$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/456ba9f7-e72c-305d-b3cd-691ae04fe061.roa File: 456ba9f7-e72c-305d-b3cd-691ae04fe061.roa (raw, json) Hash identifier: Nnp3C5WdWE8duluTRqsxbEbo0HWxjPldjooToeLUjeM= Subject key identifier: 72:69:DD:B1:C8:92:79:4D:E5:E0:32:01:EB:ED:70:AD:EF:10:5E:6D Certificate issuer: /CN=8a57b69a-d683-4350-83d4-e449c0242b7d Certificate serial: 010D0C9F4328584B52A75163898E6A4BA2D04EA0 Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/456ba9f7-e72c-305d-b3cd-691ae04fe061.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 55134 IP address blocks: 70.34.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:51:63:89:8e:6a:4b:a2:d0:4e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=db83f46b-7b15-4c57-a2f8-b2ca803ddf40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:89:04:a5:dd:c8:7a:0a:de:a0:0a:02:f0:aa: c9:82:7a:5f:b2:7a:82:e6:54:58:f0:16:74:6d:1c: 4d:c0:9f:f9:5d:a8:95:9e:0b:9e:4d:2a:a8:a0:20: 0e:28:7c:cb:92:2d:e4:a9:80:f8:a8:1d:2d:c0:1c: 1f:5c:d8:d0:dd:3f:54:18:0b:50:45:fe:ed:8a:f3: 5c:38:2b:66:00:45:fb:40:d0:18:a6:02:2d:6c:a1: e1:4d:09:9c:d8:50:fb:29:34:44:b9:15:ce:36:b4: bc:30:45:62:67:28:9a:d0:2c:8a:e2:2e:43:af:7f: 65:97:3e:bc:81:5e:99:30:d4:ee:f3:4a:7a:b4:de: 79:aa:b7:fd:c6:f3:16:f7:a6:86:30:a7:bd:f8:20: 6f:33:1b:5d:e6:85:db:55:24:db:d1:66:9f:a5:16: 54:c4:2a:bc:23:ba:b3:d3:c7:9e:1b:1b:1e:bd:bb: cb:c7:92:ee:0b:1b:34:d9:43:58:16:88:83:06:e4: 23:29:80:41:1d:43:7f:cb:bb:86:25:b4:b7:d3:e6: 1b:b7:f9:38:1d:b9:db:8b:ec:dd:eb:b2:f2:bd:54: 84:a6:24:4f:50:85:58:47:ed:a8:6f:3a:17:3c:b2: 95:dd:d4:7d:70:28:3c:98:d0:b5:08:26:0a:ec:a8: be:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:69:DD:B1:C8:92:79:4D:E5:E0:32:01:EB:ED:70:AD:EF:10:5E:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/456ba9f7-e72c-305d-b3cd-691ae04fe061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl X509v3 Authority Key Identifier: keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer sbgp-ipAddrBlock: critical IPv4: 70.34.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:52:8e:d0:46:6f:9c:fe:6b:6c:d1:9f:42:d2:d0:c8:1e:b3: 5a:12:89:ab:8a:22:6f:36:85:01:03:ab:06:34:a0:5d:69:2b: d8:15:4f:af:50:63:63:83:c0:43:d6:65:54:db:34:a5:9e:99: 8e:7f:38:f8:04:97:56:14:b8:b6:2d:2a:c3:15:a3:54:54:a2: bd:2e:e1:50:09:52:31:0c:bd:3e:ed:13:fa:e5:ae:ac:39:91: cb:d8:4f:e3:42:8c:50:49:7c:a9:8a:85:8d:f0:a3:d4:28:e8: 40:11:61:5e:3f:c6:1e:cc:34:86:aa:13:4a:af:56:8d:3d:d6: 5f:a4:38:f8:31:ff:e1:a6:b2:6b:1b:41:41:16:01:a0:99:2c: 2c:5e:1a:66:7c:4b:73:e3:82:f9:de:82:50:5c:b4:d2:90:83: 1c:8a:9f:10:97:9a:9d:b0:b0:da:fc:69:9e:1d:0b:3d:4f:0e: b7:ee:c4:89:a8:a6:77:11:29:b7:e1:2b:5c:05:45:a6:73:a4: ca:a6:44:6a:fc:42:f8:03:ce:2d:86:37:25:c3:04:99:7f:ce: e5:37:bf:1e:4b:08:ae:30:12:1d:de:b1:b8:a1:36:c4:b2:09: 78:b6:44:9a:cc:92:1c:05:fa:b8:06:3b:c3:96:dd:a4:ca:9d: 01:a6:67:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1FjiY5qS6LQTqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy YjdkMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZGI4M2Y0NmItN2IxNS00YzU3LWEyZjgtYjJjYTgwM2RkZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5okEpd3IegreoAoC8KrJgnpfsnqC5lRY8BZ0 bRxNwJ/5XaiVngueTSqooCAOKHzLki3kqYD4qB0twBwfXNjQ3T9UGAtQRf7tivNc OCtmAEX7QNAYpgItbKHhTQmc2FD7KTREuRXONrS8MEViZyia0CyK4i5Dr39llz68 gV6ZMNTu80p6tN55qrf9xvMW96aGMKe9+CBvMxtd5oXbVSTb0WafpRZUxCq8I7qz 08eeGxsevbvLx5LuCxs02UNYFoiDBuQjKYBBHUN/y7uGJbS30+Ybt/k4Hbnbi+zd 67LyvVSEpiRPUIVYR+2obzoXPLKV3dR9cCg8mNC1CCYK7Ki+UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJp3bHIknlN5eAyAevtcK3vEF5tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3 YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvNDU2YmE5ZjctZTcyYy0z MDVkLWIzY2QtNjkxYWUwNGZlMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0 MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5 YzAyNDJiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJSjtBGb5z+a2zRn0LS0Mges1oSiauKIm82hQEDqwY0oF1pK9gVT69Q Y2ODwEPWZVTbNKWemY5/OPgEl1YUuLYtKsMVo1RUor0u4VAJUjEMvT7tE/rlrqw5 kcvYT+NCjFBJfKmKhY3wo9Qo6EARYV4/xh7MNIaqE0qvVo091l+kOPgx/+Gmsmsb QUEWAaCZLCxeGmZ8S3PjgvneglBctNKQgxyKnxCXmp2wsNr8aZ4dCz1PDrfuxImo pncRKbfhK1wFRaZzpMqmRGr8QvgDzi2GNyXDBJl/zuU3vx5LCK4wEh3esbihNsSy CXi2RJrMkhwF+rgGO8OW3aTKnQGmZzk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:32:34 2025 by rpki-client