$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/59164d63-d428-368e-b33d-c57508b4ca42.roa File: 59164d63-d428-368e-b33d-c57508b4ca42.roa (raw, json) Hash identifier: tXKZL+vJCM2VcYCo513gvu7AYEU74HXS7RkomUxyt2w= Subject key identifier: D4:75:BF:07:9D:C9:3B:D9:CD:6D:1C:DE:E3:EE:1B:CB:3C:E6:7D:79 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76C03945606584F7490200 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/59164d63-d428-368e-b33d-c57508b4ca42.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 16540 IP address blocks: 104.152.100.0/22 maxlen: 24 199.36.176.0/21 maxlen: 24 199.187.148.0/22 maxlen: 24 2607:6200::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c0:39:45:60:65:84:f7:49:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=aeaacf5a-79bb-492b-b0b8-7e9adf33c8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:80:f7:45:e2:3e:3d:3f:21:73:cf:1c:29:54: 52:e6:c9:1d:61:31:ba:5e:67:53:39:10:8e:47:3c: 3c:78:c6:4a:f5:3b:b3:92:78:d5:53:88:84:7a:f1: da:9f:32:69:fe:e9:55:32:4f:16:0a:e1:a9:38:21: 9b:05:62:00:80:07:3e:73:45:30:8c:0c:b9:2c:81: b1:4c:ad:9d:4e:b0:d2:5b:ec:32:69:fe:05:16:2d: 03:85:41:f3:b4:60:1a:f8:07:10:28:04:d0:fe:c1: b4:9f:e9:c1:43:52:e3:e8:51:e0:a8:9f:1e:7a:a2: 05:00:9c:77:65:61:10:aa:4a:db:3b:cb:90:00:cc: 8b:0d:b2:6e:3f:12:86:e3:d2:00:52:fa:46:85:ec: 7d:7e:3e:01:05:10:bf:e6:7d:4d:dc:7a:aa:67:87: e7:59:37:2e:40:c3:98:ee:77:c7:41:b8:3a:de:24: a8:61:55:8f:42:f7:22:ec:c0:fb:1a:51:bc:5a:a0: e9:16:34:b7:40:2b:aa:23:97:02:05:ea:dd:dd:f4: 34:cc:6c:0b:2c:b1:ac:c3:fa:a0:64:23:41:cf:66: df:57:95:5c:8e:59:05:da:0b:d9:ce:6b:ea:9b:d6: 5d:5f:3e:34:34:c8:91:09:89:4b:8b:71:49:1e:82: 89:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:75:BF:07:9D:C9:3B:D9:CD:6D:1C:DE:E3:EE:1B:CB:3C:E6:7D:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/59164d63-d428-368e-b33d-c57508b4ca42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.152.100.0/22 199.36.176.0/21 199.187.148.0/22 IPv6: 2607:6200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b9:f8:3f:cd:27:fa:7d:fc:b6:7a:6a:da:e4:51:10:90:52: 21:a4:63:82:d9:c2:a8:9e:fd:6e:df:eb:96:90:37:75:4c:16: 44:db:d4:21:7f:c5:35:e0:d6:1c:c3:52:1a:9b:40:b4:cb:56: 53:91:15:d3:50:44:49:15:15:d4:51:83:8e:5b:40:a5:9c:f8: 20:33:4a:b7:b6:4f:df:9c:23:b8:7b:1f:5b:1f:28:a0:18:91: cc:eb:13:99:18:9c:9c:2d:e5:9a:61:9e:1b:c5:4d:33:f2:ce: db:15:f8:9e:24:73:f5:a9:80:12:5f:37:0a:fd:ad:92:33:49: e4:82:6a:dc:70:7d:d9:79:ae:ac:b7:93:7c:c1:c2:2e:61:a1: ba:d0:13:f8:a2:7c:37:39:61:16:22:e3:00:e8:a0:4a:74:b8: 37:a2:6e:cf:07:f0:92:9a:05:89:b0:36:d5:3a:41:0e:93:7b: ff:33:2d:89:c8:71:db:ad:db:80:84:0d:51:d1:b7:d9:cf:5a: 97:d8:30:44:04:c0:d3:f2:e5:80:68:b2:d4:83:86:dc:28:41: 46:dd:ba:6d:e4:37:21:4c:b3:a1:a0:65:2e:1b:ec:12:d5:89: 67:d0:ad:79:63:d1:4f:ac:86:c9:b3:b2:fb:c5:31:d7:f0:2e: 68:8a:47:72 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEsLdsA5RWBlhPdJAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YWVhYWNmNWEtNzliYi00OTJiLWIwYjgtN2U5YWRmMzNjOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYD3ReI+PT8hc88cKVRS5skdYTG6XmdTORCO Rzw8eMZK9TuzknjVU4iEevHanzJp/ulVMk8WCuGpOCGbBWIAgAc+c0UwjAy5LIGx TK2dTrDSW+wyaf4FFi0DhUHztGAa+AcQKATQ/sG0n+nBQ1Lj6FHgqJ8eeqIFAJx3 ZWEQqkrbO8uQAMyLDbJuPxKG49IAUvpGhex9fj4BBRC/5n1N3HqqZ4fnWTcuQMOY 7nfHQbg63iSoYVWPQvci7MD7GlG8WqDpFjS3QCuqI5cCBerd3fQ0zGwLLLGsw/qg ZCNBz2bfV5VcjlkF2gvZzmvqm9ZdXz40NMiRCYlLi3FJHoKJ+wIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFNR1vwedyTvZzW0c3uPuG8s85n15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNTkxNjRkNjMtZDQyOC0z NjhlLWIzM2QtYzU3NTA4YjRjYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCaJhkAwQD xySwAwQCx7uUMA0EAgACMAcDBQAmB2IAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF25+D/NJ/p9/LZ6atrk URCQUiGkY4LZwqie/W7f65aQN3VMFkTb1CF/xTXg1hzDUhqbQLTLVlORFdNQREkV FdRRg45bQKWc+CAzSre2T9+cI7h7H1sfKKAYkczrE5kYnJwt5ZphnhvFTTPyztsV +J4kc/WpgBJfNwr9rZIzSeSCatxwfdl5rqy3k3zBwi5hobrQE/iifDc5YRYi4wDo oEp0uDeibs8H8JKaBYmwNtU6QQ6Te/8zLYnIcdut24CEDVHRt9nPWpfYMEQEwNPy 5YBostSDhtwoQUbdum3kNyFMs6GgZS4b7BLViWfQrXlj0U+shsmzsvvFMdfwLmiK R3I= -----END CERTIFICATE-----Generated at Tue Nov 4 22:03:59 2025 by rpki-client