$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/85df388a-c8da-3e19-af2a-f326a918b3bb.roa File: 85df388a-c8da-3e19-af2a-f326a918b3bb.roa (raw, json) Hash identifier: FzN/iVVmV1AwUPpFvjaxt+B3dn2to+uvb2x0S+J95kQ= Subject key identifier: 05:CD:D1:06:53:51:71:32:0C:1C:E9:B5:75:2B:E4:07:3A:20:58:89 Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584B33F19FD3337ABD55AEA74E00 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/85df388a-c8da-3e19-af2a-f326a918b3bb.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 6079 IP address blocks: 208.74.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:9f:d3:33:7a:bd:55:ae:a7:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=890a49f1-1993-49cc-a932-c4f2f0846331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ee:7e:17:b5:50:f7:b0:4b:2b:b1:90:bd:cc: 89:c5:e9:d5:eb:33:20:f0:c8:d0:fa:f4:3f:ca:0d: 6d:5b:f2:1b:dc:7b:8a:95:ee:74:14:2a:11:91:3c: f5:a5:22:9d:03:7c:e3:00:20:d3:28:4a:51:22:06: f4:60:b4:fa:87:6b:49:f0:fb:f3:67:cb:f2:07:c4: 05:1f:53:88:dd:ba:44:82:40:f4:ec:f1:0f:4e:4c: 91:78:a4:10:b8:8c:94:a3:ee:4e:64:8f:4e:7f:1e: ac:51:c6:81:27:f4:23:4e:94:96:09:a3:53:8e:0a: c9:38:3c:71:13:bd:ee:08:1f:df:2d:1f:d9:fe:2f: 93:a2:1f:c9:af:f3:84:bb:84:d5:30:32:d5:db:f4: 49:d7:6a:71:06:65:27:cd:d2:85:44:0e:ac:d0:e9: 38:e9:e7:97:b4:51:f2:08:c6:3f:e3:01:2f:45:f5: e7:0d:c8:fa:92:93:af:a8:0f:27:52:d5:68:31:20: a1:01:61:d3:11:9a:d7:bb:50:43:22:3c:76:03:ea: 2c:21:b2:df:4a:c7:c9:23:97:15:80:23:59:02:81: 0e:f6:ed:84:de:da:79:86:1b:2d:9a:95:2c:29:f7: b8:f4:19:05:d8:c7:7e:c1:4a:e5:4f:fb:62:9a:20: b9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CD:D1:06:53:51:71:32:0C:1C:E9:B5:75:2B:E4:07:3A:20:58:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/85df388a-c8da-3e19-af2a-f326a918b3bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 208.74.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:6c:41:bc:0a:52:8f:af:db:03:d3:f4:34:a0:1a:46:39:70: da:62:b0:6b:b7:2b:fa:26:01:9c:16:65:8f:4a:4c:89:16:36: 12:ea:38:61:e3:12:5b:85:4f:50:f2:e9:83:db:fc:5c:d7:35: c5:e6:59:5c:6a:21:56:3e:d7:b7:81:22:21:08:10:0c:bd:1e: 12:85:79:ad:f7:f8:4a:36:50:1b:72:fa:d7:76:8c:07:1d:0a: dd:c9:97:97:f6:d5:f0:29:7b:bf:89:cd:d8:3a:e3:76:8a:9f: 00:e2:2b:1b:85:8b:85:2d:85:a9:37:f8:13:09:a9:1b:00:5d: 37:7c:5a:e9:17:45:d1:97:86:84:8b:e0:42:68:92:69:92:99: 21:1f:72:f1:dc:22:64:d7:e3:0c:1c:75:19:c2:d6:e2:6f:38: 20:23:91:fa:40:ee:05:26:f2:35:f3:3a:34:4f:8c:1e:8b:7c: 54:b8:74:ad:9c:b9:1f:d3:34:8a:96:04:af:be:c9:ac:c0:50: 07:eb:d0:6e:a2:ca:19:9c:80:0c:e0:5b:24:ac:1d:ff:40:4a: c1:72:35:2f:67:d5:5a:b2:d2:c0:39:04:7d:3d:3b:81:53:ee: 23:c4:d5:de:60:1a:00:47:de:26:b5:44:fc:4f:f3:d0:dd:35: cf:e7:a4:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8Z/TM3q9Va6nTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk ODkwYTQ5ZjEtMTk5My00OWNjLWE5MzItYzRmMmYwODQ2MzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+5+F7VQ97BLK7GQvcyJxenV6zMg8MjQ+vQ/ yg1tW/Ib3HuKle50FCoRkTz1pSKdA3zjACDTKEpRIgb0YLT6h2tJ8PvzZ8vyB8QF H1OI3bpEgkD07PEPTkyReKQQuIyUo+5OZI9Ofx6sUcaBJ/QjTpSWCaNTjgrJODxx E73uCB/fLR/Z/i+Toh/Jr/OEu4TVMDLV2/RJ12pxBmUnzdKFRA6s0Ok46eeXtFHy CMY/4wEvRfXnDcj6kpOvqA8nUtVoMSChAWHTEZrXu1BDIjx2A+osIbLfSsfJI5cV gCNZAoEO9u2E3tp5hhstmpUsKfe49BkF2Md+wUrlT/timiC5EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXN0QZTUXEyDBzptXUr5Ac6IFiJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvODVkZjM4OGEtYzhkYS0z ZTE5LWFmMmEtZjMyNmE5MThiM2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlsQbwKUo+v2wPT9DSgGkY5cNpisGu3K/omAZwWZY9KTIkWNhLqOGHj EluFT1Dy6YPb/FzXNcXmWVxqIVY+17eBIiEIEAy9HhKFea33+Eo2UBty+td2jAcd Ct3Jl5f21fApe7+Jzdg643aKnwDiKxuFi4Uthak3+BMJqRsAXTd8WukXRdGXhoSL 4EJokmmSmSEfcvHcImTX4wwcdRnC1uJvOCAjkfpA7gUm8jXzOjRPjB6LfFS4dK2c uR/TNIqWBK++yazAUAfr0G6iyhmcgAzgWySsHf9ASsFyNS9n1Vqy0sA5BH09O4FT 7iPE1d5gGgBH3ia1RPxP89DdNc/npHE= -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:07 2025 by rpki-client