$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/de7f958e-9b5b-3cec-a597-047e298cf30f.roa File: de7f958e-9b5b-3cec-a597-047e298cf30f.roa (raw, json) Hash identifier: KV1CxmKQ16Ziz01qBkLCGN/yD71HhqgPyiAWT3h9c3I= Subject key identifier: 8A:71:0C:6D:DA:A0:98:DE:92:D7:60:1F:7B:C1:1A:14:DB:89:97:E9 Certificate issuer: /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13 Certificate serial: 010D0C9F4328584B13D6BB8F2A492E313DB78E80 Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/de7f958e-9b5b-3cec-a597-047e298cf30f.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 208.70.136.0/23 maxlen: 23 208.70.138.0/24 maxlen: 24 208.70.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:bb:8f:2a:49:2e:31:3d:b7:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=96f20d6f-8da4-4023-959a-89e5c2acf453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e8:b4:38:6a:43:91:ca:ef:79:cd:1d:8d:d2: 03:b4:1b:68:a4:65:b5:31:1b:5e:6a:8c:09:d7:8a: 63:a6:ca:c1:99:7d:21:71:e5:69:bb:bd:01:3d:20: 3c:b0:87:1e:5d:a7:ff:a1:c8:48:80:6f:ae:89:bf: 06:99:74:07:87:45:fe:3e:b3:89:f4:34:e4:e7:e9: d6:20:72:38:67:56:29:ae:04:8e:0b:d5:88:a1:f4: f7:ca:87:6a:03:3a:90:0f:73:67:40:8f:e0:e5:63: d2:e0:69:73:40:92:ce:ab:40:fa:f3:93:2d:e9:96: 6a:ed:63:73:14:83:fa:15:c4:78:d4:42:64:63:4d: 5d:30:2a:27:b2:79:3f:ab:d3:f7:f1:35:b4:51:96: f0:04:1f:40:a6:0a:35:62:cd:0d:81:ff:f2:f6:dd: e6:f3:d9:d7:08:4a:31:81:a3:f6:26:a4:94:5c:6e: 8e:b6:c1:7a:0d:c3:eb:7d:e0:f4:e0:68:c1:df:39: 21:f8:29:24:b2:0b:f7:12:38:bd:85:c2:e2:6a:11: b3:49:2b:5c:fb:2f:1e:b2:4c:cc:c3:ec:0d:81:08: 37:d3:ea:e7:c1:e1:8b:f2:83:af:ca:bf:60:56:96: dd:73:20:ee:79:df:08:56:20:8a:59:ac:46:22:9b: 07:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:71:0C:6D:DA:A0:98:DE:92:D7:60:1F:7B:C1:1A:14:DB:89:97:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/de7f958e-9b5b-3cec-a597-047e298cf30f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl X509v3 Authority Key Identifier: keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer sbgp-ipAddrBlock: critical IPv4: 208.70.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ed:7f:d7:f2:6f:7b:67:e5:e9:28:5c:fd:0e:fd:07:ed:43: e0:72:d6:af:39:3f:8f:eb:2b:69:f0:87:28:4e:8b:9f:46:3e: c0:cc:bc:34:cd:76:04:d5:9b:ea:35:cb:07:20:c2:27:d9:44: b8:e7:21:4c:99:4b:6c:e5:1b:80:f5:6d:31:4b:1d:da:b0:93: 0d:f2:9a:75:3d:a2:48:99:a4:e1:f5:73:35:49:61:d4:2a:b7: 8a:ed:03:30:5c:3a:62:51:4d:9c:9a:88:cc:be:aa:e0:df:5b: 35:d1:93:51:e0:98:a0:46:a4:b7:cf:78:f3:a6:09:03:87:b6: 93:fe:83:35:cf:fd:ee:88:cd:3f:85:41:70:1d:58:19:9f:b9: ae:b9:e0:3d:ef:f9:e5:b8:20:fd:b0:6c:f0:97:55:aa:f1:1c: af:27:1f:5c:31:c5:82:ad:97:64:e7:bc:1b:35:88:20:18:9b: bf:e6:1a:0a:cd:44:4e:5c:34:02:23:94:49:ef:fb:46:e2:c1: 67:31:84:b8:30:d4:e0:ab:18:0e:d4:70:2f:6b:a1:7f:6f:61: f1:6a:01:31:cb:6b:e2:0c:3d:c2:e4:07:63:a6:da:3d:b4:13: d9:a1:47:2a:90:0b:9e:ab:c0:e0:c1:69:80:05:07:7e:39:42: 2b:98:67:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1ruPKkkuMT23joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzZTUzNjUtNWJlMy00MmY0LWEzZDEtN2Y3NGJiNDRk ZjEzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk OTZmMjBkNmYtOGRhNC00MDIzLTk1OWEtODllNWMyYWNmNDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnei0OGpDkcrvec0djdIDtBtopGW1MRteaowJ 14pjpsrBmX0hceVpu70BPSA8sIceXaf/ochIgG+uib8GmXQHh0X+PrOJ9DTk5+nW IHI4Z1YprgSOC9WIofT3yodqAzqQD3NnQI/g5WPS4GlzQJLOq0D685Mt6ZZq7WNz FIP6FcR41EJkY01dMConsnk/q9P38TW0UZbwBB9Apgo1Ys0Ngf/y9t3m89nXCEox gaP2JqSUXG6OtsF6DcPrfeD04GjB3zkh+Ckksgv3Eji9hcLiahGzSStc+y8eskzM w+wNgQg30+rnweGL8oOvyr9gVpbdcyDued8IViCKWaxGIpsHiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpxDG3aoJjektdgH3vBGhTbiZfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yMTNl NTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0YmI0NGRmMTMvZGU3Zjk1OGUtOWI1Yi0z Y2VjLWE1OTctMDQ3ZTI5OGNmMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjEzZTUzNjUtNWJlMy00MmY0LWEz ZDEtN2Y3NGJiNDRkZjEzLzIxM2U1MzY1LTViZTMtNDJmNC1hM2QxLTdmNzRiYjQ0 ZGYxMy5jcmwwHwYDVR0jBBgwFoAUesHGDQ+FIB+5tE9s1pRMS9GI/PwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yMTNlNTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0 YmI0NGRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3tf9fyb3tn5ekoXP0O/QftQ+By1q85P4/rK2nwhyhOi59GPsDMvDTN dgTVm+o1ywcgwifZRLjnIUyZS2zlG4D1bTFLHdqwkw3ymnU9okiZpOH1czVJYdQq t4rtAzBcOmJRTZyaiMy+quDfWzXRk1HgmKBGpLfPePOmCQOHtpP+gzXP/e6IzT+F QXAdWBmfua654D3v+eW4IP2wbPCXVarxHK8nH1wxxYKtl2TnvBs1iCAYm7/mGgrN RE5cNAIjlEnv+0biwWcxhLgw1OCrGA7UcC9roX9vYfFqATHLa+IMPcLkB2Om2j20 E9mhRyqQC56rwODBaYAFB345QiuYZ5U= -----END CERTIFICATE-----Generated at Fri Oct 10 22:24:14 2025 by rpki-client