$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f4a38339-7c23-3cbc-b9f6-9cc6092a1ca0.roa File: f4a38339-7c23-3cbc-b9f6-9cc6092a1ca0.roa (raw, json) Hash identifier: iGeayRvGFo2XOtwugscKnr9XLXrJ/HTWkEvA5Ef63D4= Subject key identifier: 74:F3:4B:AD:75:12:EA:1D:14:B1:1E:EE:04:BD:FB:74:94:38:C4:69 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D1CB9A8FC2A6BCEA18C0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f4a38339-7c23-3cbc-b9f6-9cc6092a1ca0.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 69.42.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d1:cb:9a:8f:c2:a6:bc:ea:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=e94c3b29-23e4-4421-8512-0c05ad2e36a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:89:86:96:1f:d7:34:1c:f4:c6:71:30:23:4a: 76:3e:e5:4b:fb:bb:0e:64:00:82:da:63:e0:ef:b0: 1f:74:36:3c:a8:d7:70:11:c5:08:28:0e:89:85:5c: 79:3a:ea:87:d3:1d:a0:17:6a:94:bf:b0:60:c4:92: 88:c3:8c:75:8a:94:e3:bd:c2:2c:4e:5a:ae:f4:32: ec:73:35:17:fb:40:40:c5:16:33:2b:69:2c:0f:03: bd:ba:ed:9f:7a:81:ec:5d:20:f5:01:a8:d7:7d:1c: 0d:e9:8b:c8:64:2f:9a:60:b4:e7:f0:4e:fa:b7:4f: 5c:98:a8:82:e1:40:2a:dc:39:3f:77:e5:97:c6:aa: 5a:a3:c8:9a:09:5c:30:fb:0c:43:32:de:80:15:10: a7:7f:63:49:1a:76:c4:f7:1e:19:75:18:99:b5:cd: f8:7f:fc:c0:0c:83:19:6e:67:0e:1c:87:83:9c:e3: 4c:9b:ff:0f:7c:fb:a6:1b:11:bb:f6:f8:1c:c8:83: 30:24:34:47:6d:c4:31:2b:c6:92:bf:74:59:96:47: 9a:76:2f:3c:00:78:5e:fd:df:b9:a3:4b:a7:34:82: 05:5a:e8:a0:d8:0b:65:97:2c:c7:f6:c1:0c:60:db: 06:4e:e6:01:62:d3:ae:30:43:e9:bd:af:60:77:9d: 7f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F3:4B:AD:75:12:EA:1D:14:B1:1E:EE:04:BD:FB:74:94:38:C4:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f4a38339-7c23-3cbc-b9f6-9cc6092a1ca0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 69.42.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:fb:48:4f:40:90:c3:50:a0:79:15:30:12:cf:f7:49:69:17: 4d:59:bb:3a:79:59:e9:06:2a:00:98:29:ef:ec:ec:76:67:bd: 60:c2:e7:42:a2:a6:5b:2e:3d:16:67:02:b5:19:e4:d4:30:5e: 35:e4:fd:99:8c:14:b4:95:80:e4:cc:aa:76:be:e2:2d:8a:4c: a7:ef:13:29:aa:e1:63:5a:9e:56:39:6f:ed:6b:78:b6:f8:35: df:54:29:a6:ed:2d:1f:ab:6a:fe:12:f0:ad:4a:a6:6a:c4:ba: db:ef:d6:66:6f:5b:c1:92:99:fa:e4:76:57:d1:aa:dd:d9:fb: 63:e5:67:c6:21:68:db:a7:ce:d3:f3:a3:b7:ce:40:07:1f:bc: 0d:f4:74:71:97:2e:ff:9b:5c:6a:8c:c1:8b:7e:1e:85:1f:49: 79:7d:9f:f3:78:26:6f:3f:c1:e9:77:56:b7:3c:3b:27:4a:38: 7a:a6:53:0e:a6:32:ad:e3:3a:f8:97:75:94:79:95:09:d9:b0: f1:a3:9e:73:98:ae:a3:fe:88:36:21:e3:0b:38:71:42:34:35: ab:00:c5:fc:cf:54:0f:1f:4b:a3:27:c5:be:4d:a1:34:d7:85: e9:56:ed:da:ac:87:98:e8:11:0f:81:f2:05:f2:c5:55:0e:ad: 11:bf:95:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtHLmo/CprzqGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZTk0YzNiMjktMjNlNC00NDIxLTg1MTItMGMwNWFkMmUzNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YmGlh/XNBz0xnEwI0p2PuVL+7sOZACC2mPg 77AfdDY8qNdwEcUIKA6JhVx5OuqH0x2gF2qUv7BgxJKIw4x1ipTjvcIsTlqu9DLs czUX+0BAxRYzK2ksDwO9uu2feoHsXSD1AajXfRwN6YvIZC+aYLTn8E76t09cmKiC 4UAq3Dk/d+WXxqpao8iaCVww+wxDMt6AFRCnf2NJGnbE9x4ZdRiZtc34f/zADIMZ bmcOHIeDnONMm/8PfPumGxG79vgcyIMwJDRHbcQxK8aSv3RZlkeadi88AHhe/d+5 o0unNIIFWuig2AtllyzH9sEMYNsGTuYBYtOuMEPpva9gd51/AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTzS611EuodFLEe7gS9+3SUOMRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjRhMzgzMzktN2MyMy0z Y2JjLWI5ZjYtOWNjNjA5MmExY2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRSoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz7SE9AkMNQoHkVMBLP90lpF01Zuzp5WekGKgCYKe/s7HZnvWDC50Ki plsuPRZnArUZ5NQwXjXk/ZmMFLSVgOTMqna+4i2KTKfvEymq4WNanlY5b+1reLb4 Nd9UKabtLR+rav4S8K1KpmrEutvv1mZvW8GSmfrkdlfRqt3Z+2PlZ8YhaNunztPz o7fOQAcfvA30dHGXLv+bXGqMwYt+HoUfSXl9n/N4Jm8/wel3Vrc8OydKOHqmUw6m Mq3jOviXdZR5lQnZsPGjnnOYrqP+iDYh4ws4cUI0NasAxfzPVA8fS6Mnxb5NoTTX helW7dqsh5joEQ+B8gXyxVUOrRG/lR0= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:55 2025 by rpki-client