$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/70cfbeaa-2556-34d4-9e62-5c84f81d2077.roa File: 70cfbeaa-2556-34d4-9e62-5c84f81d2077.roa (raw, json) Hash identifier: vxAuYQqoqwQGuGMqWVvzRe/Sub8m41Ogwe1CDRwEEH4= Subject key identifier: 7E:5D:18:0C:24:05:D3:17:06:BD:5C:4F:C4:5B:9D:35:60:58:1D:84 Certificate issuer: /CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c Certificate serial: 010D0C9F4328584B636741BDBEDE6C0A67043400 Authority key identifier: 8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/70cfbeaa-2556-34d4-9e62-5c84f81d2077.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 401427 IP address blocks: 216.152.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:41:bd:be:de:6c:0a:67:04:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=7b5ee774-f6f9-4b89-b46c-12417822fd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:05:f4:96:3c:eb:0a:1e:a7:df:6e:d7:3c:4c: ad:86:0b:f7:1c:45:5e:d6:de:02:7f:b1:fa:cb:01: 4c:bb:5d:04:d5:a7:ac:53:07:f0:0f:b1:27:ca:df: 5a:e0:0b:35:bc:df:5d:cc:1f:40:93:a5:d7:ac:af: be:c0:25:85:f7:94:0b:13:2b:85:45:8e:b8:c2:e0: f4:25:63:20:c8:32:42:e6:e5:a2:d2:d4:18:d8:45: 03:28:a3:e1:8b:07:e3:9d:bb:df:c0:1c:44:50:ea: e3:16:7e:45:a5:68:32:41:0c:a5:7d:c6:7d:e9:c2: d0:1b:a9:d5:5d:ca:75:d3:cd:ef:6d:62:c0:93:23: 20:f7:84:ab:fd:27:11:b3:96:c5:cf:11:5d:90:70: bf:d8:c2:12:e6:f9:c5:a3:31:01:a4:52:a8:4e:d8: f4:88:eb:75:32:9e:17:15:9d:cc:29:72:88:5b:5f: 52:f3:0f:4e:7c:d5:f6:36:33:75:36:0e:b5:0a:34: 43:8b:ad:59:93:af:b7:e1:1e:fe:cc:1a:8b:a0:a1: c2:b7:b5:23:0e:26:49:ba:2f:49:ff:5c:ae:06:e1: d9:7b:43:9e:e6:00:e1:ee:ae:38:9d:dc:7e:78:dd: 11:c2:5d:3a:ca:dc:1a:f6:3d:52:5b:e0:70:3f:ea: f2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5D:18:0C:24:05:D3:17:06:BD:5C:4F:C4:5B:9D:35:60:58:1D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/70cfbeaa-2556-34d4-9e62-5c84f81d2077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl X509v3 Authority Key Identifier: keyid:8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer sbgp-ipAddrBlock: critical IPv4: 216.152.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ac:23:df:2f:fd:04:42:cc:1e:1f:46:a9:30:6f:6d:0f:3f: 99:87:a3:84:21:1f:03:e4:91:7c:58:7c:04:34:6c:91:2f:8e: 6a:18:0c:43:0e:95:26:ce:4b:52:24:47:51:ac:27:46:3c:b7: d3:8b:d6:25:f6:d8:96:7a:90:9b:81:02:41:d7:66:40:b9:94: 61:48:bf:d1:78:27:99:0c:72:8a:22:c7:60:99:e0:c1:1b:6b: bf:bd:2e:c8:53:88:bd:70:5c:50:66:1d:ab:fb:b1:ac:f0:c4: f9:6b:b1:71:bc:ba:a2:c5:2b:15:06:ee:26:70:fb:44:14:cc: 5b:94:df:5d:3d:9f:52:71:36:8b:fc:83:77:19:8b:b8:cc:2d: 63:04:67:0d:26:fa:ab:49:1c:15:7d:60:ef:04:c5:ad:ce:32: e6:36:e4:b1:3e:f3:df:3c:4e:c7:c7:5c:06:69:78:b8:ee:41: e3:29:05:78:6d:b5:57:e6:36:2c:2b:bb:df:28:52:0d:b0:b6: 11:d5:7d:8f:88:2f:8b:b9:3d:f6:6e:a5:6a:ca:bf:cc:46:3a: 35:cd:16:8d:17:0f:d6:27:9c:9e:55:48:28:5c:b3:d9:0d:67: 0f:3a:ba:0d:7c:00:b1:d6:9e:fe:b8:aa:6d:8c:95:99:c7:f7: de:e5:80:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0G9vt5sCmcENAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNlNWY4ZjgtN2Q2Zi00ZDQzLWExY2EtNDc3ZWM5MGE1 YTNjMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk N2I1ZWU3NzQtZjZmOS00Yjg5LWI0NmMtMTI0MTc4MjJmZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQX0ljzrCh6n327XPEythgv3HEVe1t4Cf7H6 ywFMu10E1aesUwfwD7Enyt9a4As1vN9dzB9Ak6XXrK++wCWF95QLEyuFRY64wuD0 JWMgyDJC5uWi0tQY2EUDKKPhiwfjnbvfwBxEUOrjFn5FpWgyQQylfcZ96cLQG6nV Xcp1083vbWLAkyMg94Sr/ScRs5bFzxFdkHC/2MIS5vnFozEBpFKoTtj0iOt1Mp4X FZ3MKXKIW19S8w9OfNX2NjN1Ng61CjRDi61Zk6+34R7+zBqLoKHCt7UjDiZJui9J /1yuBuHZe0Oe5gDh7q44ndx+eN0Rwl06ytwa9j1SW+BwP+ry+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5dGAwkBdMXBr1cT8RbnTVgWB2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1 ZjhmOC03ZDZmLTRkNDMtYTFjYS00NzdlYzkwYTVhM2MvNzBjZmJlYWEtMjU1Ni0z NGQ0LTllNjItNWM4NGY4MWQyMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNlNWY4ZjgtN2Q2Zi00ZDQzLWEx Y2EtNDc3ZWM5MGE1YTNjL2UzZTVmOGY4LTdkNmYtNGQ0My1hMWNhLTQ3N2VjOTBh NWEzYy5jcmwwHwYDVR0jBBgwFoAUjjXzWJ01FAK9y0jrYzm4j/XCZ8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1ZjhmOC03ZDZmLTRkNDMtYTFjYS00Nzdl YzkwYTVhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JhyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+sI98v/QRCzB4fRqkwb20PP5mHo4QhHwPkkXxYfAQ0bJEvjmoYDEMO lSbOS1IkR1GsJ0Y8t9OL1iX22JZ6kJuBAkHXZkC5lGFIv9F4J5kMcooix2CZ4MEb a7+9LshTiL1wXFBmHav7sazwxPlrsXG8uqLFKxUG7iZw+0QUzFuU3109n1JxNov8 g3cZi7jMLWMEZw0m+qtJHBV9YO8Exa3OMuY25LE+8988TsfHXAZpeLjuQeMpBXht tVfmNiwru98oUg2wthHVfY+IL4u5PfZupWrKv8xGOjXNFo0XD9YnnJ5VSChcs9kN Zw86ug18ALHWnv64qm2MlZnH997lgD4= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:26 2025 by rpki-client