$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b70c664a-f6eb-314e-8740-66a7dabcbed3.roa File: b70c664a-f6eb-314e-8740-66a7dabcbed3.roa (raw, json) Hash identifier: YB6HAFDj3tOER0KZiMmVGYdu0d3IfIIleVs/XIM9SkE= Subject key identifier: DC:B3:3E:68:B1:46:46:77:9E:7B:3E:A4:88:C9:F9:CC:F6:D7:37:EA Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584B33F19B1FB5B36508D904B700 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b70c664a-f6eb-314e-8740-66a7dabcbed3.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 23465 IP address blocks: 70.97.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:9b:1f:b5:b3:65:08:d9:04:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=42a2bcb8-d3df-4597-9c1d-2a645b993ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8f:bf:3e:28:ed:da:cd:9d:a1:78:da:08:91: 7f:c3:4c:a0:b3:3f:4a:60:4b:ec:f7:b9:8c:40:f3: 9b:4c:87:c4:4f:cf:33:b0:15:5f:14:c5:d8:db:27: be:bc:b0:86:4a:71:fa:77:77:20:40:25:84:fa:fb: 57:46:1d:73:9c:3b:a7:d3:78:24:17:54:92:42:54: 4f:88:80:e0:3d:69:05:d2:59:d4:dc:5a:9d:5d:98: 39:fb:d4:9e:9b:5a:ad:4c:bf:61:97:74:75:76:aa: 26:22:43:8a:74:7a:7a:67:43:1d:7b:91:82:b8:61: 58:47:20:22:60:92:3a:05:01:90:e4:db:3f:81:4d: f5:1e:f3:33:be:a2:a2:f7:c3:c3:c5:ea:a0:5a:30: 36:48:2a:bc:de:92:3a:09:3f:79:55:59:74:11:83: a7:49:8c:6e:6b:1a:82:00:90:53:ce:19:25:4c:f4: 2f:d3:55:e5:73:87:d1:5e:2f:8e:e0:93:6c:97:3c: 91:9a:fd:27:4d:aa:32:ca:24:58:a6:4d:76:49:d7: 60:67:ae:cf:7e:bf:21:66:a3:1c:63:6a:cb:fa:47: c4:45:bf:da:80:9d:f7:95:d6:58:0d:91:41:f3:a5: 08:c2:5a:29:3a:b6:d5:4b:40:79:8e:60:dc:c9:e0: c6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B3:3E:68:B1:46:46:77:9E:7B:3E:A4:88:C9:F9:CC:F6:D7:37:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b70c664a-f6eb-314e-8740-66a7dabcbed3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.97.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:7d:9f:8c:27:2f:38:a3:03:23:8f:8c:0f:91:0f:de:a7:39: 88:ca:03:fb:a4:df:36:08:26:1e:fa:66:d0:0e:02:0c:ad:9b: 33:97:15:2b:8a:b2:66:a2:b8:a1:ec:c5:8e:c3:c2:38:d6:41: 50:52:f7:d3:aa:a1:3b:25:fe:a4:65:bb:42:e3:63:b4:37:af: 2f:64:c4:3b:16:8c:a0:06:e2:e6:3a:b1:46:18:74:c8:87:32: af:e6:22:f2:d3:e3:c1:37:02:36:31:75:39:fa:4a:a0:a4:3e: 47:53:51:46:d0:1b:c5:06:08:fe:60:5b:f4:49:dc:02:3b:cf: 9d:8d:94:e6:5d:16:aa:6d:89:f4:25:46:7c:32:dd:a8:5e:ab: 26:99:b9:ab:fd:a1:77:01:25:7b:f3:e6:fd:db:a9:a8:94:6a: a0:7a:a1:0b:ab:85:1c:06:8a:be:0f:c1:25:c8:a9:58:ff:31: 29:db:2b:f3:08:13:ac:ca:36:54:13:37:31:aa:04:77:a8:f9: 19:75:f7:93:67:e5:c1:aa:fa:f1:73:21:6e:75:0d:ec:6d:c4: a3:26:c5:11:6d:ba:a4:73:d5:0d:01:8b:d4:64:a6:c2:99:c4: cb:1f:6d:1a:6f:4e:82:48:26:b1:d8:b1:0b:f4:c3:6a:58:17: 4e:5c:f5:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8ZsftbNlCNkEtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk NDJhMmJjYjgtZDNkZi00NTk3LTljMWQtMmE2NDViOTkzZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI+/Pijt2s2doXjaCJF/w0ygsz9KYEvs97mM QPObTIfET88zsBVfFMXY2ye+vLCGSnH6d3cgQCWE+vtXRh1znDun03gkF1SSQlRP iIDgPWkF0lnU3FqdXZg5+9Sem1qtTL9hl3R1dqomIkOKdHp6Z0Mde5GCuGFYRyAi YJI6BQGQ5Ns/gU31HvMzvqKi98PDxeqgWjA2SCq83pI6CT95VVl0EYOnSYxuaxqC AJBTzhklTPQv01Xlc4fRXi+O4JNslzyRmv0nTaoyyiRYpk12SddgZ67Pfr8hZqMc Y2rL+kfERb/agJ33ldZYDZFB86UIwlopOrbVS0B5jmDcyeDG7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyzPmixRkZ3nns+pIjJ+cz21zfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvYjcwYzY2NGEtZjZlYi0z MTRlLTg3NDAtNjZhN2RhYmNiZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRmHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANx9n4wnLzijAyOPjA+RD96nOYjKA/uk3zYIJh76ZtAOAgytmzOXFSuK smaiuKHsxY7DwjjWQVBS99OqoTsl/qRlu0LjY7Q3ry9kxDsWjKAG4uY6sUYYdMiH Mq/mIvLT48E3AjYxdTn6SqCkPkdTUUbQG8UGCP5gW/RJ3AI7z52NlOZdFqptifQl Rnwy3aheqyaZuav9oXcBJXvz5v3bqaiUaqB6oQurhRwGir4PwSXIqVj/MSnbK/MI E6zKNlQTNzGqBHeo+Rl195Nn5cGq+vFzIW51DextxKMmxRFtuqRz1Q0Bi9RkpsKZ xMsfbRpvToJIJrHYsQv0w2pYF05c9Xo= -----END CERTIFICATE-----Generated at Sat Oct 11 10:11:39 2025 by rpki-client