$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa File: b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa (raw, json) Hash identifier: e5Ygz1iSfWUZyck5WS1WCRxXZq2/qj3Hyh+ZGpvKLA0= Subject key identifier: 5F:99:8E:03:2F:0F:27:D3:43:94:D9:54:D8:45:0D:08:B4:F3:1B:77 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584B33F19E3C9F850DA725E37000 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 23465 IP address blocks: 70.96.220.0/22 maxlen: 22 70.97.86.0/23 maxlen: 23 70.97.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:9e:3c:9f:85:0d:a7:25:e3:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=59565df3-c10e-424d-b37c-c31717ab55d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4e:29:9c:c8:80:b5:e0:2d:f6:47:f2:4f:f9: 1c:66:c2:ad:3a:72:10:8a:0d:26:cc:0a:f6:ff:77: 22:43:e2:8c:bd:0b:52:9c:33:bd:2c:28:83:ad:56: fb:4a:71:47:50:01:5f:76:a3:92:f4:f1:b5:b5:95: 65:a2:ee:68:02:9b:38:7a:de:6f:de:6c:99:52:d4: 13:4e:d5:15:cf:04:88:71:92:c9:78:6d:6a:68:2c: 05:c2:84:a1:c2:e4:f0:b3:52:cd:de:42:ca:47:48: 40:be:eb:bd:37:8e:51:55:39:1d:a8:bc:52:17:21: 92:e5:42:cf:94:da:c2:fc:ce:d2:3e:6d:be:e5:7a: 68:73:f8:a1:85:b2:3a:12:28:dd:48:54:62:3a:26: 7f:4c:2c:ac:07:94:13:f5:51:22:88:37:fc:ba:26: f2:c1:2e:92:b5:22:be:2c:e6:f9:e5:68:15:18:3f: 42:c3:84:13:a9:37:fc:30:c2:cd:e5:2d:b0:00:3b: ce:70:36:9a:9b:0c:93:14:95:89:9d:a6:44:a6:1e: c7:36:ba:03:45:39:a4:90:69:61:a7:81:87:64:20: 10:75:9d:80:5d:61:7e:d5:bc:ce:71:20:19:52:fd: 02:40:6b:07:a0:16:40:0f:51:cc:aa:60:ab:a3:6e: 2b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:99:8E:03:2F:0F:27:D3:43:94:D9:54:D8:45:0D:08:B4:F3:1B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.96.220.0/22 70.97.86.0/23 70.97.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:36:41:26:3e:26:0c:4b:b5:83:29:65:7f:03:9b:0c:37:a1: 0d:2e:f8:78:ac:58:07:a1:73:59:a7:1b:80:3d:de:3c:05:6e: 44:de:7f:ce:28:be:a7:6f:f7:8d:50:b5:0a:cc:db:fe:b9:b1: 20:87:0d:f2:05:b4:48:55:5a:cb:50:3d:dc:9b:13:5c:91:03: 1a:8b:d3:a8:68:b1:f5:5a:75:a4:c8:d1:35:5b:e7:9a:e1:30: 3b:08:6d:73:70:40:56:a8:c7:77:52:2e:c8:ab:49:81:be:2f: 4d:b4:bf:2a:0c:86:33:7c:f5:eb:6c:9e:52:cd:36:77:fc:a1: af:c6:8b:1c:4d:c6:f2:02:5d:30:e0:36:d9:65:18:03:1c:02: 17:70:17:f7:77:00:8d:ae:68:71:93:78:80:41:6a:53:9f:6a: 4a:80:40:a6:0d:db:cc:d4:2c:85:f7:3d:ca:08:7e:aa:68:fd: 28:67:45:32:ba:0e:b3:1c:b9:45:43:51:ae:80:19:b7:e8:46: db:fa:df:21:76:c2:54:20:5c:d9:a7:77:bd:d7:64:16:94:07: 69:e8:d2:66:1c:1f:64:5c:04:11:2e:94:4e:ff:bf:ff:f8:9d: 0d:72:fb:1f:4e:49:33:38:b2:ec:99:b1:a9:8a:d7:f2:8e:57: 4b:22:14:ee -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEsz8Z48n4UNpyXjcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk NTk1NjVkZjMtYzEwZS00MjRkLWIzN2MtYzMxNzE3YWI1NWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv04pnMiAteAt9kfyT/kcZsKtOnIQig0mzAr2 /3ciQ+KMvQtSnDO9LCiDrVb7SnFHUAFfdqOS9PG1tZVlou5oAps4et5v3myZUtQT TtUVzwSIcZLJeG1qaCwFwoShwuTws1LN3kLKR0hAvuu9N45RVTkdqLxSFyGS5ULP lNrC/M7SPm2+5Xpoc/ihhbI6EijdSFRiOiZ/TCysB5QT9VEiiDf8uibywS6StSK+ LOb55WgVGD9Cw4QTqTf8MMLN5S2wADvOcDaamwyTFJWJnaZEph7HNroDRTmkkGlh p4GHZCAQdZ2AXWF+1bzOcSAZUv0CQGsHoBZAD1HMqmCro24rOQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFF+ZjgMvDyfTQ5TZVNhFDQi08xt3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvYjI3OTlhZGEtMWVhZC0z YTlhLTljNTAtYjViMWFhNTdhZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCRmDcAwQB RmFWAwQBRmGGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHk2QSY+JgxLtYMpZX8Dmww3oQ0u+HisWAehc1mn G4A93jwFbkTef84ovqdv941QtQrM2/65sSCHDfIFtEhVWstQPdybE1yRAxqL06ho sfVadaTI0TVb55rhMDsIbXNwQFaox3dSLsirSYG+L020vyoMhjN89etsnlLNNnf8 oa/GixxNxvICXTDgNtllGAMcAhdwF/d3AI2uaHGTeIBBalOfakqAQKYN28zULIX3 PcoIfqpo/ShnRTK6DrMcuUVDUa6AGbfoRtv63yF2wlQgXNmnd73XZBaUB2no0mYc H2RcBBEulE7/v//4nQ1y+x9OSTM4suyZsamK1/KOV0siFO4= -----END CERTIFICATE-----Generated at Sat Oct 11 10:14:07 2025 by rpki-client