$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/27cf9b9e-c0ac-3bd2-b9b5-eb433a3f68ae.roa File: 27cf9b9e-c0ac-3bd2-b9b5-eb433a3f68ae.roa (raw, json) Hash identifier: yhUAvk/j7cyOa57lvBz6fgGDYqYq0iReUW5AVS9NwfU= Subject key identifier: 16:2A:9C:51:51:4B:46:BF:C9:5B:09:58:1D:7C:6B:C3:4B:91:B7:32 Certificate issuer: /CN=58520fc1-e07b-4b1b-ad59-5756198c9756 Certificate serial: 010D0C9F4328584AFEE6CC0B104B4FFEF2FA6480 Authority key identifier: 8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/27cf9b9e-c0ac-3bd2-b9b5-eb433a3f68ae.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 22770 IP address blocks: 199.181.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:cc:0b:10:4b:4f:fe:f2:fa:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58520fc1-e07b-4b1b-ad59-5756198c9756 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=b91ff2a7-0511-4cf8-8473-795a97a1c4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2c:1f:a8:c7:3c:c2:1c:60:31:63:a1:32:c5: a0:2f:33:d7:bc:ae:fc:84:51:59:a9:a6:d0:cc:99: 2e:a5:00:a6:11:17:2f:a6:dc:51:9e:b9:9f:a7:dd: d7:f9:d1:d2:6e:14:22:81:16:fc:2b:85:9a:13:2a: 0e:d6:1d:03:de:75:77:89:a0:ff:10:6f:ca:7b:2b: 6b:4c:0a:c5:da:79:cc:9f:bd:07:d9:b5:9b:7e:43: 9f:1f:ac:82:17:94:fd:d0:53:70:52:49:3f:a5:31: 8b:18:0f:59:cf:2f:ed:1f:fc:d7:ce:a0:a6:1d:10: a5:61:64:21:97:e8:a3:ee:30:85:22:30:5d:59:5b: 4e:62:14:77:08:ac:61:b5:ad:2f:87:39:fc:e3:c1: 7d:a8:87:fe:bf:81:6b:fe:5e:c6:24:3e:92:8a:4c: de:09:4e:a7:b3:00:f3:b1:c0:a2:3d:bc:fc:34:06: 47:4d:3d:16:c4:81:e1:c5:d9:58:ad:dc:9e:70:95: 5a:c4:32:f4:c3:1f:df:48:33:bb:25:9b:b9:d9:18: a5:19:6e:20:b3:c5:4d:1b:f2:6a:59:9f:f8:b8:3b: c4:bb:be:b8:7a:e7:05:30:66:fb:ac:a1:67:dc:a0: 00:f6:45:6e:36:57:a8:2c:6e:1d:68:1c:1f:a5:75: 88:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2A:9C:51:51:4B:46:BF:C9:5B:09:58:1D:7C:6B:C3:4B:91:B7:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/27cf9b9e-c0ac-3bd2-b9b5-eb433a3f68ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl X509v3 Authority Key Identifier: keyid:8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer sbgp-ipAddrBlock: critical IPv4: 199.181.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:5f:66:53:e3:75:b6:44:a5:8a:27:a5:85:06:dc:14:c2:dd: 50:8f:1e:9e:da:d0:22:10:57:65:b9:11:d8:9b:c2:d0:f9:3c: 86:c4:74:a2:48:74:36:12:f5:75:81:4b:2d:5c:db:21:7b:4a: 68:0e:55:01:44:27:69:cb:65:31:6e:e7:3c:ca:26:ca:f2:6f: 86:1c:37:e7:ca:ad:69:ac:f1:25:1b:2f:2f:2f:de:33:3b:c5: 54:2e:54:af:53:66:55:43:55:d2:f9:fc:f4:bf:34:3e:2f:42: 04:63:62:0f:c4:45:9c:25:ca:39:b8:27:02:76:9a:bf:7f:05: 7a:67:f4:72:52:8c:83:59:a3:c4:69:76:17:32:66:52:13:26: 74:51:cd:06:75:02:0a:ea:db:59:69:0a:db:e1:cd:40:3a:83: 8c:45:01:67:33:9b:51:a8:28:5b:af:45:cd:0f:e0:10:e8:69: 58:44:86:d8:fd:7e:bb:8f:82:51:bf:87:02:9e:40:f3:15:af: 95:a0:e7:b0:19:6a:96:2a:1f:39:a3:f3:dd:1f:75:ac:db:80: 79:53:21:2d:8d:32:5d:09:3f:40:2b:f5:f1:90:f4:84:11:0e: 3a:a2:8f:d9:da:88:28:ef:88:44:7c:d7:f1:47:3a:53:bb:9f: 0a:e1:01:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5swLEEtP/vL6ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg1MjBmYzEtZTA3Yi00YjFiLWFkNTktNTc1NjE5OGM5 NzU2MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YjkxZmYyYTctMDUxMS00Y2Y4LTg0NzMtNzk1YTk3YTFjNGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSwfqMc8whxgMWOhMsWgLzPXvK78hFFZqabQ zJkupQCmERcvptxRnrmfp93X+dHSbhQigRb8K4WaEyoO1h0D3nV3iaD/EG/Keytr TArF2nnMn70H2bWbfkOfH6yCF5T90FNwUkk/pTGLGA9Zzy/tH/zXzqCmHRClYWQh l+ij7jCFIjBdWVtOYhR3CKxhta0vhzn848F9qIf+v4Fr/l7GJD6SikzeCU6nswDz scCiPbz8NAZHTT0WxIHhxdlYrdyecJVaxDL0wx/fSDO7JZu52RilGW4gs8VNG/Jq WZ/4uDvEu764eucFMGb7rKFn3KAA9kVuNleoLG4daBwfpXWI4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYqnFFRS0a/yVsJWB18a8NLkbcyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ODUy MGZjMS1lMDdiLTRiMWItYWQ1OS01NzU2MTk4Yzk3NTYvMjdjZjliOWUtYzBhYy0z YmQyLWI5YjUtZWI0MzNhM2Y2OGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTg1MjBmYzEtZTA3Yi00YjFiLWFk NTktNTc1NjE5OGM5NzU2LzU4NTIwZmMxLWUwN2ItNGIxYi1hZDU5LTU3NTYxOThj OTc1Ni5jcmwwHwYDVR0jBBgwFoAUi2haR5bTltH5oV/nOJXgKYPm1AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ODUyMGZjMS1lMDdiLTRiMWItYWQ1OS01NzU2 MTk4Yzk3NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7UgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxfZlPjdbZEpYonpYUG3BTC3VCPHp7a0CIQV2W5EdibwtD5PIbEdKJI dDYS9XWBSy1c2yF7SmgOVQFEJ2nLZTFu5zzKJsryb4YcN+fKrWms8SUbLy8v3jM7 xVQuVK9TZlVDVdL5/PS/ND4vQgRjYg/ERZwlyjm4JwJ2mr9/BXpn9HJSjINZo8Rp dhcyZlITJnRRzQZ1Agrq21lpCtvhzUA6g4xFAWczm1GoKFuvRc0P4BDoaVhEhtj9 fruPglG/hwKeQPMVr5Wg57AZapYqHzmj890fdazbgHlTIS2NMl0JP0Ar9fGQ9IQR Djqij9naiCjviER81/FHOlO7nwrhAcs= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:15 2025 by rpki-client