$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fefa3b84-b268-3640-ba36-19a910258277.roa File: fefa3b84-b268-3640-ba36-19a910258277.roa (raw, json) Hash identifier: bHeBVmZ22R9PBOhbRFvTDaLfWK/47WCnDYOHuHM1PE8= Subject key identifier: DE:8C:67:35:A6:1C:CC:0D:06:D7:DF:6C:D1:5E:5D:24:FB:CD:21:9A Certificate issuer: /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520 Certificate serial: 010D0C9F4328584B0746BEB47E56DA0B81CC53C0 Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fefa3b84-b268-3640-ba36-19a910258277.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 3695 IP address blocks: 70.36.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:be:b4:7e:56:da:0b:81:cc:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=8ad47528-b4f8-4fad-b0a5-f9eba32f14cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fd:75:02:1d:5d:40:87:76:f2:d5:16:dd:b5: d9:5f:55:70:c1:73:c8:7e:71:36:25:5a:02:e1:1e: 24:aa:63:d3:d1:08:8b:2f:e0:f9:f1:e7:c1:81:e6: cb:30:1a:ea:d2:6c:03:25:de:cf:fc:7b:52:55:9e: 68:55:26:ee:2e:55:5f:4b:1b:d8:98:93:4c:a8:21: 23:81:04:70:8b:13:12:a5:2a:49:59:1a:76:0e:e1: 62:e0:b3:21:7c:22:fb:99:97:68:df:08:be:5f:41: e8:9f:e5:75:d8:09:a6:47:39:f0:d5:ff:73:8e:c4: f5:e9:b7:e4:84:54:47:37:97:6d:4d:5b:43:5d:06: 07:54:f2:0e:d8:3c:44:1e:17:f1:5f:ae:b9:41:84: 27:81:48:52:56:40:fc:e2:91:4b:4f:49:30:df:e9: 20:c7:29:55:a9:69:60:fd:d5:66:2e:17:27:2b:29: 71:03:99:3b:c7:2a:17:3e:30:1b:ed:7e:96:6e:13: 70:af:4b:92:19:d9:c9:ca:83:d2:63:d7:9f:fe:c8: 1c:da:8e:e2:09:65:bd:47:49:ea:3b:91:0e:41:26: dc:3d:8a:ad:5b:75:75:fc:15:21:77:d5:23:77:8c: bd:65:7a:1d:2e:26:51:83:3e:31:8c:07:fc:fb:f1: 1b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8C:67:35:A6:1C:CC:0D:06:D7:DF:6C:D1:5E:5D:24:FB:CD:21:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fefa3b84-b268-3640-ba36-19a910258277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl X509v3 Authority Key Identifier: keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer sbgp-ipAddrBlock: critical IPv4: 70.36.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:07:d3:ae:18:a6:8e:28:72:85:29:7e:3d:bb:18:de:31:08: 0b:c8:0c:c5:d0:87:b2:2c:7e:7b:55:7b:67:03:54:63:24:88: f9:4b:ed:fa:ed:c3:22:67:a7:84:1d:ba:83:cd:c2:5e:08:29: 71:b5:81:f3:e9:34:0b:ca:ae:d8:22:1c:53:25:f8:ad:20:37: 53:16:0a:db:f1:49:4a:59:8c:a3:f0:ae:79:64:59:bc:ff:e7: 0c:f0:98:ad:a4:b8:4b:93:08:66:95:28:cb:31:b1:e0:ae:d4: ff:bc:c7:25:9e:7c:0d:5a:0f:7f:39:0c:48:9b:ed:ae:0f:04: 67:bc:2d:00:05:e1:7d:90:b2:b1:96:30:0c:fe:63:6f:ea:b2: 3d:c6:34:16:45:cb:eb:12:ef:84:14:b7:e1:2a:21:cd:48:5e: 4c:0f:96:0c:0e:5f:67:93:31:cf:21:2a:15:a8:0e:98:b2:25: 20:75:1f:1f:0e:88:23:6e:0b:68:cb:61:3c:da:78:fa:7b:09: 55:95:7d:ec:69:87:e4:a9:27:97:5e:37:fa:7f:cd:e1:d8:0c: e3:53:79:fb:99:e1:81:a6:3f:96:3c:a0:8b:8a:1a:34:6e:4f: de:9f:9d:49:1a:d9:b3:29:a4:ac:e4:9f:47:95:08:93:eb:65: 1d:03:5a:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRr60flbaC4HMU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi NTIwMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk OGFkNDc1MjgtYjRmOC00ZmFkLWIwYTUtZjllYmEzMmYxNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/11Ah1dQId28tUW3bXZX1VwwXPIfnE2JVoC 4R4kqmPT0QiLL+D58efBgebLMBrq0mwDJd7P/HtSVZ5oVSbuLlVfSxvYmJNMqCEj gQRwixMSpSpJWRp2DuFi4LMhfCL7mZdo3wi+X0Hon+V12AmmRznw1f9zjsT16bfk hFRHN5dtTVtDXQYHVPIO2DxEHhfxX665QYQngUhSVkD84pFLT0kw3+kgxylVqWlg /dVmLhcnKylxA5k7xyoXPjAb7X6WbhNwr0uSGdnJyoPSY9ef/sgc2o7iCWW9R0nq O5EOQSbcPYqtW3V1/BUhd9Ujd4y9ZXodLiZRgz4xjAf8+/EbSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6MZzWmHMwNBtffbNFeXST7zSGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvZmVmYTNiODQtYjI2OC0z NjQwLWJhMzYtMTlhOTEwMjU4Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0 MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMH064Ypo4ocoUpfj27GN4xCAvIDMXQh7IsfntVe2cDVGMkiPlL7frt wyJnp4QduoPNwl4IKXG1gfPpNAvKrtgiHFMl+K0gN1MWCtvxSUpZjKPwrnlkWbz/ 5wzwmK2kuEuTCGaVKMsxseCu1P+8xyWefA1aD385DEib7a4PBGe8LQAF4X2QsrGW MAz+Y2/qsj3GNBZFy+sS74QUt+EqIc1IXkwPlgwOX2eTMc8hKhWoDpiyJSB1Hx8O iCNuC2jLYTzaePp7CVWVfexph+SpJ5deN/p/zeHYDONTefuZ4YGmP5Y8oIuKGjRu T96fnUka2bMppKzkn0eVCJPrZR0DWoQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:58 2025 by rpki-client