$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f465a6e5-5591-34dd-a559-1c8626c17563.roa File: f465a6e5-5591-34dd-a559-1c8626c17563.roa (raw, json) Hash identifier: RWb+AjpF8BbS/sDNOzDSqDwbfcmWWSOUjctb0lDZxs8= Subject key identifier: 64:41:2D:5B:B3:FD:91:DB:BA:54:A2:51:36:D3:49:C4:19:4D:80:15 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76C2000E16CBBC03AAB6F0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f465a6e5-5591-34dd-a559-1c8626c17563.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 199.189.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c2:00:0e:16:cb:bc:03:aa:b6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=19788996-d054-4d6f-bdad-1cfcf13ef247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:45:f2:b2:a9:b3:0f:a9:5a:b2:0f:3d:01:93: 04:c0:d0:df:9f:59:ce:b4:53:2a:8e:57:4b:1a:b7: 69:e7:97:55:7a:66:0f:de:f1:66:4d:65:8c:f8:84: 76:09:7d:da:61:72:66:f7:49:eb:ee:93:c6:cd:a5: 7a:94:5b:3c:b4:8a:c2:49:16:45:f8:6a:20:b4:48: 02:26:30:99:6b:5b:27:84:67:5d:0c:1c:29:e7:1f: 72:b0:77:cf:37:be:a5:4f:41:02:88:fb:0e:df:52: a1:7c:34:e6:93:51:2e:99:77:82:5c:86:5a:16:62: 27:18:ea:e3:a7:57:bf:8b:76:ac:29:e3:7a:17:fb: 84:05:1c:36:a0:6a:f9:75:80:f4:f0:14:38:28:47: d9:0a:51:c5:98:bc:d1:da:5e:5e:be:a4:0b:b3:ab: d0:d3:6c:03:65:fd:99:bc:3e:69:90:9b:db:c2:42: 8e:6b:2e:21:88:f6:cf:16:99:e8:57:5f:42:73:4b: 63:66:71:4e:d2:28:18:86:e2:c4:fe:27:06:54:c1: 2e:a7:cb:7b:5c:d8:8a:9d:48:9a:6e:75:d5:bf:f7: cb:c2:ae:37:35:63:62:60:5e:ff:31:18:20:41:64: c2:54:67:2e:21:40:ca:bd:f5:e3:03:3d:da:ba:ac: 9e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:41:2D:5B:B3:FD:91:DB:BA:54:A2:51:36:D3:49:C4:19:4D:80:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f465a6e5-5591-34dd-a559-1c8626c17563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.189.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c0:85:51:dd:ab:ba:6a:f9:6c:de:3a:23:d2:d2:81:5d:49: 41:19:f4:c4:e4:32:fc:fc:8a:da:62:99:d0:55:1c:30:87:a3: 91:60:45:c0:b6:87:db:d9:1f:56:19:a7:d9:6f:ae:14:41:6a: 72:16:bb:13:2c:d1:d4:a4:13:40:1f:f9:40:28:24:fb:80:b7: 52:d7:2a:35:c5:57:76:17:46:77:33:46:cf:9e:fa:ef:73:7f: 1f:f9:f3:b9:79:ff:1b:bc:d9:c6:8f:9a:1f:76:c7:65:bf:4e: 1b:3f:4d:c0:cc:2c:8d:40:06:e6:dc:b2:c5:b2:3f:1c:34:1f: 2a:f0:68:aa:02:d2:0d:d2:9b:99:90:69:7d:e7:5b:b1:dc:07: 44:a2:d5:03:1c:47:4b:85:0b:b8:ad:47:2b:d0:ad:99:a2:e5: 06:b0:ab:9a:a0:54:e6:ba:31:a4:56:c9:0b:1d:06:0a:18:b2: 4d:ab:8f:ca:b3:d4:c4:0b:e1:ed:7a:9e:31:99:36:12:db:79: 9e:2f:cf:85:69:e5:70:c5:9c:a6:56:05:55:b8:09:f7:6e:05: 25:f5:9c:d2:68:8f:12:27:19:db:92:f3:7d:0b:4a:84:c8:f3: 83:43:46:88:1f:79:68:72:83:d2:63:49:78:5f:96:0b:3f:f8: 1d:07:0f:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsIADhbLvAOqtvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MTk3ODg5OTYtZDA1NC00ZDZmLWJkYWQtMWNmY2YxM2VmMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0XysqmzD6lasg89AZMEwNDfn1nOtFMqjldL Grdp55dVemYP3vFmTWWM+IR2CX3aYXJm90nr7pPGzaV6lFs8tIrCSRZF+GogtEgC JjCZa1snhGddDBwp5x9ysHfPN76lT0ECiPsO31KhfDTmk1EumXeCXIZaFmInGOrj p1e/i3asKeN6F/uEBRw2oGr5dYD08BQ4KEfZClHFmLzR2l5evqQLs6vQ02wDZf2Z vD5pkJvbwkKOay4hiPbPFpnoV19Cc0tjZnFO0igYhuLE/icGVMEup8t7XNiKnUia bnXVv/fLwq43NWNiYF7/MRggQWTCVGcuIUDKvfXjAz3auqyeMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRBLVuz/ZHbulSiUTbTScQZTYAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjQ2NWE2ZTUtNTU5MS0z NGRkLWE1NTktMWM4NjI2YzE3NTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx71gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbAhVHdq7pq+WzeOiPS0oFdSUEZ9MTkMvz8itpimdBVHDCHo5FgRcC2 h9vZH1YZp9lvrhRBanIWuxMs0dSkE0Af+UAoJPuAt1LXKjXFV3YXRnczRs+e+u9z fx/587l5/xu82caPmh92x2W/Ths/TcDMLI1ABubcssWyPxw0HyrwaKoC0g3Sm5mQ aX3nW7HcB0Si1QMcR0uFC7itRyvQrZmi5Qawq5qgVOa6MaRWyQsdBgoYsk2rj8qz 1MQL4e16njGZNhLbeZ4vz4Vp5XDFnKZWBVW4CfduBSX1nNJojxInGduS830LSoTI 84NDRogfeWhyg9JjSXhflgs/+B0HDz8= -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:45 2025 by rpki-client