:35:a4:4e:0b:c2:76:fa:a3:cb:10:cc:95:7f:02:ce:74:2e: 13:ca:5d:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdr/QnHExxgoZFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZDgzOWM2ODAtM2VlYy00MDU2LTk1YzQtNTY0NjljZjgwZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ+6RwOT6jeRFnnomWNcaBTk1NNy/61S7KcT w02QjzlJ+apjD8V4Vid2ZQpvuAjrFcFBfhhfz4EFiddLRVFOJJLNhisV3+4Sz1qh MF/rRnxWCFjK1gDZ1Fwvr+fIvj46Dcim20UQ4wCn5w54SE16V3f0HGkiShxHsiAz WoztTyNGl48UdHOIEeWaFR7UqUo8/BD0l8ExGx3p6jt2W6b0fAbLynvEKzR5j1PV atu3MdDDGBhti0O6qo+BtoTenAxHIQ2LXiOZEbWbm86yGw/4Wvv6mg0EyXpBkbi/ UxIc/IMXfb2yyUDQnEuumBtgmOa6CTlDhUM+L1JtRLs4rxP8twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLVbxQ5nw+pSS5dOhSuXn78mpdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYjBkNWIzMTktZWU4Mi0z MmI3LWJiODQtNmE0N2JiOWM1OTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx71gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD3GX0amwe+EpO5IhTxGhNc5luSOgFmTJ2Sg2rLbimWdN2Lnm+Nfohx WWWMQ9NJA1N6TIKbxU3nKy1Ueye8IkvjfEHNy54NHrS5nhsMeiJP3pHyj0QW2EH+ DVvI0ABmokptCHwXL1D2RNKXxBzltK5kkEtezqVj4QelYdeoOJfAVId9eXZd5O11 YXLQ1oNrqyr0r0dBCfu/xTlQYPA9PX3rtEqL5FYzUuvSL8GRrT0uazRiLQYU4Ixd 6f5Iu5ZGsbWfTapsOK8Kt2fsLvj6goPMGXSrYhvzlhOvsWmYTMxTJbhVv+5OOCVP hUs1pE4Lwnb6o8sQzJV/As50LhPKXRU= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:15 2025 by rpki-client