$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa File: a14bef6f-3d0e-311d-9920-4d558906aa24.roa (raw, json) Hash identifier: Z++VKL81FDDNILqMqx3YcYqRp6cWh1u8fK2fYu1SXqU= Subject key identifier: 49:FC:46:B6:45:BA:9F:05:A6:F1:40:1D:25:FA:0A:4C:44:26:0A:79 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584B33F19E2BCACC511A7B934A80 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 23465 IP address blocks: 70.96.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:9e:2b:ca:cc:51:1a:7b:93:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=f081dc45-0e68-4158-a686-1755d4efc701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:df:da:23:dc:c5:83:66:9c:c2:c5:ec:4e:86: 69:72:e6:d6:20:64:c0:69:af:56:d8:5f:63:b5:17: 6b:da:d2:6b:83:ef:8a:0a:ec:54:05:94:a0:ea:0e: 4c:d3:3b:f3:a7:16:81:71:80:46:fd:c7:1c:ea:fb: 10:12:bb:a1:77:90:c4:90:e5:90:c7:d6:6f:5a:50: 03:a9:bc:ab:ec:51:2c:24:e0:bc:b7:cb:ca:1b:06: 5c:46:e0:8a:e6:35:39:83:98:f1:7d:c3:23:a5:6f: 8f:50:3e:94:13:18:00:e8:ff:d9:76:d2:ec:02:83: 0d:69:1c:95:a4:85:1c:6b:b6:04:8c:ee:f0:a8:42: 0d:f6:d1:5f:d7:c3:dc:ba:96:64:cd:49:c8:33:dd: 34:b4:92:09:a8:6f:01:91:5b:71:a5:60:39:fb:aa: 80:ee:10:7c:df:98:b9:96:6d:bb:e3:b4:e1:f8:9a: 30:c7:e0:78:30:01:10:ba:de:6a:ca:3e:6e:11:d3: 63:82:64:e6:a9:aa:b8:fb:73:1c:9d:df:e4:1e:ea: b3:bd:d3:c3:b3:b0:60:32:e1:38:f7:1c:66:fd:67: d9:17:86:a1:01:3c:d2:a0:7c:cb:1c:11:f2:79:ae: 20:db:fb:43:75:ab:04:c1:ec:08:18:96:68:da:1b: 34:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FC:46:B6:45:BA:9F:05:A6:F1:40:1D:25:FA:0A:4C:44:26:0A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.96.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:bd:0e:ea:9e:f3:9d:af:5d:f1:a5:19:bc:7a:c9:a8:b7:ca: de:11:b0:19:55:76:3b:fd:c3:d5:00:ac:19:83:3d:90:31:ed: 3c:86:d8:fd:69:d2:db:e2:f4:b6:c3:13:25:2e:10:c7:f2:76: 58:83:ff:d7:c6:61:d3:31:f0:f3:3c:d1:d8:e7:af:28:1d:b9: ad:68:ac:38:c6:49:36:4c:61:2c:0a:b7:84:26:75:34:76:c5: 48:6e:6c:0a:a4:9a:4f:4c:30:d7:c3:9a:00:ba:2a:b0:34:fb: 48:ea:e6:6e:c2:1d:1f:c6:dc:63:93:5d:68:03:c0:32:4f:ab: ee:3b:c1:28:31:cf:68:3e:bc:fb:e4:b4:fc:19:f1:cf:7f:b2: 05:be:c3:e8:05:e5:11:0a:c9:62:86:ae:f0:1b:1d:41:f0:15: b0:9c:20:91:05:f2:c0:ef:b6:f9:c2:8c:8c:1b:fd:24:89:a1: a7:b1:2d:c2:f2:1b:aa:4d:37:32:54:04:ac:37:22:9c:69:3d: 82:ce:13:eb:a5:1b:86:48:b4:eb:bf:f3:cb:d1:cd:52:1d:2f: 14:63:14:02:76:76:99:5e:f5:c5:28:82:17:0c:58:88:ba:8e: 34:85:82:f5:1f:9f:ba:08:6c:ba:28:c0:55:68:6f:be:50:c6: eb:f4:f7:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8Z4rysxRGnuTSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk ZjA4MWRjNDUtMGU2OC00MTU4LWE2ODYtMTc1NWQ0ZWZjNzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7t/aI9zFg2acwsXsToZpcubWIGTAaa9W2F9j tRdr2tJrg++KCuxUBZSg6g5M0zvzpxaBcYBG/ccc6vsQEruhd5DEkOWQx9ZvWlAD qbyr7FEsJOC8t8vKGwZcRuCK5jU5g5jxfcMjpW+PUD6UExgA6P/ZdtLsAoMNaRyV pIUca7YEjO7wqEIN9tFf18PcupZkzUnIM900tJIJqG8BkVtxpWA5+6qA7hB835i5 lm2747Th+Jowx+B4MAEQut5qyj5uEdNjgmTmqaq4+3Mcnd/kHuqzvdPDs7BgMuE4 9xxm/WfZF4ahATzSoHzLHBHyea4g2/tDdasEwewIGJZo2hs06wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEn8RrZFup8FpvFAHSX6CkxEJgp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvYTE0YmVmNmYtM2QwZS0z MTFkLTk5MjAtNGQ1NTg5MDZhYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRmDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi9Duqe852vXfGlGbx6yai3yt4RsBlVdjv9w9UArBmDPZAx7TyG2P1p 0tvi9LbDEyUuEMfydliD/9fGYdMx8PM80djnrygdua1orDjGSTZMYSwKt4QmdTR2 xUhubAqkmk9MMNfDmgC6KrA0+0jq5m7CHR/G3GOTXWgDwDJPq+47wSgxz2g+vPvk tPwZ8c9/sgW+w+gF5REKyWKGrvAbHUHwFbCcIJEF8sDvtvnCjIwb/SSJoaexLcLy G6pNNzJUBKw3IpxpPYLOE+ulG4ZItOu/88vRzVIdLxRjFAJ2dple9cUoghcMWIi6 jjSFgvUfn7oIbLoowFVob75Qxuv096Y= -----END CERTIFICATE-----Generated at Sat Oct 11 10:09:59 2025 by rpki-client