$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/6f1a7cf3-e8c1-3a2c-bae1-b1e5b1f24025.roa File: 6f1a7cf3-e8c1-3a2c-bae1-b1e5b1f24025.roa (raw, json) Hash identifier: N+GVI7A9l2enURoPa4uupTkhxdqbNkbV2AXFc8/exIs= Subject key identifier: C8:8F:7A:ED:98:57:E8:B3:F7:DF:B3:8A:18:0D:21:ED:42:E6:D7:43 Certificate issuer: /CN=5b326d4d-84cb-4b68-b303-78f3cdef804f Certificate serial: 010D0C9F4328584B89176039E99346BAD5867600 Authority key identifier: A7:D0:DE:BF:C4:97:6E:D0:5A:7E:55:A2:44:1F:65:42:97:1F:89:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/6f1a7cf3-e8c1-3a2c-bae1-b1e5b1f24025.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 199.30.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/5b326d4d-84cb-4b68-b303-78f3cdef804f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/5b326d4d-84cb-4b68-b303-78f3cdef804f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:60:39:e9:93:46:ba:d5:86:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b326d4d-84cb-4b68-b303-78f3cdef804f Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=3d0a6e39-7b78-4460-bae9-eafa435d8419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:8b:33:63:92:cf:e9:a9:33:52:bc:81:7f: 3f:0d:ed:6f:9d:b5:7a:d9:02:f2:20:fd:82:ed:bf: f4:cb:73:9c:0e:fe:c0:66:db:ab:5d:20:e3:c0:e2: c9:48:c9:6b:bf:3e:b9:b8:99:e4:53:9d:89:a3:8e: 7f:53:b4:e5:71:90:f2:29:fd:cd:ec:07:a6:63:b2: 9c:ca:f5:48:a0:93:20:23:65:39:e4:21:69:d6:d8: 8b:b1:58:8c:fc:4a:8f:25:87:f4:ed:79:5c:ab:43: b0:61:23:67:1c:ce:93:cf:9e:52:e1:32:53:6d:bd: ad:1e:d2:35:2b:98:26:fd:16:bf:af:b8:3f:c9:06: a0:01:54:dd:e1:80:ba:70:4f:c6:80:22:b5:f2:73: 99:30:6f:02:98:6a:cf:c0:64:41:79:a9:a9:97:47: f0:cc:b1:71:e0:a1:b0:8d:7a:b3:48:ae:78:83:e8: 1a:3d:c2:6c:4e:33:fd:81:9c:ae:7b:f4:26:72:2a: e1:76:23:ae:51:1e:a4:3a:1b:d7:09:4c:0c:f4:12: 5a:5a:8f:18:23:9a:f2:6d:bc:97:2b:6b:75:62:f4: 85:5e:7b:fb:d5:67:c5:39:b5:56:02:a3:05:39:0d: b8:a7:5c:64:81:fa:ed:b6:fa:b2:dc:21:b7:21:bc: 5b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8F:7A:ED:98:57:E8:B3:F7:DF:B3:8A:18:0D:21:ED:42:E6:D7:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/6f1a7cf3-e8c1-3a2c-bae1-b1e5b1f24025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/5b326d4d-84cb-4b68-b303-78f3cdef804f.crl X509v3 Authority Key Identifier: keyid:A7:D0:DE:BF:C4:97:6E:D0:5A:7E:55:A2:44:1F:65:42:97:1F:89:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f.cer sbgp-ipAddrBlock: critical IPv4: 199.30.