$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/f55978ed-0a94-33e2-ad68-45b7734b3677.roa File: f55978ed-0a94-33e2-ad68-45b7734b3677.roa (raw, json) Hash identifier: JlxJ5JB21Y3XvPDhIB2E+y+wqMvhmQGi6BdxIqrKuxY= Subject key identifier: F9:C1:8B:A1:49:A2:98:7E:D6:03:B9:89:57:67:65:6A:41:91:16:68 Certificate issuer: /CN=5b326d4d-84cb-4b68-b303-78f3cdef804f Certificate serial: 010D0C9F4328584B891769265720DC5F0ACAC300 Authority key identifier: A7:D0:DE:BF:C4:97:6E:D0:5A:7E:55:A2:44:1F:65:42:97:1F:89:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/f55978ed-0a94-33e2-ad68-45b7734b3677.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 199.30.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/5b326d4d-84cb-4b68-b303-78f3cdef804f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/5b326d4d-84cb-4b68-b303-78f3cdef804f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:69:26:57:20:dc:5f:0a:ca:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b326d4d-84cb-4b68-b303-78f3cdef804f Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=945a5d62-59e4-404c-a5af-bf6f36fec0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:e9:9c:8c:3e:ed:ac:a4:e0:60:2d:f0:37: e0:d2:56:af:19:bc:aa:2e:15:87:51:d1:03:1a:da: b9:83:d6:e4:69:e2:68:20:25:05:b6:94:3a:62:ea: d6:17:20:ea:95:da:41:76:34:d0:a0:2c:57:c3:36: af:3c:be:76:b1:0b:50:e2:73:65:48:21:00:46:08: bb:9e:21:fc:e6:e2:f2:42:b2:0e:62:c0:9f:b9:1e: f9:27:49:da:d1:84:26:e7:1c:0c:c5:a3:cf:66:8e: 71:5a:92:fd:08:eb:13:81:05:1e:4e:87:b3:54:10: a2:76:15:04:e1:55:a7:28:df:e7:ac:ad:49:69:74: 3c:ad:1c:60:ec:5d:05:47:26:25:4f:53:90:51:0f: 1d:f8:58:3c:e3:9c:84:1c:4d:d8:2c:5d:19:8d:c1: b0:cf:f6:4b:8c:9f:2b:46:c4:19:b3:3c:d1:b5:8b: 07:de:aa:1c:22:4c:ff:bb:2c:d3:20:77:e1:21:6c: 8b:8a:80:74:3f:0d:fd:1d:e0:55:e3:3d:ad:75:24: e3:54:88:83:21:29:78:b3:87:aa:a5:74:04:7b:1e: f5:4f:6b:03:5b:0c:73:39:f3:37:10:f1:11:a6:8c: 9c:60:66:94:e9:85:a4:43:51:2a:b3:40:58:e4:59: be:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C1:8B:A1:49:A2:98:7E:D6:03:B9:89:57:67:65:6A:41:91:16:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/f55978ed-0a94-33e2-ad68-45b7734b3677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/5b326d4d-84cb-4b68-b303-78f3cdef804f.crl X509v3 Authority Key Identifier: keyid:A7:D0:DE:BF:C4:97:6E:D0:5A:7E:55:A2:44:1F:65:42:97:1F:89:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f.cer sbgp-ipAddrBlock: critical IPv4: 199.30.