$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa File: 8e5ed9de-8260-3f23-8a5f-845c119039ad.roa (raw, json) Hash identifier: SuqHvY5vAM1HXUWANjGeCn4stZsDmpPW7Tsx8g0MyqM= Subject key identifier: F3:7A:A3:91:D9:C1:F7:11:47:6A:03:AB:64:E0:B8:84:A5:D0:8D:25 Certificate issuer: /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520 Certificate serial: 010D0C9F4328584B0746BE9FE70396FAF79E0380 Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 3695 IP address blocks: 70.36.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:be:9f:e7:03:96:fa:f7:9e:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=a8c9a136-0270-45cb-9774-ae82e4c01702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e1:fe:60:99:90:2c:cb:6a:5c:ad:ad:75:55: bf:b3:e6:d6:87:35:62:a7:f0:9f:b4:b2:8e:20:3c: 4e:70:82:30:98:c6:52:ed:1a:ba:25:79:19:b3:c9: 40:cd:94:da:dd:af:59:78:6c:57:62:d7:86:d8:ee: b5:a9:22:b4:95:44:70:25:75:64:b4:2a:f0:9a:89: 2d:a6:45:2c:9c:cd:82:3e:47:7e:2d:f4:2f:2f:45: 91:23:41:07:af:bd:7d:66:ac:f9:92:81:f0:cc:19: 16:54:de:66:b4:1a:d4:41:58:18:a2:92:23:df:73: 66:f2:45:3b:a6:a3:20:54:7a:0a:8d:17:e8:46:d9: 88:d5:05:a8:4f:31:d9:10:15:82:67:4a:5a:a1:2b: 6e:c5:9c:6c:75:e8:89:74:69:38:c1:c9:96:a3:fb: f4:0e:8e:f0:d3:da:1b:57:b5:23:ea:f0:49:ba:88: cf:9f:b9:e3:db:8d:ec:0f:ec:9a:1a:00:ba:b5:01: 81:45:b7:0f:aa:b9:a1:1e:19:43:cb:18:14:7f:98: 3a:b6:bf:69:f2:8c:4b:c7:fc:a3:7c:cb:df:e4:fa: 08:4b:22:81:a9:37:d2:aa:0f:c5:8f:73:3b:32:f7: 7e:37:06:2c:6d:ce:d3:7a:34:7d:64:87:ae:2c:67: 7b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7A:A3:91:D9:C1:F7:11:47:6A:03:AB:64:E0:B8:84:A5:D0:8D:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl X509v3 Authority Key Identifier: keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer sbgp-ipAddrBlock: critical IPv4: 70.36.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e6:ee:ca:42:64:4d:74:f0:87:76:06:8e:c1:37:20:37:c0: 49:02:a2:8d:7e:9a:7d:72:68:ba:95:20:10:e7:9b:28:3d:cb: c4:3b:8a:ca:d1:57:57:51:d0:50:6c:26:51:5c:92:4d:2f:73: 86:b6:e7:fd:88:db:b8:a7:89:98:42:8f:bc:31:92:2c:54:8a: 44:04:1d:95:84:28:a6:2d:e8:1c:00:b9:7b:1e:d6:55:e6:48: f4:5e:f3:b3:81:41:ca:61:99:bc:8c:45:e0:82:56:e6:5c:c5: 6f:cb:fd:d0:67:0d:2b:64:e2:3e:1a:0d:c5:2c:9e:f2:1e:0e: 6a:e1:49:a5:f8:4e:9d:3a:eb:d0:30:a4:33:7e:1c:af:d6:5e: 41:70:8d:89:ad:08:5f:94:59:f7:cd:ad:39:70:a0:e6:af:f9: a5:26:f0:57:ed:b3:ce:ec:ef:c9:7b:af:3b:6e:8a:e0:db:49: bb:1b:97:6c:03:d2:7e:71:db:0f:12:cb:49:12:26:88:5c:20: f0:8d:f8:88:6d:ab:d5:a2:83:64:1e:73:43:db:b3:df:95:8d: 6b:15:6b:29:35:3a:67:10:e8:63:84:4a:f1:ab:fe:0c:9e:4d: 2b:ff:ff:e5:7f:52:80:3f:1c:5a:17:90:b4:07:38:20:fa:d6: a0:2f:78:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRr6f5wOW+veeA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi NTIwMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk YThjOWExMzYtMDI3MC00NWNiLTk3NzQtYWU4MmU0YzAxNzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOH+YJmQLMtqXK2tdVW/s+bWhzVip/CftLKO IDxOcIIwmMZS7Rq6JXkZs8lAzZTa3a9ZeGxXYteG2O61qSK0lURwJXVktCrwmokt pkUsnM2CPkd+LfQvL0WRI0EHr719Zqz5koHwzBkWVN5mtBrUQVgYopIj33Nm8kU7 pqMgVHoKjRfoRtmI1QWoTzHZEBWCZ0paoStuxZxsdeiJdGk4wcmWo/v0Do7w09ob V7Uj6vBJuojPn7nj243sD+yaGgC6tQGBRbcPqrmhHhlDyxgUf5g6tr9p8oxLx/yj fMvf5PoISyKBqTfSqg/Fj3M7Mvd+NwYsbc7TejR9ZIeuLGd7YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPN6o5HZwfcRR2oDq2TguISl0I0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvOGU1ZWQ5ZGUtODI2MC0z ZjIzLThhNWYtODQ1YzExOTAzOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0 MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDm7spCZE108Id2Bo7BNyA3wEkCoo1+mn1yaLqVIBDnmyg9y8Q7isrR V1dR0FBsJlFckk0vc4a25/2I27iniZhCj7wxkixUikQEHZWEKKYt6BwAuXse1lXm SPRe87OBQcphmbyMReCCVuZcxW/L/dBnDStk4j4aDcUsnvIeDmrhSaX4Tp0669Aw pDN+HK/WXkFwjYmtCF+UWffNrTlwoOav+aUm8Ffts87s78l7rztuiuDbSbsbl2wD 0n5x2w8Sy0kSJohcIPCN+Ihtq9Wig2Qec0Pbs9+VjWsVayk1OmcQ6GOESvGr/gye TSv//+V/UoA/HFoXkLQHOCD61qAveDo= -----END CERTIFICATE-----Generated at Fri Sep 19 16:01:01 2025 by rpki-client