$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b71c8ed5-0bdb-3940-89d4-56efba0bdf5d.roa File: b71c8ed5-0bdb-3940-89d4-56efba0bdf5d.roa (raw, json) Hash identifier: y3LQUrPgwCyZtrNHY/9evxXxPbLGFv1Datrg9UlLA3Y= Subject key identifier: B6:14:BA:C8:46:6E:42:5D:59:5B:92:FE:46:FC:48:4F:D4:97:DA:44 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76C1A8D10A66A8D3328180 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b71c8ed5-0bdb-3940-89d4-56efba0bdf5d.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 162.222.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c1:a8:d1:0a:66:a8:d3:32:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=18327143-1297-4414-b4e8-6fd1097bd49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f3:bc:b5:bc:da:ab:16:d7:02:b0:88:9c:b1: 40:3a:f0:cf:34:ec:fa:2f:ee:83:37:9f:f8:93:71: 96:45:df:95:8f:b6:44:24:f2:63:18:5a:4d:94:15: 2f:0a:8c:d7:17:ec:dc:66:90:21:55:57:6f:71:3f: ff:83:f5:e5:51:67:70:d7:f0:15:be:07:41:da:8b: bb:ef:5e:97:36:70:84:09:2e:3f:c1:9f:f9:f1:78: 6e:49:84:67:7a:c9:32:84:ad:9f:86:be:27:16:3b: 01:3c:e7:3e:5d:b7:a5:77:74:ce:ec:9d:d2:50:5b: da:90:33:ec:ff:6f:5e:de:21:2e:d9:20:ad:9c:de: 63:53:96:e5:71:d1:c0:80:0f:d9:ff:f0:d4:dd:be: 6f:03:6d:54:71:11:74:ec:36:50:72:1e:ca:b2:40: de:79:ae:0b:1e:54:10:ab:bb:3d:5e:3e:72:1b:69: fd:8a:fd:38:5f:79:86:d7:96:ca:4d:bc:07:8d:c8: f2:09:67:ef:d3:ec:55:31:b2:c5:f9:b4:a3:32:70: fc:dd:79:02:b8:5a:e8:2a:ad:15:1a:2d:5f:e4:64: 6e:e0:e4:67:a7:6d:4c:98:fc:80:b4:9a:57:d8:b2: a2:fb:63:b4:55:fc:92:ab:e4:42:f4:06:cd:32:94: 23:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:14:BA:C8:46:6E:42:5D:59:5B:92:FE:46:FC:48:4F:D4:97:DA:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b71c8ed5-0bdb-3940-89d4-56efba0bdf5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 162.222.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:7e:14:a5:05:41:ff:f2:d2:ef:92:f1:3f:ab:0c:fe:d9:a5: 03:c4:26:49:af:f6:e4:35:cc:33:43:ef:f4:ba:67:34:83:ed: 88:2a:d7:95:7c:d3:cd:5f:38:94:db:b3:02:94:56:fa:06:78: 88:25:cb:46:f4:62:ad:c3:f3:01:ba:a6:b9:82:fe:b2:64:60: 23:3f:13:e9:bf:b7:13:3e:22:3e:4b:37:f8:41:46:d9:02:2c: 44:4f:9e:0f:36:d3:d0:b0:6d:91:35:2f:8f:7a:86:c1:28:97: aa:51:ee:cd:bb:60:88:19:22:8a:70:63:cb:21:a7:76:1f:44: a9:ac:5f:cf:29:83:30:0b:e3:67:fe:95:fd:76:b5:83:71:96: 93:aa:89:c9:c3:73:fa:e0:0a:45:5f:c4:60:bb:70:c4:d8:ca: 17:1f:92:11:2d:4c:e8:73:04:94:97:67:46:14:df:63:24:12: 72:c2:3b:e4:7f:c9:59:ed:d2:6b:81:34:84:1b:3e:9c:d9:af: 47:42:59:3d:fb:4c:a5:76:e5:8e:c7:b0:9f:c3:07:99:72:a0: ba:53:ea:f0:08:db:b9:f1:c9:2f:3c:ba:b5:55:a6:47:94:46: 04:55:f5:d0:bf:99:d7:1f:91:09:e0:bb:1e:4e:68:49:dd:61: c2:85:48:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsGo0QpmqNMygYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MTgzMjcxNDMtMTI5Ny00NDE0LWI0ZTgtNmZkMTA5N2JkNDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvO8tbzaqxbXArCInLFAOvDPNOz6L+6DN5/4 k3GWRd+Vj7ZEJPJjGFpNlBUvCozXF+zcZpAhVVdvcT//g/XlUWdw1/AVvgdB2ou7 716XNnCECS4/wZ/58XhuSYRneskyhK2fhr4nFjsBPOc+Xbeld3TO7J3SUFvakDPs /29e3iEu2SCtnN5jU5blcdHAgA/Z//DU3b5vA21UcRF07DZQch7KskDeea4LHlQQ q7s9Xj5yG2n9iv04X3mG15bKTbwHjcjyCWfv0+xVMbLF+bSjMnD83XkCuFroKq0V Gi1f5GRu4ORnp21MmPyAtJpX2LKi+2O0VfySq+RC9AbNMpQjZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYUushGbkJdWVuS/kb8SE/Ul9pEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYjcxYzhlZDUtMGJkYi0z OTQwLTg5ZDQtNTZlZmJhMGJkZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd+FKUFQf/y0u+S8T+rDP7ZpQPEJkmv9uQ1zDND7/S6ZzSD7Ygq15V8 081fOJTbswKUVvoGeIgly0b0Yq3D8wG6prmC/rJkYCM/E+m/txM+Ij5LN/hBRtkC LERPng8209CwbZE1L496hsEol6pR7s27YIgZIopwY8shp3YfRKmsX88pgzAL42f+ lf12tYNxlpOqicnDc/rgCkVfxGC7cMTYyhcfkhEtTOhzBJSXZ0YU32MkEnLCO+R/ yVnt0muBNIQbPpzZr0dCWT37TKV25Y7HsJ/DB5lyoLpT6vAI27nxyS88urVVpkeU RgRV9dC/mdcfkQngux5OaEndYcKFSDg= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:21 2025 by rpki-client