$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa File: 8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa (raw, json) Hash identifier: mUpkFtez1/EX842z4BofGnYEVNpZh6iPWXTDWuG9ofw= Subject key identifier: FF:80:AB:7E:52:45:53:4F:A6:8E:03:65:F8:8C:B6:01:1B:49:DC:39 Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F4328584B434C6B56D1E46336BB7633C0 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 30039 IP address blocks: 216.222.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:6b:56:d1:e4:63:36:bb:76:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=6cb7cddb-9d52-4932-8534-1f97df2565cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:74:34:93:89:ad:21:dd:29:19:51:da:a3:2a: 8c:e5:e4:f8:6b:4b:25:73:e2:1f:b6:51:e7:d6:59: 39:f2:14:d1:18:c3:a2:a7:a4:80:4c:71:51:f0:7b: b3:15:89:34:43:2e:c7:3e:6d:0d:e8:31:80:d2:77: 8a:56:08:49:18:4d:6b:da:cd:da:f5:a7:65:d3:1d: fe:54:07:05:99:01:1a:b5:9d:1a:c2:1c:1d:c9:69: 97:be:b0:57:96:35:42:ba:d4:c6:ae:96:a8:48:00: 1f:2a:b0:19:64:70:f7:37:d0:1e:da:ae:ca:90:24: 77:5a:64:75:7d:13:15:d5:b1:4a:14:fc:58:e3:dc: de:77:5a:ea:d1:85:78:04:47:6f:ef:89:d5:7e:7d: ae:6e:cc:41:f6:c9:27:6f:8d:c0:05:cd:25:8d:4f: 88:88:7f:c4:ad:7b:d6:12:9f:16:0e:fd:e5:6a:69: 2b:7b:97:7a:78:be:35:f2:28:25:91:1d:d7:4d:9f: 65:88:d6:ad:1a:93:85:da:41:a7:9e:3f:a2:89:3c: a2:33:93:81:21:a4:a7:ee:96:e3:2b:65:db:67:6f: 66:ab:ab:c9:4e:28:df:01:c7:c7:d9:9d:0d:49:74: 60:bd:0a:27:b9:4b:ac:d8:df:07:7a:c2:12:0a:2f: 8f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:80:AB:7E:52:45:53:4F:A6:8E:03:65:F8:8C:B6:01:1B:49:DC:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b1:63:52:fc:be:17:4e:22:48:30:f0:4e:35:b0:07:ce:87: 70:91:c8:e5:17:54:ff:f5:69:0e:7d:76:64:44:7d:57:6c:60: fe:66:68:49:fa:12:fa:5b:f8:b1:a1:72:37:ee:f9:12:5d:61: b2:39:f6:6e:5b:b5:ac:f7:12:ec:3e:8b:0b:9a:84:0a:58:ee: df:45:12:ff:cd:39:f5:b9:39:74:61:5d:68:83:af:a7:39:d6: 36:a0:95:e0:9c:65:18:bc:cf:16:f9:82:5f:5b:5d:05:8f:fd: 63:a4:f2:0f:3c:93:e0:7b:8b:da:ce:77:ec:e1:40:57:17:b4: eb:59:5b:aa:8d:c7:93:ed:33:0f:73:20:c5:ff:b3:91:12:2a: 7d:f0:87:92:b7:c0:41:19:37:73:21:f0:e6:16:6a:fa:43:13: f0:ce:46:be:44:7f:a3:a4:00:84:23:75:34:dc:22:97:7e:6c: bf:f0:f3:b5:bf:43:68:92:b0:d6:6d:1e:d3:20:ea:d0:c4:5c: 29:92:62:d4:d6:19:68:d3:13:d1:31:3c:03:ee:25:ff:c1:5d: f2:a5:7d:b1:46:44:5e:2a:c7:95:98:d6:90:62:8f:2f:1b:30: 52:f9:a0:ef:3a:94:9c:c1:56:9f:8a:61:b5:03:e6:29:9c:4b: 0c:e6:e4:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGtW0eRjNrt2M8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NmNiN2NkZGItOWQ1Mi00OTMyLTg1MzQtMWY5N2RmMjU2NWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3Q0k4mtId0pGVHaoyqM5eT4a0slc+IftlHn 1lk58hTRGMOip6SATHFR8HuzFYk0Qy7HPm0N6DGA0neKVghJGE1r2s3a9adl0x3+ VAcFmQEatZ0awhwdyWmXvrBXljVCutTGrpaoSAAfKrAZZHD3N9Ae2q7KkCR3WmR1 fRMV1bFKFPxY49zed1rq0YV4BEdv74nVfn2ubsxB9sknb43ABc0ljU+IiH/ErXvW Ep8WDv3lamkre5d6eL418iglkR3XTZ9liNatGpOF2kGnnj+iiTyiM5OBIaSn7pbj K2XbZ29mq6vJTijfAcfH2Z0NSXRgvQonuUus2N8HesISCi+POwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+Aq35SRVNPpo4DZfiMtgEbSdw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvOGIyYTIyYmYtN2I2Ni0z NGU2LTkxOTgtMjRkOGMwOWIxOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGxY1L8vhdOIkgw8E41sAfOh3CRyOUXVP/1aQ59dmREfVdsYP5maEn6 Evpb+LGhcjfu+RJdYbI59m5btaz3Euw+iwuahApY7t9FEv/NOfW5OXRhXWiDr6c5 1jagleCcZRi8zxb5gl9bXQWP/WOk8g88k+B7i9rOd+zhQFcXtOtZW6qNx5PtMw9z IMX/s5ESKn3wh5K3wEEZN3Mh8OYWavpDE/DORr5Ef6OkAIQjdTTcIpd+bL/w87W/ Q2iSsNZtHtMg6tDEXCmSYtTWGWjTE9ExPAPuJf/BXfKlfbFGRF4qx5WY1pBijy8b MFL5oO86lJzBVp+KYbUD5imcSwzm5Dc= -----END CERTIFICATE-----Generated at Wed Oct 22 03:10:38 2025 by rpki-client