$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f02f1a48-ebf7-331e-84dd-8d68de321404.roa File: f02f1a48-ebf7-331e-84dd-8d68de321404.roa (raw, json) Hash identifier: aE2TMMv9VJbpd4XoCWk7bHQuw4Q/qSjT9dxx6H6BBTw= Subject key identifier: DF:FA:6B:16:88:ED:F9:BB:D7:76:FD:A8:80:E9:AF:BB:32:9B:7D:A0 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D1EEDBE8734DB336A600 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f02f1a48-ebf7-331e-84dd-8d68de321404.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 162.211.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d1:ee:db:e8:73:4d:b3:36:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=f8dcb1ac-6aef-4f97-a67e-3203e0590bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a8:92:e9:08:84:74:fc:0b:d8:e1:1e:76:e5: 52:38:6f:43:53:be:f7:18:0b:d1:1f:26:11:96:2c: 85:36:90:d8:46:a7:ae:30:64:3f:57:4d:b2:25:a9: 42:50:52:d9:69:84:97:4d:1e:bd:31:3c:86:d4:dd: 7c:35:72:d6:5a:73:4b:40:d3:38:7b:66:a0:b1:c7: 28:7e:60:23:06:20:a1:52:db:d3:ea:a0:90:04:b4: 37:dc:83:a4:07:3b:a0:3d:88:59:bc:01:64:35:0b: ba:8f:df:57:2b:f9:74:e8:fc:fd:8d:06:00:f9:4f: 21:3d:1a:a9:1e:fc:a8:f8:e7:48:e5:31:97:6b:72: ee:29:c8:59:6e:18:80:c8:a5:32:a9:bf:87:91:94: 94:ee:80:34:82:e4:ef:9b:65:17:80:76:79:f4:a0: d0:2c:0a:2a:be:1d:80:d6:ba:2d:0e:7d:a1:c0:53: 63:55:21:dc:0b:ce:5d:a0:ed:2d:c9:ec:7b:48:40: c1:19:13:5b:de:e0:8f:a1:46:fc:82:e5:6b:01:9f: e1:3a:18:9f:85:a8:75:a2:ac:33:ef:0c:ac:15:d3: 77:74:f3:b8:8f:e0:b0:3e:ff:f3:33:eb:9d:f4:48: 1e:fe:bd:7b:b8:38:00:af:a0:05:25:4d:56:fb:56: f8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FA:6B:16:88:ED:F9:BB:D7:76:FD:A8:80:E9:AF:BB:32:9B:7D:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f02f1a48-ebf7-331e-84dd-8d68de321404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 162.211.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b3:2d:97:97:41:21:c4:ea:1a:b2:28:3f:c3:99:43:ae:cf: cd:a5:2a:c6:37:62:c5:c3:52:d1:ee:5f:0e:41:87:bb:a7:74: 1e:44:f7:be:b0:7d:76:6b:da:f0:0e:a1:81:a6:49:5c:26:7d: 6a:13:ea:f0:20:c4:7b:5f:3c:b9:18:0f:94:6f:c7:99:13:6b: b4:4d:5a:4e:01:04:95:0a:35:f3:49:9a:c0:c7:b4:21:76:12: bc:35:4f:59:e6:2f:c8:19:3b:c1:f5:35:b4:ba:eb:b9:90:52: 02:74:ae:dc:b6:4b:5b:9c:c4:d1:97:b8:9c:c8:90:cb:3f:0d: f6:1e:84:af:9a:75:0d:02:5f:43:7b:94:16:20:96:0d:26:b1: 5c:2e:c0:79:ea:65:86:24:6b:a0:a0:e0:8a:ed:88:f8:3e:87: da:31:73:05:76:7f:66:33:44:60:97:67:81:13:27:a0:b7:4c: 8b:50:4d:41:97:8b:9d:62:5d:15:28:ef:c2:8d:ad:d6:75:f6: 13:a5:c2:8b:58:44:4b:04:e9:1e:49:fb:d3:ac:dd:fe:4b:95: 66:0b:09:8f:b4:e7:63:46:2c:ea:37:6f:60:05:0c:ce:6d:5f: 07:05:1a:7c:55:4a:40:0f:a0:33:fc:fd:cf:5d:03:90:f0:97: e4:e6:2e:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtHu2+hzTbM2pgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZjhkY2IxYWMtNmFlZi00Zjk3LWE2N2UtMzIwM2UwNTkwYmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKiS6QiEdPwL2OEeduVSOG9DU773GAvRHyYR liyFNpDYRqeuMGQ/V02yJalCUFLZaYSXTR69MTyG1N18NXLWWnNLQNM4e2agscco fmAjBiChUtvT6qCQBLQ33IOkBzugPYhZvAFkNQu6j99XK/l06Pz9jQYA+U8hPRqp Hvyo+OdI5TGXa3LuKchZbhiAyKUyqb+HkZSU7oA0guTvm2UXgHZ59KDQLAoqvh2A 1rotDn2hwFNjVSHcC85doO0tyex7SEDBGRNb3uCPoUb8guVrAZ/hOhifhah1oqwz 7wysFdN3dPO4j+CwPv/zM+ud9Ege/r17uDgAr6AFJU1W+1b4vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/6axaI7fm713b9qIDpr7sym32gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjAyZjFhNDgtZWJmNy0z MzFlLTg0ZGQtOGQ2OGRlMzIxNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqzLZeXQSHE6hqyKD/DmUOuz82lKsY3YsXDUtHuXw5Bh7undB5E976w fXZr2vAOoYGmSVwmfWoT6vAgxHtfPLkYD5Rvx5kTa7RNWk4BBJUKNfNJmsDHtCF2 Erw1T1nmL8gZO8H1NbS667mQUgJ0rty2S1ucxNGXuJzIkMs/DfYehK+adQ0CX0N7 lBYglg0msVwuwHnqZYYka6Cg4IrtiPg+h9oxcwV2f2YzRGCXZ4ETJ6C3TItQTUGX i51iXRUo78KNrdZ19hOlwotYREsE6R5J+9Os3f5LlWYLCY+052NGLOo3b2AFDM5t XwcFGnxVSkAPoDP8/c9dA5Dwl+TmLpk= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:52 2025 by rpki-client