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b4:91:3b:36:66:42:d0:5f:ed:2c:88:9c:b9:59:e1:77:4b: 8a:db:be:e6:ea:81:2a:02:b5:7c:8c:fd:7f:b5:4f:d5:1a:b9: de:e3:31:1f:9d:40:c6:73:1e:b4:da:0d:c8:4e:c2:b4:2c:71: c5:d7:21:d1:d6:9a:a3:9e:90:73:e3:56:7b:59:05:5e:59:22: 06:57:8b:2d:8f:4d:1b:65:42:54:70:e0:14:a4:58:fd:db:58: 8f:9e:72:8e:74:ca:e2:4d:a6:45:8c:3f:90:d1:a6:53:b9:13: b9:9c:14:d9:16:11:e3:2e:7e:8f:65:8b:31:46:97:1d:d3:d3: 7d:b7:f3:8f:b4:48:b1:fe:ee:d0:94:3e:5c:44:e4:92:7e:fd: e6:54:49:a5:55:d9:14:1e:8d:dd:f4:45:84:ef:62:cf:62:4e: 83:5c:24:b2:4c:f5:02:1d:5d:d3:31:ab:8e:0a:1a:65:52:2e: 2e:94:f0:a4:78:50:29:33:a3:ad:4f:16:2c:d1:25:29:f7:2d: b3:4b:96:88:0a:ce:e7:b2:50:66:a8:f8:82:c1:40:74:8f:96: 4c:fe:7b:c1:bf:0f:30:ad:be:2d:ef:a1:2a:0c:22:16:be:a1: c6:16:5e:17:c9:c8:fb:36:de:0c:6e:76:fb:26:94:ae:38:43: 2b:3d:54:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2kmVyDcXwrKwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWIzMjZkNGQtODRjYi00YjY4LWIzMDMtNzhmM2NkZWY4 MDRmMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk OTQ1YTVkNjItNTllNC00MDRjLWE1YWYtYmY2ZjM2ZmVjMGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseTpnIw+7ayk4GAt8Dfg0lavGbyqLhWHUdED Gtq5g9bkaeJoICUFtpQ6YurWFyDqldpBdjTQoCxXwzavPL52sQtQ4nNlSCEARgi7 niH85uLyQrIOYsCfuR75J0na0YQm5xwMxaPPZo5xWpL9COsTgQUeToezVBCidhUE 4VWnKN/nrK1JaXQ8rRxg7F0FRyYlT1OQUQ8d+Fg845yEHE3YLF0ZjcGwz/ZLjJ8r RsQZszzRtYsH3qocIkz/uyzTIHfhIWyLioB0Pw39HeBV4z2tdSTjVIiDISl4s4eq pXQEex71T2sDWwxzOfM3EPERpoycYGaU6YWkQ1Eqs0BY5Fm+qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnBi6FJoph+1gO5iVdnZWpBkRZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81YjMy NmQ0ZC04NGNiLTRiNjgtYjMwMy03OGYzY2RlZjgwNGYvZjU1OTc4ZWQtMGE5NC0z M2UyLWFkNjgtNDViNzczNGIzNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWIzMjZkNGQtODRjYi00YjY4LWIz MDMtNzhmM2NkZWY4MDRmLzViMzI2ZDRkLTg0Y2ItNGI2OC1iMzAzLTc4ZjNjZGVm ODA0Zi5jcmwwHwYDVR0jBBgwFoAUp9Dev8SXbtBaflWiRB9lQpcfiXEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81YjMyNmQ0ZC04NGNiLTRiNjgtYjMwMy03OGYz Y2RlZjgwNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxx6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm0kTs2ZkLQX+0siJy5WeF3S4rbvubqgSoCtXyM/X+1T9Uaud7jMR+d QMZzHrTaDchOwrQsccXXIdHWmqOekHPjVntZBV5ZIgZXiy2PTRtlQlRw4BSkWP3b WI+eco50yuJNpkWMP5DRplO5E7mcFNkWEeMufo9lizFGlx3T032384+0SLH+7tCU PlxE5JJ+/eZUSaVV2RQejd30RYTvYs9iToNcJLJM9QIdXdMxq44KGmVSLi6U8KR4 UCkzo61PFizRJSn3LbNLlogKzueyUGao+ILBQHSPlkz+e8G/DzCtvi3voSoMIha+ ocYWXhfJyPs23gxudvsmlK44Qys9VFQ= -----END CERTIFICATE-----Generated at Mon Oct 20 17:50:47 2025 by rpki-client