$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/a5021f90-3ff1-3fe3-8754-131edcaabc6b.roa File: a5021f90-3ff1-3fe3-8754-131edcaabc6b.roa (raw, json) Hash identifier: 6Q9AFdp1mvZDcYs4mQCCtXdhXPDLHd05feahAsSbK3Q= Subject key identifier: 37:BF:F0:2F:1E:33:10:B4:B9:FB:5F:19:61:BB:70:C2:72:83:29:A3 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584B970CCCB0BBB7B79CBB3CDE00 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/a5021f90-3ff1-3fe3-8754-131edcaabc6b.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 174 IP address blocks: 70.39.131.0/24 maxlen: 24 70.39.132.0/24 maxlen: 24 70.39.133.0/24 maxlen: 24 70.39.134.0/24 maxlen: 24 70.39.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:cc:b0:bb:b7:b7:9c:bb:3c:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=5b391b95-a995-442d-a6a8-1eea2f63c2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:40:2b:d2:98:af:01:5c:d9:0c:19:0e:f6:75: e6:05:d6:1f:e6:91:2a:d4:43:dd:cb:c3:73:0c:3f: 51:7d:3c:e4:c1:95:d3:cf:e3:1f:d1:b8:b7:79:3e: 5a:a2:5c:f9:c7:b4:8f:83:d7:ba:dd:10:dd:6f:82: 5e:b5:89:97:78:04:69:9a:bd:71:1e:ba:ea:7f:c2: f1:dd:1e:d9:b8:96:eb:d6:c2:d6:59:b1:22:48:a1: d2:0f:26:39:3c:1e:0b:02:2d:16:d6:07:9e:bb:20: 49:99:12:16:8d:40:d8:75:ac:9a:94:8f:d7:24:b7: 01:c8:b1:76:61:24:b2:c6:a0:20:66:d5:c4:a1:cc: 0a:cc:c8:54:36:d6:dc:a2:57:4a:db:56:4a:8d:f0: 12:76:37:e1:7a:2c:cc:e8:d9:a3:2f:e4:1a:35:24: b9:03:73:6f:6e:69:2c:44:26:0b:10:b7:82:a1:6e: 49:61:a9:4d:07:7b:44:e4:48:a4:64:af:e7:de:4f: 11:01:12:74:dd:4d:40:ce:af:1c:69:2a:ce:c2:ae: a0:2f:89:ae:7e:7c:84:30:86:06:e7:5b:ab:95:47: 9b:ea:cc:9e:24:7a:2c:81:39:24:46:94:95:f5:1d: 88:44:1c:c3:87:07:5a:ee:46:d6:ac:cb:50:17:67: 3e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BF:F0:2F:1E:33:10:B4:B9:FB:5F:19:61:BB:70:C2:72:83:29:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/a5021f90-3ff1-3fe3-8754-131edcaabc6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 70.39.131.0-70.39.135.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ee:85:5b:c6:50:35:6e:2e:00:0e:56:cb:1b:b7:d4:85:ee: 7d:82:f1:15:e8:34:9b:3b:5f:86:63:37:ae:15:1d:67:5b:8f: e6:61:f0:8c:5a:0d:86:4a:26:1a:98:8f:73:a3:8e:df:73:a9: 82:9f:49:14:15:13:01:de:b2:b0:b2:2d:51:20:c2:ba:cd:bb: a2:81:ef:6f:06:50:1b:d4:cb:61:b4:39:da:7e:4d:7c:d1:ce: 48:a4:7d:9a:69:be:8f:58:26:32:1f:69:e0:95:73:01:12:92: 29:60:8c:d8:69:05:10:91:96:31:a3:30:f4:9c:8a:96:4e:fc: 11:36:19:a4:c5:c7:90:a1:11:42:af:cf:b6:3b:1a:e0:00:ec: b9:fe:e4:0a:f0:1a:e4:3a:90:da:84:2e:0b:4c:8f:3b:17:3a: 16:49:75:08:4e:eb:aa:4b:8f:95:3e:fc:49:8a:af:b0:88:bf: 62:7b:47:7d:bf:22:f4:f6:40:81:7f:09:5c:a9:96:f8:f1:b0: c9:d1:c0:81:90:32:7e:63:67:09:4e:64:1a:4d:fb:dd:5e:8e: 92:af:a2:cb:7a:bc:f1:80:15:41:46:33:db:52:b3:64:8e:e7: a9:cf:14:cf:f9:55:c3:c7:9a:32:10:00:74:59:47:c0:64:91: cb:c4:ad:3a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuXDMywu7e3nLs83gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NWIzOTFiOTUtYTk5NS00NDJkLWE2YTgtMWVlYTJmNjNjMmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUAr0pivAVzZDBkO9nXmBdYf5pEq1EPdy8Nz DD9RfTzkwZXTz+Mf0bi3eT5aolz5x7SPg9e63RDdb4JetYmXeARpmr1xHrrqf8Lx 3R7ZuJbr1sLWWbEiSKHSDyY5PB4LAi0W1geeuyBJmRIWjUDYdayalI/XJLcByLF2 YSSyxqAgZtXEocwKzMhUNtbcoldK21ZKjfASdjfheizM6NmjL+QaNSS5A3Nvbmks RCYLELeCoW5JYalNB3tE5EikZK/n3k8RARJ03U1Azq8caSrOwq6gL4mufnyEMIYG 51urlUeb6syeJHosgTkkRpSV9R2IRBzDhwda7kbWrMtQF2c+JwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFDe/8C8eMxC0uftfGWG7cMJygymjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvYTUwMjFmOTAtM2ZmMS0z ZmUzLTg3NTQtMTMxZWRjYWFiYzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABGJ4MD BANGJ4AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAAO6FW8ZQNW4uAA5Wyxu31IXufYLxFeg0mztfhmM3rhUd Z1uP5mHwjFoNhkomGpiPc6OO33Opgp9JFBUTAd6ysLItUSDCus27ooHvbwZQG9TL YbQ52n5NfNHOSKR9mmm+j1gmMh9p4JVzARKSKWCM2GkFEJGWMaMw9JyKlk78ETYZ pMXHkKERQq/Ptjsa4ADsuf7kCvAa5DqQ2oQuC0yPOxc6Fkl1CE7rqkuPlT78SYqv sIi/YntHfb8i9PZAgX8JXKmW+PGwydHAgZAyfmNnCU5kGk373V6Okq+iy3q88YAV QUYz21KzZI7nqc8Uz/lVw8eaMhAAdFlHwGSRy8StOg== -----END CERTIFICATE-----Generated at Tue Oct 28 17:04:11 2025 by rpki-client