$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f660c17d-9da8-3fef-8e90-443e1d6fcad8.roa File: f660c17d-9da8-3fef-8e90-443e1d6fcad8.roa (raw, json) Hash identifier: +tvO5WCjPAuB3fN/QKw8m/QRpYTJctWmpWnn3Xf+ivU= Subject key identifier: 09:65:D1:91:70:48:46:FB:B2:F2:33:31:FD:C1:05:48:97:8A:2F:1B Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76CE965889DC25D75BF780 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f660c17d-9da8-3fef-8e90-443e1d6fcad8.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 65.50.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ce:96:58:89:dc:25:d7:5b:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=8538f664-e788-4618-be5d-22bdde668375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:41:08:5e:05:4d:22:60:1c:04:55:1f:60: 48:bf:1c:db:68:02:85:6d:cb:a4:1f:83:b7:43:65: f2:c5:29:4e:ae:a1:79:3f:60:5b:0c:66:98:33:c7: 34:23:ab:8c:77:5c:72:c0:c7:65:14:f8:64:16:96: f9:6e:3e:21:83:21:c1:9f:62:b1:fb:2b:1f:4b:7e: b5:ac:9b:f4:cb:b0:07:7e:40:03:b7:d2:a8:86:c8: f1:2d:57:b3:df:ac:cb:8c:84:f3:a2:89:f1:44:90: a5:cd:9d:c5:70:7e:66:a7:02:19:06:08:9d:63:9a: 78:20:a1:3d:41:fd:cb:08:de:3e:bf:84:fc:2b:f1: 60:ca:f2:df:8f:7c:c0:b8:9d:6b:10:89:0d:bd:d2: e5:17:aa:64:6e:9d:97:68:73:a4:24:d6:06:48:eb: 8e:e7:f6:28:86:c6:53:d2:b7:c6:0e:59:5c:b0:c1: ff:9b:3c:4a:98:77:5a:c6:37:5d:2e:1f:98:93:de: f1:52:8d:86:2e:6c:1f:77:83:06:90:0c:bd:68:02: 66:b5:fd:78:a4:2b:07:06:65:9e:10:66:ba:ff:ce: 03:79:e0:bc:81:b0:3a:62:52:1f:7f:47:74:2e:fb: 73:29:e4:f1:1e:05:28:b0:1d:3c:77:10:c0:b4:4b: 36:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:65:D1:91:70:48:46:FB:B2:F2:33:31:FD:C1:05:48:97:8A:2F:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f660c17d-9da8-3fef-8e90-443e1d6fcad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 65.50.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:da:9b:50:7c:25:d4:5d:57:53:af:cb:a6:58:bc:51:ea:8f: 42:b6:ef:55:dd:e3:5e:03:8a:bc:6e:33:34:0d:2f:94:56:63: eb:97:cd:37:fd:dd:b4:2b:ec:b8:4b:40:d5:42:bd:eb:cc:a2: 80:72:c8:bd:63:43:45:ee:b0:78:cc:41:60:7c:37:b7:13:d2: 62:53:c8:64:a0:d9:7c:eb:ee:78:5f:8e:bf:07:79:d3:6c:a0: 2f:9f:6f:53:d3:26:a6:2f:73:2c:30:46:6c:98:ad:65:58:7b: dd:a3:4a:da:25:91:10:d9:d1:0a:c1:a0:45:fd:be:82:cf:d1: 1d:6e:b8:d3:61:72:8b:7d:73:58:b4:78:e2:b7:a2:6c:9d:bb: c5:4a:c7:9c:d7:05:0d:56:20:6f:2b:0c:c5:10:ff:7c:95:0e: 09:48:e7:9a:25:27:b5:94:0e:c8:82:1a:f1:cf:b6:10:53:46: c1:f1:df:b5:54:b2:4b:a9:dc:0a:04:0d:f6:ab:31:9a:ee:8e: b2:52:78:32:34:b8:6b:94:19:ac:da:d1:55:e3:60:cd:ea:ef: a4:c1:8c:16:45:19:84:83:f2:3b:f2:e1:77:25:4c:96:8f:09: 05:79:13:ad:e5:a1:da:c8:f6:54:49:06:26:06:ff:bd:1b:7d: 55:3e:23:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLds6WWIncJddb94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ODUzOGY2NjQtZTc4OC00NjE4LWJlNWQtMjJiZGRlNjY4Mzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodlBCF4FTSJgHARVH2BIvxzbaAKFbcukH4O3 Q2XyxSlOrqF5P2BbDGaYM8c0I6uMd1xywMdlFPhkFpb5bj4hgyHBn2Kx+ysfS361 rJv0y7AHfkADt9KohsjxLVez36zLjITzoonxRJClzZ3FcH5mpwIZBgidY5p4IKE9 Qf3LCN4+v4T8K/FgyvLfj3zAuJ1rEIkNvdLlF6pkbp2XaHOkJNYGSOuO5/YohsZT 0rfGDllcsMH/mzxKmHdaxjddLh+Yk97xUo2GLmwfd4MGkAy9aAJmtf14pCsHBmWe EGa6/84DeeC8gbA6YlIff0d0LvtzKeTxHgUosB08dxDAtEs26wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAll0ZFwSEb7svIzMf3BBUiXii8bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjY2MGMxN2QtOWRhOC0z ZmVmLThlOTAtNDQzZTFkNmZjYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQTLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzam1B8JdRdV1Ovy6ZYvFHqj0K271Xd414DirxuMzQNL5RWY+uXzTf9 3bQr7LhLQNVCvevMooByyL1jQ0XusHjMQWB8N7cT0mJTyGSg2Xzr7nhfjr8HedNs oC+fb1PTJqYvcywwRmyYrWVYe92jStolkRDZ0QrBoEX9voLP0R1uuNNhcot9c1i0 eOK3omydu8VKx5zXBQ1WIG8rDMUQ/3yVDglI55olJ7WUDsiCGvHPthBTRsHx37VU skup3AoEDfarMZrujrJSeDI0uGuUGaza0VXjYM3q76TBjBZFGYSD8jvy4XclTJaP CQV5E63lodrI9lRJBiYG/70bfVU+I8k= -----END CERTIFICATE-----Generated at Sat Sep 6 23:51:02 2025 by rpki-client