$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/2b9c8956-93b9-31dc-8390-798edfd4e36e.roa File: 2b9c8956-93b9-31dc-8390-798edfd4e36e.roa (raw, json) Hash identifier: pDzKNHYu9EnjmNiEt5WWA/CqDMqusXEEp4DvWhnYfk8= Subject key identifier: 23:08:79:39:FD:E3:F5:09:4E:9A:63:0B:CF:82:B4:FD:33:D8:6F:AE Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584B970CDE346A5C006FE09A0000 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/2b9c8956-93b9-31dc-8390-798edfd4e36e.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 174 IP address blocks: 70.39.130.0/24 maxlen: 24 70.39.136.0/24 maxlen: 24 70.39.137.0/24 maxlen: 24 70.39.140.0/24 maxlen: 24 70.39.141.0/24 maxlen: 24 70.39.170.0/24 maxlen: 24 70.39.171.0/24 maxlen: 24 70.39.230.0/24 maxlen: 24 70.39.231.0/24 maxlen: 24 70.39.242.0/24 maxlen: 24 70.39.243.0/24 maxlen: 24 70.39.254.0/24 maxlen: 24 70.39.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:de:34:6a:5c:00:6f:e0:9a:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=45eaf268-99bc-429e-aa87-65256f15e7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:12:9d:fd:22:fe:20:95:60:b8:9b:0a:c6:8a: c6:f7:c9:b0:1e:8b:b0:2b:57:d2:c8:dd:0f:68:bd: 93:99:a9:0c:56:19:df:fc:4f:f4:0b:b8:9d:d0:70: 00:6e:7a:33:0f:72:4a:3d:ab:42:85:31:3d:56:49: c9:84:ee:b2:4e:b9:25:1a:0b:20:79:d0:82:75:0d: 60:d8:09:fe:5f:82:ea:8d:c9:26:e2:f6:0f:ad:3a: 13:fc:ed:60:a6:17:34:35:28:36:ff:07:b4:aa:9f: d2:97:96:c8:9d:d0:01:4f:6d:f9:ff:57:d4:95:86: 84:e1:f0:8f:2a:7d:62:21:d5:75:62:12:41:ab:a8: a9:1f:ee:6f:fb:38:34:38:3b:fb:27:e9:e6:e6:7b: 00:b1:08:dc:7f:c3:91:79:41:e1:b4:03:6a:14:7c: f1:a5:e0:f7:5c:e7:1e:8f:4f:f1:99:71:bc:0f:ec: 84:1f:cc:e0:51:f5:f5:48:91:9f:d3:a7:af:d6:23: 01:e6:75:59:18:26:3f:b0:35:7e:eb:42:14:05:0b: 55:b2:5b:f9:a6:3f:ae:18:f9:f9:f2:28:16:a0:68: 85:38:1b:77:f1:ad:ef:d3:e4:6c:23:50:ab:0b:d1: 7f:69:45:5f:b0:87:d8:2b:66:1e:89:94:db:e1:8d: 0c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:08:79:39:FD:E3:F5:09:4E:9A:63:0B:CF:82:B4:FD:33:D8:6F:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/2b9c8956-93b9-31dc-8390-798edfd4e36e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 70.39.130.0/24 70.39.136.0/23 70.39.140.0/23 70.39.170.0/23 70.39.230.0/23 70.39.242.0/23 70.39.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:aa:2a:a7:6d:53:45:a1:a7:7b:c9:f0:42:86:76:9f:a0:8e: d1:d8:ce:d8:e1:db:44:d8:b6:fb:56:1c:6c:14:4d:0a:ee:95: 74:8f:d7:e1:42:b6:72:5e:44:64:f2:59:16:d4:40:fb:43:38: 6f:71:c1:b5:8c:04:47:98:7d:fd:d3:3b:bc:6f:1e:57:a9:84: 60:97:e5:76:f5:48:35:41:da:6b:4a:0e:a8:88:6d:01:d0:ad: 39:95:55:5e:c5:78:e8:c6:24:49:e7:48:38:84:9d:11:1f:d7: 41:7d:b0:10:76:f0:0d:e6:2f:bf:16:16:e0:c5:2e:e8:99:cf: bf:63:0b:5f:38:28:5d:c1:05:63:81:f8:10:21:06:4a:11:d6: 93:76:c4:d3:6e:67:8c:49:61:03:ed:c0:10:ae:aa:2a:fd:3d: f5:5f:e5:d6:b3:65:dc:63:a1:df:fe:84:bd:6a:9c:04:30:1e: c0:73:05:28:e6:72:32:2c:bf:0e:3e:fd:0d:dd:9e:53:46:f9: 4b:d7:68:67:e9:d5:c0:5d:4d:32:77:f8:f2:cc:e6:33:14:ff: b8:8b:a3:0b:6a:91:cd:48:66:0a:64:5f:f0:e9:ec:22:1c:a6: 52:81:3a:34:06:9f:e3:07:9e:e8:d6:77:0c:8b:33:ec:16:34: e9:fe:57:18 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEuXDN40alwAb+CaAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NDVlYWYyNjgtOTliYy00MjllLWFhODctNjUyNTZmMTVlN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRKd/SL+IJVguJsKxorG98mwHouwK1fSyN0P aL2TmakMVhnf/E/0C7id0HAAbnozD3JKPatChTE9VknJhO6yTrklGgsgedCCdQ1g 2An+X4Lqjckm4vYPrToT/O1gphc0NSg2/we0qp/Sl5bIndABT235/1fUlYaE4fCP Kn1iIdV1YhJBq6ipH+5v+zg0ODv7J+nm5nsAsQjcf8OReUHhtANqFHzxpeD3XOce j0/xmXG8D+yEH8zgUfX1SJGf06ev1iMB5nVZGCY/sDV+60IUBQtVslv5pj+uGPn5 8igWoGiFOBt38a3v0+RsI1CrC9F/aUVfsIfYK2YeiZTb4Y0MbQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFCMIeTn94/UJTppjC8+CtP0z2G+uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvMmI5Yzg5NTYtOTNiOS0z MWRjLTgzOTAtNzk4ZWRmZDRlMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQARieCAwQB RieIAwQBRieMAwQBRieqAwQBRifmAwQBRifyAwQBRif+MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHCqKqdt U0Whp3vJ8EKGdp+gjtHYztjh20TYtvtWHGwUTQrulXSP1+FCtnJeRGTyWRbUQPtD OG9xwbWMBEeYff3TO7xvHlephGCX5Xb1SDVB2mtKDqiIbQHQrTmVVV7FeOjGJEnn SDiEnREf10F9sBB28A3mL78WFuDFLuiZz79jC184KF3BBWOB+BAhBkoR1pN2xNNu Z4xJYQPtwBCuqir9PfVf5dazZdxjod/+hL1qnAQwHsBzBSjmcjIsvw4+/Q3dnlNG +UvXaGfp1cBdTTJ3+PLM5jMU/7iLowtqkc1IZgpkX/Dp7CIcplKBOjQGn+MHnujW dwyLM+wWNOn+Vxg= -----END CERTIFICATE-----Generated at Tue Oct 28 16:58:39 2025 by rpki-client