$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/44da0c68-fb28-307e-afbf-ca3b5cfc37ea.roa File: 44da0c68-fb28-307e-afbf-ca3b5cfc37ea.roa (raw, json) Hash identifier: yRRYfToiKGuV+ZBQ+YSGnjUwTOHQlKZacVz/M0iq0N8= Subject key identifier: 01:50:3C:B3:36:A6:B1:30:4C:05:E6:F1:F9:F6:E3:26:52:2B:DB:78 Certificate issuer: /CN=81aef195-0247-4104-9f46-f88e0dfd6ca9 Certificate serial: 010D0C9F4328584BAEC7BDF4014F960947465280 Authority key identifier: 0E:84:CA:F5:7E:88:73:D1:27:C9:63:1E:5A:A1:37:56:0F:88:83:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/44da0c68-fb28-307e-afbf-ca3b5cfc37ea.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 21858 IP address blocks: 208.70.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:bd:f4:01:4f:96:09:47:46:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81aef195-0247-4104-9f46-f88e0dfd6ca9 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=ecc754ad-e912-44ac-b742-122c58b8c01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ee:fe:48:d9:ad:d1:0b:1e:ce:fd:76:94:8a: 74:69:e3:36:d1:e6:df:bc:5a:83:70:d7:34:89:15: a6:f9:61:6a:b4:68:64:42:66:00:a6:e0:eb:ab:2d: d4:96:71:9d:40:92:84:70:13:a1:5a:66:e1:0e:10: 32:9a:87:c6:98:f3:d5:91:db:45:5e:5b:a8:da:4f: 61:b1:e3:f2:45:45:42:43:f2:f4:ef:64:96:71:7d: 37:40:7e:be:04:cc:71:a7:58:2b:98:c3:38:35:34: fe:18:1d:5b:a4:9f:db:62:ef:0b:c1:3f:6a:09:94: 2f:69:d8:98:bf:7f:62:cb:b3:fd:78:c2:63:59:69: 38:d0:b0:e5:8b:3c:5a:37:0d:96:32:ef:15:06:0d: 90:63:23:ce:7f:df:37:98:cb:b6:68:25:50:8b:00: 32:00:2d:3a:9a:53:a7:2f:df:8c:45:e0:2d:be:1b: 86:9e:6b:91:9a:4d:1b:d9:80:32:73:96:b5:f2:c4: 5b:dd:71:4a:ff:20:24:d3:08:85:9d:8d:1c:34:fc: 7d:9d:83:8b:ad:2b:a5:e2:07:f0:a8:61:e9:c8:cb: 51:ab:e9:1b:d8:c1:96:b0:7c:b9:0c:75:da:94:3f: df:bd:ba:21:38:40:2d:72:5b:54:f3:54:10:aa:db: 66:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:50:3C:B3:36:A6:B1:30:4C:05:E6:F1:F9:F6:E3:26:52:2B:DB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/44da0c68-fb28-307e-afbf-ca3b5cfc37ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.crl X509v3 Authority Key Identifier: keyid:0E:84:CA:F5:7E:88:73:D1:27:C9:63:1E:5A:A1:37:56:0F:88:83:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer sbgp-ipAddrBlock: critical IPv4: 208.70.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f6:e5:98:eb:be:75:44:8f:55:aa:3e:33:bf:68:2c:6c:b1: df:b0:a0:53:7d:fd:0c:11:3d:4e:8a:8b:2f:77:7a:c5:49:76: 98:12:ba:6c:71:02:d6:2c:7c:91:45:24:8d:b9:3c:59:a3:a9: c2:3e:3c:67:1f:1a:c6:45:7a:05:75:a8:32:a1:2a:ac:2e:cf: e8:db:27:29:1c:9e:ee:50:f3:1d:f8:17:86:99:22:bb:00:9a: c2:23:d9:52:67:66:62:e1:91:84:11:a2:7e:13:1f:0f:4d:b1: b3:9d:a5:cd:37:4d:53:69:e2:e7:1c:c5:db:94:a3:5c:92:2d: 1c:b5:e8:12:97:78:15:b1:85:3b:a0:40:d7:4f:6f:77:35:9e: 38:ec:ac:5f:6b:e3:d0:e6:1d:cb:5d:ed:40:db:f0:12:d5:5d: 68:32:68:f7:ee:76:d0:75:76:68:aa:a3:f7:4f:a1:d9:5b:e5: 45:59:e8:40:54:03:ce:77:77:ce:0a:5f:8d:1f:93:b8:d0:43: ab:0f:d3:a9:ce:bf:07:de:22:3e:6d:26:f1:26:57:f3:ee:a6: 04:eb:64:ba:62:17:2b:dc:6c:a0:af:d8:d0:5f:e4:94:6c:94: 77:35:76:24:bc:a8:50:57:15:a0:c2:22:d3:b9:3e:9f:f2:0a: 8d:bf:fd:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux730AU+WCUdGUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFhZWYxOTUtMDI0Ny00MTA0LTlmNDYtZjg4ZTBkZmQ2 Y2E5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ZWNjNzU0YWQtZTkxMi00NGFjLWI3NDItMTIyYzU4YjhjMDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO7+SNmt0Qsezv12lIp0aeM20ebfvFqDcNc0 iRWm+WFqtGhkQmYApuDrqy3UlnGdQJKEcBOhWmbhDhAymofGmPPVkdtFXluo2k9h sePyRUVCQ/L072SWcX03QH6+BMxxp1grmMM4NTT+GB1bpJ/bYu8LwT9qCZQvadiY v39iy7P9eMJjWWk40LDlizxaNw2WMu8VBg2QYyPOf983mMu2aCVQiwAyAC06mlOn L9+MReAtvhuGnmuRmk0b2YAyc5a18sRb3XFK/yAk0wiFnY0cNPx9nYOLrSul4gfw qGHpyMtRq+kb2MGWsHy5DHXalD/fvbohOEAtcltU81QQqttmgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFQPLM2prEwTAXm8fn24yZSK9t4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MWFl ZjE5NS0wMjQ3LTQxMDQtOWY0Ni1mODhlMGRmZDZjYTkvNDRkYTBjNjgtZmIyOC0z MDdlLWFmYmYtY2EzYjVjZmMzN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODFhZWYxOTUtMDI0Ny00MTA0LTlm NDYtZjg4ZTBkZmQ2Y2E5LzgxYWVmMTk1LTAyNDctNDEwNC05ZjQ2LWY4OGUwZGZk NmNhOS5jcmwwHwYDVR0jBBgwFoAUDoTK9X6Ic9EnyWMeWqE3Vg+Ig+owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MWFlZjE5NS0wMjQ3LTQxMDQtOWY0Ni1mODhl MGRmZDZjYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABP25ZjrvnVEj1WqPjO/aCxssd+woFN9/QwRPU6Kiy93esVJdpgSumxx AtYsfJFFJI25PFmjqcI+PGcfGsZFegV1qDKhKqwuz+jbJykcnu5Q8x34F4aZIrsA msIj2VJnZmLhkYQRon4THw9NsbOdpc03TVNp4uccxduUo1ySLRy16BKXeBWxhTug QNdPb3c1njjsrF9r49DmHctd7UDb8BLVXWgyaPfudtB1dmiqo/dPodlb5UVZ6EBU A853d84KX40fk7jQQ6sP06nOvwfeIj5tJvEmV/PupgTrZLpiFyvcbKCv2NBf5JRs lHc1diS8qFBXFaDCItO5Pp/yCo2//Rs= -----END CERTIFICATE-----Generated at Wed Nov 5 10:03:24 2025 by rpki-client