$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa File: 0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa (raw, json) Hash identifier: YByw6HGpDuJt6a39kUEcQx6jhqByv8VGlRy/3LUSwf0= Subject key identifier: A1:D5:9A:E1:7E:A0:E0:A9:A9:FA:F7:D3:F8:81:8C:78:06:82:F7:16 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C9473B868D5552AF9F00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 25668 IP address blocks: 208.181.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c9:47:3b:86:8d:55:52:af:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=47b583ec-153c-42b8-a7f4-9dafb90ebc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:b0:4b:a9:66:13:c5:b2:ab:1c:33:e8:48: f1:8a:01:1c:b6:f7:d5:c4:5d:51:1f:ba:5c:27:22: a6:3d:ad:4a:98:c7:7a:fc:0b:31:cf:e1:67:69:62: 07:27:54:76:a3:7f:c5:32:e1:b7:71:77:55:e3:9a: 98:0d:7f:d1:a8:b4:87:ca:27:fe:4a:46:82:b7:fa: e3:38:df:45:98:81:ad:bd:0d:87:ea:8f:a7:f0:fb: fd:bf:16:b1:05:12:43:23:70:26:f1:64:c7:f9:6c: 19:10:73:4b:f8:33:b6:ca:bc:49:0d:10:7d:3b:7f: 17:92:ba:a4:fa:ad:45:22:4e:c7:1d:3c:3b:e7:83: 6c:44:b9:79:5d:8b:14:c9:1a:af:b9:32:46:8f:29: df:cc:20:43:a6:a3:25:71:a9:61:d0:7a:14:ab:8c: 4e:81:ae:48:6b:ce:7b:64:fe:f6:7c:7c:0b:50:da: 2d:48:1a:d5:e1:c8:fa:ce:b4:3c:8b:36:1d:24:8e: 1e:67:15:bb:3d:9f:17:33:b9:dc:bf:48:43:c0:02: 40:a7:d7:d1:49:d1:b7:33:7f:76:52:5d:d8:49:d2: b1:3a:be:af:4b:61:ef:d8:93:9c:28:46:de:ac:95: 3e:61:a4:4d:65:a3:7d:39:af:83:8c:7e:6f:90:f8: 2c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D5:9A:E1:7E:A0:E0:A9:A9:FA:F7:D3:F8:81:8C:78:06:82:F7:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:ae:36:c0:e1:12:11:a3:4c:80:94:38:e0:d6:6a:0d:9a:ad: c3:46:50:5b:8c:6d:d1:42:6a:14:0d:55:e9:c5:f1:ad:05:ce: e7:56:a8:c6:55:8e:7e:45:46:7c:a8:82:fd:d5:3e:fc:f4:24: 62:ca:6f:65:4d:62:38:28:bd:59:20:63:8d:8c:c0:d9:72:ac: 1b:3b:da:22:4d:c7:98:86:b8:ad:9e:10:19:f7:85:98:39:01: bd:39:b2:68:0b:10:2d:a1:57:ba:26:70:06:0c:93:a9:dd:d9: 86:81:af:6e:00:f6:fd:14:b8:ea:86:f4:0e:d4:8e:c1:b7:63: 07:57:16:54:cd:4d:f0:0e:98:83:e3:07:a0:40:c7:10:54:86: c6:83:a5:b4:52:e7:dd:77:e1:0a:e6:61:14:ab:dd:9a:a4:80: 3f:3e:18:40:9c:e3:50:2f:3a:e9:45:db:6d:24:94:bd:15:6e: 1d:da:6f:cd:9b:f1:b7:fa:31:bd:81:ea:4d:f5:5e:78:d9:54: 9e:b6:86:e7:f5:6a:c6:23:7e:cc:eb:e3:8b:a4:53:d8:a2:6d: 6f:1b:e5:56:fa:5c:d9:76:7d:bc:2a:b9:b5:7d:97:e7:7e:9d: bb:4e:f0:fb:33:5d:23:25:58:c5:eb:a2:0f:ce:ca:3e:0e:35: 43:36:ee:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEclHO4aNVVKvnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NDdiNTgzZWMtMTUzYy00MmI4LWE3ZjQtOWRhZmI5MGViYzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5GwS6lmE8Wyqxwz6EjxigEctvfVxF1RH7pc JyKmPa1KmMd6/Asxz+FnaWIHJ1R2o3/FMuG3cXdV45qYDX/RqLSHyif+SkaCt/rj ON9FmIGtvQ2H6o+n8Pv9vxaxBRJDI3Am8WTH+WwZEHNL+DO2yrxJDRB9O38Xkrqk +q1FIk7HHTw754NsRLl5XYsUyRqvuTJGjynfzCBDpqMlcalh0HoUq4xOga5Ia857 ZP72fHwLUNotSBrV4cj6zrQ8izYdJI4eZxW7PZ8XM7ncv0hDwAJAp9fRSdG3M392 Ul3YSdKxOr6vS2Hv2JOcKEberJU+YaRNZaN9Oa+DjH5vkPgsnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHVmuF+oOCpqfr30/iBjHgGgvcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDU3MGViYWUtZmNmZi0z MzJhLTlhMzEtYzZiYjMwYWQxOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0LV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCuNsDhEhGjTICUOODWag2arcNGUFuMbdFCahQNVenF8a0FzudWqMZV jn5FRnyogv3VPvz0JGLKb2VNYjgovVkgY42MwNlyrBs72iJNx5iGuK2eEBn3hZg5 Ab05smgLEC2hV7omcAYMk6nd2YaBr24A9v0UuOqG9A7UjsG3YwdXFlTNTfAOmIPj B6BAxxBUhsaDpbRS59134QrmYRSr3ZqkgD8+GECc41AvOulF220klL0Vbh3ab82b 8bf6Mb2B6k31XnjZVJ62huf1asYjfszr44ukU9iibW8b5Vb6XNl2fbwqubV9l+d+ nbtO8PszXSMlWMXrog/Oyj4ONUM27t8= -----END CERTIFICATE-----Generated at Sun Oct 19 20:16:36 2025 by rpki-client