$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/70ae0c2d-c8f0-3600-abbd-d9559675009a.roa File: 70ae0c2d-c8f0-3600-abbd-d9559675009a.roa (raw, json) Hash identifier: 5ZoXtVjUrjIHlDOkw/VV5t0o2tRVVjYCXq+FOXxwJs8= Subject key identifier: 06:8D:45:3D:6A:AB:05:78:5D:57:02:73:4F:CC:24:7B:87:0C:C9:86 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D08C54934EACEA69D880 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/70ae0c2d-c8f0-3600-abbd-d9559675009a.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 21817 IP address blocks: 198.161.144.0/22 maxlen: 24 198.180.225.0/24 maxlen: 24 199.7.192.0/21 maxlen: 24 199.48.56.0/22 maxlen: 24 199.200.112.0/22 maxlen: 24 2606:8100::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d0:8c:54:93:4e:ac:ea:69:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=1fb83897-d725-400d-8bad-ab6a06b5070b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:ef:4a:6c:72:e0:55:be:bc:5b:1c:3b:05: 2a:44:d6:d2:c4:81:f2:51:3d:08:c4:2e:62:48:43: 87:ab:2e:a2:cd:69:57:49:53:6f:5f:99:0d:2b:96: b4:95:87:5a:be:2b:da:0c:3d:45:4a:be:d4:71:ed: b3:a3:20:47:94:12:24:73:8d:7e:3f:16:88:9c:af: 9f:51:a9:99:ac:b1:4b:be:10:cb:84:8b:79:b2:50: 3a:af:f0:41:9f:c4:f6:e4:3b:0a:6d:2a:59:4f:52: a5:aa:c1:7a:f3:bc:ca:14:0f:43:0a:86:62:20:ff: 78:8c:8a:d6:bf:c0:8d:06:f5:e9:c0:6b:db:9b:d1: 6b:a0:21:17:26:3b:e8:d7:07:b2:0f:45:8c:8b:46: 1c:b3:5d:14:8c:32:90:41:11:1e:c1:33:ca:21:cb: 66:8a:3c:a0:17:2c:4d:dd:00:62:f6:57:17:54:5e: 01:99:1a:b2:f1:7a:65:2e:5b:4c:66:51:c7:22:0c: 1f:c3:43:a0:d6:91:54:ab:51:43:ad:5d:11:8f:33: c7:6c:0d:0f:d4:f9:e4:4e:ff:93:16:ab:31:7b:1e: fb:b0:cb:3c:ba:1a:5f:8b:3b:8e:1c:61:04:0a:cf: 69:db:db:80:7a:4e:e7:68:29:4b:17:5b:27:d5:7f: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8D:45:3D:6A:AB:05:78:5D:57:02:73:4F:CC:24:7B:87:0C:C9:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/70ae0c2d-c8f0-3600-abbd-d9559675009a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 198.161.144.0/22 198.180.225.0/24 199.7.192.0/21 199.48.56.0/22 199.200.112.0/22 IPv6: 2606:8100::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e6:90:86:2b:55:bf:fd:9a:70:3d:64:02:6b:6a:3b:c1:b5: b1:63:3d:9d:4d:99:9f:99:cd:04:df:3c:0d:27:44:94:bb:8c: 21:dd:b5:b2:a0:ec:a9:43:80:a4:b5:09:fc:f1:76:60:4f:b2: c4:36:83:92:60:2d:a3:64:18:9b:17:ff:67:f9:56:70:bc:aa: 2f:17:45:ad:aa:b9:86:32:21:4a:20:49:56:cd:c3:51:b4:b7: 8c:2a:fb:3a:20:78:a4:33:53:22:72:2f:24:f4:99:2f:9f:bc: 4a:2d:08:e6:c1:cb:8f:c3:9b:4b:e0:49:20:ce:50:6a:98:60: 57:8c:10:57:5d:a9:a3:a1:0a:fb:4e:a4:eb:a6:68:d0:55:d2: 5a:db:d0:5d:a1:dc:e2:25:53:91:89:d7:a4:70:83:54:ca:86: ee:22:14:cb:0a:79:59:b0:5e:0f:7d:14:91:62:b2:d6:17:8b: 90:6f:00:d0:1b:a2:4e:c9:cf:f2:90:85:63:fb:cc:30:16:7a: 27:f7:c9:7b:a9:e4:60:87:bc:7f:aa:20:12:dc:02:54:86:94: 63:ba:4e:d4:b6:1e:45:df:72:4e:cd:06:bb:b2:bf:49:aa:de: cb:71:8f:78:32:b6:6a:55:85:01:4f:25:aa:2c:ca:46:98:70: 05:e6:d1:4b -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEsLdtCMVJNOrOpp2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MWZiODM4OTctZDcyNS00MDBkLThiYWQtYWI2YTA2YjUwNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9zvSmxy4FW+vFscOwUqRNbSxIHyUT0IxC5i SEOHqy6izWlXSVNvX5kNK5a0lYdavivaDD1FSr7Uce2zoyBHlBIkc41+PxaInK+f UamZrLFLvhDLhIt5slA6r/BBn8T25DsKbSpZT1KlqsF687zKFA9DCoZiIP94jIrW v8CNBvXpwGvbm9FroCEXJjvo1weyD0WMi0Ycs10UjDKQQREewTPKIctmijygFyxN 3QBi9lcXVF4BmRqy8XplLltMZlHHIgwfw0Og1pFUq1FDrV0RjzPHbA0P1PnkTv+T Fqsxex77sMs8uhpfizuOHGEECs9p29uAek7naClLF1sn1X+H4wIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFAaNRT1qqwV4XVcCc0/MJHuHDMmGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNzBhZTBjMmQtYzhmMC0z NjAwLWFiYmQtZDk1NTk2NzUwMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCxqGQAwQA xrThAwQDxwfAAwQCxzA4AwQCx8hwMA0EAgACMAcDBQAmBoEAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAXm kIYrVb/9mnA9ZAJrajvBtbFjPZ1NmZ+ZzQTfPA0nRJS7jCHdtbKg7KlDgKS1Cfzx dmBPssQ2g5JgLaNkGJsX/2f5VnC8qi8XRa2quYYyIUogSVbNw1G0t4wq+zogeKQz UyJyLyT0mS+fvEotCObBy4/Dm0vgSSDOUGqYYFeMEFddqaOhCvtOpOumaNBV0lrb 0F2h3OIlU5GJ16Rwg1TKhu4iFMsKeVmwXg99FJFistYXi5BvANAbok7Jz/KQhWP7 zDAWeif3yXup5GCHvH+qIBLcAlSGlGO6TtS2HkXfck7NBruyv0mq3stxj3gytmpV hQFPJaosykaYcAXm0Us= -----END CERTIFICATE-----Generated at Fri Oct 10 23:49:26 2025 by rpki-client