$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/889a3a3d-eda5-3dc9-b290-ca3a76472a51.roa File: 889a3a3d-eda5-3dc9-b290-ca3a76472a51.roa (raw, json) Hash identifier: gJOo1rAiMHj7ngKRWmkRxMZbzZo6foLEi+fs85HQVcM= Subject key identifier: C2:A7:B8:7B:81:07:93:B7:78:32:E6:16:8B:B1:40:48:B7:58:1B:CC Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584B821DAA38CB38A857EEF3A080 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/889a3a3d-eda5-3dc9-b290-ca3a76472a51.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 11427 IP address blocks: 70.120.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:aa:38:cb:38:a8:57:ee:f3:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=e8d8c160-c9d7-4668-80d0-75b1963f9ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:46:3d:25:73:d8:dc:b0:ef:59:8b:d2:fe:12: 47:e1:52:18:df:0a:b6:e6:db:39:7e:0d:5c:83:0f: 35:e4:5c:c6:f2:0d:60:ce:b4:d3:0f:a9:7f:a3:87: 21:d2:b5:3e:71:c4:c6:7d:35:1f:33:57:56:b2:7a: 2a:da:da:d6:ed:cd:88:a7:47:c3:7b:c7:3b:39:64: ac:41:43:7b:bb:34:25:4c:94:5b:40:4d:24:9b:b2: c8:fe:4d:1e:66:ba:20:78:51:96:9b:dc:31:31:14: f7:77:9f:08:bd:c6:9c:80:a3:93:2d:83:e4:ec:f1: 16:bd:1f:5c:bd:1e:83:c7:67:d9:23:73:30:2c:3d: 16:20:d5:22:2f:b4:0e:b2:62:c1:27:47:68:43:24: e3:c4:e9:3b:52:7a:fc:7f:b0:93:ce:0a:71:d9:c8: 3a:98:b4:99:13:cc:ce:be:78:b8:d5:b8:84:93:30: 06:c3:6d:cb:8f:3c:66:d9:65:61:71:55:1f:c5:9e: bf:75:79:74:1a:ec:11:97:bd:30:19:7c:45:26:ac: 34:a7:ef:85:fd:97:6d:6b:f9:db:fd:f5:3f:7a:f9: 1d:f2:9e:8a:3a:fd:98:3b:de:04:5a:e8:ee:a7:01: 39:b9:e3:48:e0:cc:d8:1a:5c:c0:26:01:56:f2:99: 7b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A7:B8:7B:81:07:93:B7:78:32:E6:16:8B:B1:40:48:B7:58:1B:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/889a3a3d-eda5-3dc9-b290-ca3a76472a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 70.120.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:df:c1:a2:cc:dc:e4:72:c9:61:13:60:93:69:0e:d1:bb:8f: b8:d3:bc:e6:8b:04:82:9b:f2:f4:79:1a:42:fc:70:2a:6d:e9: b6:4a:74:4e:bb:73:10:b0:47:1c:30:b4:0a:18:c5:b1:4b:88: 99:cd:a5:74:d0:05:9e:7d:ca:a2:37:d4:0b:d5:78:2e:55:eb: 43:21:0d:77:4c:15:0b:76:f0:a8:18:92:85:aa:ba:c5:0f:cc: 51:e7:e9:cd:6a:62:30:2f:11:dc:9c:b0:54:df:48:9d:db:36: f4:4a:1b:c3:fc:37:6f:22:14:b5:e6:b0:79:1b:e1:0b:05:39: c5:c2:25:a8:54:22:aa:a6:e4:35:a8:52:16:81:c9:43:11:60: ed:e5:0f:ab:1a:c0:88:35:ed:14:27:20:f1:56:7e:b0:d3:de: 47:f1:af:8a:45:f0:5d:d0:70:e8:4b:ee:09:f8:57:a7:84:92: 5e:f1:91:2f:59:4f:22:9f:5f:ac:c7:0d:d5:b1:41:80:ad:e9: f0:cd:53:41:5f:01:a3:4b:7d:02:be:c7:78:07:cc:33:92:d7: 96:58:d1:04:d0:17:98:d7:c8:05:63:3a:c7:13:e8:d3:6c:fb: ae:28:6a:40:cc:e5:bc:73:84:48:e6:3c:3b:aa:0d:2c:e8:83: 1e:d2:1d:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHao4yzioV+7zoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZThkOGMxNjAtYzlkNy00NjY4LTgwZDAtNzViMTk2M2Y5Y2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0Y9JXPY3LDvWYvS/hJH4VIY3wq25ts5fg1c gw815FzG8g1gzrTTD6l/o4ch0rU+ccTGfTUfM1dWsnoq2trW7c2Ip0fDe8c7OWSs QUN7uzQlTJRbQE0km7LI/k0eZrogeFGWm9wxMRT3d58IvcacgKOTLYPk7PEWvR9c vR6Dx2fZI3MwLD0WINUiL7QOsmLBJ0doQyTjxOk7Unr8f7CTzgpx2cg6mLSZE8zO vni41biEkzAGw23Ljzxm2WVhcVUfxZ6/dXl0GuwRl70wGXxFJqw0p++F/Zdta/nb /fU/evkd8p6KOv2YO94EWujupwE5ueNI4MzYGlzAJgFW8pl7TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKnuHuBB5O3eDLmFouxQEi3WBvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvODg5YTNhM2QtZWRhNS0z ZGM5LWIyOTAtY2EzYTc2NDcyYTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRniAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADfwaLM3ORyyWETYJNpDtG7j7jTvOaLBIKb8vR5GkL8cCpt6bZKdE67 cxCwRxwwtAoYxbFLiJnNpXTQBZ59yqI31AvVeC5V60MhDXdMFQt28KgYkoWqusUP zFHn6c1qYjAvEdycsFTfSJ3bNvRKG8P8N28iFLXmsHkb4QsFOcXCJahUIqqm5DWo UhaByUMRYO3lD6sawIg17RQnIPFWfrDT3kfxr4pF8F3QcOhL7gn4V6eEkl7xkS9Z TyKfX6zHDdWxQYCt6fDNU0FfAaNLfQK+x3gHzDOS15ZY0QTQF5jXyAVjOscT6NNs +64oakDM5bxzhEjmPDuqDSzogx7SHd8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:21 2025 by rpki-client