$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa File: aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa (raw, json) Hash identifier: BKOdWdbatUfookIWnocfOa5Qqz6EGKuY9UadwkKHWo8= Subject key identifier: BD:00:49:A7:7A:81:75:B0:D3:2F:B3:24:86:59:C7:79:A8:72:EF:7D Certificate issuer: /CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Certificate serial: 010D0C9F4328584B52A7399DEC034DF545CF9600 Authority key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 394470 IP address blocks: 216.10.70.0/23 maxlen: 23 216.10.70.0/24 maxlen: 24 216.10.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:39:9d:ec:03:4d:f5:45:cf:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=c8f74fa0-a1e1-4fba-a5fb-1e6bc9ff617c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:95:b3:e3:ab:60:8f:1a:72:8a:e5:40:44:6e: b0:19:49:e9:e0:1b:e9:31:06:b6:6b:97:3b:ad:ef: e6:5f:81:57:8a:e0:8f:82:b1:ba:ab:2b:75:4e:4b: e2:42:95:d7:04:1d:0c:c9:46:b5:c4:2d:3e:f6:a8: 09:c9:0b:c0:d5:30:37:28:be:d0:25:6f:56:21:8f: cb:23:39:25:c9:fd:cd:a5:10:01:4b:5c:e8:99:23: 4b:2a:07:24:aa:b3:14:e2:a4:73:11:77:96:b4:8c: f4:de:ae:1d:f8:4e:c5:ed:4b:03:81:a8:77:89:b6: 1f:c5:86:2f:d2:5b:42:db:d9:14:ad:2a:6f:69:94: 81:e2:65:f2:98:ba:15:c5:18:f8:0c:c0:28:f9:73: ef:ba:7b:75:e2:29:54:ee:94:fb:65:6a:d8:e1:af: 97:0a:d7:03:76:2b:42:d4:c5:31:e6:c9:eb:55:f5: 27:89:c7:75:62:73:cb:a1:4d:41:8f:50:84:4b:eb: 1f:6a:48:71:e4:53:82:36:13:e1:4f:8a:16:e7:21: ee:c2:36:02:00:da:5e:98:51:58:2b:cd:91:fe:5a: dd:16:64:4d:c4:7b:52:6c:60:77:4c:2c:89:a8:35: 00:fd:5e:a2:07:24:b2:60:52:be:af:82:c0:66:b2: 04:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:00:49:A7:7A:81:75:B0:D3:2F:B3:24:86:59:C7:79:A8:72:EF:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl X509v3 Authority Key Identifier: keyid:29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer sbgp-ipAddrBlock: critical IPv4: 216.10.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:73:f3:4a:1e:08:ab:36:29:99:fb:80:fa:65:c1:99:28:de: b5:52:f4:9a:30:60:1a:ae:ec:c8:58:e5:b0:97:8f:07:14:08: 47:03:1b:fa:8e:8c:3a:ca:c3:37:e5:88:c8:78:a4:f5:99:64: 92:b3:88:1c:31:b8:3e:d6:c3:a6:82:f3:43:13:c5:44:ec:d6: 53:a2:3f:12:24:99:6c:af:6c:61:32:12:c3:4a:82:b6:ba:63: 01:51:5d:ae:17:fb:bc:c9:2b:8c:51:50:3b:63:1d:b9:71:dd: f2:1b:88:92:d4:4b:90:49:fb:35:15:3f:42:db:bb:da:b3:ac: 36:89:67:46:08:12:f8:83:3c:77:13:d3:14:ab:61:2c:5d:2f: 0a:d0:1a:61:d2:84:61:98:b5:90:99:be:ae:24:be:3f:1d:de: de:3e:72:56:40:cc:cf:c5:0f:98:86:f5:60:80:85:d5:63:20: 72:84:9f:28:56:d6:95:e8:0f:fc:82:69:0a:ed:0c:11:6e:54: 13:f2:d3:db:69:fd:65:8f:45:92:63:b6:05:0c:c7:b8:b9:90: ba:84:f3:51:ec:00:69:61:0a:ed:84:d1:4a:d2:9d:86:33:85: 0e:57:f6:7c:2c:bf:e4:e2:99:50:07:4e:f2:57:27:b7:92:67: a6:e3:e5:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpzmd7ANN9UXPlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIyMTI0YTgtZDZiNi00ODNlLTkyZGUtNjdmOGQ3OTc1 Y2M0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YzhmNzRmYTAtYTFlMS00ZmJhLWE1ZmItMWU2YmM5ZmY2MTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Wz46tgjxpyiuVARG6wGUnp4BvpMQa2a5c7 re/mX4FXiuCPgrG6qyt1TkviQpXXBB0MyUa1xC0+9qgJyQvA1TA3KL7QJW9WIY/L Izklyf3NpRABS1zomSNLKgckqrMU4qRzEXeWtIz03q4d+E7F7UsDgah3ibYfxYYv 0ltC29kUrSpvaZSB4mXymLoVxRj4DMAo+XPvunt14ilU7pT7ZWrY4a+XCtcDditC 1MUx5snrVfUnicd1YnPLoU1Bj1CES+sfakhx5FOCNhPhT4oW5yHuwjYCANpemFFY K82R/lrdFmRNxHtSbGB3TCyJqDUA/V6iBySyYFK+r4LAZrIE0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0ASad6gXWw0y+zJIZZx3mocu99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YjIx MjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4ZDc5NzVjYzQvYWVlNjA3YTctY2M0MC0z ZGU3LTliYTItY2Q3OWU2ZjY2ZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGIyMTI0YTgtZDZiNi00ODNlLTky ZGUtNjdmOGQ3OTc1Y2M0LzhiMjEyNGE4LWQ2YjYtNDgzZS05MmRlLTY3ZjhkNzk3 NWNjNC5jcmwwHwYDVR0jBBgwFoAUKVokfqKJm+K6LEmBT1XmY0qa+ugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YjIxMjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4 ZDc5NzVjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ApGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBz80oeCKs2KZn7gPplwZko3rVS9JowYBqu7MhY5bCXjwcUCEcDG/qO jDrKwzfliMh4pPWZZJKziBwxuD7Ww6aC80MTxUTs1lOiPxIkmWyvbGEyEsNKgra6 YwFRXa4X+7zJK4xRUDtjHblx3fIbiJLUS5BJ+zUVP0Lbu9qzrDaJZ0YIEviDPHcT 0xSrYSxdLwrQGmHShGGYtZCZvq4kvj8d3t4+clZAzM/FD5iG9WCAhdVjIHKEnyhW 1pXoD/yCaQrtDBFuVBPy09tp/WWPRZJjtgUMx7i5kLqE81HsAGlhCu2E0UrSnYYz hQ5X9nwsv+TimVAHTvJXJ7eSZ6bj5WQ= -----END CERTIFICATE-----Generated at Tue Oct 21 17:58:18 2025 by rpki-client