$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/d6c7e221-42ea-3608-b01c-9a054a7550fe.roa File: d6c7e221-42ea-3608-b01c-9a054a7550fe.roa (raw, json) Hash identifier: OtKifYn2xgCZL+2bk62XT9B2kYrreY8zJ2Ke0IOoWnw= Subject key identifier: 79:2A:13:90:27:8B:DE:BE:F4:37:CE:76:D6:4F:89:12:96:7B:2A:1B Certificate issuer: /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Certificate serial: 010D0C9F4328584B821CCAE0507A4163C37C6E00 Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/d6c7e221-42ea-3608-b01c-9a054a7550fe.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 33717 IP address blocks: 208.70.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:ca:e0:50:7a:41:63:c3:7c:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=cba93661-c4ad-44b7-b7c8-256f87d044e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9e:93:af:92:23:9b:08:57:68:5c:20:3c:ac: 49:f6:aa:0f:a5:41:fd:2f:84:7f:1a:c9:68:f7:1c: dd:64:cb:68:74:1c:35:0b:47:c2:0c:b4:63:97:1e: 18:88:02:93:7a:de:1c:57:ae:30:28:72:15:1f:64: 45:63:60:b7:15:f6:e5:45:9d:9a:72:bc:d1:1d:04: a7:39:80:69:e3:a6:1c:37:dc:ab:ac:09:d3:3a:3f: 44:f8:6a:56:07:db:e2:5a:59:0c:aa:ed:55:d1:3b: cd:c8:fe:a9:96:51:72:2e:2f:cd:59:87:12:81:5b: 09:bd:04:47:41:50:1b:23:8c:8a:aa:86:19:8f:e3: 5a:b8:94:7c:3c:13:88:af:17:06:0f:b7:86:80:4f: 36:81:f3:30:4f:74:19:cc:0e:f9:b8:33:2d:73:dd: b8:d4:ba:e4:97:bd:99:16:6d:1d:84:14:48:27:a9: 15:f3:e1:1f:4c:51:51:28:4d:b2:22:7e:dd:91:01: 4b:9f:2c:c6:74:c0:f5:99:02:8d:e6:19:63:d8:53: 50:c1:4d:df:b7:96:13:08:46:b5:95:bc:82:d7:f7: 06:cd:84:0b:bc:4c:93:ab:9d:36:62:aa:95:c7:05: 82:e3:cc:b4:28:cc:b4:d4:74:48:fb:e3:61:f5:88: 28:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2A:13:90:27:8B:DE:BE:F4:37:CE:76:D6:4F:89:12:96:7B:2A:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/d6c7e221-42ea-3608-b01c-9a054a7550fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl X509v3 Authority Key Identifier: keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer sbgp-ipAddrBlock: critical IPv4: 208.70.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:09:6f:6c:51:18:d4:72:e4:72:5b:6d:d4:41:66:25:54:20: a0:8e:0d:78:31:aa:22:be:a4:69:9a:08:d7:7c:df:17:88:4a: 20:3a:1d:c2:a5:2d:29:a2:63:87:3b:69:34:4d:cb:91:de:b9: 91:64:aa:43:1c:8c:fb:9c:0d:51:61:92:ac:0a:2e:8b:37:fc: 76:d9:a6:c0:fb:0b:ae:1e:4e:cb:bb:ef:94:c9:a8:a3:e6:3e: ac:ff:f5:1c:51:ff:4c:29:aa:50:02:27:78:20:16:0d:77:b7: 6d:84:cb:60:a0:32:4a:33:ae:48:43:ea:62:95:8c:6f:ca:29: 01:9b:82:f6:bc:1c:90:6c:cc:88:94:02:51:1c:28:fe:3f:ca: 78:d7:84:ba:2d:ee:21:be:cc:3e:84:a3:b2:6c:e7:c2:09:61: 3f:09:97:76:7c:62:45:8a:30:06:d6:a7:f5:14:7b:7b:f8:0a: ed:0c:d5:bd:d6:33:0c:32:cd:d6:68:12:66:cc:8e:2e:b5:e3: b6:73:07:57:65:6e:fc:f9:34:db:f1:01:9e:fe:7a:1a:e6:d3: c6:5c:2d:c6:87:f4:40:93:5d:41:76:3f:93:61:19:65:ed:07: dc:ba:c5:e9:a6:da:9f:a9:80:17:97:65:1c:c2:1c:ab:24:bb: bd:1e:db:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMrgUHpBY8N8bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzdjNGM2MmEtM2Y2ZC00YzFjLThiZGItMzcwNjI0NmNi ZmQ2MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk Y2JhOTM2NjEtYzRhZC00NGI3LWI3YzgtMjU2Zjg3ZDA0NGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6J6Tr5IjmwhXaFwgPKxJ9qoPpUH9L4R/Gslo 9xzdZMtodBw1C0fCDLRjlx4YiAKTet4cV64wKHIVH2RFY2C3FfblRZ2acrzRHQSn OYBp46YcN9yrrAnTOj9E+GpWB9viWlkMqu1V0TvNyP6pllFyLi/NWYcSgVsJvQRH QVAbI4yKqoYZj+NauJR8PBOIrxcGD7eGgE82gfMwT3QZzA75uDMtc9241Lrkl72Z Fm0dhBRIJ6kV8+EfTFFRKE2yIn7dkQFLnyzGdMD1mQKN5hlj2FNQwU3ft5YTCEa1 lbyC1/cGzYQLvEyTq502YqqVxwWC48y0KMy01HRI++Nh9YgokQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkqE5Ani96+9DfOdtZPiRKWeyobMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0 YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2MjQ2Y2JmZDYvZDZjN2UyMjEtNDJlYS0z NjA4LWIwMWMtOWEwNTRhNzU1MGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzdjNGM2MmEtM2Y2ZC00YzFjLThi ZGItMzcwNjI0NmNiZmQ2Lzc3YzRjNjJhLTNmNmQtNGMxYy04YmRiLTM3MDYyNDZj YmZkNi5jcmwwHwYDVR0jBBgwFoAU4p3oDYbgi/0iz/5leJQg8L1y3xMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2 MjQ2Y2JmZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUJb2xRGNRy5HJbbdRBZiVUIKCODXgxqiK+pGmaCNd83xeISiA6HcKl LSmiY4c7aTRNy5HeuZFkqkMcjPucDVFhkqwKLos3/HbZpsD7C64eTsu775TJqKPm Pqz/9RxR/0wpqlACJ3ggFg13t22Ey2CgMkozrkhD6mKVjG/KKQGbgva8HJBszIiU AlEcKP4/ynjXhLot7iG+zD6Eo7Js58IJYT8Jl3Z8YkWKMAbWp/UUe3v4Cu0M1b3W MwwyzdZoEmbMji6147ZzB1dlbvz5NNvxAZ7+ehrm08ZcLcaH9ECTXUF2P5NhGWXt B9y6xemm2p+pgBeXZRzCHKsku70e2+E= -----END CERTIFICATE-----Generated at Tue Oct 21 01:42:41 2025 by rpki-client