$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa File: b3798828-71b2-329f-8988-21b3e3f05b65.roa (raw, json) Hash identifier: bnrToFpGrtavi7huCbhrpZbazWuybWuHN5zBPJCVG98= Subject key identifier: 8C:3B:AD:EA:05:94:DF:25:EA:D2:59:D0:31:C7:F5:4E:08:25:3C:96 Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F4328584B4081AFAD0152596FE5C4F924 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 25617 IP address blocks: 216.222.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:af:ad:01:52:59:6f:e5:c4:f9:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=e2069c25-d7d9-4fc4-a03d-3e0ed34c9da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:b0:7f:89:db:ee:ee:a8:82:71:c4:73:cf: 5b:17:f7:cc:69:da:f2:eb:cc:4d:6f:66:2b:a1:70: f5:e9:11:bf:e6:d5:57:63:2e:ab:13:66:8d:1d:1f: 83:1a:52:56:7a:fb:73:65:af:17:10:99:0a:62:29: c6:d2:60:94:69:ca:ea:3d:01:51:1a:96:c9:8b:14: 06:b5:ae:8c:77:b0:7c:03:ea:33:4d:e6:8f:2b:c8: 20:45:13:06:62:6c:91:4e:1e:a9:0c:ca:c1:1d:67: 09:2f:fe:5e:c6:11:d4:68:50:6b:82:1d:55:4c:50: e4:08:ce:86:9b:23:22:a3:d5:74:79:82:98:d1:27: 4d:b1:cc:b9:e5:cb:0e:dd:aa:e9:ab:5b:3f:1c:d1: bc:c5:4b:c8:f2:63:8c:33:18:5d:02:61:3c:b8:b1: 2c:c8:eb:b2:91:bd:21:22:79:d9:78:55:37:d2:df: a0:83:78:06:cc:6e:25:a2:99:e3:af:6d:e1:fc:23: c5:39:92:c2:c6:be:13:18:45:a1:31:86:95:2f:45: 1e:b9:47:25:ec:23:22:a7:c9:79:67:be:cf:20:7f: 30:12:3a:f8:aa:2e:16:63:db:b5:18:72:8e:95:fc: d5:39:ac:43:43:5d:42:2d:a0:f7:09:d9:21:a3:44: 91:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3B:AD:EA:05:94:DF:25:EA:D2:59:D0:31:C7:F5:4E:08:25:3C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:30:c8:76:73:4e:1b:91:5e:19:cc:c2:2b:bd:ed:68:4d:cf: 45:15:40:df:32:61:20:98:06:e4:d0:2e:1c:b0:7f:76:7b:3a: 4e:03:ae:98:a9:b6:d0:2f:06:9e:5c:14:6c:af:eb:f7:d9:75: d5:f4:0a:8d:82:f9:55:0a:3a:65:d9:41:89:4b:bb:8f:fa:36: 5f:c7:3a:96:c6:8a:3d:0a:bf:c9:f9:7f:5c:4c:21:e3:92:e6: 20:ef:6c:14:f0:01:b0:ba:59:29:1e:cd:64:5e:55:b4:a1:d3: 1b:e8:98:99:72:03:13:38:f6:89:7e:f5:f6:39:9c:eb:78:96: c2:d6:a4:cf:f7:34:b6:fe:8b:41:0f:71:75:d5:0c:fd:ee:46: e1:73:85:6c:4a:36:75:a6:de:8e:27:27:a4:29:c3:6b:d4:48: 3b:08:ad:98:53:90:33:10:6b:f6:d5:ad:8d:ac:ca:e2:fd:a4: 02:ea:9d:eb:07:70:ca:d5:95:14:24:44:1d:4b:e1:bb:52:d9: de:3e:0f:ec:e8:c2:d5:7e:28:e3:35:71:b4:f2:1e:a8:0c:59: a2:17:00:ef:97:b2:53:9a:02:32:f8:57:e8:55:0e:e2:2d:95: 71:f2:ad:0a:9b:d1:55:d2:ce:f8:cf:ae:65:a3:c1:e7:32:64: 35:e9:e7:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAga+tAVJZb+XE+SQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZTIwNjljMjUtZDdkOS00ZmM0LWEwM2QtM2UwZWQzNGM5ZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWOwf4nb7u6ognHEc89bF/fMadry68xNb2Yr oXD16RG/5tVXYy6rE2aNHR+DGlJWevtzZa8XEJkKYinG0mCUacrqPQFRGpbJixQG ta6Md7B8A+ozTeaPK8ggRRMGYmyRTh6pDMrBHWcJL/5exhHUaFBrgh1VTFDkCM6G myMio9V0eYKY0SdNscy55csO3arpq1s/HNG8xUvI8mOMMxhdAmE8uLEsyOuykb0h InnZeFU30t+gg3gGzG4lopnjr23h/CPFOZLCxr4TGEWhMYaVL0UeuUcl7CMip8l5 Z77PIH8wEjr4qi4WY9u1GHKOlfzVOaxDQ11CLaD3Cdkho0SR4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIw7reoFlN8l6tJZ0DHH9U4IJTyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvYjM3OTg4MjgtNzFiMi0z MjlmLTg5ODgtMjFiM2UzZjA1YjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIwyHZzThuRXhnMwiu97WhNz0UVQN8yYSCYBuTQLhywf3Z7Ok4Drpip ttAvBp5cFGyv6/fZddX0Co2C+VUKOmXZQYlLu4/6Nl/HOpbGij0Kv8n5f1xMIeOS 5iDvbBTwAbC6WSkezWReVbSh0xvomJlyAxM49ol+9fY5nOt4lsLWpM/3NLb+i0EP cXXVDP3uRuFzhWxKNnWm3o4nJ6Qpw2vUSDsIrZhTkDMQa/bVrY2syuL9pALqnesH cMrVlRQkRB1L4btS2d4+D+zowtV+KOM1cbTyHqgMWaIXAO+XslOaAjL4V+hVDuIt lXHyrQqb0VXSzvjPrmWjwecyZDXp51M= -----END CERTIFICATE-----Generated at Wed Oct 22 03:10:31 2025 by rpki-client