$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d442a03f-b7b8-3a65-ac59-a8fa7667d29d.roa File: d442a03f-b7b8-3a65-ac59-a8fa7667d29d.roa (raw, json) Hash identifier: wfH61Ocd83QtfqRQ0o1b/68xlf9vrQJr+DMufc4HOeY= Subject key identifier: B1:27:5A:59:F4:A1:CB:53:5A:64:01:26:47:22:F7:73:63:0E:0B:20 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6F1B39D004CBB6176C280 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d442a03f-b7b8-3a65-ac59-a8fa7667d29d.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 199.27.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:f1:b3:9d:00:4c:bb:61:76:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=cf781e61-6307-44ca-a9df-8e4fe47ebd63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:97:67:80:17:6b:ed:09:ca:72:15:62:a4:6d: 7f:3c:09:32:02:79:3d:c4:4a:34:1b:61:49:86:c1: 0c:02:84:28:2c:60:c7:b3:6a:69:44:b7:cb:81:b3: 74:d4:0c:a4:3d:17:17:d4:70:69:3a:a7:66:10:5b: 9e:1c:5d:f1:2c:45:80:f4:3f:7a:29:61:ef:c4:7e: dd:52:5a:a2:fa:be:88:21:3e:bf:b7:58:12:58:58: d6:c1:36:7d:37:2a:1d:2f:e3:0c:cd:91:6f:0e:f0: 2f:70:92:3f:69:2a:39:de:3d:0d:cd:61:73:cf:77: fb:ac:48:ff:1a:2c:70:1f:da:00:33:df:45:5f:5e: f4:d1:93:a5:de:eb:7d:97:47:78:52:3e:2c:c5:02: 12:5a:f4:2e:e0:20:e5:52:ea:f4:14:3f:5b:61:b0: 16:f7:4a:dd:14:e0:56:93:65:51:03:3b:87:6b:49: f9:4d:20:ee:77:16:53:d9:a3:43:15:e1:81:64:ce: 36:e4:d0:92:48:3a:10:cd:eb:e1:49:2b:75:a9:1b: 3c:50:9b:6e:f9:7a:59:2b:0f:63:cd:b5:0d:5d:dd: de:8a:73:a0:a1:84:b8:0e:ff:2f:9f:2a:a1:58:25: ac:82:3a:39:53:ed:19:98:3e:fd:c1:34:bf:c3:eb: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:27:5A:59:F4:A1:CB:53:5A:64:01:26:47:22:F7:73:63:0E:0B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d442a03f-b7b8-3a65-ac59-a8fa7667d29d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 199.27.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:5b:d7:d2:da:5b:d7:f7:f8:1d:98:d3:bd:65:ee:38:6b:96: 19:43:3d:03:2d:4a:7d:d2:ab:a6:b4:4d:a7:f0:20:b4:26:8b: a0:ac:fb:fd:f8:f9:14:c1:3b:16:df:43:0a:c6:50:2b:c0:bc: 3c:b9:04:2b:6b:af:e7:eb:e0:06:a3:4f:73:d2:16:c6:f0:60: b7:42:b7:b6:d3:42:78:07:62:9e:1f:84:9d:3f:fc:93:dc:ba: c1:72:ba:7c:ff:57:f8:73:8a:dd:d8:4e:33:00:9b:a3:b8:39: b9:98:41:dd:33:c8:e4:61:00:68:a7:96:83:ca:b7:3c:1e:e5: f4:d6:4c:40:9f:c5:90:c5:b1:08:5c:3a:93:cc:61:0a:82:c8: f5:70:72:1f:64:6b:15:21:d2:e7:f8:8b:d0:41:28:99:2b:c2: 8b:92:d3:c5:01:05:2d:4a:da:dd:f4:00:6a:b9:47:0e:c8:d1: d9:d9:18:0b:d8:b0:9c:61:26:fb:08:01:6c:6a:c5:32:6e:58: d9:d5:55:a6:e6:64:bf:cf:ff:ba:62:52:a9:cb:2f:84:09:7d: 0b:5c:e4:f4:77:3f:cf:c8:c5:64:74:4a:2d:ce:79:df:30:eb: 11:95:67:44:87:03:1d:e5:33:34:b9:04:44:a5:58:e7:42:3f: 74:ca:f3:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1vGznQBMu2F2woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk Y2Y3ODFlNjEtNjMwNy00NGNhLWE5ZGYtOGU0ZmU0N2ViZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZdngBdr7QnKchVipG1/PAkyAnk9xEo0G2FJ hsEMAoQoLGDHs2ppRLfLgbN01AykPRcX1HBpOqdmEFueHF3xLEWA9D96KWHvxH7d Ulqi+r6IIT6/t1gSWFjWwTZ9NyodL+MMzZFvDvAvcJI/aSo53j0NzWFzz3f7rEj/ GixwH9oAM99FX1700ZOl3ut9l0d4Uj4sxQISWvQu4CDlUur0FD9bYbAW90rdFOBW k2VRAzuHa0n5TSDudxZT2aNDFeGBZM425NCSSDoQzevhSSt1qRs8UJtu+XpZKw9j zbUNXd3einOgoYS4Dv8vnyqhWCWsgjo5U+0ZmD79wTS/w+tB6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEnWln0octTWmQBJkci93NjDgsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZDQ0MmEwM2YtYjdiOC0z YTY1LWFjNTktYThmYTc2NjdkMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxtNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5b19LaW9f3+B2Y071l7jhrlhlDPQMtSn3Sq6a0TafwILQmi6Cs+/34 +RTBOxbfQwrGUCvAvDy5BCtrr+fr4AajT3PSFsbwYLdCt7bTQngHYp4fhJ0//JPc usFyunz/V/hzit3YTjMAm6O4ObmYQd0zyORhAGinloPKtzwe5fTWTECfxZDFsQhc OpPMYQqCyPVwch9kaxUh0uf4i9BBKJkrwouS08UBBS1K2t30AGq5Rw7I0dnZGAvY sJxhJvsIAWxqxTJuWNnVVabmZL/P/7piUqnLL4QJfQtc5PR3P8/IxWR0Si3Oed8w 6xGVZ0SHAx3lMzS5BESlWOdCP3TK858= -----END CERTIFICATE-----Generated at Thu Oct 9 05:43:23 2025 by rpki-client