$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f9075f0d-bc98-3ba3-949a-2e4a64cd0bee.roa File: f9075f0d-bc98-3ba3-949a-2e4a64cd0bee.roa (raw, json) Hash identifier: LNUEO7FKV1Wzl4QZLBU4KzlJRa3cFtZfSTFsIxPxZq0= Subject key identifier: 97:47:7A:51:25:35:76:BA:80:CA:46:DA:3A:13:39:48:E7:C1:F4:5A Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584FD25BEF8F224A851A77694620 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f9075f0d-bc98-3ba3-949a-2e4a64cd0bee.roa Signing time: Fri 13 Nov 2026 02:00:14 +0000 ROA not before: Fri 13 Nov 2026 02:00:14 +0000 ROA not after: Thu 11 Feb 2027 02:00:14 +0000 asID: 54858 IP address blocks: 199.59.104.0/22 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d2:5b:ef:8f:22:4a:85:1a:77:69:46:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Nov 13 02:00:14 2026 GMT Not After : Feb 11 02:00:14 2027 GMT Subject: CN=3d47e7d5-b623-4075-87b0-1ad748baef96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4a:a7:99:4f:1f:e5:1b:68:e4:e7:31:7d:58: 05:a8:4e:7c:07:27:57:12:ce:9c:5c:62:89:ca:ba: c9:a4:51:c2:18:55:93:f1:56:f1:72:8f:f6:eb:45: d1:44:27:e9:c2:7e:cc:86:40:24:45:10:a5:67:39: 7a:70:cb:a5:22:ef:81:83:22:1b:6e:94:3d:67:38: 0b:e0:fe:e2:3d:a7:e6:0a:8a:26:44:fa:c8:aa:59: bf:3e:d2:b8:96:75:32:56:fe:fb:6c:b2:b7:64:95: 45:5e:e2:23:26:ee:3a:84:c3:44:b2:fc:84:ce:42: 5e:db:1b:d2:f2:32:c1:aa:6c:d3:04:a1:1d:b0:ed: a5:b9:94:84:35:01:2e:99:8a:c2:9e:d9:37:8a:af: 92:ca:31:10:15:57:70:ba:7d:b2:46:b5:6f:d2:e7: 75:30:e0:18:71:02:c8:08:b3:f5:4a:44:d7:28:4e: 14:7e:10:d8:f3:1e:dc:f2:11:ca:7a:37:f6:2a:a9: de:23:6a:cc:c7:34:d9:67:61:7b:90:43:db:b4:04: ec:b5:fd:50:d1:9d:41:41:85:e4:28:f4:2d:c3:f5: ac:f0:a5:f9:37:df:6c:5e:ff:44:a4:48:94:e6:9f: 94:78:a4:5f:65:33:b2:4d:79:ea:d1:fd:96:58:34: 52:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:47:7A:51:25:35:76:BA:80:CA:46:DA:3A:13:39:48:E7:C1:F4:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f9075f0d-bc98-3ba3-949a-2e4a64cd0bee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.59.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a2:9d:15:5f:e5:d0:ec:69:bd:89:74:67:84:8f:4a:c8:06: f3:f4:a8:ab:84:93:5c:f6:03:b2:a3:0d:e3:e2:cf:f3:56:26: 41:84:a7:99:e1:d3:04:c8:d9:f9:aa:be:da:85:18:fb:00:00: 08:fb:b6:92:9a:b4:44:cd:9a:e4:7b:27:4c:66:e7:1b:0d:a2: 5f:17:1b:af:d9:1d:90:6d:47:14:76:cb:1f:63:9e:9d:b9:6f: 6e:99:39:be:69:a5:a7:33:d1:20:19:cb:02:c1:c4:b3:0c:88: 30:40:37:1f:e8:86:0b:c0:6c:bc:7f:70:9e:56:cc:a2:39:4f: 68:73:c4:ed:64:5e:be:85:d7:6b:af:b9:70:91:6c:2a:89:34: 8c:f5:3f:c5:ed:f6:b5:53:f1:fd:72:c3:0c:5c:00:3c:38:ad: 01:f1:e4:6e:a1:82:f0:31:4e:61:d1:a7:30:39:50:99:c9:53: ff:e3:0c:c2:db:97:2d:e0:79:b4:2c:74:e6:c0:74:57:1d:0f: c0:b9:f4:ff:e9:ae:f1:a3:f2:4a:a1:7d:28:fa:6a:84:6f:8b: 32:a3:2a:ae:5d:d4:4f:91:db:49:f5:e9:6f:49:59:79:30:90: 93:b0:f7:2e:c1:64:69:49:b6:b5:e6:5d:71:ae:e5:6d:5a:72: 93:80:d9:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/SW++PIkqFGndpRiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MTExMzAyMDAxNFoXDTI3MDIxMTAyMDAxNFowLzEtMCsGA1UEAxMk M2Q0N2U3ZDUtYjYyMy00MDc1LTg3YjAtMWFkNzQ4YmFlZjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokqnmU8f5Rto5OcxfVgFqE58BydXEs6cXGKJ yrrJpFHCGFWT8Vbxco/260XRRCfpwn7MhkAkRRClZzl6cMulIu+BgyIbbpQ9ZzgL 4P7iPafmCoomRPrIqlm/PtK4lnUyVv77bLK3ZJVFXuIjJu46hMNEsvyEzkJe2xvS 8jLBqmzTBKEdsO2luZSENQEumYrCntk3iq+SyjEQFVdwun2yRrVv0ud1MOAYcQLI CLP1SkTXKE4UfhDY8x7c8hHKejf2KqneI2rMxzTZZ2F7kEPbtATstf1Q0Z1BQYXk KPQtw/Ws8KX5N99sXv9EpEiU5p+UeKRfZTOyTXnq0f2WWDRSKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdHelElNXa6gMpG2joTOUjnwfRaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjkwNzVmMGQtYmM5OC0z YmEzLTk0OWEtMmU0YTY0Y2QwYmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxztoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqinRVf5dDsab2JdGeEj0rIBvP0qKuEk1z2A7KjDePiz/NWJkGEp5nh 0wTI2fmqvtqFGPsAAAj7tpKatETNmuR7J0xm5xsNol8XG6/ZHZBtRxR2yx9jnp25 b26ZOb5ppacz0SAZywLBxLMMiDBANx/ohgvAbLx/cJ5WzKI5T2hzxO1kXr6F12uv uXCRbCqJNIz1P8Xt9rVT8f1ywwxcADw4rQHx5G6hgvAxTmHRpzA5UJnJU//jDMLb ly3gebQsdObAdFcdD8C59P/prvGj8kqhfSj6aoRvizKjKq5d1E+R20n16W9JWXkw kJOw9y7BZGlJtrXmXXGu5W1acpOA2fM= -----END CERTIFICATE-----Generated at Sun Nov 15 15:04:12 2026 by rpki-client