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:61:e9:45:93:88:e7:67:cc:f5:81:78:d9:57:37:18:6c:f9: ef:2c:82:9b:b5:89:33:b9:28:27:5e:5b:63:68:b6:7f:ad:cd: a4:93:8a:7b:8c:45:98:f1:29:14:bb:54:a2:45:e7:16:1c:ee: c3:21:f8:15:af:5b:bb:d5:23:e8:a8:b2:a9:30:b4:54:4d:82: 43:a8:1a:1e:89:cd:68:eb:33:30:ce:d8:09:93:9d:07:64:48: dd:23:93:ad:65:66:6f:32:ee:53:68:90:c0:bd:85:40:c9:e8: 01:c2:e8:bd:35:6f:7c:09:77:24:e4:d1:1a:0e:ae:0e:46:be: 1f:24:21:92:05:cc:1c:6e:14:68:d4:83:56:e8:12:43:d1:e6: a9:80:7c:16:e3:4e:df:45:f5:5f:a5:0f:d1:cf:cb:8a:b2:18: 63:db:dc:55:2e:29:09:4f:64:10:41:c1:9f:d3:7b:4b:de:f5: 33:ed:b0:aa:f9:ab:9e:fc:01:a4:6d:73:12:8a:85:27:64:4a: 98:26:da:7f:7f:75:f8:36:45:f5:75:2e:af:e5:8a:cf:01:06: 07:31:6a:62:d2:c4:b0:22:57:b0:88:e7:43:1e:6f:29:47:e8: 79:e8:2e:e0:eb:64:17:cf:a4:46:78:0c:06:b3:90:e2:89:59: 8c:98:e7:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2A56ZNGutWGdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWIzMjZkNGQtODRjYi00YjY4LWIzMDMtNzhmM2NkZWY4 MDRmMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk M2QwYTZlMzktN2I3OC00NDYwLWJhZTktZWFmYTQzNWQ4NDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqCLM2OSz+mpM1K8gX8/De1vnbV62QLyIP2C 7b/0y3OcDv7AZturXSDjwOLJSMlrvz65uJnkU52Jo45/U7TlcZDyKf3N7AemY7Kc yvVIoJMgI2U55CFp1tiLsViM/EqPJYf07Xlcq0OwYSNnHM6Tz55S4TJTbb2tHtI1 K5gm/Ra/r7g/yQagAVTd4YC6cE/GgCK18nOZMG8CmGrPwGRBeampl0fwzLFx4KGw jXqzSK54g+gaPcJsTjP9gZyue/QmcirhdiOuUR6kOhvXCUwM9BJaWo8YI5rybbyX K2t1YvSFXnv71WfFObVWAqMFOQ24p1xkgfrttvqy3CG3IbxbTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiPeu2YV+iz99+zihgNIe1C5tdDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81YjMy NmQ0ZC04NGNiLTRiNjgtYjMwMy03OGYzY2RlZjgwNGYvNmYxYTdjZjMtZThjMS0z YTJjLWJhZTEtYjFlNWIxZjI0MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWIzMjZkNGQtODRjYi00YjY4LWIz MDMtNzhmM2NkZWY4MDRmLzViMzI2ZDRkLTg0Y2ItNGI2OC1iMzAzLTc4ZjNjZGVm ODA0Zi5jcmwwHwYDVR0jBBgwFoAUp9Dev8SXbtBaflWiRB9lQpcfiXEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81YjMyNmQ0ZC04NGNiLTRiNjgtYjMwMy03OGYz Y2RlZjgwNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxx6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBh6UWTiOdnzPWBeNlXNxhs+e8sgpu1iTO5KCdeW2Notn+tzaSTinuM RZjxKRS7VKJF5xYc7sMh+BWvW7vVI+iosqkwtFRNgkOoGh6JzWjrMzDO2AmTnQdk SN0jk61lZm8y7lNokMC9hUDJ6AHC6L01b3wJdyTk0RoOrg5Gvh8kIZIFzBxuFGjU g1boEkPR5qmAfBbjTt9F9V+lD9HPy4qyGGPb3FUuKQlPZBBBwZ/Te0ve9TPtsKr5 q578AaRtcxKKhSdkSpgm2n9/dfg2RfV1Lq/lis8BBgcxamLSxLAiV7CI50MebylH 6HnoLuDrZBfPpEZ4DAazkOKJWYyY57Q= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:39 2025 by rpki-client