$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/067b0439-4cea-3e63-ae85-baf79b93fd58.roa File: 067b0439-4cea-3e63-ae85-baf79b93fd58.roa (raw, json) Hash identifier: cOpmeayQHEzP5EMO4YRIP/8ne7pa/EFU9RCzll3dVdI= Subject key identifier: 52:D5:C2:89:D2:8E:01:5C:1C:DA:A4:67:39:9D:B4:86:08:11:9B:8E Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584B3556E49F15C5D30E41BC65C0 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/067b0439-4cea-3e63-ae85-baf79b93fd58.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 23465 IP address blocks: 70.99.72.0/21 maxlen: 21 70.99.104.0/21 maxlen: 21 70.99.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e4:9f:15:c5:d3:0e:41:bc:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=d63378b5-8018-4214-8e58-fa4ffc8326af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:c7:e1:64:f2:65:d2:2f:52:5b:2f:9c:44: 55:74:3d:9c:8c:6d:49:20:fb:18:94:c8:e4:7a:63: be:42:9e:86:a1:c0:c4:3f:e2:84:5b:10:3a:f1:af: 79:8e:d5:2a:ed:ae:94:3c:b6:fb:49:8e:3a:a6:8f: 7c:86:81:a8:1a:43:8a:17:5d:b2:70:8e:89:3a:81: a7:10:47:18:7e:61:92:01:61:43:8f:38:63:69:51: 06:0f:eb:86:bb:b2:24:16:a4:7a:f2:15:72:37:a6: c7:8a:37:e0:cd:ef:60:6e:81:79:34:5f:ae:c3:ce: cb:fe:e6:10:43:c3:b5:78:95:37:0d:4f:11:3b:0e: 5c:2e:94:48:b5:8b:3c:f1:f2:54:1c:e3:31:8c:b3: 23:43:de:ff:25:a7:0d:e9:07:6e:96:4c:76:df:3b: 98:2d:71:99:9a:93:af:32:fd:78:a6:7d:5b:16:2e: f5:21:8e:5b:86:9d:92:45:73:4b:a8:0b:87:cb:f2: a7:83:7d:5f:46:7a:3a:b5:fb:b5:87:3a:92:39:3e: 48:95:62:35:aa:7a:65:6b:bc:8e:bb:67:46:a0:27: 05:af:e6:da:6b:64:43:84:5a:da:d8:14:f6:74:b2: c4:2a:89:8b:72:76:34:3b:45:9d:34:1b:30:30:b2: 15:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D5:C2:89:D2:8E:01:5C:1C:DA:A4:67:39:9D:B4:86:08:11:9B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/067b0439-4cea-3e63-ae85-baf79b93fd58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.99.72.0/21 70.99.104.0/21 70.99.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:9e:69:cc:bc:5e:96:23:4b:18:d7:96:3c:e9:25:e0:88:d5: 1d:7d:70:f2:20:b3:5c:8c:89:b4:e4:49:92:40:87:82:a9:e2: 5c:da:9e:aa:09:e1:57:da:4d:4b:cc:ec:dd:70:ce:4b:c0:c3: 40:da:36:64:cf:13:31:30:7f:d4:ad:01:72:a8:9a:56:c9:24: 51:b3:7c:68:b0:88:fd:1e:09:cf:22:d7:58:ad:06:46:bf:7e: b3:7b:b2:de:9f:1c:f4:e6:fa:9a:3d:a1:69:98:a1:d4:da:1a: a8:d0:c5:4e:bd:1a:ce:7b:d6:0c:16:e4:05:19:16:98:9e:02: e1:cc:ab:eb:d8:d7:05:d3:cc:6f:5b:93:25:1a:e1:3c:36:61: 44:03:6f:88:7f:9a:8f:3c:69:ca:90:ff:67:f6:dc:2d:37:c5: 59:7f:58:b3:52:01:7b:3b:6b:9b:a0:4b:59:9b:44:7c:95:f5: c3:6d:1a:82:f8:99:1f:df:b2:31:92:30:3e:21:54:c9:fb:c3: c7:9c:89:a6:0b:80:34:62:e3:65:5b:f9:a7:c4:74:78:63:e5: bd:c9:aa:b9:28:d6:f9:d7:3f:0d:60:48:fc:c6:70:f9:a7:dc: d9:5c:2e:b3:66:15:36:28:90:06:d3:39:09:25:77:fa:e6:67: 1e:4d:c5:9b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEs1VuSfFcXTDkG8ZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZDYzMzc4YjUtODAxOC00MjE0LThlNTgtZmE0ZmZjODMyNmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovPH4WTyZdIvUlsvnERVdD2cjG1JIPsYlMjk emO+Qp6GocDEP+KEWxA68a95jtUq7a6UPLb7SY46po98hoGoGkOKF12ycI6JOoGn EEcYfmGSAWFDjzhjaVEGD+uGu7IkFqR68hVyN6bHijfgze9gboF5NF+uw87L/uYQ Q8O1eJU3DU8ROw5cLpRItYs88fJUHOMxjLMjQ97/JacN6Qdulkx23zuYLXGZmpOv Mv14pn1bFi71IY5bhp2SRXNLqAuHy/Kng31fRno6tfu1hzqSOT5IlWI1qnpla7yO u2dGoCcFr+baa2RDhFra2BT2dLLEKomLcnY0O0WdNBswMLIVoQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFLVwonSjgFcHNqkZzmdtIYIEZuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvMDY3YjA0MzktNGNlYS0z ZTYzLWFlODUtYmFmNzliOTNmZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDRmNIAwQD RmNoAwQARmP7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHqeacy8XpYjSxjXljzpJeCI1R19cPIgs1yMibTk SZJAh4Kp4lzanqoJ4VfaTUvM7N1wzkvAw0DaNmTPEzEwf9StAXKomlbJJFGzfGiw iP0eCc8i11itBka/frN7st6fHPTm+po9oWmYodTaGqjQxU69Gs571gwW5AUZFpie AuHMq+vY1wXTzG9bkyUa4Tw2YUQDb4h/mo88acqQ/2f23C03xVl/WLNSAXs7a5ug S1mbRHyV9cNtGoL4mR/fsjGSMD4hVMn7w8eciaYLgDRi42Vb+afEdHhj5b3Jqrko 1vnXPw1gSPzGcPmn3NlcLrNmFTYokAbTOQkld/rmZx5NxZs= -----END CERTIFICATE-----Generated at Sat Oct 11 10:14:51 2025 by rpki-client