$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/ff60fbe9-e19d-38a3-a7e2-be42260297df.roa File: ff60fbe9-e19d-38a3-a7e2-be42260297df.roa (raw, json) Hash identifier: vapwZq4TZybBRqwrjjDreaUDFJucKZFssidbZh8Y0ug= Subject key identifier: EC:73:D2:32:74:70:11:19:F8:31:B4:C0:D6:BF:1B:CF:32:37:37:74 Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F4328584B434C6B6687D06F2C2ED9F310 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/ff60fbe9-e19d-38a3-a7e2-be42260297df.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 25617 IP address blocks: 216.222.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:6b:66:87:d0:6f:2c:2e:d9:f3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=5b77b3df-3178-47a9-ac38-d0e9d9d68a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:80:b8:14:a5:65:15:1c:c9:f9:8a:ac:71:76: e8:e2:f4:ca:5a:e3:77:8d:4d:6f:7f:34:f0:bf:8a: 18:36:6f:ef:a2:97:51:05:27:a0:74:aa:ac:4c:7b: a0:1a:10:42:13:5a:99:05:57:a9:9a:4d:84:a1:b4: 09:e9:96:b2:ba:e5:cc:33:7f:d9:b5:b7:41:2f:95: bd:68:85:2b:ce:ad:a4:34:0b:c4:bc:54:ca:05:d9: 0f:16:84:58:db:d6:ab:af:d6:4c:77:52:68:2e:f7: 46:9d:a5:b6:51:81:0e:b0:bb:c7:62:4e:32:5b:e5: d1:db:20:c4:1d:9f:2f:48:5f:98:51:f2:8c:79:06: 38:b9:a5:39:37:26:28:bc:04:3f:65:5c:56:9f:cf: 40:3d:f3:42:3a:78:4c:a0:f3:e1:de:34:aa:95:b8: f7:cc:98:24:d3:36:63:08:d9:e1:09:a7:c6:2a:46: 01:e0:6b:07:a3:a8:d8:63:48:1e:32:e1:84:1c:37: d6:05:4c:d9:4d:64:88:84:aa:a3:9f:80:5a:bc:b5: 39:eb:fd:52:d8:f1:2b:87:8b:89:68:61:3d:1f:27: 10:c8:15:14:ea:52:12:3a:62:36:84:26:ec:0a:74: 30:9b:86:97:ac:1a:6d:05:58:84:a0:11:f6:dd:8e: 2b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:73:D2:32:74:70:11:19:F8:31:B4:C0:D6:BF:1B:CF:32:37:37:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/ff60fbe9-e19d-38a3-a7e2-be42260297df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:4d:d8:05:d9:a8:64:34:46:de:43:a8:ce:e2:04:95:a4:b0: 7f:f7:28:c0:fc:41:81:73:58:77:b5:0a:40:92:44:b8:75:53: 19:cb:b7:13:8f:5c:25:64:29:5b:7e:49:67:4d:0a:82:08:ec: 50:15:eb:89:9b:92:36:2e:74:28:95:7a:e2:40:84:53:79:61: 95:9f:8b:5a:2c:48:77:27:97:75:36:c3:dc:d6:5c:c2:db:c1: ff:28:20:39:19:fb:2a:aa:f0:15:77:f7:b7:db:f1:63:b9:62: ef:fd:16:57:96:c8:50:c0:02:a9:a8:60:dc:f0:ac:ba:4f:45: f3:65:1f:f0:95:c2:67:ee:ab:bf:90:68:84:0d:7f:9b:6c:41: 02:a2:df:3e:f4:3b:36:0b:07:56:b7:58:31:5e:5b:68:5a:ab: ed:85:e7:70:67:6f:7c:3e:b9:06:47:0d:3e:e5:fa:ac:a2:72: 35:3a:ae:2d:e8:ca:f1:01:a0:d1:6a:1e:8e:6a:ae:a4:e9:62: 0b:47:5f:5a:a5:5f:5d:be:f5:95:ce:9e:d2:a0:b2:13:dd:d1: 0e:ef:01:7f:09:bd:00:f6:41:af:17:e5:e9:fe:d3:2d:8e:c1: e5:37:79:a0:fa:14:ee:92:11:07:d6:86:73:a9:f4:b4:39:c6: f2:4d:12:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGtmh9BvLC7Z8xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NWI3N2IzZGYtMzE3OC00N2E5LWFjMzgtZDBlOWQ5ZDY4YTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIC4FKVlFRzJ+YqscXbo4vTKWuN3jU1vfzTw v4oYNm/vopdRBSegdKqsTHugGhBCE1qZBVepmk2EobQJ6ZayuuXMM3/ZtbdBL5W9 aIUrzq2kNAvEvFTKBdkPFoRY29arr9ZMd1JoLvdGnaW2UYEOsLvHYk4yW+XR2yDE HZ8vSF+YUfKMeQY4uaU5NyYovAQ/ZVxWn89APfNCOnhMoPPh3jSqlbj3zJgk0zZj CNnhCafGKkYB4GsHo6jYY0geMuGEHDfWBUzZTWSIhKqjn4BavLU56/1S2PErh4uJ aGE9HycQyBUU6lISOmI2hCbsCnQwm4aXrBptBViEoBH23Y4rsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxz0jJ0cBEZ+DG0wNa/G88yNzd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvZmY2MGZiZTktZTE5ZC0z OGEzLWE3ZTItYmU0MjI2MDI5N2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlN2AXZqGQ0Rt5DqM7iBJWksH/3KMD8QYFzWHe1CkCSRLh1UxnLtxOP XCVkKVt+SWdNCoII7FAV64mbkjYudCiVeuJAhFN5YZWfi1osSHcnl3U2w9zWXMLb wf8oIDkZ+yqq8BV397fb8WO5Yu/9FleWyFDAAqmoYNzwrLpPRfNlH/CVwmfuq7+Q aIQNf5tsQQKi3z70OzYLB1a3WDFeW2haq+2F53Bnb3w+uQZHDT7l+qyicjU6ri3o yvEBoNFqHo5qrqTpYgtHX1qlX12+9ZXOntKgshPd0Q7vAX8JvQD2Qa8X5en+0y2O weU3eaD6FO6SEQfWhnOp9LQ5xvJNEvw= -----END CERTIFICATE-----Generated at Wed Oct 22 00:47:48 2025 by rpki-client