$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d0433cac-3517-3a4f-8792-a0944660a022.roa File: d0433cac-3517-3a4f-8792-a0944660a022.roa (raw, json) Hash identifier: 5iFgWr5NsAhYUGUezSmZjYjhK2YVecN3J95ltMtR70o= Subject key identifier: 72:A2:4F:D3:DD:45:AB:8A:E0:81:94:B9:18:41:4D:63:75:44:0F:42 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584B970CCBA604FCCDB5E8DB9A00 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d0433cac-3517-3a4f-8792-a0944660a022.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 395793 IP address blocks: 70.39.130.0/24 maxlen: 24 70.39.136.0/24 maxlen: 24 70.39.137.0/24 maxlen: 24 70.39.140.0/24 maxlen: 24 70.39.141.0/24 maxlen: 24 70.39.170.0/24 maxlen: 24 70.39.171.0/24 maxlen: 24 70.39.230.0/24 maxlen: 24 70.39.231.0/24 maxlen: 24 70.39.242.0/24 maxlen: 24 70.39.243.0/24 maxlen: 24 70.39.254.0/24 maxlen: 24 70.39.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:cb:a6:04:fc:cd:b5:e8:db:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=3efa21f5-5a80-4336-b0ec-eb1c4181d222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:0f:ef:3b:ca:f5:fc:40:ab:e9:8e:89:dd: 4a:65:ad:36:28:64:8e:07:6c:f5:20:23:5a:f7:d8: eb:fc:b4:33:a9:81:65:e3:39:a9:85:4d:bc:3a:45: f3:de:59:30:b5:3e:77:f4:45:7f:c0:e3:cd:10:0a: dd:94:cd:b5:d7:fb:ba:ae:fb:1a:ad:22:ca:99:8e: f0:46:a4:0c:38:48:f6:26:59:a0:60:38:37:05:5e: d0:93:62:f9:09:9e:66:f7:bd:06:c8:8b:b0:1e:94: 6e:87:35:a9:c8:5a:dd:44:8f:2d:a5:96:90:0c:4d: a9:ea:8f:24:63:f4:d6:5b:ba:d9:7e:73:65:73:e0: 47:95:59:fa:3f:3d:82:bc:9b:8b:bb:18:db:18:ff: be:52:dc:a2:9c:2f:89:96:51:55:e4:80:7d:6c:9f: 28:2d:59:72:40:91:b9:26:4d:6a:d1:2f:e9:e4:79: 18:09:56:41:e4:77:fe:80:4a:58:8d:0e:27:b1:ff: e2:e7:04:2e:d9:2f:a6:bc:7c:47:f2:ab:5e:d7:99: 6a:1d:3d:15:01:73:e0:7d:db:53:b8:ec:53:74:42: ee:f0:7b:b7:32:3e:7c:77:e3:21:bc:f0:fd:bb:b7: e9:e7:0c:10:1d:4c:fc:63:55:75:fe:ac:86:a7:4f: 81:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A2:4F:D3:DD:45:AB:8A:E0:81:94:B9:18:41:4D:63:75:44:0F:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d0433cac-3517-3a4f-8792-a0944660a022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 70.39.130.0/24 70.39.136.0/23 70.39.140.0/23 70.39.170.0/23 70.39.230.0/23 70.39.242.0/23 70.39.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e5:a5:c1:ed:c3:1e:55:34:f2:73:83:c9:78:8d:d1:94:eb: 5d:ab:7c:2f:47:d1:75:22:a5:cc:02:44:32:bb:9d:74:eb:e6: 5d:da:a5:fc:d5:19:83:7b:6b:99:94:ed:fb:6e:1a:40:5c:53: a9:06:e5:61:5f:41:cb:7f:97:32:a1:00:31:8c:7a:5a:3b:22: ca:46:39:79:fa:03:bd:e4:82:4a:12:a5:01:ae:51:73:84:a8: 6f:83:3d:17:cf:98:84:91:21:5f:79:22:9e:27:76:9d:e3:15: 95:5a:f2:05:5f:bd:fc:4e:54:57:80:6d:72:04:62:f4:6f:10: 96:7e:10:13:88:c1:89:1b:ff:56:43:65:8d:8a:a6:e2:56:14: 0b:60:3a:6c:b6:94:c7:5e:98:1a:13:d3:dd:d4:a8:d8:9d:97: e2:08:ad:4e:20:3f:76:57:63:ab:51:bd:5f:c9:a1:be:e7:0c: a5:8b:18:af:27:8f:6b:b0:9a:a7:05:44:d5:c3:32:df:a0:90: 33:79:69:41:d2:36:45:99:85:8e:3f:c8:7a:41:06:12:b7:32: 15:8a:7a:3e:61:b8:e9:25:76:bc:98:58:8e:e2:59:c5:0e:04: 31:8d:71:05:20:a4:4b:cd:f9:a4:ae:b9:89:5e:09:7d:78:29: fe:ec:fa:63 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEuXDMumBPzNtejbmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk M2VmYTIxZjUtNWE4MC00MzM2LWIwZWMtZWIxYzQxODFkMjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7cP7zvK9fxAq+mOid1KZa02KGSOB2z1ICNa 99jr/LQzqYFl4zmphU28OkXz3lkwtT539EV/wOPNEArdlM211/u6rvsarSLKmY7w RqQMOEj2JlmgYDg3BV7Qk2L5CZ5m970GyIuwHpRuhzWpyFrdRI8tpZaQDE2p6o8k Y/TWW7rZfnNlc+BHlVn6Pz2CvJuLuxjbGP++UtyinC+JllFV5IB9bJ8oLVlyQJG5 Jk1q0S/p5HkYCVZB5Hf+gEpYjQ4nsf/i5wQu2S+mvHxH8qte15lqHT0VAXPgfdtT uOxTdELu8Hu3Mj58d+MhvPD9u7fp5wwQHUz8Y1V1/qyGp0+BKwIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFHKiT9PdRauK4IGUuRhBTWN1RA9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvZDA0MzNjYWMtMzUxNy0z YTRmLTg3OTItYTA5NDQ2NjBhMDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQARieCAwQB RieIAwQBRieMAwQBRieqAwQBRifmAwQBRifyAwQBRif+MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG/lpcHt wx5VNPJzg8l4jdGU612rfC9H0XUipcwCRDK7nXTr5l3apfzVGYN7a5mU7ftuGkBc U6kG5WFfQct/lzKhADGMelo7IspGOXn6A73kgkoSpQGuUXOEqG+DPRfPmISRIV95 Ip4ndp3jFZVa8gVfvfxOVFeAbXIEYvRvEJZ+EBOIwYkb/1ZDZY2KpuJWFAtgOmy2 lMdemBoT093UqNidl+IIrU4gP3ZXY6tRvV/Job7nDKWLGK8nj2uwmqcFRNXDMt+g kDN5aUHSNkWZhY4/yHpBBhK3MhWKej5huOkldryYWI7iWcUOBDGNcQUgpEvN+aSu uYleCX14Kf7s+mM= -----END CERTIFICATE-----Generated at Tue Oct 28 17:04:11 2025 by rpki-client