$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa File: 79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa (raw, json) Hash identifier: Bqn5bRThD+H0nSoJSIyiQOPWm9mGYrh+BZG80TICGfM= Subject key identifier: FB:A6:20:F5:4F:C6:9D:CA:69:9B:A6:C2:B6:EA:48:90:BE:F9:A1:93 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584B1D9C26095F154478E81ED400 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22652 IP address blocks: 70.35.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:26:09:5f:15:44:78:e8:1e:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=495c8c83-dd39-497f-9d4a-24a8e2faea40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:87:7e:a6:e5:77:74:72:c5:8f:30:20:f2:c2: 6a:63:83:77:94:fb:0a:06:9e:c5:eb:75:a0:53:ce: ce:8d:d6:4b:88:87:03:97:de:b5:36:24:5f:a4:a6: 42:6d:13:c6:79:1a:3b:51:46:e7:04:d4:a5:76:ee: 8b:77:2a:1a:3f:84:9f:c4:c3:37:75:3a:6a:66:d6: 87:58:aa:d1:a2:aa:7b:87:d0:7a:99:ad:21:a6:20: 48:c5:93:0b:1e:8d:2d:27:90:24:23:d0:df:9d:cf: 2f:7c:a1:c6:1a:4c:cd:f3:41:b6:eb:80:e3:b8:3c: 30:f2:12:e8:46:48:b8:32:42:b7:84:62:37:90:20: c4:6f:6b:65:a2:7a:87:78:7c:94:c7:fe:e8:cf:51: e3:68:81:40:3b:30:89:7d:42:eb:24:64:d1:d8:cb: ba:55:75:b8:48:fc:32:67:da:12:3a:ef:43:9c:c8: 14:59:5e:0c:1a:a2:33:df:a4:2e:fa:a6:c9:62:db: 1f:2e:e8:0b:25:30:17:6c:90:18:e7:54:17:2a:17: d8:88:f6:fc:0d:1e:14:64:07:ca:63:45:f6:88:b3: dd:c8:79:35:53:76:6e:cd:f0:e9:db:05:15:41:33: d1:1e:47:f5:64:b0:4a:39:f2:f2:d9:26:6d:f2:86: 17:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A6:20:F5:4F:C6:9D:CA:69:9B:A6:C2:B6:EA:48:90:BE:F9:A1:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 70.35.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ac:73:75:43:b7:62:97:f1:a2:29:33:38:f7:f8:a4:b2:d1: de:bd:1f:81:c2:ee:14:24:9c:08:83:a8:f1:49:32:72:1b:50: 5e:b5:a1:26:df:c3:fc:4b:2c:23:93:1c:ec:c7:df:8a:0a:b1: 7a:73:a1:1f:8d:55:b4:11:64:5c:53:cc:36:75:94:d5:cb:61: 0b:84:05:3c:d1:ca:c7:98:da:4c:bb:5e:30:0e:6f:9f:5f:0e: 50:d8:26:90:e3:b3:ee:3b:d3:94:af:f2:24:b2:92:70:c3:d6: 1e:0a:19:2a:18:52:59:1a:e5:9a:f8:1e:fa:e0:13:a4:c3:c0: 87:3e:f5:be:ef:87:e7:e3:7f:d6:dd:a0:c6:ae:91:3e:49:f3: 62:ed:47:78:15:cd:b6:95:7b:50:59:ea:f8:8e:ba:f5:59:4f: 0c:03:64:a1:86:4e:0c:3d:5b:35:87:c2:24:4f:ea:f9:32:34: c6:ce:a0:94:0d:ef:62:3a:71:73:27:71:ca:40:84:2e:14:cd: c2:5d:f0:03:00:12:32:73:36:64:2c:ba:91:b4:c0:0e:ec:df: ea:8e:ff:5c:37:26:c8:7d:4a:25:53:8a:51:57:88:2d:80:8b: 62:47:bd:9e:85:c7:29:0e:38:aa:d2:0d:7f:fb:c0:ad:b3:cc: ac:83:26:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCYJXxVEeOge1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NDk1YzhjODMtZGQzOS00OTdmLTlkNGEtMjRhOGUyZmFlYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4d+puV3dHLFjzAg8sJqY4N3lPsKBp7F63Wg U87OjdZLiIcDl961NiRfpKZCbRPGeRo7UUbnBNSldu6LdyoaP4SfxMM3dTpqZtaH WKrRoqp7h9B6ma0hpiBIxZMLHo0tJ5AkI9Dfnc8vfKHGGkzN80G264DjuDww8hLo Rki4MkK3hGI3kCDEb2tlonqHeHyUx/7oz1HjaIFAOzCJfULrJGTR2Mu6VXW4SPwy Z9oSOu9DnMgUWV4MGqIz36Qu+qbJYtsfLugLJTAXbJAY51QXKhfYiPb8DR4UZAfK Y0X2iLPdyHk1U3ZuzfDp2wUVQTPRHkf1ZLBKOfLy2SZt8oYXswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPumIPVPxp3KaZumwrbqSJC++aGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNzlkNDk2OTMtMjQ3OC0z ZTRkLWIxYzgtM2RkN2ZmYWEwZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiPZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGysc3VDt2KX8aIpMzj3+KSy0d69H4HC7hQknAiDqPFJMnIbUF61oSbf w/xLLCOTHOzH34oKsXpzoR+NVbQRZFxTzDZ1lNXLYQuEBTzRyseY2ky7XjAOb59f DlDYJpDjs+4705Sv8iSyknDD1h4KGSoYUlka5Zr4HvrgE6TDwIc+9b7vh+fjf9bd oMaukT5J82LtR3gVzbaVe1BZ6viOuvVZTwwDZKGGTgw9WzWHwiRP6vkyNMbOoJQN 72I6cXMnccpAhC4UzcJd8AMAEjJzNmQsupG0wA7s3+qO/1w3Jsh9SiVTilFXiC2A i2JHvZ6FxykOOKrSDX/7wK2zzKyDJto= -----END CERTIFICATE-----Generated at Thu Sep 18 19:08:29 2025 by rpki-client