$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/8539e9b4-3185-3698-92b5-64f6331db01c.roa File: 8539e9b4-3185-3698-92b5-64f6331db01c.roa (raw, json) Hash identifier: pXXF9wV1hc1/yx1ZRAFoCRT+AlJnwH0JbKYgJkj4AU0= Subject key identifier: EB:99:FC:24:3E:77:08:47:92:8C:BB:3F:1F:77:CE:68:AF:5E:2C:3F Certificate issuer: /CN=b58f33d9-1d10-4d07-ae57-7b91ec651785 Certificate serial: 010D0C9F4328584B9E0797D55827F2CB9F4AFFC0 Authority key identifier: D6:7A:07:6B:47:B5:C4:7A:39:47:A7:AE:35:1D:AD:67:9D:7A:F3:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/8539e9b4-3185-3698-92b5-64f6331db01c.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 199.184.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/b58f33d9-1d10-4d07-ae57-7b91ec651785.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/b58f33d9-1d10-4d07-ae57-7b91ec651785.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:97:d5:58:27:f2:cb:9f:4a:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b58f33d9-1d10-4d07-ae57-7b91ec651785 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=aeb5ff8f-11be-4878-a58e-ea347ea914a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:8c:45:99:50:f0:b6:7c:fe:43:25:3d:3e: 06:c2:99:3e:66:9b:05:65:25:13:85:ce:ab:53:db: e4:0c:a5:82:8e:3f:4d:84:7e:d4:53:6a:8b:b0:14: a5:4c:b5:e5:86:80:a6:e5:c4:3f:3c:40:ab:dc:ea: 0c:a8:8e:49:57:20:8e:7d:f3:df:29:55:36:0c:36: 96:af:91:4d:48:ab:21:cb:5c:2d:7a:c3:9c:87:b9: 9e:0b:08:87:da:c0:ec:10:eb:a5:87:ec:4c:be:d2: dc:fe:aa:8f:31:81:ff:96:34:44:cf:de:a9:31:43: b7:ff:bb:b1:34:8b:3d:6c:ef:ea:6a:ab:d9:97:79: 86:10:fc:4a:d7:fd:ae:5c:22:04:e2:71:5c:94:e8: 5e:10:70:79:f9:f8:b6:a7:cb:ba:e3:5f:f2:9b:2a: 2e:6f:df:25:57:92:99:64:a4:ae:f2:91:bd:13:00: 72:bf:3e:22:9d:49:e5:04:2e:93:26:a2:cf:ec:76: a2:23:6d:ae:65:0e:95:6d:21:c6:89:fb:0c:8a:28: 30:80:46:73:dd:aa:7f:68:05:43:30:43:ef:00:77: 3a:fa:1e:f4:d8:cd:b6:2f:33:3f:25:a3:47:ce:0b: 8f:bb:7f:f1:39:cd:74:1a:12:df:95:f6:fc:64:04: e6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:99:FC:24:3E:77:08:47:92:8C:BB:3F:1F:77:CE:68:AF:5E:2C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/8539e9b4-3185-3698-92b5-64f6331db01c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/b58f33d9-1d10-4d07-ae57-7b91ec651785.crl X509v3 Authority Key Identifier: keyid:D6:7A:07:6B:47:B5:C4:7A:39:47:A7:AE:35:1D:AD:67:9D:7A:F3:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785.cer sbgp-ipAddrBlock: critical IPv4: 199.184.