$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/77bad959-d6f6-3d31-898e-5c3bcbfea8fe.roa File: 77bad959-d6f6-3d31-898e-5c3bcbfea8fe.roa (raw, json) Hash identifier: gsYbkKAh7+ZeTaU7zSGpu1vK5ZdyzKXyEOoES5Ad8RM= Subject key identifier: C8:E1:75:46:B2:30:BB:4F:5C:78:F5:F5:63:30:BF:C4:97:9B:8C:AF Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584B84D347CEB605B16080DCD900 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/77bad959-d6f6-3d31-898e-5c3bcbfea8fe.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 30383 IP address blocks: 198.208.24.0/24 maxlen: 24 198.208.25.0/24 maxlen: 24 198.208.26.0/24 maxlen: 24 198.208.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:d3:47:ce:b6:05:b1:60:80:dc:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=678439d4-9048-46d2-862c-34386e533969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:5c:1d:e9:f5:db:11:94:70:b1:d9:47:77: 58:f2:71:11:43:4c:8f:b2:e7:8a:b8:67:ae:92:34: 5b:58:1e:95:d3:e8:18:1c:56:29:21:ea:36:16:18: 96:a8:2b:e5:8c:a4:d9:a2:51:9d:39:eb:a2:53:69: d1:9e:50:6a:21:32:b9:c9:22:7d:e1:68:0b:87:a9: 94:86:4b:ba:29:86:f0:40:17:99:5a:29:29:b8:e0: b6:3e:56:cd:63:f8:83:1e:d7:bc:6f:b0:df:b5:68: 88:f5:c6:2f:1e:3a:da:d0:55:a5:31:b7:60:9b:80: c9:6a:4a:4a:28:fb:52:d2:6a:40:da:dd:17:8a:50: 10:32:7d:7a:1c:90:77:ff:3d:2e:a6:fb:f6:0c:4e: 98:5c:48:96:e4:d1:1f:0e:38:29:9a:44:00:43:21: ba:1e:5d:8b:c7:6c:32:0b:4b:29:38:a6:cf:b8:ff: ab:f4:a3:d7:b1:bd:64:46:8d:2d:28:00:8b:e3:46: bd:a9:0e:18:de:18:24:04:6e:7e:96:e8:c5:00:7d: 0d:6f:2b:15:92:0a:8d:0f:29:59:85:ef:91:ca:ca: 97:73:b3:78:be:14:47:96:21:ca:bb:3e:6f:1b:2c: 57:1a:30:08:82:47:b2:93:24:20:ed:8d:8f:a7:ae: f9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E1:75:46:B2:30:BB:4F:5C:78:F5:F5:63:30:BF:C4:97:9B:8C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/77bad959-d6f6-3d31-898e-5c3bcbfea8fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b7:e6:ff:77:93:80:ed:03:02:7e:40:04:d7:19:7d:da:41: c7:bd:dd:f9:a6:f3:25:60:5f:b5:9f:23:40:f6:8e:ec:44:99: 64:e5:10:7f:cf:b9:2d:09:cf:97:63:65:c6:26:f0:77:53:f1: f6:ba:57:66:b1:30:8d:a5:11:13:94:ea:38:fc:25:40:5a:cb: 4a:f4:06:a3:e5:b2:80:cf:f8:ef:68:07:7e:ad:1b:0c:1c:ce: 69:4a:74:a4:89:35:af:1f:b7:dd:dd:85:0f:6a:05:08:c2:4a: c2:c3:1f:a8:53:92:b7:5c:d1:86:89:9a:50:e5:cd:6e:61:bf: f0:db:01:66:7d:20:e4:74:a4:38:80:c0:38:ef:1b:70:a2:b0: a5:5a:e2:e2:62:9d:82:f7:48:75:cb:f1:db:f4:a1:9b:01:74: f9:36:1d:e4:a3:80:2f:30:98:11:b0:62:89:8c:c0:ad:7e:64: ac:74:b5:1a:85:ac:73:66:f1:de:7b:8c:2f:a4:01:1e:fa:16: 6d:10:38:b1:fc:7f:ab:75:dd:ed:7c:7a:2c:5a:fb:37:47:3e: 54:41:4e:7e:82:64:f7:54:6f:99:06:95:c0:df:28:5c:e5:66: 0b:7f:f8:8f:aa:01:41:a4:14:46:9a:c8:5b:10:fc:5e:18:31: f2:cf:97:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE00fOtgWxYIDc2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk Njc4NDM5ZDQtOTA0OC00NmQyLTg2MmMtMzQzODZlNTMzOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUhcHen12xGUcLHZR3dY8nERQ0yPsueKuGeu kjRbWB6V0+gYHFYpIeo2FhiWqCvljKTZolGdOeuiU2nRnlBqITK5ySJ94WgLh6mU hku6KYbwQBeZWikpuOC2PlbNY/iDHte8b7DftWiI9cYvHjra0FWlMbdgm4DJakpK KPtS0mpA2t0XilAQMn16HJB3/z0upvv2DE6YXEiW5NEfDjgpmkQAQyG6Hl2Lx2wy C0spOKbPuP+r9KPXsb1kRo0tKACL40a9qQ4Y3hgkBG5+lujFAH0NbysVkgqNDylZ he+RysqXc7N4vhRHliHKuz5vGyxXGjAIgkeykyQg7Y2Pp675cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjhdUayMLtPXHj19WMwv8SXm4yvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvNzdiYWQ5NTktZDZmNi0z ZDMxLTg5OGUtNWMzYmNiZmVhOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxtAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC35v93k4DtAwJ+QATXGX3aQce93fmm8yVgX7WfI0D2juxEmWTlEH/P uS0Jz5djZcYm8HdT8fa6V2axMI2lEROU6jj8JUBay0r0BqPlsoDP+O9oB36tGwwc zmlKdKSJNa8ft93dhQ9qBQjCSsLDH6hTkrdc0YaJmlDlzW5hv/DbAWZ9IOR0pDiA wDjvG3CisKVa4uJinYL3SHXL8dv0oZsBdPk2HeSjgC8wmBGwYomMwK1+ZKx0tRqF rHNm8d57jC+kAR76Fm0QOLH8f6t13e18eixa+zdHPlRBTn6CZPdUb5kGlcDfKFzl Zgt/+I+qAUGkFEaayFsQ/F4YMfLPl7o= -----END CERTIFICATE-----Generated at Mon Oct 20 11:20:42 2025 by rpki-client