$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/701f340e-c110-3b6e-aeec-2b1f3d5c626e.roa File: 701f340e-c110-3b6e-aeec-2b1f3d5c626e.roa (raw, json) Hash identifier: grR5ymVzKtxsvQ1U9fUrvn9RL5ZnYNlK6QdqFDhmD4A= Subject key identifier: 29:1D:E0:99:37:82:15:7F:30:65:BA:25:B5:A8:87:FE:72:81:A1:EB Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F4328584B59A1C6579AC62D30C7B47300 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/701f340e-c110-3b6e-aeec-2b1f3d5c626e.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 53264 IP address blocks: 199.96.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:c6:57:9a:c6:2d:30:c7:b4:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=5b5f2f8b-b4df-499c-9fe6-9ccea95a5911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9f:02:09:ba:80:b5:3e:49:d8:7f:b7:94:ed: 57:a7:bd:99:c8:be:3d:a9:03:7e:ce:cf:80:16:60: e1:07:9d:30:b5:df:6b:79:2e:e4:12:5c:d9:74:27: 83:19:aa:40:20:ef:00:3d:41:59:43:f2:a0:38:fa: ac:ec:f7:22:1e:ae:19:74:73:40:70:97:7d:f7:6e: ef:c5:1f:3b:85:e9:27:95:d1:53:a8:46:0e:7c:5f: 7c:b6:15:5f:bc:d5:7e:75:1a:91:e4:41:ad:93:cf: 94:38:8b:31:c5:91:b7:4e:57:92:2b:42:c8:77:93: e7:3c:85:ed:ac:72:57:2b:e9:20:57:a7:7f:c8:a1: 96:6d:2c:ab:fe:20:59:00:46:bc:f6:88:df:3b:b5: 46:a2:0b:1d:50:5e:a4:04:29:3f:60:89:ab:d9:46: 23:6e:b9:6a:ef:47:fb:80:f9:00:e0:a1:f9:8e:f4: 17:ff:b7:1b:61:3e:ba:7b:47:55:6e:78:6f:70:49: 51:c9:ee:95:5c:67:b8:69:fa:61:02:ab:d6:bf:6e: 2d:07:58:51:43:a9:ba:8a:05:b9:30:12:e0:c3:4c: fe:65:d8:ab:0d:60:78:93:1c:ea:88:d1:c9:72:56: e0:5d:6e:7d:62:a9:48:04:55:7e:f1:02:ff:3a:4e: ec:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1D:E0:99:37:82:15:7F:30:65:BA:25:B5:A8:87:FE:72:81:A1:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/701f340e-c110-3b6e-aeec-2b1f3d5c626e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv4: 199.96.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:f5:b0:fb:09:fc:aa:ac:48:64:64:b9:14:5c:0a:ab:5b:f9: 2c:5c:0b:56:5e:08:7e:37:b8:77:3c:f7:b6:28:ce:b5:64:98: ee:cd:77:99:0f:4c:57:99:0c:ea:45:d1:48:a5:5f:36:7a:fa: 3b:94:57:60:27:07:63:9f:b6:77:53:50:78:06:a0:d3:18:26: 29:7f:d9:1f:6b:55:31:c5:73:ed:1d:06:74:3b:03:ec:9a:de: 32:34:a0:9f:dd:7f:b0:cc:3d:2c:c5:f3:08:fb:ba:d5:4b:0d: 99:8b:3b:d7:b0:38:c0:f0:73:5c:7c:2e:ea:3c:5e:03:75:28: 30:43:c1:95:55:dc:dd:af:f7:f5:3e:f4:8f:7a:ec:86:67:aa: ce:85:11:cc:ad:8b:d3:6e:15:cc:50:47:92:11:2e:8d:fa:dc: 8a:83:c6:9c:ac:ae:d4:47:2b:4d:fc:00:2d:57:59:5b:03:63: 6e:0a:bf:81:10:98:a8:22:e0:98:52:0c:c0:41:c0:0c:77:18: a8:0b:c7:a3:92:c2:5f:50:b1:e9:2a:7e:3e:bb:1e:af:51:2b: 95:75:64:a0:0f:73:6b:2b:ec:a3:fa:75:32:21:04:c2:4d:d1: 60:1e:66:95:37:6f:25:56:fd:d6:7a:77:fa:9c:fd:c8:45:b1: ef:f7:24:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZocZXmsYtMMe0cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk NWI1ZjJmOGItYjRkZi00OTljLTlmZTYtOWNjZWE5NWE1OTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj58CCbqAtT5J2H+3lO1Xp72ZyL49qQN+zs+A FmDhB50wtd9reS7kElzZdCeDGapAIO8APUFZQ/KgOPqs7PciHq4ZdHNAcJd9927v xR87heknldFTqEYOfF98thVfvNV+dRqR5EGtk8+UOIsxxZG3TleSK0LId5PnPIXt rHJXK+kgV6d/yKGWbSyr/iBZAEa89ojfO7VGogsdUF6kBCk/YImr2UYjbrlq70f7 gPkA4KH5jvQX/7cbYT66e0dVbnhvcElRye6VXGe4afphAqvWv24tB1hRQ6m6igW5 MBLgw0z+ZdirDWB4kxzqiNHJclbgXW59YqlIBFV+8QL/Ok7sxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkd4Jk3ghV/MGW6JbWoh/5ygaHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvNzAxZjM0MGUtYzExMC0z YjZlLWFlZWMtMmIxZjNkNWM2MjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2BQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALb1sPsJ/KqsSGRkuRRcCqtb+SxcC1ZeCH43uHc897YozrVkmO7Nd5kP TFeZDOpF0UilXzZ6+juUV2AnB2OftndTUHgGoNMYJil/2R9rVTHFc+0dBnQ7A+ya 3jI0oJ/df7DMPSzF8wj7utVLDZmLO9ewOMDwc1x8Luo8XgN1KDBDwZVV3N2v9/U+ 9I967IZnqs6FEcyti9NuFcxQR5IRLo363IqDxpysrtRHK038AC1XWVsDY24Kv4EQ mKgi4JhSDMBBwAx3GKgLx6OSwl9Qsekqfj67Hq9RK5V1ZKAPc2sr7KP6dTIhBMJN 0WAeZpU3byVW/dZ6d/qc/chFse/3JJU= -----END CERTIFICATE-----Generated at Fri Oct 24 06:46:39 2025 by rpki-client