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:9d:94:fa:9b:d4:18:cd:54:f5:08:e4:f0:ec:25:8e:9b:59: 7d:e1:5f:6f:eb:0a:c2:76:82:f2:99:5f:27:a9:a4:c5:57:8a: d8:70:82:5b:c2:ae:08:ac:e3:0f:b6:fa:84:a3:5f:93:50:94: 61:3e:da:fc:89:3b:4b:9d:5a:e0:d3:ab:1a:c6:02:ff:3a:dd: d5:65:1e:0a:a2:19:87:f6:51:a5:01:bd:fb:88:67:20:27:12: 32:9b:6b:57:a0:fa:81:8c:e6:0a:f4:27:4a:d7:26:09:a3:d3: 05:7e:93:33:be:4a:3f:f5:5f:a7:dd:3f:f4:90:36:7d:2e:b9: bb:5f:e4:73:dc:34:de:19:d9:1a:71:0d:c2:46:64:19:90:4e: f1:56:80:57:eb:cc:75:35:76:f6:24:3d:59:a6:d5:57:e3:60: 94:07:b6:26:26:7e:ef:5d:d5:0c:4f:1f:bd:a5:a3:d9:52:8e: 3b:f4:70:36:de:00:f7:f6:71:09:fb:47:b8:e0:05:bb:9e:b9: f0:f0:8e:22:98:88:0b:89:b4:57:c4:54:63:57:36:bc:83:b7: 47:43:75:18:e1:64:5b:54:94:67:99:56:5b:1b:8c:1b:14:23: 8b:83:30:37:5a:6c:79:a3:c6:7e:60:56:6b:2a:c3:f8:8f:d2: d6:ff:01:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5fVWCfyy59K/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU4ZjMzZDktMWQxMC00ZDA3LWFlNTctN2I5MWVjNjUx Nzg1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YWViNWZmOGYtMTFiZS00ODc4LWE1OGUtZWEzNDdlYTkxNGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSaMRZlQ8LZ8/kMlPT4Gwpk+ZpsFZSUThc6r U9vkDKWCjj9NhH7UU2qLsBSlTLXlhoCm5cQ/PECr3OoMqI5JVyCOffPfKVU2DDaW r5FNSKshy1wtesOch7meCwiH2sDsEOulh+xMvtLc/qqPMYH/ljREz96pMUO3/7ux NIs9bO/qaqvZl3mGEPxK1/2uXCIE4nFclOheEHB5+fi2p8u641/ymyoub98lV5KZ ZKSu8pG9EwByvz4inUnlBC6TJqLP7HaiI22uZQ6VbSHGifsMiigwgEZz3ap/aAVD MEPvAHc6+h702M22LzM/JaNHzguPu3/xOc10GhLflfb8ZATmnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuZ/CQ+dwhHkoy7Px93zmivXiw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNThm MzNkOS0xZDEwLTRkMDctYWU1Ny03YjkxZWM2NTE3ODUvODUzOWU5YjQtMzE4NS0z Njk4LTkyYjUtNjRmNjMzMWRiMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjU4ZjMzZDktMWQxMC00ZDA3LWFl NTctN2I5MWVjNjUxNzg1L2I1OGYzM2Q5LTFkMTAtNGQwNy1hZTU3LTdiOTFlYzY1 MTc4NS5jcmwwHwYDVR0jBBgwFoAU1noHa0e1xHo5R6euNR2tZ51687owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNThmMzNkOS0xZDEwLTRkMDctYWU1Ny03Yjkx ZWM2NTE3ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7jPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmdlPqb1BjNVPUI5PDsJY6bWX3hX2/rCsJ2gvKZXyeppMVXithwglvC rgis4w+2+oSjX5NQlGE+2vyJO0udWuDTqxrGAv863dVlHgqiGYf2UaUBvfuIZyAn EjKba1eg+oGM5gr0J0rXJgmj0wV+kzO+Sj/1X6fdP/SQNn0uubtf5HPcNN4Z2Rpx DcJGZBmQTvFWgFfrzHU1dvYkPVmm1VfjYJQHtiYmfu9d1QxPH72lo9lSjjv0cDbe APf2cQn7R7jgBbueufDwjiKYiAuJtFfEVGNXNryDt0dDdRjhZFtUlGeZVlsbjBsU I4uDMDdabHmjxn5gVmsqw/iP0tb/AQQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:25 2025 by rpki-client