$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/a61c5744-6e34-3999-beb6-e7060977c75b.roa File: a61c5744-6e34-3999-beb6-e7060977c75b.roa (raw, json) Hash identifier: IX/g+FNXxe3V8vjOmBJVbAjTlGdvGEVZFSBXsxnxNgI= Subject key identifier: 16:7D:4B:AC:83:67:A4:9D:FE:5D:8D:28:59:C1:98:DC:05:95:98:3B Certificate issuer: /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520 Certificate serial: 010D0C9F4328584B0746BE8DFEC33220772DC180 Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/a61c5744-6e34-3999-beb6-e7060977c75b.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 3695 IP address blocks: 70.36.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:be:8d:fe:c3:32:20:77:2d:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=c0209154-7ac5-4880-9bca-c46fbbd1030e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:d9:1a:83:67:fb:68:10:6e:2f:6f:49:b7: 89:af:bf:4f:08:e1:df:ae:fd:02:84:92:bd:c7:63: 2a:f4:32:33:0d:1b:c1:20:bd:a7:81:ed:8d:1a:75: 50:37:1a:20:42:96:74:1b:64:e1:3f:a5:6c:7c:54: e7:0e:e5:40:13:2d:be:80:86:ba:15:3a:21:b7:b8: a0:e3:a6:f7:b8:ad:09:df:46:69:77:cf:83:59:92: 23:cd:3d:3e:8f:ce:b4:e6:73:b6:ac:80:85:17:23: 3c:6c:8d:f4:5b:93:df:46:42:ec:aa:8c:33:5c:c0: 68:77:01:b8:c4:4d:9a:83:10:da:f6:6e:2d:59:92: 63:64:db:3b:26:d0:14:e1:aa:fa:76:51:93:9d:41: 8a:1f:da:48:86:4a:a9:fc:c0:cc:29:23:1d:41:87: 10:7d:2b:17:79:e9:98:65:a8:38:ee:86:8e:36:54: 6e:14:bb:55:9c:70:5c:d8:aa:2c:ba:28:55:0f:0f: 5c:20:5a:c9:d2:f0:5f:ed:03:17:1c:db:82:a0:ce: 5e:ed:42:43:16:7f:8f:33:c0:53:5b:b1:5f:ec:ac: 58:d9:c5:71:a0:fe:bc:c9:57:94:e5:93:b4:98:cd: 21:06:69:c2:09:5e:ad:9c:87:ef:d1:60:9e:60:f9: dc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7D:4B:AC:83:67:A4:9D:FE:5D:8D:28:59:C1:98:DC:05:95:98:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/a61c5744-6e34-3999-beb6-e7060977c75b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl X509v3 Authority Key Identifier: keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer sbgp-ipAddrBlock: critical IPv4: 70.36.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:fb:ca:bc:91:df:21:68:9c:a4:29:25:b9:a9:e6:73:a7:6f: 07:10:dc:43:ac:5e:7d:96:19:9c:56:8c:c2:c3:1b:f6:7b:ac: 69:d5:38:e5:c0:45:7e:cf:8b:30:e2:4e:4f:92:75:af:56:e3: b9:d0:13:85:c8:3d:31:bf:03:d6:f8:95:61:fa:0c:6d:40:dd: de:3b:bd:07:1d:aa:0d:88:5b:f6:97:84:e5:23:2a:d7:ef:ca: b6:f5:eb:49:f6:6c:9d:a3:0b:a9:d5:d2:ee:84:c9:26:0e:78: 24:e9:0e:f3:44:2b:9a:c1:a8:f2:63:e6:76:8d:37:5b:23:ad: bc:a8:0c:09:04:60:89:ef:05:e6:f3:88:a4:49:18:a6:b2:17: 0e:c1:12:07:af:d2:a6:db:a9:67:81:5e:43:5c:1d:1e:d8:8c: 2f:b3:3d:39:99:a7:59:42:58:02:f3:5d:ce:93:fe:0c:75:2a: ec:e0:62:f1:75:06:8e:9c:a4:81:95:2a:e7:06:ab:8b:c3:e5: 39:f9:de:af:93:8a:1f:30:8d:0c:32:ce:81:ec:56:76:8a:a2: 71:c5:b4:64:2c:c8:0c:c9:e8:47:36:6b:d3:09:bc:dc:70:73: 56:e5:02:cf:f9:04:ce:ca:d7:23:59:4a:d2:ff:2d:c0:30:0a: b7:a4:f3:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRr6N/sMyIHctwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi NTIwMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk YzAyMDkxNTQtN2FjNS00ODgwLTliY2EtYzQ2ZmJiZDEwMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVnZGoNn+2gQbi9vSbeJr79PCOHfrv0ChJK9 x2Mq9DIzDRvBIL2nge2NGnVQNxogQpZ0G2ThP6VsfFTnDuVAEy2+gIa6FToht7ig 46b3uK0J30Zpd8+DWZIjzT0+j8605nO2rICFFyM8bI30W5PfRkLsqowzXMBodwG4 xE2agxDa9m4tWZJjZNs7JtAU4ar6dlGTnUGKH9pIhkqp/MDMKSMdQYcQfSsXeemY Zag47oaONlRuFLtVnHBc2KosuihVDw9cIFrJ0vBf7QMXHNuCoM5e7UJDFn+PM8BT W7Ff7KxY2cVxoP68yVeU5ZO0mM0hBmnCCV6tnIfv0WCeYPncdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZ9S6yDZ6Sd/l2NKFnBmNwFlZg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvYTYxYzU3NDQtNmUzNC0z OTk5LWJlYjYtZTcwNjA5NzdjNzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0 MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACb7yryR3yFonKQpJbmp5nOnbwcQ3EOsXn2WGZxWjMLDG/Z7rGnVOOXA RX7PizDiTk+Sda9W47nQE4XIPTG/A9b4lWH6DG1A3d47vQcdqg2IW/aXhOUjKtfv yrb160n2bJ2jC6nV0u6EySYOeCTpDvNEK5rBqPJj5naNN1sjrbyoDAkEYInvBebz iKRJGKayFw7BEgev0qbbqWeBXkNcHR7YjC+zPTmZp1lCWALzXc6T/gx1KuzgYvF1 Bo6cpIGVKucGq4vD5Tn53q+Tih8wjQwyzoHsVnaKonHFtGQsyAzJ6Ec2a9MJvNxw c1blAs/5BM7K1yNZStL/LcAwCrek83w= -----END CERTIFICATE-----Generated at Fri Sep 19 14:29:41 2025 by rpki-client