$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fcd0737f-ba3d-3f2c-adf0-44472b657513.roa File: fcd0737f-ba3d-3f2c-adf0-44472b657513.roa (raw, json) Hash identifier: uPr7dTG8XK6yL1+/kRLZhgQRxwZ2KTzE9zSbx1J2DP0= Subject key identifier: A9:96:0E:CB:23:2C:34:4A:D7:8D:8A:CA:CD:FA:BB:20:21:F8:00:A5 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76BEB96FDE4D827D2CC480 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fcd0737f-ba3d-3f2c-adf0-44472b657513.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 69.42.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:be:b9:6f:de:4d:82:7d:2c:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=4e2acdfa-fc7e-469e-a152-c0e60f3d8156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:fc:3a:2d:f3:90:ac:b8:e5:13:a5:e1:6c: f9:b0:9a:dd:29:ec:2f:2a:60:c5:a7:5e:4e:90:67: 86:21:c4:2b:8b:c5:24:cb:90:6b:b0:c6:45:4a:40: a2:6d:a9:63:6f:3a:99:ac:84:53:23:f2:90:47:df: 0b:d1:ba:b7:af:6f:12:99:b8:a2:2e:7b:b4:78:30: 3c:d0:91:a9:26:33:0f:4c:bc:d9:8d:ed:41:e0:fb: 60:99:ed:10:dd:20:59:b4:fd:c1:28:ca:aa:30:18: 11:4b:c6:47:2d:06:17:70:30:f8:af:fe:96:dc:50: ff:93:9a:50:08:ac:61:43:f3:8b:cb:ba:dc:a6:df: 7c:51:9d:57:ae:e3:8f:0e:d7:79:fb:3f:3f:0c:4c: 78:4a:61:04:0b:22:28:8f:f5:0a:43:8f:a1:84:07: e2:a7:d1:1d:b1:21:dc:68:e2:fb:aa:88:18:79:5e: a8:7b:4d:2d:80:ad:c0:10:4a:5b:ce:e0:44:95:18: f5:d9:92:0c:25:f7:f8:2b:c4:53:45:bc:3c:cb:be: 2d:08:bb:e4:40:86:f6:84:58:22:e3:63:33:f6:a5: 65:8c:66:f5:1e:a2:77:23:19:0b:cc:9e:05:52:b4: 43:6a:c3:dc:5a:cb:57:ad:91:96:ee:50:75:92:bc: 9f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:96:0E:CB:23:2C:34:4A:D7:8D:8A:CA:CD:FA:BB:20:21:F8:00:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fcd0737f-ba3d-3f2c-adf0-44472b657513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 69.42.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:27:90:ec:97:7f:20:f4:65:20:f7:41:12:d6:8f:0e:ca:1a: b8:00:c0:c1:ba:50:0b:e8:a3:cb:a6:52:56:5f:70:0f:0a:0c: 16:a4:09:03:15:49:a1:6e:a4:12:27:ec:8e:33:73:37:06:ae: 78:9a:36:fb:d9:0b:21:4e:39:8c:f5:09:bf:14:67:b3:ce:25: 29:fb:8d:c7:a8:54:70:56:50:1d:aa:98:7c:91:50:17:d2:6d: 42:e8:4e:48:eb:15:f2:1a:3d:19:91:71:3e:fd:72:d2:dd:dd: 08:62:9f:a1:23:5f:d5:22:b6:65:e9:00:3e:44:29:29:89:6b: 3c:53:cb:12:3e:3d:b8:24:f7:17:7a:c5:b4:63:1e:ae:04:b0: 6a:25:32:95:33:20:72:a4:56:49:c3:25:01:a6:8e:9e:f1:15: 0d:5e:d6:c7:87:d9:ac:46:1d:57:ae:c4:63:1e:55:e3:b9:58: e6:bc:14:01:eb:67:f4:dd:4c:a5:61:04:bc:a4:3c:c5:23:b5: ef:d5:8a:54:e5:7c:8d:7e:55:39:c8:7f:51:6f:e9:ca:fe:76: ce:79:7b:0a:68:bd:f1:1e:e4:9d:65:5d:b2:85:a0:aa:a4:6e: 1c:b0:1d:35:fd:e0:10:c0:39:ef:54:82:89:40:e4:a5:02:e9: 3f:2d:ee:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdr65b95Ngn0sxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NGUyYWNkZmEtZmM3ZS00NjllLWExNTItYzBlNjBmM2Q4MTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ78Oi3zkKy45ROl4Wz5sJrdKewvKmDFp15O kGeGIcQri8Uky5BrsMZFSkCibaljbzqZrIRTI/KQR98L0bq3r28SmbiiLnu0eDA8 0JGpJjMPTLzZje1B4Ptgme0Q3SBZtP3BKMqqMBgRS8ZHLQYXcDD4r/6W3FD/k5pQ CKxhQ/OLy7rcpt98UZ1XruOPDtd5+z8/DEx4SmEECyIoj/UKQ4+hhAfip9EdsSHc aOL7qogYeV6oe00tgK3AEEpbzuBElRj12ZIMJff4K8RTRbw8y74tCLvkQIb2hFgi 42Mz9qVljGb1HqJ3IxkLzJ4FUrRDasPcWstXrZGW7lB1kryf6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmWDssjLDRK142Kys36uyAh+AClMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZmNkMDczN2YtYmEzZC0z ZjJjLWFkZjAtNDQ0NzJiNjU3NTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRSoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIonkOyXfyD0ZSD3QRLWjw7KGrgAwMG6UAvoo8umUlZfcA8KDBakCQMV SaFupBIn7I4zczcGrniaNvvZCyFOOYz1Cb8UZ7POJSn7jceoVHBWUB2qmHyRUBfS bULoTkjrFfIaPRmRcT79ctLd3Qhin6EjX9UitmXpAD5EKSmJazxTyxI+Pbgk9xd6 xbRjHq4EsGolMpUzIHKkVknDJQGmjp7xFQ1e1seH2axGHVeuxGMeVeO5WOa8FAHr Z/TdTKVhBLykPMUjte/VilTlfI1+VTnIf1Fv6cr+ds55ewpovfEe5J1lXbKFoKqk bhywHTX94BDAOe9UgolA5KUC6T8t7iQ= -----END CERTIFICATE-----Generated at Sat Sep 6 23:52:04 2025 by rpki-client