$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/56fba18c-c21c-3132-b5f6-e8845f92eb43.roa File: 56fba18c-c21c-3132-b5f6-e8845f92eb43.roa (raw, json) Hash identifier: GhjmSXuxBpt+SfWXB0Q5p5BBZLpEAvLZy4Vqk5T2i4E= Subject key identifier: 47:D4:5B:86:39:F8:A5:6E:79:0D:C9:93:A3:74:4B:E7:5B:1E:E8:FC Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584B44B1C509D0D68A3DE7830840 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/56fba18c-c21c-3132-b5f6-e8845f92eb43.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 2914 IP address blocks: 70.39.128.0/24 maxlen: 24 70.39.130.0/24 maxlen: 24 70.39.131.0/24 maxlen: 24 70.39.133.0/24 maxlen: 24 70.39.134.0/24 maxlen: 24 70.39.135.0/24 maxlen: 24 70.39.140.0/24 maxlen: 24 70.39.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c5:09:d0:d6:8a:3d:e7:83:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=22aa1c67-d0d0-4783-850e-46bb288334b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cf:5b:90:49:da:12:b5:08:3f:54:f6:02:c0: c1:98:4c:32:12:a1:cd:ca:a4:44:58:66:f1:6b:fa: f7:7a:98:e9:00:ee:a1:c8:56:9e:e3:4e:a0:3c:22: 7e:5d:00:49:36:5e:92:7b:40:48:3d:78:f6:ae:e6: 21:ee:cb:5e:da:9c:0e:07:72:7b:da:e1:dc:3a:85: 71:58:13:f8:00:b7:2e:7c:53:93:8d:43:ad:2e:f4: 59:c7:0a:71:88:05:bd:88:7e:64:4a:76:9d:e3:b6: 92:79:3a:90:d9:28:22:5b:23:36:69:72:5b:f3:7d: 20:9b:b5:cb:fe:73:31:9c:06:dc:bc:69:84:b8:2e: 5c:e6:b3:87:89:c8:48:3e:e8:44:49:47:f7:2e:12: 2e:e4:c7:45:13:19:53:eb:7c:2b:08:5f:82:32:56: 34:97:cd:2b:8e:87:2a:b3:1c:9f:4e:ae:c0:2d:8a: 27:4a:61:1f:8a:14:5c:60:c1:71:06:71:00:de:22: c5:e2:0b:a5:8b:eb:eb:59:d3:a0:a2:6e:59:7b:0d: b2:04:26:0a:e6:b3:bd:f2:1d:74:30:16:87:1d:64: 6f:89:62:40:49:9f:59:fd:73:aa:ed:5c:03:2c:f1: 2a:1c:14:d5:7e:c9:78:ce:77:d3:f4:07:bd:62:a3: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D4:5B:86:39:F8:A5:6E:79:0D:C9:93:A3:74:4B:E7:5B:1E:E8:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/56fba18c-c21c-3132-b5f6-e8845f92eb43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 70.39.128.0/24 70.39.130.0/23 70.39.133.0-70.39.135.255 70.39.140.0/24 70.39.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:1d:ca:b1:20:48:9e:f1:a6:ec:8a:83:93:1f:80:1b:b7:7b: d5:93:26:17:64:9d:e7:41:53:75:e8:d9:83:b8:84:0b:90:b2: 33:69:54:93:34:8a:3c:19:f2:63:4a:b1:70:de:b5:4c:8e:ef: 1d:94:96:31:ef:fc:15:6a:eb:1b:cb:43:80:dd:75:76:2f:22: 0b:ef:02:57:01:15:e5:65:73:8b:af:f5:69:b0:3b:c9:e3:1e: a8:99:75:ed:f0:0f:9e:0d:ea:d2:31:46:f7:68:cb:f4:42:98: 6e:d0:44:02:a0:97:0b:94:f8:7e:0b:5d:82:f9:aa:74:4c:43: 6d:89:b0:d1:4f:07:46:5a:22:90:b7:87:63:13:b8:81:27:fc: 67:06:a2:96:dd:8e:9e:c8:f9:02:d9:65:eb:c6:a8:f8:0b:2e: 94:c5:27:bc:38:2b:43:bf:c4:b6:b8:37:13:38:33:d0:76:cc: 22:3a:e4:b6:8b:c3:c7:a0:9c:89:f9:42:0f:dc:8e:ea:31:bf: 9a:20:99:bb:b1:c2:9e:4e:7d:a7:20:e6:89:6a:2a:3e:b5:ab: ea:d6:8f:c7:28:cd:03:ea:73:90:08:a5:eb:d9:69:c8:cc:d7: 60:2b:15:d7:c7:5c:fb:45:8b:2f:18:26:81:59:64:31:03:3e: 51:7a:ab:53 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEtEscUJ0NaKPeeDCEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk MjJhYTFjNjctZDBkMC00NzgzLTg1MGUtNDZiYjI4ODMzNGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM9bkEnaErUIP1T2AsDBmEwyEqHNyqREWGbx a/r3epjpAO6hyFae406gPCJ+XQBJNl6Se0BIPXj2ruYh7ste2pwOB3J72uHcOoVx WBP4ALcufFOTjUOtLvRZxwpxiAW9iH5kSnad47aSeTqQ2SgiWyM2aXJb830gm7XL /nMxnAbcvGmEuC5c5rOHichIPuhESUf3LhIu5MdFExlT63wrCF+CMlY0l80rjocq sxyfTq7ALYonSmEfihRcYMFxBnEA3iLF4guli+vrWdOgom5Zew2yBCYK5rO98h10 MBaHHWRviWJASZ9Z/XOq7VwDLPEqHBTVfsl4znfT9Ae9YqN/+wIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFEfUW4Y5+KVueQ3Jk6N0S+dbHuj8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvNTZmYmExOGMtYzIxYy0z MTMyLWI1ZjYtZTg4NDVmOTJlYjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQARieAAwQB RieCMAwDBABGJ4UDBANGJ4ADBABGJ4wDBABGJ48wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXh3KsSBInvGm 7IqDkx+AG7d71ZMmF2Sd50FTdejZg7iEC5CyM2lUkzSKPBnyY0qxcN61TI7vHZSW Me/8FWrrG8tDgN11di8iC+8CVwEV5WVzi6/1abA7yeMeqJl17fAPng3q0jFG92jL 9EKYbtBEAqCXC5T4fgtdgvmqdExDbYmw0U8HRloikLeHYxO4gSf8Zwailt2Onsj5 Atll68ao+AsulMUnvDgrQ7/Etrg3Ezgz0HbMIjrktovDx6CciflCD9yO6jG/miCZ u7HCnk59pyDmiWoqPrWr6taPxyjNA+pzkAil69lpyMzXYCsV18dc+0WLLxgmgVlk MQM+UXqrUw== -----END CERTIFICATE-----Generated at Wed Oct 8 11:56:33 2025 by rpki-client