$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d6e797fc-af1a-386c-bed6-8f8e3a582a8b.roa File: d6e797fc-af1a-386c-bed6-8f8e3a582a8b.roa (raw, json) Hash identifier: q4UF07pLMqNSvyEXYnEIp4q93IbnPUOVy0d781NN78M= Subject key identifier: 67:C9:58:DF:54:66:4B:D1:7D:1A:8E:63:02:64:B3:19:CA:20:07:0E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B0316925D6125810417F3F680 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d6e797fc-af1a-386c-bed6-8f8e3a582a8b.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 852 IP address blocks: 142.59.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:92:5d:61:25:81:04:17:f3:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=7aa8a302-7ce4-4452-ad10-c32c64d3f0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0d:3c:ec:33:93:df:ef:99:4e:0f:d2:ab:7f: ac:49:86:89:25:ad:30:2c:ac:fb:ed:de:e9:d6:09: 49:bb:01:92:18:49:5f:1c:0c:1b:50:54:43:27:f8: c4:36:e6:ff:50:c6:e4:89:44:10:0c:63:50:8e:7b: 5e:1b:89:68:fb:ce:f8:ff:a3:c9:73:4b:88:f7:33: 6f:86:bd:85:7a:e3:59:29:ad:b2:0d:5a:df:d6:b4: 1e:e3:cf:cd:1c:35:dd:c1:0c:31:3b:ab:e3:40:26: 7d:61:f5:65:9c:a3:b4:79:6b:43:3e:4c:c9:c8:a8: 38:fc:32:ca:fe:cb:d7:19:21:23:3a:3b:88:d2:d5: 8f:8d:3b:0f:64:86:30:ce:91:63:81:79:72:b8:97: da:b0:0c:22:a9:0e:31:8c:b5:bf:74:18:9b:cc:89: 4c:35:98:bf:8d:e2:74:20:19:f0:a5:cc:9a:39:44: f6:85:e8:3f:3a:d8:ee:d9:88:37:72:83:df:04:34: 89:a0:b2:f3:59:60:de:a4:f4:c4:a3:11:86:20:05: 26:04:74:e5:90:40:8c:c3:9d:2d:96:31:f1:0f:f0: 31:f9:d1:f2:06:93:0f:71:0e:c9:81:09:08:40:1c: 1a:26:9e:f2:51:c3:b8:ab:1b:9e:61:3a:3c:dc:8e: aa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C9:58:DF:54:66:4B:D1:7D:1A:8E:63:02:64:B3:19:CA:20:07:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d6e797fc-af1a-386c-bed6-8f8e3a582a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.59.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d3:8c:c4:af:c5:fb:45:25:5d:34:df:14:dd:5c:d1:9f:95: b4:15:90:54:7e:ed:e1:a6:2c:f8:23:16:31:e4:30:ea:fa:f6: 17:e2:1c:c2:8f:07:60:c2:48:d0:e7:af:25:f7:1e:22:25:59: 85:26:b8:aa:2d:74:ba:c0:06:3b:7e:8f:4e:ab:11:cb:80:26: fc:5c:30:3c:68:28:68:58:42:27:ed:3f:e7:fb:55:d5:cf:35: 89:8d:37:c4:38:90:02:6e:02:cc:f2:c9:3f:b0:e8:2d:fc:d3: e1:b3:3e:98:a7:1f:9f:53:62:d3:86:be:c4:c4:7c:4b:2d:02: cd:15:e2:87:a9:1a:4c:09:ec:b8:2c:f9:5c:0f:28:0b:42:99: 57:5b:9c:46:8c:f2:9f:60:87:31:60:b4:0e:9d:bf:71:e5:22: 82:de:e1:26:6b:32:a6:5a:1c:d8:2b:c2:e8:eb:68:d1:d1:57: 64:6a:1d:51:d3:d8:0f:a6:ef:03:3f:b4:b8:05:2c:f0:a7:a2: 72:18:34:1a:ac:ca:d1:a9:ff:94:5d:07:84:7f:57:47:47:c4: 41:64:c6:51:66:80:ed:5e:01:eb:1f:2c:e0:eb:08:b9:9b:eb: a8:a2:24:05:64:89:d7:de:48:f4:5e:94:d3:69:35:69:26:3b: 7f:97:01:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDFpJdYSWBBBfz9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk N2FhOGEzMDItN2NlNC00NDUyLWFkMTAtYzMyYzY0ZDNmMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA087DOT3++ZTg/Sq3+sSYaJJa0wLKz77d7p 1glJuwGSGElfHAwbUFRDJ/jENub/UMbkiUQQDGNQjnteG4lo+874/6PJc0uI9zNv hr2FeuNZKa2yDVrf1rQe48/NHDXdwQwxO6vjQCZ9YfVlnKO0eWtDPkzJyKg4/DLK /svXGSEjOjuI0tWPjTsPZIYwzpFjgXlyuJfasAwiqQ4xjLW/dBibzIlMNZi/jeJ0 IBnwpcyaOUT2heg/Otju2Yg3coPfBDSJoLLzWWDepPTEoxGGIAUmBHTlkECMw50t ljHxD/Ax+dHyBpMPcQ7JgQkIQBwaJp7yUcO4qxueYTo83I6qxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfJWN9UZkvRfRqOYwJksxnKIAcOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDZlNzk3ZmMtYWYxYS0z ODZjLWJlZDYtOGY4ZTNhNTgyYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjjtGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHTjMSvxftFJV003xTdXNGflbQVkFR+7eGmLPgjFjHkMOr69hfiHMKP B2DCSNDnryX3HiIlWYUmuKotdLrABjt+j06rEcuAJvxcMDxoKGhYQiftP+f7VdXP NYmNN8Q4kAJuAszyyT+w6C380+GzPpinH59TYtOGvsTEfEstAs0V4oepGkwJ7Lgs +VwPKAtCmVdbnEaM8p9ghzFgtA6dv3HlIoLe4SZrMqZaHNgrwujraNHRV2RqHVHT 2A+m7wM/tLgFLPCnonIYNBqsytGp/5RdB4R/V0dHxEFkxlFmgO1eAesfLODrCLmb 66iiJAVkidfeSPRelNNpNWkmO3+XAfI= -----END CERTIFICATE-----Generated at Fri Oct 24 08:19:37 2025 by rpki-client