$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa File: 5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa (raw, json) Hash identifier: RtqAH+JfNr2Cw+ufXCXugljxvorVt1+4jEApJtX1FB4= Subject key identifier: 71:E8:46:E2:C1:A6:26:D0:EE:EC:02:05:2D:2A:17:A2:26:4F:8F:78 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584B25FC32ADD844B4A588E5C100 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 5769 IP address blocks: 69.70.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:32:ad:d8:44:b4:a5:88:e5:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=ad10fb1e-9b16-4546-acac-a23a87e4a111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:58:3c:40:83:3c:4d:57:60:fb:e8:75:06:eb: e7:24:3b:3b:e3:20:6f:8c:68:94:f7:ab:0f:b3:62: 67:c2:20:c5:ce:8c:fc:11:3b:5f:e6:92:59:75:21: e4:b4:49:13:db:ed:08:31:f5:7c:d5:43:80:e4:48: 3e:fa:f1:8b:9a:a8:b9:e4:d4:14:3c:7f:57:48:63: 06:6a:63:a3:75:0f:84:1f:50:07:bb:1e:6b:52:f1: 2f:08:b6:62:e5:4e:16:de:b7:d3:0d:1e:83:fc:5c: a4:73:6a:67:00:82:33:ed:93:5e:4b:4b:91:fe:88: a5:76:6f:c8:7f:09:8b:36:65:6f:0b:e3:25:28:6f: 61:bc:6a:ee:a3:28:8d:d4:f0:42:c4:02:ef:84:46: 00:33:50:01:7e:6b:9a:9e:ed:1e:ab:a6:97:37:0a: 11:17:b1:80:b6:8d:27:b7:01:fe:12:83:ef:3f:1d: 62:41:d7:85:0c:e8:ab:ed:03:a7:79:94:5f:ad:6d: 51:b8:8c:b7:7b:68:c6:30:9d:32:4e:5c:b9:50:91: ad:2e:31:c2:08:75:ea:56:6b:de:49:3c:45:8d:32: f7:36:af:13:f0:e3:85:8b:7f:cc:09:77:6b:ab:e4: 44:28:98:7f:48:72:36:12:18:d2:eb:b3:c8:02:61: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E8:46:E2:C1:A6:26:D0:EE:EC:02:05:2D:2A:17:A2:26:4F:8F:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 69.70.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:07:c6:c6:69:8a:81:7d:f8:01:dc:5a:24:dc:2b:58:bc:10: 9c:c1:b6:7b:b3:dc:d9:19:fc:91:ec:29:61:d2:d2:b1:18:22: 4b:c0:17:63:d6:49:3a:f4:04:79:b7:26:6b:2a:b1:6e:b9:d3: 54:cf:3f:3e:01:bb:f6:dc:31:6e:23:35:f0:d9:eb:16:2d:53: 83:ef:0a:a7:53:95:99:f2:9b:46:89:b7:43:ee:94:dc:6c:4b: 02:88:7b:1b:7e:5f:ea:b4:ad:fc:1e:e2:a4:25:d1:f1:a1:cd: 83:78:b8:b4:eb:86:2a:ec:fd:5c:9a:0d:17:7b:0e:ae:73:7b: 1e:34:6e:ab:c1:09:a9:91:7a:b8:b1:7a:0d:37:ba:82:94:31: 85:7d:6c:27:a5:65:cc:9a:b1:8f:ab:9d:34:9e:28:73:f5:15: b5:7d:a6:49:b5:e7:9e:61:f7:db:c8:64:f2:1e:ed:5d:9c:c4: c5:81:f0:75:68:75:a1:74:62:02:35:a7:49:26:c0:31:a3:de: 04:11:a0:1b:ad:bc:57:2f:51:ae:83:95:34:03:6c:95:59:0c: 65:73:75:1b:24:c2:1f:71:34:0a:28:de:ad:2f:81:e6:62:fe: 78:b5:2d:ed:99:4f:32:7d:79:cb:74:fd:f6:22:e0:0d:c5:c9: 8f:8d:8b:12 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsl/DKt2ES0pYjlwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk YWQxMGZiMWUtOWIxNi00NTQ2LWFjYWMtYTIzYTg3ZTRhMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1g8QIM8TVdg++h1BuvnJDs74yBvjGiU96sP s2JnwiDFzoz8ETtf5pJZdSHktEkT2+0IMfV81UOA5Eg++vGLmqi55NQUPH9XSGMG amOjdQ+EH1AHux5rUvEvCLZi5U4W3rfTDR6D/Fykc2pnAIIz7ZNeS0uR/oildm/I fwmLNmVvC+MlKG9hvGruoyiN1PBCxALvhEYAM1ABfmuanu0eq6aXNwoRF7GAto0n twH+EoPvPx1iQdeFDOir7QOneZRfrW1RuIy3e2jGMJ0yTly5UJGtLjHCCHXqVmve STxFjTL3Nq8T8OOFi3/MCXdrq+REKJh/SHI2EhjS67PIAmGxxQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHHoRuLBpibQ7uwCBS0qF6ImT494MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvNWRmZDQzMzAtMzNiOC0z ZGM3LTkwOWYtMDNlODE3OWE0MGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARUYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjwfGxmmKgX34AdxaJNwrWLwQnMG2e7Pc2Rn8kewpYdLSsRgiS8AXY9ZJ OvQEebcmayqxbrnTVM8/PgG79twxbiM18NnrFi1Tg+8Kp1OVmfKbRom3Q+6U3GxL Aoh7G35f6rSt/B7ipCXR8aHNg3i4tOuGKuz9XJoNF3sOrnN7HjRuq8EJqZF6uLF6 DTe6gpQxhX1sJ6VlzJqxj6udNJ4oc/UVtX2mSbXnnmH328hk8h7tXZzExYHwdWh1 oXRiAjWnSSbAMaPeBBGgG628Vy9RroOVNANslVkMZXN1GyTCH3E0CijerS+B5mL+ eLUt7ZlPMn15y3T99iLgDcXJj42LEg== -----END CERTIFICATE-----Generated at Thu Sep 18 05:47:37 2025 by rpki-client