$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10bf7b2f-b6b6-39da-b2f4-a6695e52a92f.roa File: 10bf7b2f-b6b6-39da-b2f4-a6695e52a92f.roa (raw, json) Hash identifier: Mt1qlSukmas6RJKNavVV4WPXxo/KrihJRvtLwq2PCaw= Subject key identifier: A0:ED:46:0F:3E:BF:8F:D8:92:D6:01:0D:D5:43:0F:93:C3:EE:4D:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF9515CBABA6791F82A63AC10 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10bf7b2f-b6b6-39da-b2f4-a6695e52a92f.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 200005 IP address blocks: 170.199.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:5c:ba:ba:67:91:f8:2a:63:ac:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=5bf92957-639b-4281-a059-a9e6f098e18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5f:81:20:ef:c6:4f:47:61:0e:3e:31:46:7c: 5d:84:e3:bf:b3:6f:30:bf:f7:51:42:a4:d9:5a:10: 03:34:75:73:ac:82:6f:3c:60:48:42:b8:31:89:f5: 79:ea:39:f7:4e:8c:77:42:e5:0d:67:06:37:35:3c: f0:04:eb:75:b6:0d:53:6c:c2:77:8f:dd:71:4c:5c: e5:38:8a:d5:ec:80:a5:21:cb:08:11:2d:ea:df:bf: c5:d5:f3:ad:3c:ba:57:dc:15:a1:d8:6b:98:00:07: 04:5f:c4:af:96:3f:48:94:3c:73:a1:14:49:d3:77: 39:97:83:e0:d8:6c:86:ed:30:b2:d8:71:b6:7e:96: ed:11:fd:b1:b7:8c:f6:24:ff:f3:f6:60:9b:65:5f: 93:e2:9d:17:c7:ec:2b:9e:d7:65:37:eb:cc:48:cf: da:2d:a8:1c:ed:d9:b9:3d:e3:4e:09:c9:20:9d:a9: 01:e1:b4:de:b0:5a:43:75:06:63:46:f9:2a:b0:c9: 00:28:e7:4f:3f:2e:2f:8f:03:e1:5a:d9:34:cd:f2: ac:97:af:ac:be:9f:9c:04:d3:85:62:f2:55:35:bf: 5e:e6:63:f6:17:78:3e:8f:20:3f:01:bc:bb:43:02: c8:13:58:79:3f:3a:a2:51:6d:c4:da:3d:6d:a3:72: 95:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:ED:46:0F:3E:BF:8F:D8:92:D6:01:0D:D5:43:0F:93:C3:EE:4D:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10bf7b2f-b6b6-39da-b2f4-a6695e52a92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 170.199.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a1:d4:54:80:5f:c9:fd:ba:a0:a6:f4:d9:2c:63:97:d9:95: 49:c7:fa:84:74:fd:99:5e:44:74:6f:55:e3:2a:bb:0d:b0:11: 2e:3c:3d:bd:b7:c2:e3:a9:d3:8f:0d:28:1c:28:0c:57:c4:e2: d8:9b:02:54:8e:1b:93:6a:0b:59:4a:76:6d:51:89:24:30:4d: cf:4f:90:f9:39:a6:ab:3d:38:05:52:90:41:de:a5:bc:59:1a: 29:b4:a8:9e:c0:d4:46:f4:38:df:a4:8c:44:0f:50:a9:74:63: d9:ca:c1:1c:74:7f:c5:64:03:bd:68:db:e9:39:42:70:49:f1: 6a:76:2f:7d:10:a4:97:64:8f:89:97:39:2b:c6:74:90:58:7f: eb:7c:77:84:c2:28:c1:eb:f8:44:ab:0f:4f:a2:f6:73:40:72: fd:26:07:89:45:d7:f5:fe:68:45:fa:61:be:d5:14:31:68:c2: 1f:ff:1f:1c:7b:85:45:38:12:8b:11:a0:2e:3d:50:78:d7:01: 53:5f:bb:17:37:2e:e5:3a:a9:67:93:0c:e9:db:5e:1a:c0:a5: 09:87:16:2e:da:94:29:cd:73:ca:f6:00:10:45:17:97:91:99: 46:06:53:8d:ed:8d:3e:d2:fe:7d:11:17:28:e3:bd:17:36:96: af:f3:1c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVy6umeR+CpjrBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NWJmOTI5NTctNjM5Yi00MjgxLWEwNTktYTllNmYwOThlMThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1+BIO/GT0dhDj4xRnxdhOO/s28wv/dRQqTZ WhADNHVzrIJvPGBIQrgxifV56jn3Tox3QuUNZwY3NTzwBOt1tg1TbMJ3j91xTFzl OIrV7IClIcsIES3q37/F1fOtPLpX3BWh2GuYAAcEX8Svlj9IlDxzoRRJ03c5l4Pg 2GyG7TCy2HG2fpbtEf2xt4z2JP/z9mCbZV+T4p0Xx+wrntdlN+vMSM/aLagc7dm5 PeNOCckgnakB4bTesFpDdQZjRvkqsMkAKOdPPy4vjwPhWtk0zfKsl6+svp+cBNOF YvJVNb9e5mP2F3g+jyA/Aby7QwLIE1h5PzqiUW3E2j1to3KV4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDtRg8+v4/YktYBDdVDD5PD7k2IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTBiZjdiMmYtYjZiNi0z OWRhLWIyZjQtYTY2OTVlNTJhOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGh1FSAX8n9uqCm9NksY5fZlUnH+oR0/ZleRHRvVeMquw2wES48Pb23 wuOp048NKBwoDFfE4tibAlSOG5NqC1lKdm1RiSQwTc9PkPk5pqs9OAVSkEHepbxZ Gim0qJ7A1Eb0ON+kjEQPUKl0Y9nKwRx0f8VkA71o2+k5QnBJ8Wp2L30QpJdkj4mX OSvGdJBYf+t8d4TCKMHr+ESrD0+i9nNAcv0mB4lF1/X+aEX6Yb7VFDFowh//Hxx7 hUU4EosRoC49UHjXAVNfuxc3LuU6qWeTDOnbXhrApQmHFi7alCnNc8r2ABBFF5eR mUYGU43tjT7S/n0RFyjjvRc2lq/zHAA= -----END CERTIFICATE-----Generated at Sat Sep 6 05:16:46 2025 by rpki-client