$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/aae793b8-1871-365c-b48d-3bc0238d3be0.roa File: aae793b8-1871-365c-b48d-3bc0238d3be0.roa (raw, json) Hash identifier: BVBTFLEbJqf7z5d+VBeFhGVKRnzsJYmtdMvJcuOi4xk= Subject key identifier: 70:F0:75:DF:35:A4:BC:26:2D:55:FB:C4:95:71:AC:C5:FF:E8:82:0D Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584B2A2C2FF18C48123D6F8FCE00 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/aae793b8-1871-365c-b48d-3bc0238d3be0.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 5769 IP address blocks: 70.80.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:2f:f1:8c:48:12:3d:6f:8f:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=3123ee44-b53d-4441-8628-86319b312aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b0:40:ac:25:90:59:99:35:ca:69:ec:ee:8b: 9b:fe:b1:b0:8b:9c:03:e2:d0:ba:36:b0:d1:72:ad: de:35:40:2d:2f:e7:33:c3:db:1a:7a:66:fa:45:72: 38:07:e1:ae:71:58:e0:47:9a:f2:12:9c:fd:3c:d6: 69:d1:de:bb:87:dd:a1:25:2b:e1:65:b3:ca:34:5b: 69:87:2c:59:65:8a:90:52:59:c9:2b:84:c8:44:18: 55:23:50:b4:fd:25:d8:b5:cd:2c:c0:08:ad:40:e8: 12:e6:0f:d3:43:42:a4:6f:13:a0:a0:be:7e:b9:a6: 7d:9d:b7:c8:9f:96:de:6e:1d:70:40:f5:04:2b:9a: a6:83:d1:9f:39:fa:15:cf:40:67:16:5b:7c:df:05: a5:01:aa:9a:26:d3:79:73:3e:f0:5a:65:02:0b:e8: 10:28:d1:7e:69:07:c9:1f:62:d7:aa:76:bc:70:da: 69:ed:4e:3d:44:b3:52:40:96:74:ce:62:59:2f:68: e5:85:69:2d:6d:3a:dc:03:81:68:7d:48:32:6d:64: e0:0a:f8:b1:45:b6:93:69:3b:12:4b:a6:9f:2f:7e: d6:6f:21:34:78:91:ef:16:3e:2b:72:78:73:86:ae: b4:39:db:85:49:dc:1d:5c:45:08:18:40:7e:a7:4c: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F0:75:DF:35:A4:BC:26:2D:55:FB:C4:95:71:AC:C5:FF:E8:82:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/aae793b8-1871-365c-b48d-3bc0238d3be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 70.80.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d0:27:2b:e6:c6:5c:16:73:b3:12:0e:0c:be:e8:18:6e:31: a3:f9:06:bc:7e:96:e4:f4:87:73:09:a7:f6:ca:8f:13:f4:18: 08:35:60:56:3c:71:8a:12:2b:e4:3d:1c:85:9b:5b:b6:23:e3: 6c:68:12:d4:8b:08:02:bb:21:7a:67:45:70:8b:e6:6f:f4:b8: d9:63:d8:56:94:06:a7:e0:b0:94:99:bc:02:b1:72:0f:1e:2e: 32:21:17:76:cc:f9:fd:fb:7f:84:08:2f:92:07:88:d2:f2:f6: f5:b3:e0:64:8f:03:30:46:6d:fd:f1:67:43:20:c4:e6:e9:39: b8:ee:8c:ec:ec:0c:98:a5:6f:0e:3a:88:1a:13:ec:b7:57:4a: ca:7b:68:75:e6:f5:2d:85:55:03:fa:d9:97:23:cd:c8:5c:30: 3e:57:46:f6:d1:73:02:2d:f2:ca:8f:9e:ee:9e:7f:4a:e4:77: 0d:50:6d:5f:5a:22:22:2d:57:65:b8:3a:3a:2f:c9:61:10:1e: 36:75:eb:18:4c:8c:ab:00:f2:11:8f:ac:a8:4d:48:0b:b7:94: 05:e7:6f:a9:09:67:7b:2f:cc:c3:b2:bb:0a:9b:90:84:77:00: 0b:20:e5:b8:e8:d7:fa:1b:b2:f5:a8:08:4e:a0:38:ad:7d:38: d8:67:62:38 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsqLC/xjEgSPW+PzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MzEyM2VlNDQtYjUzZC00NDQxLTg2MjgtODYzMTliMzEyYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLBArCWQWZk1ymns7oub/rGwi5wD4tC6NrDR cq3eNUAtL+czw9saemb6RXI4B+GucVjgR5ryEpz9PNZp0d67h92hJSvhZbPKNFtp hyxZZYqQUlnJK4TIRBhVI1C0/SXYtc0swAitQOgS5g/TQ0KkbxOgoL5+uaZ9nbfI n5bebh1wQPUEK5qmg9GfOfoVz0BnFlt83wWlAaqaJtN5cz7wWmUCC+gQKNF+aQfJ H2LXqna8cNpp7U49RLNSQJZ0zmJZL2jlhWktbTrcA4FofUgybWTgCvixRbaTaTsS S6afL37WbyE0eJHvFj4rcnhzhq60OduFSdwdXEUIGEB+p0x2ywIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHDwdd81pLwmLVX7xJVxrMX/6IINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvYWFlNzkzYjgtMTg3MS0z NjVjLWI0OGQtM2JjMDIzOGQzYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCRlAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAN9AnK+bGXBZzsxIODL7oGG4xo/kGvH6W5PSHcwmn9sqPE/QYCDVgVjxx ihIr5D0chZtbtiPjbGgS1IsIArshemdFcIvmb/S42WPYVpQGp+CwlJm8ArFyDx4u MiEXdsz5/ft/hAgvkgeI0vL29bPgZI8DMEZt/fFnQyDE5uk5uO6M7OwMmKVvDjqI GhPst1dKyntodeb1LYVVA/rZlyPNyFwwPldG9tFzAi3yyo+e7p5/SuR3DVBtX1oi Ii1XZbg6Oi/JYRAeNnXrGEyMqwDyEY+sqE1IC7eUBedvqQlney/Mw7K7CpuQhHcA CyDluOjX+huy9agITqA4rX042GdiOA== -----END CERTIFICATE-----Generated at Thu Sep 18 08:38:52 2025 by rpki-client