$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa File: 5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa (raw, json) Hash identifier: qADPamCSYLnQaxaJ//RVLwSltDOf8a8r4IsWq03igKE= Subject key identifier: B3:2B:D7:69:0E:1C:3B:C8:99:76:77:CB:16:F9:86:FA:49:22:2E:42 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76CF76C67D7349AC5B6B80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 199.59.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:cf:76:c6:7d:73:49:ac:5b:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=09b72d83-78e1-4cbd-94f3-aa1e9f68f51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7c:45:5f:01:a4:c3:e2:b1:9b:61:55:87:96: 43:24:bb:43:71:b9:dd:e2:fd:60:47:14:42:cf:9b: 99:ac:ca:18:3c:cc:51:a4:da:55:d7:2c:3b:50:cc: 1a:f2:48:ef:01:1f:69:bd:19:e5:56:0a:7d:67:3d: 82:e4:39:4c:39:8f:c8:c2:d9:cb:97:ee:fb:bb:1e: 98:f9:15:26:6f:3b:41:26:62:1d:e2:20:39:3a:d8: 04:09:e0:50:30:0e:d6:46:9e:0b:c5:c7:56:7d:a2: a5:ea:7f:00:0e:e4:22:b0:6f:58:fd:99:9b:5b:a3: 68:04:77:4d:88:22:79:41:1d:9d:10:de:76:39:68: 95:f5:55:15:55:54:b0:e5:69:d6:af:57:e6:48:da: c7:b9:1c:c9:e2:13:5b:d4:25:71:83:34:f3:ef:a0: 96:0a:9a:96:22:38:06:07:bf:fb:02:7b:23:f6:7e: 11:c1:b8:ba:5d:63:2f:78:ca:58:2b:07:4e:bf:ff: c8:b9:0b:d3:20:02:1a:fe:61:15:ab:f9:c5:a1:69: 37:62:2a:2a:63:5c:20:ae:bd:8b:9c:06:f9:8e:68: 5b:1b:15:e2:12:22:4d:a5:ee:01:44:ad:bf:d5:77: 2c:a8:36:ea:b4:d3:e8:b7:79:a6:e7:5f:12:26:9c: 00:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2B:D7:69:0E:1C:3B:C8:99:76:77:CB:16:F9:86:FA:49:22:2E:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.59.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c4:54:74:00:de:fe:1d:7f:d1:bf:17:dc:7c:bc:83:3b:e4: 45:e0:0d:b3:16:29:0c:40:89:d3:d6:98:58:ae:52:41:5c:34: d8:b4:c4:5b:c5:a5:a8:af:b4:db:38:03:c3:0e:8c:f9:b0:06: 68:7b:1a:e1:94:dd:33:5e:29:06:48:24:78:52:8b:39:d9:cb: a1:1c:bf:74:67:5e:00:d8:94:6d:97:33:55:26:4b:b6:d1:b1: 04:fe:f1:5a:c1:7c:cb:92:4a:11:c9:c7:e9:f4:13:03:2a:ee: b1:98:8a:75:e9:da:31:52:29:97:80:2f:5f:00:bc:d7:60:0b: ba:83:67:7b:9a:6b:d8:21:df:69:8a:9b:b8:d2:1f:a2:1c:58: da:7b:39:84:30:bc:39:d9:ca:b8:65:23:21:ce:69:06:35:d5: 37:92:33:8b:bf:39:8c:de:38:5f:c4:92:81:ed:8e:d5:57:17: 92:6e:27:ed:75:92:69:9c:83:69:72:04:5a:fa:9e:b1:70:a0: 00:68:4b:1a:bd:13:0e:14:a9:04:3b:4c:48:82:71:48:d7:8d: f4:d1:07:2b:58:5b:bf:dd:82:80:fa:4e:75:00:a6:e7:a6:49: d8:7a:02:00:e4:61:06:5a:2a:a4:a6:94:02:5e:ec:c5:67:c3: f4:2e:ac:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLds92xn1zSaxba4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MDliNzJkODMtNzhlMS00Y2JkLTk0ZjMtYWExZTlmNjhmNTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHxFXwGkw+Kxm2FVh5ZDJLtDcbnd4v1gRxRC z5uZrMoYPMxRpNpV1yw7UMwa8kjvAR9pvRnlVgp9Zz2C5DlMOY/IwtnLl+77ux6Y +RUmbztBJmId4iA5OtgECeBQMA7WRp4LxcdWfaKl6n8ADuQisG9Y/ZmbW6NoBHdN iCJ5QR2dEN52OWiV9VUVVVSw5WnWr1fmSNrHuRzJ4hNb1CVxgzTz76CWCpqWIjgG B7/7Ansj9n4Rwbi6XWMveMpYKwdOv//IuQvTIAIa/mEVq/nFoWk3YioqY1wgrr2L nAb5jmhbGxXiEiJNpe4BRK2/1XcsqDbqtNPot3mm518SJpwASwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMr12kOHDvImXZ3yxb5hvpJIi5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNWUxZjg4ZDctYmVlMC0z MTk1LWJkODItZGFmMWRmOGQ4ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxztoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3EVHQA3v4df9G/F9x8vIM75EXgDbMWKQxAidPWmFiuUkFcNNi0xFvF paivtNs4A8MOjPmwBmh7GuGU3TNeKQZIJHhSiznZy6Ecv3RnXgDYlG2XM1UmS7bR sQT+8VrBfMuSShHJx+n0EwMq7rGYinXp2jFSKZeAL18AvNdgC7qDZ3uaa9gh32mK m7jSH6IcWNp7OYQwvDnZyrhlIyHOaQY11TeSM4u/OYzeOF/EkoHtjtVXF5JuJ+11 kmmcg2lyBFr6nrFwoABoSxq9Ew4UqQQ7TEiCcUjXjfTRBytYW7/dgoD6TnUApuem Sdh6AgDkYQZaKqSmlAJe7MVnw/QurEs= -----END CERTIFICATE-----Generated at Sat Sep 6 23:54:51 2025 by rpki-client