$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b892e23e-fa77-3543-a030-791bf9ec2188.roa File: b892e23e-fa77-3543-a030-791bf9ec2188.roa (raw, json) Hash identifier: KYpjw3SiAsCDkebO+Ix6ashDMrvTGtHCq7Vt7Jk7MtY= Subject key identifier: 1D:24:A6:EC:FE:EC:70:F3:A8:65:04:3E:F3:E6:AE:DE:FE:83:27:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B4E771F2B036D83F663E0B080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b892e23e-fa77-3543-a030-791bf9ec2188.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 33661 IP address blocks: 70.89.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:1f:2b:03:6d:83:f6:63:e0:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=649b03c0-5191-4784-8b14-084b02020074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:5f:69:55:7b:d0:4e:24:bc:fb:b0:3c:13: fe:c4:b8:06:21:36:a3:20:e3:f6:08:17:b4:3e:28: d0:02:77:d2:a9:a8:5c:e4:0e:65:dd:a8:65:7b:28: d2:df:3c:fe:fd:96:09:69:f5:b4:18:59:94:e8:17: 40:d8:c6:cb:97:75:6d:2b:c5:d3:0e:d0:9b:1a:fa: d3:ee:3b:2e:e7:ba:12:dd:6e:b3:08:12:33:d2:50: ff:c2:d7:62:40:48:8e:18:8e:f0:a5:12:de:f7:60: 53:0a:6c:4f:b0:1f:8b:ee:09:a3:3b:99:40:f1:ba: 27:d3:ac:82:6c:f3:a6:53:03:d4:42:69:52:0f:f3: fa:fa:73:ac:cd:01:0b:68:4f:61:e9:a5:a0:cb:07: 0d:5d:db:6e:69:19:24:1d:ad:fc:ef:c2:8b:3c:39: fb:aa:d1:ad:15:d0:2b:19:9c:c2:68:86:32:f2:fb: 87:79:8f:9b:17:0a:66:b7:27:ad:e9:1e:06:5e:6a: 9e:f3:f4:31:fd:23:71:8a:1f:0d:52:20:6d:5b:e4: 1f:c6:40:46:26:f2:25:22:0d:08:65:c0:d5:a7:92: 74:84:c3:84:04:fa:b6:d6:63:25:a9:70:f9:9f:aa: 35:92:d6:b6:aa:a4:cf:3e:0e:ea:90:12:04:a7:89: b8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:24:A6:EC:FE:EC:70:F3:A8:65:04:3E:F3:E6:AE:DE:FE:83:27:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b892e23e-fa77-3543-a030-791bf9ec2188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.89.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:84:ea:a3:35:a0:db:5e:19:48:44:9e:9e:6a:8b:75:19:1e: 0d:93:bf:d9:97:d6:cb:8a:a9:a5:ed:7b:67:5c:85:2b:b2:6b: 27:d3:57:b0:35:42:9e:43:83:dc:9b:50:c4:64:d3:79:d4:c7: d8:03:06:b5:32:8d:90:67:65:fb:f0:af:41:3c:56:16:03:83: a1:7a:24:bf:08:f1:f5:f3:bd:36:30:45:a6:19:eb:50:b0:27: 02:60:7b:c1:7c:ac:c1:d5:22:95:72:97:42:73:0c:da:91:dd: 20:95:24:e3:6c:c4:c0:ee:eb:47:21:43:f8:84:b4:49:15:02: b8:50:6f:40:86:0e:4b:11:b1:3a:53:b9:5c:b2:d5:0c:1c:11: 1d:5f:82:6c:9b:88:b9:47:17:b6:61:eb:9c:da:00:ae:e5:e6: 74:c0:fd:97:5b:a8:49:1f:bb:64:41:37:92:a3:36:4e:b3:49: 27:23:33:96:fc:12:94:56:46:6b:e8:70:94:11:1a:dc:7e:18: 4a:ec:db:ac:0c:a8:5c:b4:da:d1:d0:a7:dc:ff:36:70:f6:73: 82:20:36:8d:68:a9:f7:f5:72:36:aa:c4:55:1c:a6:4f:e9:28: 1c:be:a3:3e:8f:89:3a:c3:09:e9:34:f8:e5:26:48:57:33:b2: 92:df:63:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdx8rA22D9mPgsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NjQ5YjAzYzAtNTE5MS00Nzg0LThiMTQtMDg0YjAyMDIwMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP5faVV70E4kvPuwPBP+xLgGITajIOP2CBe0 PijQAnfSqahc5A5l3ahleyjS3zz+/ZYJafW0GFmU6BdA2MbLl3VtK8XTDtCbGvrT 7jsu57oS3W6zCBIz0lD/wtdiQEiOGI7wpRLe92BTCmxPsB+L7gmjO5lA8bon06yC bPOmUwPUQmlSD/P6+nOszQELaE9h6aWgywcNXdtuaRkkHa3878KLPDn7qtGtFdAr GZzCaIYy8vuHeY+bFwpmtyet6R4GXmqe8/Qx/SNxih8NUiBtW+QfxkBGJvIlIg0I ZcDVp5J0hMOEBPq21mMlqXD5n6o1kta2qqTPPg7qkBIEp4m4QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0kpuz+7HDzqGUEPvPmrt7+gydVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjg5MmUyM2UtZmE3Ny0z NTQzLWEwMzAtNzkxYmY5ZWMyMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARllKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOE6qM1oNteGUhEnp5qi3UZHg2Tv9mX1suKqaXte2dchSuyayfTV7A1 Qp5Dg9ybUMRk03nUx9gDBrUyjZBnZfvwr0E8VhYDg6F6JL8I8fXzvTYwRaYZ61Cw JwJge8F8rMHVIpVyl0JzDNqR3SCVJONsxMDu60chQ/iEtEkVArhQb0CGDksRsTpT uVyy1QwcER1fgmybiLlHF7Zh65zaAK7l5nTA/ZdbqEkfu2RBN5KjNk6zSScjM5b8 EpRWRmvocJQRGtx+GErs26wMqFy02tHQp9z/NnD2c4IgNo1oqff1cjaqxFUcpk/p KBy+oz6PiTrDCek0+OUmSFczspLfY+g= -----END CERTIFICATE-----Generated at Mon Oct 20 07:15:46 2025 by rpki-client