$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61e24a0f-8b90-3d0e-af70-a4f7f9fec1b1.roa File: 61e24a0f-8b90-3d0e-af70-a4f7f9fec1b1.roa (raw, json) Hash identifier: +lOVjyUAcbRViWB9ikpZI6WU0yrAcL8W7GyWZ2jtRio= Subject key identifier: 9D:24:C0:59:BD:A7:DF:9A:F0:46:D7:8A:ED:74:59:BA:66:2E:1B:10 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB84DCBFAF7C2EB0A912FD0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61e24a0f-8b90-3d0e-af70-a4f7f9fec1b1.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33491 IP address blocks: 70.89.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:4d:cb:fa:f7:c2:eb:0a:91:2f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=710e83f4-d1d5-4f58-9fb6-41ec35a125f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6a:e1:99:e9:d7:c0:93:83:53:c7:c7:f6:5c: ab:23:ff:d5:73:36:51:20:3c:a0:16:72:68:2d:73: ff:9e:a0:31:98:07:d0:58:e8:dc:99:b6:94:f2:0f: 6d:1b:ac:78:85:10:bf:b3:74:f1:72:d4:73:d8:49: bf:81:57:f6:1a:b5:42:13:0f:d3:37:2a:20:8f:53: bb:c0:00:99:2c:c5:0a:c4:f4:c0:80:82:5c:98:46: cc:b1:26:fe:9e:0b:b0:fa:79:1f:fe:60:bb:5c:c4: cb:52:77:8b:5b:af:74:25:32:de:24:b8:63:f7:dc: 85:24:20:ba:d9:74:26:f2:0c:ee:0a:cf:ac:be:69: d5:9f:02:a2:73:bd:46:4c:74:cf:3e:5d:e0:af:16: 2a:f7:69:d2:63:27:f1:0f:b3:dc:bb:06:09:73:42: eb:06:08:0b:89:2d:70:c3:62:19:04:4b:9f:90:a1: 0c:4d:61:6d:e3:23:a9:6d:38:53:9a:9b:bd:16:e4: 8e:ab:b4:d6:a8:04:ca:ff:6f:28:bd:5d:9b:c1:57: d6:fc:a0:50:0c:85:85:51:7f:c8:24:99:b8:44:96: 55:4e:b8:77:79:52:5d:80:ac:fe:f3:d4:34:3f:7d: 73:be:75:54:7e:80:f7:c9:53:41:6f:16:73:34:18: 7d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:24:C0:59:BD:A7:DF:9A:F0:46:D7:8A:ED:74:59:BA:66:2E:1B:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61e24a0f-8b90-3d0e-af70-a4f7f9fec1b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.89.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:28:f9:4e:8e:a4:dd:05:bb:e1:5b:71:20:44:86:6c:de:a8: 38:30:7b:6e:52:35:2b:6d:c0:31:6c:6f:35:c5:7f:27:11:ed: 51:b5:e1:8b:57:cf:61:21:b0:b1:4f:8e:48:8f:c8:15:f0:d5: 2a:50:6f:72:68:b1:b7:df:1d:a9:19:8a:99:b7:b5:7e:e8:30: db:22:f5:c4:fb:62:23:82:55:24:93:7b:06:bf:81:e1:41:27: 94:21:71:4e:5a:2b:f5:7b:a5:42:1b:78:d2:3c:fe:1c:75:44: 71:16:ac:34:ea:83:b9:2c:2a:4b:3c:55:3a:10:f5:36:46:84: 9b:aa:c6:0d:fa:2f:b5:36:35:6a:00:73:90:7c:bf:b3:d3:1e: ca:28:f1:03:84:25:3e:3b:6c:c5:c1:7a:72:db:1e:9b:bc:20: 26:3a:89:1e:ba:e1:6f:b4:eb:92:db:88:51:a6:5a:39:bd:fa: ea:9a:97:66:20:48:5e:ca:b2:b7:f1:84:4e:b5:98:4b:4b:49: 07:7d:08:e7:25:26:69:9a:9a:8d:85:94:9f:8d:a3:2b:88:c2: 34:b6:ac:de:7e:5a:e6:aa:ad:5d:22:35:e1:11:e4:83:12:dd: c1:ef:3b:68:f9:e7:28:ee:8a:34:19:bf:f5:23:3f:3c:1e:55: 92:9b:29:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uE3L+vfC6wqRL9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NzEwZTgzZjQtZDFkNS00ZjU4LTlmYjYtNDFlYzM1YTEyNWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGrhmenXwJODU8fH9lyrI//VczZRIDygFnJo LXP/nqAxmAfQWOjcmbaU8g9tG6x4hRC/s3TxctRz2Em/gVf2GrVCEw/TNyogj1O7 wACZLMUKxPTAgIJcmEbMsSb+nguw+nkf/mC7XMTLUneLW690JTLeJLhj99yFJCC6 2XQm8gzuCs+svmnVnwKic71GTHTPPl3grxYq92nSYyfxD7PcuwYJc0LrBggLiS1w w2IZBEufkKEMTWFt4yOpbThTmpu9FuSOq7TWqATK/28ovV2bwVfW/KBQDIWFUX/I JJm4RJZVTrh3eVJdgKz+89Q0P31zvnVUfoD3yVNBbxZzNBh9CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0kwFm9p9+a8EbXiu10WbpmLhsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjFlMjRhMGYtOGI5MC0z ZDBlLWFmNzAtYTRmN2Y5ZmVjMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRlnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoo+U6OpN0Fu+FbcSBEhmzeqDgwe25SNSttwDFsbzXFfycR7VG14YtX z2EhsLFPjkiPyBXw1SpQb3JosbffHakZipm3tX7oMNsi9cT7YiOCVSSTewa/geFB J5QhcU5aK/V7pUIbeNI8/hx1RHEWrDTqg7ksKks8VToQ9TZGhJuqxg36L7U2NWoA c5B8v7PTHsoo8QOEJT47bMXBenLbHpu8ICY6iR664W+065LbiFGmWjm9+uqal2Yg SF7KsrfxhE61mEtLSQd9COclJmmamo2FlJ+NoyuIwjS2rN5+WuaqrV0iNeER5IMS 3cHvO2j55yjuijQZv/UjPzweVZKbKdw= -----END CERTIFICATE-----Generated at Mon Oct 20 06:31:01 2025 by rpki-client