$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa File: 4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa (raw, json) Hash identifier: RvLYCy3cepbb2BhsLBkTjcAhXiOod51oE+7wlZnCJvI= Subject key identifier: 5C:06:04:0B:5E:06:3D:EB:80:F9:4E:8A:84:0F:EA:A9:75:3A:18:AA Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F4328584B434C6B331368D156FE5EF080 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 30039 IP address blocks: 216.222.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:6b:33:13:68:d1:56:fe:5e:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=2deb54b1-3fce-4c8a-a3ad-89a1bed0bc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:55:65:47:5c:4d:31:c9:2e:ff:70:1d:5d:e6: 80:1f:8f:0a:d7:de:2a:1f:86:eb:0c:a5:6f:fa:36: 0d:62:d6:d1:4e:cb:ff:e4:bb:9c:24:be:81:c1:33: 2b:89:d5:bf:a4:91:51:b7:f9:ee:33:9e:38:c4:0c: 67:c0:1d:bd:5d:40:77:a3:c8:30:43:50:34:6c:a3: a3:06:20:b4:0e:9a:c7:c7:91:fa:6e:f4:88:36:1b: 6b:ed:72:eb:9a:44:ad:21:18:d4:12:14:25:df:ca: 8d:9e:51:c2:06:f3:8c:16:ba:ea:51:29:81:79:1b: 3d:dc:06:f4:a7:c4:69:fd:42:aa:08:50:9f:c0:2c: cf:3d:df:d8:f4:f9:c8:bd:5f:23:7d:dc:eb:48:25: 14:9e:68:4c:df:67:e2:17:55:c0:18:aa:d3:20:b7: 75:38:eb:c3:32:33:2d:15:e2:ce:c4:0b:36:fe:fb: c5:d9:ae:24:0a:b2:8e:61:56:76:94:f0:1d:5d:a7: 62:5c:00:d6:c3:7e:cb:96:0a:77:9c:16:a5:f2:72: 28:5a:67:d6:36:bd:62:9b:f8:0f:61:e1:04:2f:45: 74:39:06:37:e9:ca:09:16:27:c8:d1:2b:12:5f:9c: 75:83:0a:ea:39:99:99:c4:c6:b1:d1:e6:62:23:d6: ea:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:06:04:0B:5E:06:3D:EB:80:F9:4E:8A:84:0F:EA:A9:75:3A:18:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ab:33:d0:63:43:95:51:3b:1f:b2:fa:a3:fb:50:3a:b7:f9: 92:f6:dd:36:0c:57:17:f5:79:b3:9e:09:9f:09:27:a6:94:49: 28:7b:ec:a5:9f:14:5f:02:06:49:ad:02:18:c3:b7:b8:b1:ca: 45:c1:9f:a0:69:48:29:d3:c7:77:d5:7e:76:5c:25:a6:b2:30: 9d:ed:3b:69:a9:3b:30:57:4c:6d:ba:20:62:a6:2c:47:43:93: 8e:f6:8f:e3:c9:16:d8:ad:d7:9f:8a:29:68:79:6e:b9:e1:a8: 70:5e:50:8f:4e:68:c1:96:14:f1:39:c5:4b:f5:e4:86:85:fa: 87:a2:a1:f2:50:47:55:7d:a7:53:d6:40:45:47:db:04:32:2d: a7:9d:fc:75:b3:1a:f4:fa:ab:cf:52:61:b3:6e:05:b8:f6:a1: 70:58:d0:04:b0:bf:79:a9:50:c0:b3:36:67:3b:20:c8:64:87: d2:d2:0e:88:f1:64:4d:6b:0d:0c:31:ab:f7:3a:a6:6f:21:15: c2:61:d8:5c:4b:a3:69:57:4f:fe:0f:ca:af:92:10:89:1c:a0: e1:93:a9:bb:4f:b9:f3:c9:e6:87:d3:f5:b0:1b:05:0a:8e:5f: 7b:5f:52:74:8e:20:44:8e:0f:a9:a8:00:4c:dd:b6:7f:6e:33: 18:13:c0:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGszE2jRVv5e8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MmRlYjU0YjEtM2ZjZS00YzhhLWEzYWQtODlhMWJlZDBiYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFVlR1xNMcku/3AdXeaAH48K194qH4brDKVv +jYNYtbRTsv/5LucJL6BwTMridW/pJFRt/nuM544xAxnwB29XUB3o8gwQ1A0bKOj BiC0DprHx5H6bvSINhtr7XLrmkStIRjUEhQl38qNnlHCBvOMFrrqUSmBeRs93Ab0 p8Rp/UKqCFCfwCzPPd/Y9PnIvV8jfdzrSCUUnmhM32fiF1XAGKrTILd1OOvDMjMt FeLOxAs2/vvF2a4kCrKOYVZ2lPAdXadiXADWw37Llgp3nBal8nIoWmfWNr1im/gP YeEEL0V0OQY36coJFifI0SsSX5x1gwrqOZmZxMax0eZiI9bqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwGBAteBj3rgPlOioQP6ql1OhiqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvNGE1ZGEwMTEtM2M2My0z NDRlLThmNGUtMWI0ODVjNDFmN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSrM9BjQ5VROx+y+qP7UDq3+ZL23TYMVxf1ebOeCZ8JJ6aUSSh77KWf FF8CBkmtAhjDt7ixykXBn6BpSCnTx3fVfnZcJaayMJ3tO2mpOzBXTG26IGKmLEdD k472j+PJFtit15+KKWh5brnhqHBeUI9OaMGWFPE5xUv15IaF+oeiofJQR1V9p1PW QEVH2wQyLaed/HWzGvT6q89SYbNuBbj2oXBY0ASwv3mpUMCzNmc7IMhkh9LSDojx ZE1rDQwxq/c6pm8hFcJh2FxLo2lXT/4Pyq+SEIkcoOGTqbtPufPJ5ofT9bAbBQqO X3tfUnSOIESOD6moAEzdtn9uMxgTwG4= -----END CERTIFICATE-----Generated at Wed Oct 22 03:10:36 2025 by rpki-client