$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/16e56f4d-ab70-3766-907b-22447a23eeb4.roa File: 16e56f4d-ab70-3766-907b-22447a23eeb4.roa (raw, json) Hash identifier: +DGyihRnHGpBcLnYR/wzeUSp548ShHsVmS0AOhaxPcs= Subject key identifier: AA:5C:33:26:D9:B9:6A:75:17:FA:6B:90:19:8A:2F:FE:16:A4:5F:82 Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F4328584B821E20358B5F61FA39CB5918 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/16e56f4d-ab70-3766-907b-22447a23eeb4.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 400702 IP address blocks: 199.127.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:20:35:8b:5f:61:fa:39:cb:59:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=e1fee18f-5d02-4e51-8060-53198d561ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:dc:f3:3a:a0:b4:34:57:24:bc:89:d8:31:cb: b4:42:78:a1:73:1a:81:3d:a9:50:5b:5e:08:3b:37: 1a:9c:86:36:62:65:a7:02:28:8e:41:e5:19:4d:d0: d5:7d:65:2e:ec:24:16:41:38:72:03:55:7c:c8:7d: b5:13:15:ca:1e:8e:58:e6:31:a3:ab:6f:6d:14:e5: e1:a0:6c:a9:76:b3:2d:25:99:45:12:69:4a:30:d3: 79:7e:e1:c1:76:68:bf:f4:04:a0:7d:5f:82:a2:17: 18:fc:e4:74:7d:31:62:86:7e:20:e5:ac:9a:e7:00: 9d:c3:99:7f:9a:c8:26:d7:3e:f0:0a:0a:91:e6:22: c0:4f:09:62:90:fc:64:3e:85:fe:60:fc:fb:d6:14: 1a:22:43:f0:84:5c:eb:e7:f6:a7:91:4f:a8:7a:a4: 17:f4:a3:c4:e7:17:46:6c:a5:1c:c1:6a:f8:a6:38: a1:09:c1:2c:c3:b0:85:5b:0c:7e:2a:76:14:b6:ca: 94:7a:ca:a5:e3:81:7d:ae:d3:be:9d:7d:5c:0a:23: 95:31:e4:a4:30:42:63:f1:ea:87:61:04:c9:ee:cf: ed:e1:c0:a4:f1:0e:23:51:45:5f:5b:6f:8e:1b:c8: 53:ef:26:d4:4b:58:ea:b8:6a:0a:d6:32:8a:f2:91: 01:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5C:33:26:D9:B9:6A:75:17:FA:6B:90:19:8A:2F:FE:16:A4:5F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/16e56f4d-ab70-3766-907b-22447a23eeb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv4: 199.127.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:88:d8:54:6d:00:ed:85:07:67:ed:80:b6:bf:e7:25:bb:5a: 10:fd:aa:41:75:9b:e1:7c:82:ce:4c:3a:40:6a:ce:e9:f6:94: 5a:c0:67:43:10:72:96:24:d8:b6:80:c2:09:bc:90:bd:59:0a: ac:b6:8b:39:c2:34:64:75:72:ec:d8:50:08:a4:ef:fb:41:ec: 73:a2:91:f8:bd:2c:36:bf:7e:4c:ab:c4:62:34:32:e4:3d:6c: 05:f2:50:04:4e:cb:8f:21:21:f4:0d:fe:c5:05:c6:ac:ce:80: c2:f1:bc:71:65:b9:32:04:97:11:dc:7c:3e:a0:ec:83:16:ec: f4:11:18:c3:26:6a:76:13:7d:06:7a:a5:ac:fd:1a:2e:d7:1a: 44:18:34:8c:0e:42:6a:29:7d:4b:60:d8:f9:0e:2e:55:21:16: fb:9b:83:4e:e7:bb:29:6b:df:3b:c4:9d:c8:be:9e:cc:cb:3a: 5c:01:6d:80:97:02:39:50:92:e9:7b:8e:c9:12:38:b5:24:7d: c8:8b:69:26:80:77:7a:06:4a:1b:7b:11:a5:5f:f7:4a:59:a1: 42:dd:c0:25:cf:1f:dd:7f:ba:e4:95:21:45:99:1b:95:5a:ce: 59:5e:0f:4a:1a:d5:6b:a1:4c:76:fe:eb:a0:98:49:13:0a:34: 55:57:73:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHiA1i19h+jnLWRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZTFmZWUxOGYtNWQwMi00ZTUxLTgwNjAtNTMxOThkNTYxYWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NzzOqC0NFckvInYMcu0QnihcxqBPalQW14I OzcanIY2YmWnAiiOQeUZTdDVfWUu7CQWQThyA1V8yH21ExXKHo5Y5jGjq29tFOXh oGypdrMtJZlFEmlKMNN5fuHBdmi/9ASgfV+CohcY/OR0fTFihn4g5aya5wCdw5l/ msgm1z7wCgqR5iLATwlikPxkPoX+YPz71hQaIkPwhFzr5/ankU+oeqQX9KPE5xdG bKUcwWr4pjihCcEsw7CFWwx+KnYUtsqUesql44F9rtO+nX1cCiOVMeSkMEJj8eqH YQTJ7s/t4cCk8Q4jUUVfW2+OG8hT7ybUS1jquGoK1jKK8pEBaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpcMybZuWp1F/prkBmKL/4WpF+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvMTZlNTZmNGQtYWI3MC0z NzY2LTkwN2ItMjI0NDdhMjNlZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKI2FRtAO2FB2ftgLa/5yW7WhD9qkF1m+F8gs5MOkBqzun2lFrAZ0MQ cpYk2LaAwgm8kL1ZCqy2iznCNGR1cuzYUAik7/tB7HOikfi9LDa/fkyrxGI0MuQ9 bAXyUAROy48hIfQN/sUFxqzOgMLxvHFluTIElxHcfD6g7IMW7PQRGMMmanYTfQZ6 paz9Gi7XGkQYNIwOQmopfUtg2PkOLlUhFvubg07nuylr3zvEnci+nszLOlwBbYCX AjlQkul7jskSOLUkfciLaSaAd3oGSht7EaVf90pZoULdwCXPH91/uuSVIUWZG5Va zlleD0oa1WuhTHb+66CYSRMKNFVXc6I= -----END CERTIFICATE-----Generated at Wed Nov 5 16:07:28 2025 by rpki-client