$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/58231aaf-3dc4-32ec-b04a-4083c30135fa.roa File: 58231aaf-3dc4-32ec-b04a-4083c30135fa.roa (raw, json) Hash identifier: 3evkV3INCocRUKn4gdOSU2Zec9LFKdVhFh0gldd0N84= Subject key identifier: 6D:9C:49:B4:1D:43:63:D9:B7:ED:BC:26:2D:20:48:48:4B:9B:9C:E7 Certificate issuer: /CN=a7804dec-fd00-426f-bba4-038d9b753fc5 Certificate serial: 010D0C9F4328584B5DD1E4E9FE2F68E9E5C37800 Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/58231aaf-3dc4-32ec-b04a-4083c30135fa.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 54702 IP address blocks: 173.0.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e4:e9:fe:2f:68:e9:e5:c3:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=d7f534b4-8d0b-4111-8f61-eca7c54f9a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:14:9c:ac:03:07:64:15:08:92:e7:f7:fc:cd: 24:fc:b8:53:78:c5:4f:16:49:26:32:fd:d0:65:ba: 43:9c:8a:67:7d:fe:a2:ff:65:57:62:1a:7d:a1:8f: 96:e2:45:38:2e:b2:c5:99:94:65:e0:60:45:3d:65: 87:67:33:46:33:28:41:04:2e:02:1a:f1:9d:ca:a8: e8:db:8b:bf:16:b6:79:91:07:77:8a:5d:aa:5b:18: d3:fa:d8:98:25:7b:42:fa:28:43:a4:cd:3c:64:5f: 6c:51:88:64:b2:a1:fc:d5:e2:b7:5c:54:10:47:5f: 4a:06:4f:92:8e:57:2b:24:42:b6:b5:49:10:ec:42: 11:95:1e:2e:cc:6d:98:42:6f:d4:07:29:01:be:ff: a5:84:fb:34:d3:81:90:26:5e:21:b5:34:e0:f5:1a: 70:40:a6:c5:24:db:c4:1d:be:48:2b:90:ca:ae:ac: c6:7c:1f:6c:a7:85:9f:40:35:58:89:56:17:68:4a: c1:69:ea:4a:90:7c:be:10:2b:3e:9c:3a:8c:7a:4c: d4:5d:98:a3:ad:a6:62:ff:df:3c:41:08:e6:59:37: 3a:57:3a:9b:a5:6f:af:a6:ea:f4:fc:bb:7f:9b:f3: 1a:a0:96:bf:c2:1d:66:53:39:d6:9e:4a:30:42:cb: b6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9C:49:B4:1D:43:63:D9:B7:ED:BC:26:2D:20:48:48:4B:9B:9C:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/58231aaf-3dc4-32ec-b04a-4083c30135fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl X509v3 Authority Key Identifier: keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer sbgp-ipAddrBlock: critical IPv4: 173.0.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:5b:ab:e4:14:c2:06:61:25:6b:b2:f5:29:58:8d:37:b4:ad: 48:25:78:bb:9e:4a:47:d3:0e:c5:40:6b:9b:28:36:a1:ab:29: 17:5e:df:13:49:60:d4:a8:52:06:f4:48:bf:84:2a:0f:8f:b1: 60:20:d2:09:0c:bf:82:01:e9:5d:81:c9:fa:e5:89:fd:72:e6: 2e:a0:9c:33:9e:78:27:02:4f:52:52:e4:f1:62:69:63:91:96: 3b:3b:7d:4e:52:7b:b3:07:fe:2f:88:66:24:7e:18:0a:11:fb: 8f:35:84:d0:74:fe:04:ff:38:0d:23:93:de:96:05:a2:e0:d2: 72:4c:ef:7f:7e:e1:19:46:ff:2b:11:ae:e0:d0:7a:44:ad:9d: e3:bc:22:c2:e2:2c:f9:80:a0:5a:36:86:89:2b:ff:92:05:ab: d5:ea:dd:00:4f:68:be:55:4e:2e:02:1b:25:68:b9:e9:a2:d9: fd:9b:10:66:cf:00:60:d4:5c:1b:29:4e:ff:fd:98:ad:ba:39: 3b:55:52:00:03:c1:00:8f:9d:2d:a8:87:c1:bd:0e:bd:cd:2b: 02:57:ec:29:4a:c0:93:42:bb:f3:8e:21:75:2e:76:d9:4a:68: d2:7e:d5:02:7a:44:62:84:26:db:52:96:8b:98:76:a3:83:b1: 91:48:3b:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0eTp/i9o6eXDeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4MDRkZWMtZmQwMC00MjZmLWJiYTQtMDM4ZDliNzUz ZmM1MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ZDdmNTM0YjQtOGQwYi00MTExLThmNjEtZWNhN2M1NGY5YTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRScrAMHZBUIkuf3/M0k/LhTeMVPFkkmMv3Q ZbpDnIpnff6i/2VXYhp9oY+W4kU4LrLFmZRl4GBFPWWHZzNGMyhBBC4CGvGdyqjo 24u/FrZ5kQd3il2qWxjT+tiYJXtC+ihDpM08ZF9sUYhksqH81eK3XFQQR19KBk+S jlcrJEK2tUkQ7EIRlR4uzG2YQm/UBykBvv+lhPs004GQJl4htTTg9RpwQKbFJNvE Hb5IK5DKrqzGfB9sp4WfQDVYiVYXaErBaepKkHy+ECs+nDqMekzUXZijraZi/988 QQjmWTc6VzqbpW+vpur0/Lt/m/MaoJa/wh1mUznWnkowQsu2QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2cSbQdQ2PZt+28Ji0gSEhLm5znMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNzgw NGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhkOWI3NTNmYzUvNTgyMzFhYWYtM2RjNC0z MmVjLWIwNGEtNDA4M2MzMDEzNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTc4MDRkZWMtZmQwMC00MjZmLWJi YTQtMDM4ZDliNzUzZmM1L2E3ODA0ZGVjLWZkMDAtNDI2Zi1iYmE0LTAzOGQ5Yjc1 M2ZjNS5jcmwwHwYDVR0jBBgwFoAUaHUbHIZZZDl7Ob43HRBnZpyHMqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNzgwNGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhk OWI3NTNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrQAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBbq+QUwgZhJWuy9SlYjTe0rUgleLueSkfTDsVAa5soNqGrKRde3xNJ YNSoUgb0SL+EKg+PsWAg0gkMv4IB6V2Byfrlif1y5i6gnDOeeCcCT1JS5PFiaWOR ljs7fU5Se7MH/i+IZiR+GAoR+481hNB0/gT/OA0jk96WBaLg0nJM739+4RlG/ysR ruDQekStneO8IsLiLPmAoFo2hokr/5IFq9Xq3QBPaL5VTi4CGyVouemi2f2bEGbP AGDUXBspTv/9mK26OTtVUgADwQCPnS2oh8G9Dr3NKwJX7ClKwJNCu/OOIXUudtlK aNJ+1QJ6RGKEJttSlouYdqODsZFIO5w= -----END CERTIFICATE-----Generated at Sun Oct 19 17:29:51 2025 by rpki-client