$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d6bb9957-3d87-340e-a18c-043fc02daa3a.roa File: d6bb9957-3d87-340e-a18c-043fc02daa3a.roa (raw, json) Hash identifier: kVIqRHACbGDqZCCIHbqq3AyWKhm5kOUNHx+7j399szw= Subject key identifier: 7C:34:2A:3C:5E:AE:EF:9E:70:28:EB:FC:F8:02:86:37:3D:97:C7:E5 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76C2128747B88DC1620580 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d6bb9957-3d87-340e-a18c-043fc02daa3a.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 192.175.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c2:12:87:47:b8:8d:c1:62:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=79a47a4b-2192-4107-bb3e-1abdd0cfb27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7f:1a:bc:1a:6b:bd:10:e9:98:48:53:94:e6: ae:bb:0f:d4:f2:a4:3e:23:22:ed:86:4d:13:00:90: 75:99:a3:53:03:5a:2e:58:9c:00:0a:e6:0b:06:08: b4:b6:6d:3e:6f:cc:8a:12:87:2b:b0:6e:ae:b1:74: 53:db:7d:52:03:ba:79:05:67:59:7a:a1:c6:c7:8b: 2c:91:8e:fb:e8:07:7f:5d:2d:aa:ab:a5:20:e0:1e: 28:3f:12:c2:e6:50:a0:aa:54:58:85:8d:02:3a:23: 10:ee:63:6b:5c:42:64:5a:eb:53:1d:ae:91:1a:19: 9f:f2:e8:a3:1d:80:c5:58:48:8b:00:d3:1f:5b:62: ac:f6:aa:2a:97:c1:05:54:c3:98:30:43:d7:66:11: 0d:4b:c4:0d:37:12:ef:9f:9a:d0:19:db:de:87:16: 98:79:65:af:81:a5:9f:e0:5b:7c:a3:6f:d0:75:70: 61:73:cf:e2:30:76:97:b9:50:ca:82:83:4c:ec:b9: 54:cb:91:48:e3:3c:a3:16:4c:ab:70:b7:c5:ad:43: 3c:19:c8:5c:b0:cd:89:96:d1:b1:b2:c1:6a:12:1f: 6c:ec:42:52:9c:96:75:55:7b:a3:9d:3e:c3:72:ac: 0d:98:b0:30:e6:ee:01:19:27:3a:c5:49:6a:55:27: ca:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:34:2A:3C:5E:AE:EF:9E:70:28:EB:FC:F8:02:86:37:3D:97:C7:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d6bb9957-3d87-340e-a18c-043fc02daa3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 192.175.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c2:81:9d:cc:a9:3f:bb:fe:d9:d7:17:05:1d:2a:c9:af:a7: 21:56:9d:17:5f:be:4a:e0:6b:43:35:c5:05:a7:5c:3e:f0:82: 54:3e:0a:b9:56:ee:49:78:a9:cb:e3:3f:c4:f8:f6:08:27:cf: 9d:f6:25:22:fb:0b:96:fd:eb:df:14:1d:f9:7a:3c:66:93:52: 3b:be:0a:6b:23:8e:8f:46:78:6c:6c:f2:9f:b4:7f:2f:4a:0b: d2:ae:ba:65:f8:62:7b:94:40:6c:93:d2:19:16:4b:80:d6:99: bc:ed:8b:c7:2b:7a:1d:6c:d6:6c:30:e5:da:64:52:2b:d1:48: 50:4a:b3:94:14:cc:34:ef:4e:dc:4a:d5:3f:72:ad:27:2e:6a: 86:ad:83:df:30:62:49:1a:0f:9b:b2:7f:f3:d0:7b:49:ef:db: f2:66:d6:58:af:a0:1f:99:86:91:73:33:56:a4:ab:c1:01:41: cd:85:23:17:cf:50:28:2d:29:f2:e4:2f:71:c8:39:48:a4:89: 28:97:c2:35:ba:b7:6e:56:f2:f9:8d:36:43:74:4f:b7:7c:f8: 73:e4:03:68:e7:64:ab:65:6f:78:b2:86:18:6b:3f:d3:75:93: 2d:2e:ed:8f:81:34:a0:cc:be:50:94:02:91:60:c4:41:24:24: 2c:e9:45:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsISh0e4jcFiBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NzlhNDdhNGItMjE5Mi00MTA3LWJiM2UtMWFiZGQwY2ZiMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX8avBprvRDpmEhTlOauuw/U8qQ+IyLthk0T AJB1maNTA1ouWJwACuYLBgi0tm0+b8yKEocrsG6usXRT231SA7p5BWdZeqHGx4ss kY776Ad/XS2qq6Ug4B4oPxLC5lCgqlRYhY0COiMQ7mNrXEJkWutTHa6RGhmf8uij HYDFWEiLANMfW2Ks9qoql8EFVMOYMEPXZhENS8QNNxLvn5rQGdvehxaYeWWvgaWf 4Ft8o2/QdXBhc8/iMHaXuVDKgoNM7LlUy5FI4zyjFkyrcLfFrUM8GchcsM2JltGx ssFqEh9s7EJSnJZ1VXujnT7DcqwNmLAw5u4BGSc6xUlqVSfK+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHw0Kjxeru+ecCjr/PgChjc9l8flMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZDZiYjk5NTctM2Q4Ny0z NDBlLWExOGMtMDQzZmMwMmRhYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwK8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnCgZ3MqT+7/tnXFwUdKsmvpyFWnRdfvkrga0M1xQWnXD7wglQ+CrlW 7kl4qcvjP8T49ggnz532JSL7C5b9698UHfl6PGaTUju+Cmsjjo9GeGxs8p+0fy9K C9KuumX4YnuUQGyT0hkWS4DWmbzti8creh1s1mww5dpkUivRSFBKs5QUzDTvTtxK 1T9yrScuaoatg98wYkkaD5uyf/PQe0nv2/Jm1livoB+ZhpFzM1akq8EBQc2FIxfP UCgtKfLkL3HIOUikiSiXwjW6t25W8vmNNkN0T7d8+HPkA2jnZKtlb3iyhhhrP9N1 ky0u7Y+BNKDMvlCUApFgxEEkJCzpRRQ= -----END CERTIFICATE-----Generated at Fri Oct 10 21:30:07 2025 by rpki-client