$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa File: 5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa (raw, json) Hash identifier: kB83Fvh3NQKcnM52LTTLRJ36WLbSfpHETHafM1I7Rko= Subject key identifier: 88:64:B9:34:A2:23:80:3E:24:43:1C:16:40:44:D1:07:0B:38:9D:DB Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584F4973DADD7EE0B73EC49F0680 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5769 IP address blocks: 69.70.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:da:dd:7e:e0:b7:3e:c4:9f:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c3b52cc9-2336-4817-a4c2-53ddb73ea803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c1:af:c6:e5:b0:64:79:6a:74:d5:46:a9:88: 20:6e:71:61:85:e9:21:84:60:e0:a3:73:f8:91:e7: 49:70:ca:ab:77:61:c0:f2:fe:5f:1d:cd:3c:24:1d: 61:45:e0:85:99:ca:66:b2:8b:65:83:f1:96:71:61: 0e:06:8d:b6:05:94:ac:53:ee:c4:60:62:40:4b:76: 67:5e:8d:e6:40:12:6a:4c:a8:db:d2:26:96:4c:f3: fa:ee:7d:8b:d7:d7:c4:c7:ec:17:f4:32:e6:05:64: 9e:b2:12:e3:c7:1c:dd:87:69:b1:8c:95:22:01:ae: 36:b6:2b:54:84:60:45:0a:1c:79:e4:27:3e:62:e4: eb:7f:59:42:a5:70:55:40:a3:f6:bf:2c:48:46:b6: 9f:01:58:ba:3c:57:67:a9:fd:ba:99:02:91:0f:d3: 41:ab:84:8f:9b:19:b1:54:0a:cc:13:74:e1:03:fc: 32:c8:b7:df:cb:c7:94:1d:f6:64:3a:1e:2f:06:95: 5f:0b:4a:44:58:42:57:16:51:d6:87:87:86:34:d5: c3:23:cd:a6:6a:80:c4:62:d7:bd:2e:80:50:b1:ef: 17:26:b6:76:bc:a9:3e:dc:e9:2e:de:bb:20:2c:a9: 90:f6:72:1c:ea:61:4d:c0:9b:46:72:01:fb:52:41: cb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:64:B9:34:A2:23:80:3E:24:43:1C:16:40:44:D1:07:0B:38:9D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 69.70.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ad:ea:c0:7e:89:5b:c2:01:a5:2c:99:b6:2e:82:8a:62:ca: c6:6f:f2:92:23:62:44:65:fa:5e:0d:15:40:d2:dd:bc:ff:3f: 75:cf:7c:c8:34:d4:2d:3c:8a:66:26:0a:74:d5:76:83:a2:e6: 66:37:aa:14:e7:15:d6:36:af:7d:3a:87:d4:31:b2:a8:86:4b: 3f:00:f7:ee:b9:7c:c4:93:71:8e:a5:75:83:e0:83:6a:de:ac: 8a:24:a0:c8:90:5c:4a:df:4f:c1:4f:f4:fc:ed:99:fa:cf:4b: 98:30:7d:38:63:41:41:4f:4b:44:81:33:10:a1:de:bb:de:19: 31:4a:3e:a1:59:b2:0d:11:a6:a5:51:87:95:1f:2e:54:3e:b4: 4e:12:6c:1b:ea:5d:f9:8d:15:89:73:52:bc:9a:bf:cd:12:10: 66:3c:fe:f3:95:2e:63:10:bb:d4:b8:2a:08:6b:dd:68:2a:64: 7a:94:e4:54:2f:a7:eb:e4:e6:8e:8d:7b:78:cc:49:3b:72:76: ac:b6:8e:ae:71:8d:9d:2f:af:03:96:96:2c:74:62:cd:a2:56: bc:5e:94:0e:de:89:6c:67:b0:8f:0f:12:a4:a4:b4:cb:06:02: e9:b1:0b:02:ab:5e:86:c0:20:63:33:cb:67:43:5e:36:e6:28: f0:3c:90:c1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9Jc9rdfuC3PsSfBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzNiNTJjYzktMjMzNi00ODE3LWE0YzItNTNkZGI3M2VhODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcGvxuWwZHlqdNVGqYggbnFhhekhhGDgo3P4 kedJcMqrd2HA8v5fHc08JB1hReCFmcpmsotlg/GWcWEOBo22BZSsU+7EYGJAS3Zn Xo3mQBJqTKjb0iaWTPP67n2L19fEx+wX9DLmBWSeshLjxxzdh2mxjJUiAa42titU hGBFChx55Cc+YuTrf1lCpXBVQKP2vyxIRrafAVi6PFdnqf26mQKRD9NBq4SPmxmx VArME3ThA/wyyLffy8eUHfZkOh4vBpVfC0pEWEJXFlHWh4eGNNXDI82maoDEYte9 LoBQse8XJrZ2vKk+3Oku3rsgLKmQ9nIc6mFNwJtGcgH7UkHL+wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIhkuTSiI4A+JEMcFkBE0QcLOJ3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvNWRmZDQzMzAtMzNiOC0z ZGM3LTkwOWYtMDNlODE3OWE0MGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARUYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAia3qwH6JW8IBpSyZti6CimLKxm/ykiNiRGX6Xg0VQNLdvP8/dc98yDTU LTyKZiYKdNV2g6LmZjeqFOcV1javfTqH1DGyqIZLPwD37rl8xJNxjqV1g+CDat6s iiSgyJBcSt9PwU/0/O2Z+s9LmDB9OGNBQU9LRIEzEKHeu94ZMUo+oVmyDRGmpVGH lR8uVD60ThJsG+pd+Y0ViXNSvJq/zRIQZjz+85UuYxC71LgqCGvdaCpkepTkVC+n 6+Tmjo17eMxJO3J2rLaOrnGNnS+vA5aWLHRizaJWvF6UDt6JbGewjw8SpKS0ywYC 6bELAqtehsAgYzPLZ0NeNuYo8DyQwQ== -----END CERTIFICATE-----Generated at Fri Sep 25 06:09:53 2026 by rpki-client