$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/426f2e3a-7f3e-33cf-995c-a7a3d79adc82.roa File: 426f2e3a-7f3e-33cf-995c-a7a3d79adc82.roa (raw, json) Hash identifier: rqU4OLEFKcNyuoWduT25a6pxp5NguOkkfxAOGOazYso= Subject key identifier: 8D:C7:25:BB:54:82:83:72:D1:CD:80:B5:68:AA:69:16:38:5A:2C:3C Certificate issuer: /CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3 Certificate serial: 010D0C9F4328584B293F13A10BD2B85EAB363080 Authority key identifier: DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/426f2e3a-7f3e-33cf-995c-a7a3d79adc82.roa Signing time: Thu 11 Sep 2025 16:32:04 +0000 ROA not before: Thu 11 Sep 2025 16:32:04 +0000 ROA not after: Wed 10 Dec 2025 17:32:04 +0000 asID: 16851 IP address blocks: 199.58.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:3f:13:a1:0b:d2:b8:5e:ab:36:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3 Validity Not Before: Sep 11 16:32:04 2025 GMT Not After : Dec 10 17:32:04 2025 GMT Subject: CN=ae8b2a6f-f6cf-477e-b501-79c7eb24260d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:04:98:ee:6d:17:a7:99:53:47:f9:8c:77:43: 08:5e:dc:3b:89:7f:18:ca:86:20:2a:36:00:7b:25: f2:78:f8:69:10:17:01:e2:df:21:9d:bb:5f:ff:88: 78:13:3d:23:15:0b:26:65:96:7e:c5:d7:f2:f8:2c: 7a:cc:50:a9:5c:f0:40:d3:94:6a:22:6b:1c:a4:b0: 3a:8e:5d:6a:46:60:9d:c9:5c:e7:97:70:18:b1:cc: 7e:8b:91:2b:ab:9a:ab:d7:86:ea:da:92:0c:d7:15: b8:ef:5b:a1:af:53:5b:55:0f:27:ed:24:28:1a:98: 80:0b:1c:04:4b:fb:13:58:12:01:5e:ea:e5:5f:6b: be:1b:cf:c3:9c:bb:93:22:0e:d8:78:42:74:3b:f9: b9:4a:7e:6e:7f:a2:d7:ac:f4:48:e7:bb:bc:42:e6: 11:40:7c:47:96:35:83:fc:70:2f:99:09:86:e7:4e: b8:b9:b0:7f:72:c0:3c:1f:5b:03:1f:f9:ac:8b:01: 48:76:42:c5:d3:c8:1f:b5:cf:0a:f7:36:95:37:b5: 9c:5f:34:25:11:91:30:a0:36:91:6f:af:4c:dd:4c: 7d:40:f8:cf:13:83:b9:37:95:dc:35:aa:ed:b8:e5: 7d:94:46:d5:e8:0b:47:a0:bc:b4:e2:2e:ff:0f:e5: 0e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C7:25:BB:54:82:83:72:D1:CD:80:B5:68:AA:69:16:38:5A:2C:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/426f2e3a-7f3e-33cf-995c-a7a3d79adc82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl X509v3 Authority Key Identifier: keyid:DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer sbgp-ipAddrBlock: critical IPv4: 199.58.