$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f12b80ea-acd8-3ac7-8605-38958184a82f.roa File: f12b80ea-acd8-3ac7-8605-38958184a82f.roa (raw, json) Hash identifier: QqMLMdxy5vcKNTdNeGo4qe2RLSiYfNLmLSSJKUjIARM= Subject key identifier: 12:79:FC:DB:D5:1E:4C:65:F1:7C:78:7C:D1:68:24:80:CE:76:90:C4 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76BE58F84CCD7D7969A100 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f12b80ea-acd8-3ac7-8605-38958184a82f.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 64.187.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:be:58:f8:4c:cd:7d:79:69:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=de6e530e-abbe-40f4-bed5-464326f579be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:b7:2e:24:53:50:e8:26:fe:a3:67:45:3a: a4:1a:b5:de:ac:54:93:d4:1c:21:80:05:eb:7c:9d: 33:f7:18:80:ae:63:c3:98:66:99:05:fa:9f:44:7a: 48:f6:48:43:13:13:3d:2d:96:9d:70:4e:87:a1:9e: 73:a2:aa:4c:bc:c9:04:06:e6:1b:bc:df:f1:9e:d5: 76:ae:56:a7:43:f5:2b:d6:01:73:f8:4c:75:12:bf: 09:db:55:35:90:0d:11:5b:7b:b1:e5:61:c3:df:9d: e7:3f:30:7a:d9:6d:07:4d:18:dc:53:71:03:92:9d: dc:16:89:d5:36:1f:c6:52:a4:9d:9f:c8:d6:67:a4: ea:01:6e:2b:ae:0a:de:11:88:a2:e9:8e:52:04:78: 68:dc:28:50:55:ee:06:cb:18:82:ac:27:9a:98:a1: 19:1f:89:b0:97:4a:cb:ce:d1:c2:85:ad:27:af:aa: f7:32:30:68:f7:21:eb:be:13:43:93:cc:68:7e:b0: 4e:5f:7a:a1:09:29:f7:b2:5b:9a:a2:87:f9:5c:f2: 7a:62:de:5c:43:63:8a:8f:c7:c3:46:f3:6b:0d:1d: de:86:7a:c1:f2:96:d5:26:e5:60:e4:12:4d:79:c8: 70:0d:2c:bb:2e:13:7e:0d:17:4a:e4:43:17:ca:9f: 8b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:79:FC:DB:D5:1E:4C:65:F1:7C:78:7C:D1:68:24:80:CE:76:90:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f12b80ea-acd8-3ac7-8605-38958184a82f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 64.187.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:34:38:bd:8b:b7:c1:e8:a2:4a:a9:16:88:12:b6:c2:12:ee: c4:56:51:59:64:f4:b0:e2:82:fa:57:78:f9:ef:a4:64:dd:bc: f9:12:c4:f6:31:e9:34:cc:1b:a6:5a:2f:fa:88:c0:4d:28:39: 9f:2e:a5:a8:62:5d:7a:71:28:e1:cd:64:28:e3:e6:9b:ed:8b: 77:45:e5:22:1b:7d:92:3e:1d:1d:9d:85:ed:1e:e4:08:04:14: 85:34:8b:7e:93:e9:fe:e3:c3:db:7a:27:99:77:b2:ad:80:79: a5:36:e6:bb:76:37:82:4f:58:ec:21:04:2e:de:49:35:e6:d7: dc:8a:29:24:20:9a:07:d1:4e:51:cc:68:a6:4c:72:fb:32:cd: ae:95:a7:ee:5f:bc:c4:d1:f7:59:77:e1:95:f7:6e:72:64:de: d5:43:dd:9f:03:b3:d5:44:4c:f3:3e:3e:c4:e1:0d:00:e8:85: 4f:ac:2c:39:c0:73:cc:5f:41:4a:b2:6f:36:df:1d:0a:60:a4: 11:82:6e:72:01:c7:7a:d3:e1:e1:1d:6c:4f:52:a7:e5:42:74: 4a:04:61:5d:2e:76:f9:6e:22:39:00:44:aa:26:96:79:19:7d: 54:e5:5b:97:28:11:fd:bb:e1:dc:70:c9:d2:5e:4c:44:05:e7: 2a:22:97:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdr5Y+EzNfXlpoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZGU2ZTUzMGUtYWJiZS00MGY0LWJlZDUtNDY0MzI2ZjU3OWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJa3LiRTUOgm/qNnRTqkGrXerFST1BwhgAXr fJ0z9xiArmPDmGaZBfqfRHpI9khDExM9LZadcE6HoZ5zoqpMvMkEBuYbvN/xntV2 rlanQ/Ur1gFz+Ex1Er8J21U1kA0RW3ux5WHD353nPzB62W0HTRjcU3EDkp3cFonV Nh/GUqSdn8jWZ6TqAW4rrgreEYii6Y5SBHho3ChQVe4GyxiCrCeamKEZH4mwl0rL ztHCha0nr6r3MjBo9yHrvhNDk8xofrBOX3qhCSn3sluaoof5XPJ6Yt5cQ2OKj8fD RvNrDR3ehnrB8pbVJuVg5BJNechwDSy7LhN+DRdK5EMXyp+LvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJ5/NvVHkxl8Xx4fNFoJIDOdpDEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjEyYjgwZWEtYWNkOC0z YWM3LTg2MDUtMzg5NTgxODRhODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQLugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM0OL2Lt8HookqpFogStsIS7sRWUVlk9LDigvpXePnvpGTdvPkSxPYx 6TTMG6ZaL/qIwE0oOZ8upahiXXpxKOHNZCjj5pvti3dF5SIbfZI+HR2dhe0e5AgE FIU0i36T6f7jw9t6J5l3sq2AeaU25rt2N4JPWOwhBC7eSTXm19yKKSQgmgfRTlHM aKZMcvsyza6Vp+5fvMTR91l34ZX3bnJk3tVD3Z8Ds9VETPM+PsThDQDohU+sLDnA c8xfQUqybzbfHQpgpBGCbnIBx3rT4eEdbE9Sp+VCdEoEYV0udvluIjkARKomlnkZ fVTlW5coEf274dxwydJeTEQF5yoil9g= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:50 2025 by rpki-client