$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa File: df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa (raw, json) Hash identifier: tjo1JbnCCcuq/priWwwUk7D764sA0JmncjM6PiArrJE= Subject key identifier: 0F:AA:6B:FA:37:E6:2E:C9:7E:76:26:BE:6B:EA:C1:F5:ED:3F:B9:96 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D2D0EDC8E2F1C2C68480 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 172.81.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d2:d0:ed:c8:e2:f1:c2:c6:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=377a5841-0c13-4d30-89c2-ae2ae5c8ee52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:42:11:0a:f6:df:25:b6:54:85:3b:a9:78:6d: 96:fd:0e:00:84:32:40:97:32:3b:20:88:9f:f1:21: 95:85:43:bf:e0:8f:bb:f3:37:f7:a3:96:ee:5c:ca: 3c:ab:ff:72:3f:70:a1:e9:7a:f1:45:cc:9b:e6:fa: f1:93:66:fc:a7:a8:c3:0c:64:09:f5:1b:db:76:ad: b6:02:d7:16:01:7d:c2:aa:7c:9b:78:91:3f:91:09: 29:9e:b4:a9:52:b6:a4:b6:ea:dc:38:50:57:e3:d1: 43:60:54:d1:87:97:09:f9:1c:25:3f:41:48:ee:c8: 00:fc:6f:01:1e:63:c3:44:30:c1:c2:11:fd:d8:ef: 52:ff:99:b5:27:04:9e:1b:d3:de:21:dc:41:2f:d7: 30:65:2f:7a:5b:08:48:eb:70:a4:42:3e:6b:68:8b: f7:26:a1:0e:31:48:ab:eb:d7:84:82:46:b9:99:82: 6e:9f:7f:89:91:e2:85:a0:1b:e2:f4:fd:f2:64:39: f3:2a:9e:dc:ee:dd:97:95:e3:e6:b8:c8:f0:01:63: 40:d2:f0:46:b4:a6:82:38:31:00:91:fe:6c:d2:07: 22:3f:b9:39:b7:39:91:fe:f9:9a:ca:d0:f3:4d:4d: 86:e0:6c:62:63:e9:12:8e:97:5a:15:57:6f:e9:72: 3f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AA:6B:FA:37:E6:2E:C9:7E:76:26:BE:6B:EA:C1:F5:ED:3F:B9:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 172.81.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f3:8a:b4:be:a4:29:1e:91:21:84:b0:b4:d9:ad:a8:86:a0: 5c:a4:f7:c5:5c:cf:5b:03:6c:66:11:28:38:ec:44:59:99:33: 0e:77:b0:a7:51:25:8d:f5:41:08:4c:3d:78:62:c8:d0:fa:e4: fd:f5:34:a3:f3:1d:6d:20:33:18:1b:f4:c6:b5:a4:0a:3f:36: 2c:61:0a:59:85:2f:cf:ac:0d:a7:7f:41:6e:ce:d3:ec:36:49: 9b:1f:2f:63:c9:10:7f:df:8b:aa:f5:46:ef:93:98:25:3a:15: 21:c1:b3:44:61:cd:df:47:22:7b:e0:a1:f7:f3:9a:46:cd:19: 8d:bf:f5:ac:e0:6b:79:ce:8c:30:bf:7f:43:cc:6d:16:c5:33: e8:1d:6a:2a:8f:c5:17:95:6d:01:75:9b:ae:28:3c:41:1d:6a: 87:a8:0c:70:df:c2:c9:31:80:aa:d6:27:68:d7:07:71:f2:ca: 9e:46:a8:26:14:ae:7f:b1:c5:aa:a0:2f:7e:64:0c:2e:e4:fd: 6e:e1:bf:ad:01:a4:b5:40:47:a8:4e:c1:15:9f:a5:3a:27:6a: f1:15:45:91:42:e1:92:ac:f0:4c:0b:2e:f3:db:0f:e3:3b:e2: 57:c8:6c:74:2a:9f:ce:83:90:7c:4a:e3:ca:53:06:64:94:b5: 7e:7d:f5:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtLQ7cji8cLGhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk Mzc3YTU4NDEtMGMxMy00ZDMwLTg5YzItYWUyYWU1YzhlZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0IRCvbfJbZUhTupeG2W/Q4AhDJAlzI7IIif 8SGVhUO/4I+78zf3o5buXMo8q/9yP3Ch6XrxRcyb5vrxk2b8p6jDDGQJ9Rvbdq22 AtcWAX3CqnybeJE/kQkpnrSpUrakturcOFBX49FDYFTRh5cJ+RwlP0FI7sgA/G8B HmPDRDDBwhH92O9S/5m1JwSeG9PeIdxBL9cwZS96WwhI63CkQj5raIv3JqEOMUir 69eEgka5mYJun3+JkeKFoBvi9P3yZDnzKp7c7t2XlePmuMjwAWNA0vBGtKaCODEA kf5s0gciP7k5tzmR/vmaytDzTU2G4GxiY+kSjpdaFVdv6XI/bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+qa/o35i7JfnYmvmvqwfXtP7mWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZGY2YWE5YTAtYjMyZi0z ZDI5LWExNDctMDRkNjJhYTFlNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7zirS+pCkekSGEsLTZraiGoFyk98Vcz1sDbGYRKDjsRFmZMw53sKdR JY31QQhMPXhiyND65P31NKPzHW0gMxgb9Ma1pAo/NixhClmFL8+sDad/QW7O0+w2 SZsfL2PJEH/fi6r1Ru+TmCU6FSHBs0Rhzd9HInvgoffzmkbNGY2/9azga3nOjDC/ f0PMbRbFM+gdaiqPxReVbQF1m64oPEEdaoeoDHDfwskxgKrWJ2jXB3Hyyp5GqCYU rn+xxaqgL35kDC7k/W7hv60BpLVAR6hOwRWfpTonavEVRZFC4ZKs8EwLLvPbD+M7 4lfIbHQqn86DkHxK48pTBmSUtX599b8= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:23 2025 by rpki-client