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:96:c8:35:90:12:24:c8:0b:8e:08:dd:ae:b8:48:35:79:2a: dd:c7:0d:9b:7d:79:df:4c:bb:6e:28:ad:b5:92:1d:e3:d6:c9: 14:a6:aa:3b:bb:41:7c:74:e7:4c:e2:32:fb:5e:bd:f3:a2:9b: 4c:c7:d3:57:98:92:9f:d4:68:3b:8e:88:94:db:d1:1a:54:9b: 19:a5:28:30:15:22:cd:de:15:c9:79:19:c1:b3:5c:8a:c5:dc: 02:dc:00:df:ad:80:e4:45:19:f1:80:3a:9a:a2:9e:8c:97:2a: 32:da:61:05:e3:07:03:3a:94:71:da:2c:9c:3d:3b:23:8b:42: f5:bb:10:b3:c1:19:70:75:c2:87:ce:52:44:55:78:55:a9:9d: 23:4e:0f:8a:7f:cd:bd:ce:6e:e8:b3:89:76:22:b5:46:68:7a: 73:6f:e4:65:51:c8:55:36:28:a0:86:8a:ee:39:47:20:1a:a0: b1:66:32:9f:36:82:aa:97:f6:7a:c1:e5:bb:1c:49:8a:81:19: af:5e:c4:c4:e0:14:ce:4b:34:58:ec:f3:1d:16:ea:90:d7:f6: e9:65:8d:8e:fa:4e:0d:ae:02:6d:9f:3b:77:32:f5:e7:ce:4f: 84:c4:6f:d0:f3:dc:56:1b:e4:ba:a3:6d:cc:9e:0b:5a:1f:30: 4b:4a:fa:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEspPxOhC9K4Xqs2MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5ZjcwYWMtMmM1MS00ZmJlLWI3M2EtYTgxOTczZTU4 M2UzMB4XDTI1MDkxMTE2MzIwNFoXDTI1MTIxMDE3MzIwNFowLzEtMCsGA1UEAxMk YWU4YjJhNmYtZjZjZi00NzdlLWI1MDEtNzljN2ViMjQyNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwSY7m0Xp5lTR/mMd0MIXtw7iX8YyoYgKjYA eyXyePhpEBcB4t8hnbtf/4h4Ez0jFQsmZZZ+xdfy+Cx6zFCpXPBA05RqImscpLA6 jl1qRmCdyVznl3AYscx+i5Erq5qr14bq2pIM1xW471uhr1NbVQ8n7SQoGpiACxwE S/sTWBIBXurlX2u+G8/DnLuTIg7YeEJ0O/m5Sn5uf6LXrPRI57u8QuYRQHxHljWD /HAvmQmG5064ubB/csA8H1sDH/msiwFIdkLF08gftc8K9zaVN7WcXzQlEZEwoDaR b69M3Ux9QPjPE4O5N5XcNartuOV9lEbV6AtHoLy04i7/D+UOAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3HJbtUgoNy0c2AtWiqaRY4Wiw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83Zjlm NzBhYy0yYzUxLTRmYmUtYjczYS1hODE5NzNlNTgzZTMvNDI2ZjJlM2EtN2YzZS0z M2NmLTk5NWMtYTdhM2Q3OWFkYzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2Y5ZjcwYWMtMmM1MS00ZmJlLWI3 M2EtYTgxOTczZTU4M2UzLzdmOWY3MGFjLTJjNTEtNGZiZS1iNzNhLWE4MTk3M2U1 ODNlMy5jcmwwHwYDVR0jBBgwFoAU3Ism0BEDZm1UNI0zLxY5bk5SdgcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZjlmNzBhYy0yYzUxLTRmYmUtYjczYS1hODE5 NzNlNTgzZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeWyDWQEiTIC44I3a64SDV5Kt3HDZt9ed9Mu24orbWSHePWyRSmqju7 QXx050ziMvtevfOim0zH01eYkp/UaDuOiJTb0RpUmxmlKDAVIs3eFcl5GcGzXIrF 3ALcAN+tgORFGfGAOpqinoyXKjLaYQXjBwM6lHHaLJw9OyOLQvW7ELPBGXB1wofO UkRVeFWpnSNOD4p/zb3ObuiziXYitUZoenNv5GVRyFU2KKCGiu45RyAaoLFmMp82 gqqX9nrB5bscSYqBGa9exMTgFM5LNFjs8x0W6pDX9ulljY76Tg2uAm2fO3cy9efO T4TEb9Dz3FYb5LqjbcyeC1ofMEtK+j4= -----END CERTIFICATE-----Generated at Wed Nov 5 23:21:13 2025 by rpki-client