$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa File: 3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa (raw, json) Hash identifier: qSc/wiMPPMOC4bh9I0pqIXQzlB1BZbMBBiu+PDvOfDk= Subject key identifier: 73:3B:8A:96:C0:9E:0E:6E:65:B5:80:28:29:17:2E:5B:31:81:FA:2E Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584B821CD8614085E8F9E31BA140 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 46687 IP address blocks: 207.68.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d8:61:40:85:e8:f9:e3:1b:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=91c6dc4c-b464-4e12-932a-320398502c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:c0:dc:81:22:ff:a5:15:27:8e:47:03:63: 99:76:fe:79:63:c2:a2:a0:e0:4e:3f:41:83:60:4b: fd:9c:bf:ca:26:9b:ef:19:4e:58:e5:5f:f9:ac:b2: 1b:36:ae:7b:82:25:52:3c:78:33:6e:0a:99:43:22: 81:9b:b1:13:e3:22:ee:46:d3:7c:8a:47:8e:ec:47: b1:cb:70:ce:36:9f:52:de:e7:11:ce:12:c6:49:37: 21:31:7a:bb:cc:90:08:6b:af:16:54:34:f7:96:ce: f8:85:42:82:65:a5:11:88:39:e3:61:f6:79:5f:4d: 89:c7:01:d1:79:e7:6d:61:9c:79:92:fa:7a:09:f0: 95:42:a3:50:81:ba:3d:6e:79:ec:8a:d5:77:42:27: f8:c8:85:8f:7b:1b:86:0f:12:99:a3:a9:6c:89:95: 17:4d:4c:03:37:19:a8:59:c9:aa:8d:4f:b9:73:dc: 31:4d:d0:67:b7:ab:88:91:34:2c:4e:2f:32:d8:fe: aa:70:11:22:7f:9d:5b:25:15:89:e3:09:6a:d8:58: a7:b1:be:64:eb:ce:8e:c9:73:ae:80:94:28:57:ad: 3f:8d:b0:fe:4a:af:3a:71:19:fc:4d:34:dc:7a:10: 83:af:65:64:85:7b:e8:2a:a8:0d:8d:0d:2e:b3:ed: 99:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3B:8A:96:C0:9E:0E:6E:65:B5:80:28:29:17:2E:5B:31:81:FA:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 207.68.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:1d:e1:07:63:40:b6:26:9f:1c:7a:12:1f:9e:77:87:61:ad: 2b:23:cc:83:2d:78:a1:64:85:fa:e6:2c:c1:7b:87:ef:d6:36: 5f:57:b8:2c:aa:5f:c0:9a:2a:78:df:93:67:fb:3a:fc:28:24: ba:a0:1d:91:87:bd:70:15:18:11:69:b6:7c:8b:70:18:16:cc: 88:89:6a:7e:61:d0:a4:6f:28:c9:69:5e:a9:5d:29:97:1d:23: d2:0e:76:d3:a2:14:ad:97:bb:4c:3f:e8:e1:5f:bb:25:df:28: 60:3a:f5:0f:f6:5b:27:9a:4b:52:01:2d:85:cb:cb:c8:bc:a1: 0e:87:98:90:1d:87:54:48:8c:93:7b:09:a5:a7:b9:e0:3c:a8: 36:d2:bb:72:47:b9:34:c1:20:91:76:76:8f:8b:f8:d7:01:03: cc:7e:e5:d1:6c:25:25:09:81:49:5a:23:08:4b:c5:8c:65:68: 41:3f:f3:96:da:98:93:02:b9:bc:74:01:d0:43:14:d7:24:d4: f8:03:af:26:eb:73:11:81:0a:7e:01:2b:9f:26:9e:cd:13:1d: 22:f7:0d:40:28:23:c9:b7:e8:c1:f1:2e:cb:6a:45:12:ef:29: f9:b4:d0:36:87:c5:94:20:e3:ab:d1:11:5e:3b:d2:b6:8e:c1: 43:56:21:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNhhQIXo+eMboUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OTFjNmRjNGMtYjQ2NC00ZTEyLTkzMmEtMzIwMzk4NTAyYzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynbA3IEi/6UVJ45HA2OZdv55Y8KioOBOP0GD YEv9nL/KJpvvGU5Y5V/5rLIbNq57giVSPHgzbgqZQyKBm7ET4yLuRtN8ikeO7Eex y3DONp9S3ucRzhLGSTchMXq7zJAIa68WVDT3ls74hUKCZaURiDnjYfZ5X02JxwHR eedtYZx5kvp6CfCVQqNQgbo9bnnsitV3Qif4yIWPexuGDxKZo6lsiZUXTUwDNxmo WcmqjU+5c9wxTdBnt6uIkTQsTi8y2P6qcBEif51bJRWJ4wlq2Finsb5k686OyXOu gJQoV60/jbD+Sq86cRn8TTTcehCDr2VkhXvoKqgNjQ0us+2Z5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHM7ipbAng5uZbWAKCkXLlsxgfouMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvM2I3MGVmNDktNjFlOC0z YzFkLWEzM2EtNTFkMTk0YWNmZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz0TgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgd4QdjQLYmnxx6Eh+ed4dhrSsjzIMteKFkhfrmLMF7h+/WNl9XuCyq X8CaKnjfk2f7OvwoJLqgHZGHvXAVGBFptnyLcBgWzIiJan5h0KRvKMlpXqldKZcd I9IOdtOiFK2Xu0w/6OFfuyXfKGA69Q/2WyeaS1IBLYXLy8i8oQ6HmJAdh1RIjJN7 CaWnueA8qDbSu3JHuTTBIJF2do+L+NcBA8x+5dFsJSUJgUlaIwhLxYxlaEE/85ba mJMCubx0AdBDFNck1PgDrybrcxGBCn4BK58mns0THSL3DUAoI8m36MHxLstqRRLv Kfm00DaHxZQg46vREV470raOwUNWIRE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:18 2025 by rpki-client