$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a7af81f7-89d0-360d-a8cc-f012798dfce9.roa File: a7af81f7-89d0-360d-a8cc-f012798dfce9.roa (raw, json) Hash identifier: S5/sKNn2klaETI3oD3oQlWT4jvcL+4ML2ZESKoJNhfo= Subject key identifier: 9A:86:5C:E7:32:F7:13:AB:26:34:2D:F3:CA:3A:18:C9:A7:95:A3:39 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76BF30273F63771B5C59C0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a7af81f7-89d0-360d-a8cc-f012798dfce9.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 162.211.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:bf:30:27:3f:63:77:1b:5c:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=54193ca5-1faf-409a-a414-2c99f7b410fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dc:20:34:cc:d6:3f:0e:92:d4:b2:58:b2:8f: 26:87:d9:8f:8a:8d:96:6b:b2:7d:82:02:f6:a0:23: 29:d1:de:ff:84:3f:31:84:aa:d7:c9:f2:96:5a:47: 2f:dc:5e:7c:82:ed:c1:75:7c:77:0d:9f:d4:0e:4a: c8:02:08:7d:9e:10:a6:28:d9:2d:4f:f5:95:ba:dd: 91:68:b2:9c:ab:5f:6c:64:20:eb:20:4e:05:a3:e3: 79:1d:7e:bf:47:17:3c:55:fa:72:2e:91:35:a3:84: d9:09:2e:fb:2f:e9:c0:f1:06:f7:d2:88:69:ef:53: e0:54:48:86:45:28:1c:59:12:f5:6a:1c:c8:e8:ea: c0:1b:ba:97:eb:70:12:67:de:55:c2:ae:ee:e0:13: 5d:8e:6d:f2:68:da:07:36:52:4d:7c:31:06:52:28: 00:ba:80:58:5b:7c:79:70:ae:b6:14:5f:52:96:ca: 8e:e1:86:3b:77:b6:1c:d0:17:d0:45:80:e6:2d:ae: 60:69:d8:2c:e9:fc:c5:95:06:45:26:c2:fc:8d:00: 0c:ea:82:59:f4:f4:74:cd:51:3d:e5:c1:5e:a5:1e: 8b:f2:1f:ee:d2:79:a6:a0:4f:c2:bf:13:26:f1:cd: 27:ce:25:82:fc:29:94:04:02:ce:68:76:23:51:d5: f9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:86:5C:E7:32:F7:13:AB:26:34:2D:F3:CA:3A:18:C9:A7:95:A3:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a7af81f7-89d0-360d-a8cc-f012798dfce9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 162.211.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:26:9f:a0:98:9a:b0:e7:f5:be:d3:65:98:ee:90:3d:c8:b2: 3b:7f:0e:e6:91:fd:70:7f:f4:ee:da:4d:58:73:5b:ad:f4:f4: 7d:4d:27:40:90:cf:4f:db:3a:b8:8c:30:97:69:73:5b:79:ad: 7d:42:f8:d6:f6:05:e3:3e:82:50:3c:8c:72:e9:2e:02:f8:82: 5f:ff:49:28:35:8d:ca:20:03:f2:b1:9b:7f:d3:46:c3:b4:5d: 63:3d:eb:c7:ce:6d:21:60:5a:77:b4:4c:33:51:44:b7:ec:40: 5d:65:28:75:e3:81:fd:08:e8:4e:cb:7f:78:2f:88:6e:3c:69: e1:4a:a3:2b:e7:66:0b:10:3e:e4:75:82:15:f7:b7:21:37:ca: f3:70:6c:59:45:95:82:6a:1a:91:fd:aa:93:92:f1:18:07:c3: 75:04:57:af:94:8b:c6:b8:85:69:01:31:e3:25:e5:1d:41:2c: 6c:17:c0:22:1e:52:da:78:08:d2:e9:7c:97:2d:fb:78:19:bd: d0:55:02:71:24:81:c6:25:8d:17:fb:3a:e8:2a:42:ba:a5:b2: 24:36:7c:25:b7:cf:46:97:f3:d7:b9:be:19:54:e3:ae:e5:4d: c1:b1:38:83:c8:c7:c0:b1:75:fc:f9:aa:ee:5a:2f:51:85:d9: 02:b0:bc:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdr8wJz9jdxtcWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NTQxOTNjYTUtMWZhZi00MDlhLWE0MTQtMmM5OWY3YjQxMGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNwgNMzWPw6S1LJYso8mh9mPio2Wa7J9ggL2 oCMp0d7/hD8xhKrXyfKWWkcv3F58gu3BdXx3DZ/UDkrIAgh9nhCmKNktT/WVut2R aLKcq19sZCDrIE4Fo+N5HX6/Rxc8VfpyLpE1o4TZCS77L+nA8Qb30ohp71PgVEiG RSgcWRL1ahzI6OrAG7qX63ASZ95Vwq7u4BNdjm3yaNoHNlJNfDEGUigAuoBYW3x5 cK62FF9SlsqO4YY7d7Yc0BfQRYDmLa5gadgs6fzFlQZFJsL8jQAM6oJZ9PR0zVE9 5cFepR6L8h/u0nmmoE/CvxMm8c0nziWC/CmUBALOaHYjUdX5qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqGXOcy9xOrJjQt88o6GMmnlaM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYTdhZjgxZjctODlkMC0z NjBkLWE4Y2MtZjAxMjc5OGRmY2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMmn6CYmrDn9b7TZZjukD3Isjt/DuaR/XB/9O7aTVhzW6309H1NJ0CQ z0/bOriMMJdpc1t5rX1C+Nb2BeM+glA8jHLpLgL4gl//SSg1jcogA/Kxm3/TRsO0 XWM968fObSFgWne0TDNRRLfsQF1lKHXjgf0I6E7Lf3gviG48aeFKoyvnZgsQPuR1 ghX3tyE3yvNwbFlFlYJqGpH9qpOS8RgHw3UEV6+Ui8a4hWkBMeMl5R1BLGwXwCIe Utp4CNLpfJct+3gZvdBVAnEkgcYljRf7OugqQrqlsiQ2fCW3z0aX89e5vhlU467l TcGxOIPIx8Cxdfz5qu5aL1GF2QKwvFs= -----END CERTIFICATE-----Generated at Sat Sep 6 23:51:04 2025 by rpki-client