$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/520a1c55-8b76-3016-a3f5-ef1de25431cc.roa File: 520a1c55-8b76-3016-a3f5-ef1de25431cc.roa (raw, json) Hash identifier: EkoQfe2gZTT5Dv1LI5iWMqzR/SNUYI3ntiRgmT1X9Lo= Subject key identifier: 28:8D:BD:47:1B:B5:0F:07:53:91:F2:DB:6E:0A:C0:DF:18:3F:73:B9 Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F4328584B434C6B42C3D0F085BBF35600 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/520a1c55-8b76-3016-a3f5-ef1de25431cc.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 30039 IP address blocks: 216.222.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:6b:42:c3:d0:f0:85:bb:f3:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=a90c87b1-bc70-4ee6-b6e5-0c07e8b4905c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5b:99:12:ac:40:b5:7f:0b:20:ff:cf:0d:21: 11:bd:21:49:a0:4a:d1:71:f0:aa:70:b0:70:96:4a: 41:a6:80:c6:22:60:36:98:ad:b3:57:02:6d:fa:bd: ca:2c:41:bd:a0:62:55:c1:30:36:b1:99:ec:ac:7b: ef:47:37:ff:b9:b8:d7:39:61:0f:67:a4:41:66:5b: 12:c7:1d:a2:00:ce:b4:98:49:23:9a:08:54:a1:07: 6c:87:d2:73:60:74:c4:02:46:93:3d:e7:11:d8:e6: e1:88:82:5d:6f:39:37:2e:3d:a7:20:06:fe:e3:96: 2a:97:fc:70:40:86:5a:df:b9:0d:77:3e:0b:9d:eb: 27:6c:0e:7c:2b:d7:3f:49:f4:03:70:67:13:a1:9a: bb:f9:f6:34:bb:ab:24:32:0f:5b:f1:ea:88:c3:1f: e3:5e:6d:ca:24:d3:11:37:b0:55:e2:1c:65:27:2d: 93:e0:29:ae:e2:2f:84:38:16:88:60:91:fa:45:ac: e0:b9:c5:66:4e:98:00:62:a4:8e:34:2d:47:b3:aa: d5:21:f6:1f:d5:bb:6b:cc:42:e7:9a:1e:d7:7a:00: 01:49:f4:4a:f5:5d:8d:69:28:a6:e6:89:cb:11:02: 9e:47:01:c1:79:4b:0b:7e:30:f2:67:f9:69:c6:b0: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8D:BD:47:1B:B5:0F:07:53:91:F2:DB:6E:0A:C0:DF:18:3F:73:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/520a1c55-8b76-3016-a3f5-ef1de25431cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:5a:a9:ec:e9:cd:b9:f3:7d:1c:b6:b5:67:c6:8e:0a:c8:aa: f5:3d:4d:d6:5c:e7:80:55:fa:e6:b8:53:f4:cf:46:43:8e:a6: c8:5d:1f:19:f4:e9:70:44:f9:f2:11:d8:69:77:f3:4f:23:0c: da:c8:59:03:f5:b6:1f:2a:d5:df:3a:7a:23:32:db:ad:8b:88: 3b:e4:cf:ff:ee:b0:43:fb:12:5a:f7:69:45:12:81:a1:10:d4: c6:cb:23:c5:b7:2f:a9:cd:95:e3:d2:59:bb:fe:1d:0f:c3:c2: d0:ca:b8:7b:d3:f2:32:ea:d9:7b:7e:48:3d:16:b6:01:72:70: 6e:a7:ac:42:ce:a3:11:8d:e8:74:70:52:14:3c:2f:fe:29:5b: 77:3e:5f:03:6c:27:4f:35:e8:c0:8d:8f:18:bc:02:0f:14:ac: 71:32:cf:e9:95:d2:f2:55:d1:ee:e5:8c:30:6b:4b:62:4d:ec: 37:f3:76:ef:25:c3:b8:75:e9:b3:ff:55:1f:18:f7:bf:53:50: c6:12:05:17:d7:6e:41:e3:19:5e:e4:bc:bc:29:be:ff:67:f9: 4a:c1:66:ee:b7:bf:ac:7f:cf:b9:41:8b:de:76:4e:c7:09:24: 2e:b4:1a:77:f0:3d:7b:d6:89:b4:e1:38:e4:b7:ad:79:9a:45: a2:ea:7e:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGtCw9DwhbvzVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YTkwYzg3YjEtYmM3MC00ZWU2LWI2ZTUtMGMwN2U4YjQ5MDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApluZEqxAtX8LIP/PDSERvSFJoErRcfCqcLBw lkpBpoDGImA2mK2zVwJt+r3KLEG9oGJVwTA2sZnsrHvvRzf/ubjXOWEPZ6RBZlsS xx2iAM60mEkjmghUoQdsh9JzYHTEAkaTPecR2ObhiIJdbzk3Lj2nIAb+45Yql/xw QIZa37kNdz4LnesnbA58K9c/SfQDcGcToZq7+fY0u6skMg9b8eqIwx/jXm3KJNMR N7BV4hxlJy2T4Cmu4i+EOBaIYJH6RazgucVmTpgAYqSONC1Hs6rVIfYf1btrzELn mh7XegABSfRK9V2NaSim5onLEQKeRwHBeUsLfjDyZ/lpxrAxXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiNvUcbtQ8HU5Hy224KwN8YP3O5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvNTIwYTFjNTUtOGI3Ni0z MDE2LWEzZjUtZWYxZGUyNTQzMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElaqezpzbnzfRy2tWfGjgrIqvU9TdZc54BV+ua4U/TPRkOOpshdHxn0 6XBE+fIR2Gl3808jDNrIWQP1th8q1d86eiMy262LiDvkz//usEP7Elr3aUUSgaEQ 1MbLI8W3L6nNlePSWbv+HQ/DwtDKuHvT8jLq2Xt+SD0WtgFycG6nrELOoxGN6HRw UhQ8L/4pW3c+XwNsJ0816MCNjxi8Ag8UrHEyz+mV0vJV0e7ljDBrS2JN7Dfzdu8l w7h16bP/VR8Y979TUMYSBRfXbkHjGV7kvLwpvv9n+UrBZu63v6x/z7lBi952TscJ JC60GnfwPXvWibThOOS3rXmaRaLqfuc= -----END CERTIFICATE-----Generated at Wed Oct 22 03:10:34 2025 by rpki-client