$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/973b87f5-9931-320b-9f50-5352dd3a2bb7.roa File: 973b87f5-9931-320b-9f50-5352dd3a2bb7.roa (raw, json) Hash identifier: vIIkYinr4hppLg4KlZV32ft3YcsMCqjyt6g49n+ZJKQ= Subject key identifier: 97:1B:23:66:76:D2:30:C6:5F:88:D6:5C:14:8F:66:E4:F6:10:FD:1D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D3060B9BA51311A58900 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/973b87f5-9931-320b-9f50-5352dd3a2bb7.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 209.34.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d3:06:0b:9b:a5:13:11:a5:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=f3f51835-7ea5-4d0b-a7c2-e30ea632fd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8f:90:c9:cf:90:5e:84:86:a4:c9:18:4c:57: 83:3e:84:cd:0b:cf:1c:ab:12:21:52:e1:18:40:31: ca:7d:49:83:4f:22:2b:22:64:1f:07:15:bf:44:a5: 43:8d:7b:7e:d5:83:90:7e:cc:01:cb:16:f3:cb:90: 82:70:3f:77:76:09:ec:08:a1:83:66:e7:df:ef:ae: 76:d9:c8:59:b2:97:e7:ab:37:6a:ae:c4:7b:de:78: c2:df:ac:3d:5c:78:ec:14:be:cb:c1:21:3e:94:eb: 61:e1:98:50:03:cd:e9:71:68:83:07:4f:37:43:91: 39:45:37:ac:9b:9f:aa:09:69:37:15:93:d7:14:b4: cd:aa:70:64:d2:3e:c1:d4:a6:7f:f2:5b:28:54:c9: 5f:f1:7e:47:40:f1:d9:74:3b:3c:f6:19:ba:ad:3d: d5:f5:40:09:27:db:1a:db:01:7b:01:b0:75:43:70: a0:5c:19:74:24:89:66:0a:80:c1:bb:ff:4e:6c:d4: 16:36:fc:39:60:e6:c5:b9:ee:ec:de:cd:0d:c5:77: f1:af:03:56:4b:91:87:8a:3a:f4:21:51:40:51:a4: 94:29:b2:14:af:65:b3:17:cf:ec:97:70:59:70:bb: 54:e8:de:a4:34:00:97:06:36:40:7f:93:27:bc:43: 42:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1B:23:66:76:D2:30:C6:5F:88:D6:5C:14:8F:66:E4:F6:10:FD:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/973b87f5-9931-320b-9f50-5352dd3a2bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 209.34.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:93:c5:02:47:3e:dc:f8:41:9f:9a:32:61:f0:27:57:d3:b6: 46:50:7d:08:14:6d:c3:37:70:18:a1:e4:87:df:47:32:ef:40: 53:f3:64:77:d3:fe:93:52:2a:b2:30:8a:97:f6:f7:99:4e:b4: c3:b8:9f:58:6c:11:dc:a9:d9:26:25:e6:c6:60:cf:23:24:c1: 0d:aa:bc:8d:14:91:dd:1b:60:96:ed:59:d9:85:a0:25:38:8d: f7:49:41:6d:45:e3:63:7d:d2:6b:12:37:f6:e3:b1:63:2f:04: fd:1e:82:21:83:9e:33:8a:48:65:c2:67:4c:f5:58:8d:8b:f8: be:fd:fa:ff:ed:9a:d7:ef:4f:3d:6e:c5:f9:c2:b7:7c:09:d8: 01:07:27:ec:f1:d1:7a:9d:03:8d:d2:df:47:39:e5:d4:7f:86: 52:af:25:7c:f7:9f:52:e7:7b:6f:dd:d6:12:b0:bf:0e:77:4b: ab:33:34:aa:5e:a9:23:86:ad:3f:44:ec:de:82:71:ff:21:89: d7:43:f3:2b:5c:c9:ff:45:59:85:23:59:d0:88:92:f9:07:1c: 4a:ee:80:fc:42:76:67:de:45:dc:4e:f1:37:0c:54:ca:7d:ee: 32:a5:a7:bc:c4:1b:a1:f1:d7:c4:2c:a3:16:cc:12:ed:92:65: 04:c9:b9:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtMGC5ulExGliQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZjNmNTE4MzUtN2VhNS00ZDBiLWE3YzItZTMwZWE2MzJmZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI+Qyc+QXoSGpMkYTFeDPoTNC88cqxIhUuEY QDHKfUmDTyIrImQfBxW/RKVDjXt+1YOQfswByxbzy5CCcD93dgnsCKGDZuff7652 2chZspfnqzdqrsR73njC36w9XHjsFL7LwSE+lOth4ZhQA83pcWiDB083Q5E5RTes m5+qCWk3FZPXFLTNqnBk0j7B1KZ/8lsoVMlf8X5HQPHZdDs89hm6rT3V9UAJJ9sa 2wF7AbB1Q3CgXBl0JIlmCoDBu/9ObNQWNvw5YObFue7s3s0NxXfxrwNWS5GHijr0 IVFAUaSUKbIUr2WzF8/sl3BZcLtU6N6kNACXBjZAf5MnvENCQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcbI2Z20jDGX4jWXBSPZuT2EP0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTczYjg3ZjUtOTkzMS0z MjBiLTlmNTAtNTM1MmRkM2EyYmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0SKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByTxQJHPtz4QZ+aMmHwJ1fTtkZQfQgUbcM3cBih5IffRzLvQFPzZHfT /pNSKrIwipf295lOtMO4n1hsEdyp2SYl5sZgzyMkwQ2qvI0Ukd0bYJbtWdmFoCU4 jfdJQW1F42N90msSN/bjsWMvBP0egiGDnjOKSGXCZ0z1WI2L+L79+v/tmtfvTz1u xfnCt3wJ2AEHJ+zx0XqdA43S30c55dR/hlKvJXz3n1Lne2/d1hKwvw53S6szNKpe qSOGrT9E7N6Ccf8hiddD8ytcyf9FWYUjWdCIkvkHHErugPxCdmfeRdxO8TcMVMp9 7jKlp7zEG6Hx18QsoxbMEu2SZQTJuVo= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:07 2025 by rpki-client