$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/e0039e29-28d3-348a-87b4-1af86b9e79b1.roa File: e0039e29-28d3-348a-87b4-1af86b9e79b1.roa (raw, json) Hash identifier: unCb+2sl4Pjjkoj5bo0kC3XfAOLrcsw2dri1bHiVCTs= Subject key identifier: E9:72:B2:42:E5:F5:93:1B:F0:21:AA:36:A7:4C:AB:EF:08:19:DE:88 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584B864CAEFCEAC8AF5B9E9BB300 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/e0039e29-28d3-348a-87b4-1af86b9e79b1.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 399073 IP address blocks: 70.39.185.0/24 maxlen: 24 70.39.186.0/24 maxlen: 24 70.39.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:ae:fc:ea:c8:af:5b:9e:9b:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=fdcb7099-dc60-4e50-9858-5abee7eaf598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:55:32:14:d0:4f:1d:cb:75:88:d5:7e:0a: 28:8b:72:a2:fa:2e:da:0a:43:5b:39:47:fd:de:b7: e7:3b:11:6c:d7:5c:77:3f:0c:2c:eb:e2:84:50:c6: a9:7a:ba:59:03:14:4d:bc:42:3b:2c:c5:cb:45:71: 8d:50:45:ad:35:81:51:96:d8:eb:af:73:6e:6e:af: 82:bc:1a:18:69:47:47:ee:5b:fa:ed:c8:c1:39:cc: 24:2f:99:16:bd:8c:cd:5b:2c:fa:1b:95:78:dd:c9: b6:ab:57:05:2e:a8:4a:08:f3:73:18:62:37:5e:b2: 72:cb:e0:63:2b:0f:fd:89:95:56:b1:0a:61:e3:86: a0:bb:7e:35:23:b3:b1:06:14:f6:a3:04:b2:13:51: 1f:f9:34:09:fd:2d:ec:8c:12:88:7c:e8:1e:7b:6c: 30:a3:89:97:fe:32:32:b9:a3:32:3b:fe:dc:83:5a: 5f:f4:17:17:92:10:c3:2d:ea:de:78:5e:c8:86:0f: 09:ee:85:0d:60:2b:c1:1d:1f:f3:59:2f:fb:e6:3b: e6:d3:cf:56:60:44:d0:b8:f0:6d:ac:c4:94:c8:c6: d7:ae:d5:76:ed:9a:aa:95:af:bf:67:a8:05:2a:c7: 9c:f8:5e:cf:83:17:03:28:cd:ab:6b:a7:d1:61:0e: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:72:B2:42:E5:F5:93:1B:F0:21:AA:36:A7:4C:AB:EF:08:19:DE:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/e0039e29-28d3-348a-87b4-1af86b9e79b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 70.39.185.0-70.39.187.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:18:06:8f:14:47:61:bd:9a:23:d7:fb:ca:49:0f:87:09:a0: 9c:45:5c:af:0f:4f:b7:97:09:12:34:31:5f:01:bc:1d:8f:a2: fe:af:fe:ae:c0:16:5b:4f:18:c6:3c:04:f9:da:3e:0f:df:7d: f0:48:e0:df:98:76:8e:74:ef:2f:7b:b1:ea:27:e5:a7:f1:87: b8:50:ab:94:ca:63:ea:76:35:a3:cb:3d:31:2e:38:0f:2b:2e: b9:c3:62:10:03:bc:dc:a0:9b:c6:8a:b2:6a:67:82:f7:a6:bf: 8a:b9:9d:ac:54:e5:53:f9:a9:d6:0f:74:c2:98:39:19:1a:5b: ff:a4:20:51:1a:ce:ff:88:c8:65:dd:a5:4d:b4:6c:a2:fb:f1: 7e:63:fc:88:fe:be:48:2b:45:3d:22:54:ac:b7:17:a5:97:da: cf:af:3c:60:fa:95:d7:4a:5b:a3:ff:fd:29:11:90:c7:75:55: f9:6d:22:f4:f9:66:62:5c:c2:5d:4d:cc:18:78:dc:81:c9:06: c5:a5:82:a7:e1:71:41:bc:65:e3:57:23:11:1b:ca:a9:99:52: e1:0e:1a:fc:e8:58:0a:9a:64:1b:3c:41:99:31:4d:e2:02:6d: c1:cb:1e:4a:3e:4f:26:1d:44:f3:84:1b:2b:cd:aa:d4:e2:d6: dc:e6:bf:6b -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuGTK786sivW56bswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk ZmRjYjcwOTktZGM2MC00ZTUwLTk4NTgtNWFiZWU3ZWFmNTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPJVMhTQTx3LdYjVfgooi3Ki+i7aCkNbOUf9 3rfnOxFs11x3Pwws6+KEUMaperpZAxRNvEI7LMXLRXGNUEWtNYFRltjrr3Nubq+C vBoYaUdH7lv67cjBOcwkL5kWvYzNWyz6G5V43cm2q1cFLqhKCPNzGGI3XrJyy+Bj Kw/9iZVWsQph44agu341I7OxBhT2owSyE1Ef+TQJ/S3sjBKIfOgee2wwo4mX/jIy uaMyO/7cg1pf9BcXkhDDLereeF7Ihg8J7oUNYCvBHR/zWS/75jvm089WYETQuPBt rMSUyMbXrtV27Zqqla+/Z6gFKsec+F7PgxcDKM2ra6fRYQ7xbQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOlyskLl9ZMb8CGqNqdMq+8IGd6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvZTAwMzllMjktMjhkMy0z NDhhLTg3YjQtMWFmODZiOWU3OWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABGJ7kD BAJGJ7gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAURgGjxRHYb2aI9f7ykkPhwmgnEVcrw9Pt5cJEjQxXwG8 HY+i/q/+rsAWW08YxjwE+do+D9998Ejg35h2jnTvL3ux6iflp/GHuFCrlMpj6nY1 o8s9MS44DysuucNiEAO83KCbxoqyameC96a/irmdrFTlU/mp1g90wpg5GRpb/6Qg URrO/4jIZd2lTbRsovvxfmP8iP6+SCtFPSJUrLcXpZfaz688YPqV10pbo//9KRGQ x3VV+W0i9PlmYlzCXU3MGHjcgckGxaWCp+FxQbxl41cjERvKqZlS4Q4a/OhYCppk GzxBmTFN4gJtwcseSj5PJh1E84QbK82q1OLW3Oa/aw== -----END CERTIFICATE-----Generated at Mon Oct 20 07:29:41 2025 by rpki-client