$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/2dd74a6d-3813-3171-a4e0-9bf74f942879.roa File: 2dd74a6d-3813-3171-a4e0-9bf74f942879.roa (raw, json) Hash identifier: 3UkOOub3CEy6RQdk8tjrY+vX+kTnu3pkOq+pX4wDHi4= Subject key identifier: 4B:82:F2:93:9A:6B:65:E9:49:9C:89:F8:84:68:DE:D8:7E:CD:ED:DD Certificate issuer: /CN=01b2d667-c096-462f-9ad9-6391b09e9746 Certificate serial: 010D0C9F4328584B2B9199D45891E899DEA0C0C0 Authority key identifier: EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/2dd74a6d-3813-3171-a4e0-9bf74f942879.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 42831 IP address blocks: 199.59.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:99:d4:58:91:e8:99:de:a0:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01b2d667-c096-462f-9ad9-6391b09e9746 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=65f50b6a-0c9f-401b-964a-84a7bd7afed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:34:60:1c:cf:6c:04:72:24:a7:68:09:36: 5b:4c:4e:d0:ac:cc:97:56:2f:40:6b:af:8a:a4:65: e0:a9:cc:96:e9:dc:1f:65:e5:a5:cf:7b:8c:c9:60: 34:a3:36:ed:a3:61:cd:b9:27:99:7e:50:d9:8c:18: dd:ab:2e:fb:5a:ee:62:ab:10:34:4f:7f:5b:4d:26: 5f:dd:d3:24:82:13:c9:90:ea:cc:ab:92:b2:c4:df: 62:0a:ae:1c:33:04:62:3a:b5:03:a8:36:c9:0d:be: 11:dd:e3:98:c3:27:6d:d5:72:55:39:69:ed:b6:5c: b7:f7:25:84:e3:43:c2:26:f2:0e:79:8b:ec:45:93: f1:fa:96:0a:b8:69:bf:87:d6:2b:88:20:3c:e3:a2: 4d:9e:da:f5:ce:17:ec:b7:26:f1:63:3a:6b:f9:ff: 4c:f4:5f:77:2e:b0:4a:3e:07:61:11:58:bb:17:98: c1:92:2a:58:c2:e6:6f:77:d4:c0:3c:1f:e0:fc:5c: db:5d:90:e6:a8:ee:2e:32:ff:f8:de:60:78:d9:b7: 9d:63:95:6d:b5:53:b2:c3:84:6b:ef:67:f3:c8:4f: 06:0a:de:3c:d1:54:3e:5d:d8:9e:44:d7:d2:c0:18: 43:c3:eb:94:92:60:b0:99:97:1c:d8:f8:32:48:50: af:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:82:F2:93:9A:6B:65:E9:49:9C:89:F8:84:68:DE:D8:7E:CD:ED:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/2dd74a6d-3813-3171-a4e0-9bf74f942879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl X509v3 Authority Key Identifier: keyid:EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer sbgp-ipAddrBlock: critical IPv4: 199.59.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:90:48:e1:16:77:b4:50:50:d3:43:f8:3c:7b:b2:11:85:f1: 27:c2:8b:9c:85:d9:94:a3:41:95:66:2e:73:fb:65:dd:78:2c: 4f:df:0d:85:e0:27:33:c2:6a:7a:8e:32:e8:6c:54:4b:a8:af: 6a:f8:70:89:22:3b:1c:2d:61:c2:00:42:22:6c:a2:51:3e:82: 5d:7d:84:8b:ec:1e:b3:57:c2:cd:3e:ca:9a:81:f4:38:32:63: 3d:e1:f7:6c:c4:ef:f4:40:39:66:76:66:b9:3c:7f:eb:5e:26: 93:d4:ef:dd:f8:c2:11:d7:2a:14:e8:6e:c0:0f:17:d9:8b:e3: ff:80:99:cb:a1:b2:93:92:4b:5c:7f:65:1c:89:bb:9a:4b:8f: cd:9a:f9:c2:df:15:45:f3:2a:3d:5f:ff:20:88:e2:94:01:b3: 3f:53:9a:44:25:1a:2e:51:2e:1b:85:40:83:86:70:bb:33:b0: 36:93:e7:a6:2a:11:92:8b:54:1d:e4:4c:72:ca:1e:5e:a0:b3: b6:22:3c:db:b9:12:ec:62:c2:45:9b:ce:e7:6c:e5:ba:bc:cb: 1b:ff:e8:2b:98:fb:54:90:62:3f:c8:73:bd:7e:ad:11:33:fb: d3:a7:8e:ee:55:8f:22:de:c8:eb:70:e6:70:03:c5:73:48:30: 9d:ee:5e:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZnUWJHomd6gwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDFiMmQ2NjctYzA5Ni00NjJmLTlhZDktNjM5MWIwOWU5 NzQ2MB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk NjVmNTBiNmEtMGM5Zi00MDFiLTk2NGEtODRhN2JkN2FmZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2U0YBzPbARyJKdoCTZbTE7QrMyXVi9Aa6+K pGXgqcyW6dwfZeWlz3uMyWA0ozbto2HNuSeZflDZjBjdqy77Wu5iqxA0T39bTSZf 3dMkghPJkOrMq5KyxN9iCq4cMwRiOrUDqDbJDb4R3eOYwydt1XJVOWnttly39yWE 40PCJvIOeYvsRZPx+pYKuGm/h9YriCA846JNntr1zhfstybxYzpr+f9M9F93LrBK PgdhEVi7F5jBkipYwuZvd9TAPB/g/FzbXZDmqO4uMv/43mB42bedY5VttVOyw4Rr 72fzyE8GCt480VQ+XdieRNfSwBhDw+uUkmCwmZcc2PgySFCvyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuC8pOaa2XpSZyJ+IRo3th+ze3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wMWIy ZDY2Ny1jMDk2LTQ2MmYtOWFkOS02MzkxYjA5ZTk3NDYvMmRkNzRhNmQtMzgxMy0z MTcxLWE0ZTAtOWJmNzRmOTQyODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDFiMmQ2NjctYzA5Ni00NjJmLTlh ZDktNjM5MWIwOWU5NzQ2LzAxYjJkNjY3LWMwOTYtNDYyZi05YWQ5LTYzOTFiMDll OTc0Ni5jcmwwHwYDVR0jBBgwFoAU71V0mQKbfcpP7+5fihFYb0bXL7EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wMWIyZDY2Ny1jMDk2LTQ2MmYtOWFkOS02Mzkx YjA5ZTk3NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzu1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGQSOEWd7RQUNND+Dx7shGF8SfCi5yF2ZSjQZVmLnP7Zd14LE/fDYXg JzPCanqOMuhsVEuor2r4cIkiOxwtYcIAQiJsolE+gl19hIvsHrNXws0+ypqB9Dgy Yz3h92zE7/RAOWZ2Zrk8f+teJpPU7934whHXKhTobsAPF9mL4/+AmcuhspOSS1x/ ZRyJu5pLj82a+cLfFUXzKj1f/yCI4pQBsz9TmkQlGi5RLhuFQIOGcLszsDaT56Yq EZKLVB3kTHLKHl6gs7YiPNu5EuxiwkWbzuds5bq8yxv/6CuY+1SQYj/Ic71+rREz +9Onju5VjyLeyOtw5nADxXNIMJ3uXro= -----END CERTIFICATE-----Generated at Mon Oct 20 14:01:41 2025 by rpki-client