$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/11a766c2-5bc6-35dc-b412-2d788c81802f.roa File: 11a766c2-5bc6-35dc-b412-2d788c81802f.roa (raw, json) Hash identifier: Uns7JMGbZk0mDYVs/bghtu3dwWBuqh95HbWW4jfGyi4= Subject key identifier: 3F:70:DB:6A:20:1A:10:FB:0B:9B:95:B1:C9:3B:02:F3:0F:46:58:00 Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F4328584B92DCF3649B8E1619393A7580 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/11a766c2-5bc6-35dc-b412-2d788c81802f.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 46238 IP address blocks: 70.37.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f3:64:9b:8e:16:19:39:3a:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=c51521b6-43b9-413a-9f5d-ab24f5f62c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:32:51:7d:ea:ca:d5:67:6d:bb:1b:02:0b:c1: dd:af:71:cc:af:74:2d:81:cb:85:6a:1b:26:49:8a: 89:ac:cb:95:63:4f:19:63:6a:c5:a2:45:4c:02:dd: 2f:8b:4c:55:42:3a:71:88:c1:f3:69:4d:48:4b:f4: 34:03:96:4f:7c:c1:03:c9:a3:e9:a2:3a:e3:98:2f: 55:5e:fa:79:38:7d:75:1b:17:2c:20:0c:69:2c:e1: 0f:d4:44:3c:fe:26:d2:cd:ec:ac:19:b0:1b:3c:06: 18:87:aa:17:0d:3c:6c:46:f6:c3:0e:ee:4f:61:4a: b5:91:4c:f2:78:94:72:e7:7f:82:e0:0b:fe:45:71: 83:3d:87:56:61:0f:07:57:13:2c:04:ce:d6:72:db: e9:73:82:42:8d:b2:72:86:b9:25:2f:3f:8e:43:b0: cf:fd:ce:dd:a3:ca:0d:a6:87:6a:df:77:31:00:8c: f4:68:24:32:52:5c:67:4d:ee:44:78:3d:82:f9:08: 41:a6:be:89:f3:17:c3:4c:db:7e:12:c2:3a:7a:f7: 49:77:01:d6:69:90:8e:27:e8:f7:07:4e:2e:ad:d2: aa:05:67:5e:34:d3:ec:2d:57:ac:8d:f3:a5:80:82: 71:67:cf:e7:68:d9:c0:99:3b:92:70:02:d6:fa:80: aa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:70:DB:6A:20:1A:10:FB:0B:9B:95:B1:C9:3B:02:F3:0F:46:58:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/11a766c2-5bc6-35dc-b412-2d788c81802f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv4: 70.37.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e3:68:94:58:d6:77:c7:b6:6e:9a:d1:e5:eb:ed:87:50:b8: f5:0e:21:8a:46:70:b7:4b:06:41:2a:f3:4b:d1:94:65:15:81: e2:cb:2a:a0:73:0f:82:b4:9b:dd:f7:5e:eb:d4:8b:ad:e2:a5: b9:11:b1:92:84:04:00:cf:05:03:a5:69:0d:66:6c:56:70:77: 25:83:7b:cb:8a:50:af:f1:c1:ad:94:22:44:76:bb:21:4c:df: 99:18:ba:dd:12:b6:dc:dc:2e:af:8f:f0:96:15:36:bd:f4:5c: 49:23:95:cf:bb:f7:f5:bd:5b:61:5c:54:00:b5:48:57:3d:cb: 5b:de:0a:42:a2:86:86:04:fd:c2:6a:7d:46:c0:03:96:56:0d: 39:50:11:f6:d8:ba:20:e6:aa:29:7f:bb:6d:7e:d0:c0:df:21: d7:69:fd:36:74:0a:28:bb:78:7b:b1:d8:47:17:3d:ff:13:89: 07:2c:56:f6:15:92:0a:20:d1:4b:82:f5:03:ca:39:b8:b8:a2: 31:6e:c8:fc:d8:5f:26:fa:03:68:b1:75:41:43:1d:97:14:3c: 45:15:5f:e0:e7:49:e0:e1:4f:0f:93:dd:e1:e7:49:b0:d9:f4: 35:0f:56:25:b4:3c:31:04:c5:5b:02:75:4c:59:cb:da:30:f9: 2c:22:18:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PNkm44WGTk6dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk YzUxNTIxYjYtNDNiOS00MTNhLTlmNWQtYWIyNGY1ZjYyYzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozJRferK1WdtuxsCC8Hdr3HMr3QtgcuFahsm SYqJrMuVY08ZY2rFokVMAt0vi0xVQjpxiMHzaU1IS/Q0A5ZPfMEDyaPpojrjmC9V Xvp5OH11GxcsIAxpLOEP1EQ8/ibSzeysGbAbPAYYh6oXDTxsRvbDDu5PYUq1kUzy eJRy53+C4Av+RXGDPYdWYQ8HVxMsBM7Wctvpc4JCjbJyhrklLz+OQ7DP/c7do8oN podq33cxAIz0aCQyUlxnTe5EeD2C+QhBpr6J8xfDTNt+EsI6evdJdwHWaZCOJ+j3 B04urdKqBWdeNNPsLVesjfOlgIJxZ8/naNnAmTuScALW+oCq4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9w22ogGhD7C5uVsck7AvMPRlgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvMTFhNzY2YzItNWJjNi0z NWRjLWI0MTItMmQ3ODhjODE4MDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/jaJRY1nfHtm6a0eXr7YdQuPUOIYpGcLdLBkEq80vRlGUVgeLLKqBz D4K0m933XuvUi63ipbkRsZKEBADPBQOlaQ1mbFZwdyWDe8uKUK/xwa2UIkR2uyFM 35kYut0SttzcLq+P8JYVNr30XEkjlc+79/W9W2FcVAC1SFc9y1veCkKihoYE/cJq fUbAA5ZWDTlQEfbYuiDmqil/u21+0MDfIddp/TZ0Cii7eHux2EcXPf8TiQcsVvYV kgog0UuC9QPKObi4ojFuyPzYXyb6A2ixdUFDHZcUPEUVX+DnSeDhTw+T3eHnSbDZ 9DUPViW0PDEExVsCdUxZy9ow+SwiGNw= -----END CERTIFICATE-----Generated at Tue Oct 21 05:10:42 2025 by rpki-client