$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/70b6a415-96fc-3c29-8eb6-87b641b70325.roa File: 70b6a415-96fc-3c29-8eb6-87b641b70325.roa (raw, json) Hash identifier: UfiiPzCquX175EdbkV4bw2f7KExHCTIk0BcYAtxrq9I= Subject key identifier: 5F:C3:8B:B0:2E:CD:BB:7B:4B:A7:3C:E5:4A:55:D2:BD:C3:06:15:AB Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F4328584B59A1C6A26683CB865D2EEC80 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/70b6a415-96fc-3c29-8eb6-87b641b70325.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 845 IP address blocks: 199.96.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:c6:a2:66:83:cb:86:5d:2e:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=8871fd46-55dc-42e2-b0a5-7f635162e92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:76:49:fd:08:c0:f2:98:2a:af:26:89:0d: c0:d4:26:39:1b:3a:8d:5e:e4:d1:53:40:e0:ba:21: 55:1a:e7:23:0e:3e:49:ce:52:7f:c2:31:8f:e7:4b: 12:9d:c3:81:0a:96:85:99:2d:51:1f:24:0e:ef:1d: 48:03:77:b0:25:db:8f:31:38:d8:c8:b0:e0:02:02: 8c:cf:bb:31:d8:8e:53:a1:c2:3d:a3:a0:38:f7:44: 87:ce:0e:ad:8d:fd:41:69:c5:af:54:0c:1f:84:0e: f3:db:48:91:5c:16:b0:8e:b4:e7:70:cc:1a:5f:83: f5:22:24:57:0b:33:86:4e:ba:34:3f:c1:c5:c4:8b: 17:7a:d7:57:0b:93:f4:66:43:15:45:7a:58:0b:bd: 25:2c:2d:06:a1:2f:3e:60:79:3f:a7:97:b7:68:d6: d8:d6:92:01:9c:85:3e:94:28:07:5f:dc:00:9b:c5: 35:c4:c1:b3:70:c5:58:34:1c:da:8e:20:9f:72:fe: 55:6f:ec:17:9d:1b:fb:a3:88:a8:77:de:86:2a:4d: 6a:bc:35:4c:7f:17:0d:73:65:03:6f:f5:d1:41:74: 00:c5:b6:30:81:31:e2:0b:f6:f2:39:e9:b3:84:d7: 57:0e:b6:26:5a:84:51:b0:e9:4f:5d:39:68:31:0c: 5b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C3:8B:B0:2E:CD:BB:7B:4B:A7:3C:E5:4A:55:D2:BD:C3:06:15:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/70b6a415-96fc-3c29-8eb6-87b641b70325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv4: 199.96.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c5:8d:bc:05:88:23:37:bf:eb:fd:5c:b5:81:cb:46:14:28: c1:2c:7b:2d:64:b3:8a:c6:13:cb:f7:fe:33:38:b6:55:6a:93: 6b:ff:b3:8e:03:f1:3c:eb:19:72:c6:54:f7:9c:57:65:36:00: 21:1f:48:c3:1e:09:71:64:86:50:ca:1b:fa:95:7e:fd:8d:90: 19:24:ae:78:b4:a7:28:4e:84:5f:6e:b3:a2:34:05:1d:b8:6c: 08:5a:32:5e:aa:83:98:8b:29:b0:12:5c:8f:4f:f2:6a:91:62: d6:c1:f4:bb:0d:6c:3c:2a:8a:7c:37:d9:d3:f0:40:a0:5d:ad: 03:fe:82:e0:c5:99:b3:af:8d:a5:c9:16:df:93:09:34:03:95: 77:03:d6:56:cb:65:b3:6a:bf:dc:52:89:92:62:f7:d8:e3:64: e2:9b:fa:52:34:2e:c3:23:1d:7e:d3:9f:07:36:11:1e:e8:d6: 92:fc:6d:fd:f8:de:a8:4f:bd:16:8a:0d:1d:13:79:ec:4a:b1: 2c:b5:c6:ab:2b:37:c9:04:36:d4:72:1c:e5:84:83:a9:71:5d: cb:51:8a:26:c2:e7:cb:2a:f7:8f:7a:8b:7d:99:51:38:59:99: 20:f5:d5:b2:b2:f7:2a:fd:95:3f:a3:d0:6e:cc:37:0d:2a:94: bc:6a:97:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZocaiZoPLhl0u7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk ODg3MWZkNDYtNTVkYy00MmUyLWIwYTUtN2Y2MzUxNjJlOTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonF2Sf0IwPKYKq8miQ3A1CY5GzqNXuTRU0Dg uiFVGucjDj5JzlJ/wjGP50sSncOBCpaFmS1RHyQO7x1IA3ewJduPMTjYyLDgAgKM z7sx2I5TocI9o6A490SHzg6tjf1BacWvVAwfhA7z20iRXBawjrTncMwaX4P1IiRX CzOGTro0P8HFxIsXetdXC5P0ZkMVRXpYC70lLC0GoS8+YHk/p5e3aNbY1pIBnIU+ lCgHX9wAm8U1xMGzcMVYNBzajiCfcv5Vb+wXnRv7o4iod96GKk1qvDVMfxcNc2UD b/XRQXQAxbYwgTHiC/byOemzhNdXDrYmWoRRsOlPXTloMQxbvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/Di7Auzbt7S6c85UpV0r3DBhWrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvNzBiNmE0MTUtOTZmYy0z YzI5LThlYjYtODdiNjQxYjcwMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2BUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjFjbwFiCM3v+v9XLWBy0YUKMEsey1ks4rGE8v3/jM4tlVqk2v/s44D 8TzrGXLGVPecV2U2ACEfSMMeCXFkhlDKG/qVfv2NkBkkrni0pyhOhF9us6I0BR24 bAhaMl6qg5iLKbASXI9P8mqRYtbB9LsNbDwqinw32dPwQKBdrQP+guDFmbOvjaXJ Ft+TCTQDlXcD1lbLZbNqv9xSiZJi99jjZOKb+lI0LsMjHX7Tnwc2ER7o1pL8bf34 3qhPvRaKDR0TeexKsSy1xqsrN8kENtRyHOWEg6lxXctRiibC58sq9496i32ZUThZ mSD11bKy9yr9lT+j0G7MNw0qlLxql5A= -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:58 2025 by rpki-client