$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/2b9c8956-93b9-31dc-8390-798edfd4e36e.roa File: 2b9c8956-93b9-31dc-8390-798edfd4e36e.roa (raw, json) Hash identifier: crvw1el1YfHmiRkVhd3B37Zu3udXseisnv0R0wTt5Qk= Subject key identifier: E0:79:68:00:B2:41:A1:15:D6:5E:2D:F9:33:49:44:12:65:3F:5D:3D Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584AB65103BA1C669AE380F462F8 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/2b9c8956-93b9-31dc-8390-798edfd4e36e.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 174 IP address blocks: 70.39.130.0/24 maxlen: 24 70.39.136.0/24 maxlen: 24 70.39.137.0/24 maxlen: 24 70.39.140.0/24 maxlen: 24 70.39.141.0/24 maxlen: 24 70.39.170.0/24 maxlen: 24 70.39.171.0/24 maxlen: 24 70.39.230.0/24 maxlen: 24 70.39.231.0/24 maxlen: 24 70.39.242.0/24 maxlen: 24 70.39.243.0/24 maxlen: 24 70.39.254.0/24 maxlen: 24 70.39.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:51:03:ba:1c:66:9a:e3:80:f4:62:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=536e17bf-1f74-40f2-a11e-fcef36e1d001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ce:ef:19:84:24:0f:93:bc:42:e9:62:10:c9: 64:2f:19:2f:b1:e4:af:6b:b9:d6:78:31:d7:31:3d: 54:8c:8e:92:d1:b9:4f:e7:f5:21:4f:18:32:82:b8: c8:0d:bd:05:eb:d6:04:23:8b:0d:73:84:f4:91:7b: d9:26:c0:4f:ec:55:0a:c0:05:1c:f7:43:84:14:2c: 76:b8:00:4e:a7:86:36:95:a5:4f:e2:67:c9:e7:9d: f3:68:8b:96:5d:8e:ba:15:9f:6b:4c:f9:f0:32:7a: 10:6d:ad:e2:30:6c:ea:6d:e0:27:15:2b:06:8a:b1: 65:07:fc:43:c4:3f:3f:78:2d:db:22:ab:cb:95:4c: 36:6b:d5:58:51:6a:d4:61:53:1a:45:1b:ee:92:9d: f8:e4:85:28:50:c9:cf:55:a1:33:f8:9f:d9:b4:1b: 92:ac:7b:6f:60:27:14:d9:76:7d:d0:ca:2d:4e:6b: e6:b9:ec:f0:13:2d:a3:ee:f9:df:cd:52:8f:60:8f: 04:3e:b3:34:52:ae:dc:9b:d9:a6:65:ca:42:43:24: b7:ca:01:8b:24:95:7e:89:e1:85:e7:67:23:56:5f: 56:17:03:60:78:82:84:20:74:80:f2:b9:de:16:d0: 81:18:c1:ae:2b:3f:9a:1d:79:1c:aa:d1:07:ae:cc: 14:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:79:68:00:B2:41:A1:15:D6:5E:2D:F9:33:49:44:12:65:3F:5D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/2b9c8956-93b9-31dc-8390-798edfd4e36e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 70.39.130.0/24 70.39.136.0/23 70.39.140.0/23 70.39.170.0/23 70.39.230.0/23 70.39.242.0/23 70.39.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:14:b4:72:8c:77:28:90:14:be:68:8d:75:53:2a:b1:df:2d: fa:18:09:53:b1:48:bc:5f:8c:88:75:72:06:30:85:75:e1:f4: 48:ce:69:1d:05:cf:5e:f5:d2:d6:3d:92:f5:cd:e1:86:de:57: 8b:5f:f0:50:22:7c:79:26:e6:98:93:b8:5f:d4:e2:28:73:98: 2e:03:49:a2:68:3e:87:27:97:45:af:30:f2:ab:67:d6:94:13: d9:3a:65:7a:d8:8c:51:a2:ee:ff:f8:dd:c7:88:2f:98:d4:0c: e9:32:dd:7b:49:f7:ef:ea:4c:d5:81:2a:54:10:8b:0a:f4:51: 5b:7f:4e:9e:ac:82:62:7c:85:a6:0a:44:d6:93:b7:fe:cb:22: 1c:6f:ab:b9:19:7a:92:63:e3:d0:68:a9:f3:31:66:89:11:e8: e2:dc:29:23:6a:b8:d5:cf:2e:30:ec:23:6b:68:8d:7d:5a:0c: 43:5e:b9:c9:a9:cf:38:bc:b7:3c:26:e7:75:59:21:44:68:66: 51:a7:e4:18:fc:72:26:46:07:de:cf:01:9f:45:17:e2:52:c8: d7:21:ca:a2:26:b1:c3:fd:86:12:7f:d8:23:f5:37:61:c7:f8: 56:f2:10:8e:60:73:7a:50:39:5e:0b:69:3d:cd:98:2d:bb:6e: aa:35:64:6c -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEq2UQO6HGaa44D0YvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk NTM2ZTE3YmYtMWY3NC00MGYyLWExMWUtZmNlZjM2ZTFkMDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn87vGYQkD5O8QuliEMlkLxkvseSva7nWeDHX MT1UjI6S0blP5/UhTxgygrjIDb0F69YEI4sNc4T0kXvZJsBP7FUKwAUc90OEFCx2 uABOp4Y2laVP4mfJ553zaIuWXY66FZ9rTPnwMnoQba3iMGzqbeAnFSsGirFlB/xD xD8/eC3bIqvLlUw2a9VYUWrUYVMaRRvukp345IUoUMnPVaEz+J/ZtBuSrHtvYCcU 2XZ90MotTmvmuezwEy2j7vnfzVKPYI8EPrM0Uq7cm9mmZcpCQyS3ygGLJJV+ieGF 52cjVl9WFwNgeIKEIHSA8rneFtCBGMGuKz+aHXkcqtEHrswULwIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFOB5aACyQaEV1l4t+TNJRBJlP109MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvMmI5Yzg5NTYtOTNiOS0z MWRjLTgzOTAtNzk4ZWRmZDRlMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQARieCAwQB RieIAwQBRieMAwQBRieqAwQBRifmAwQBRifyAwQBRif+MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA8UtHKM dyiQFL5ojXVTKrHfLfoYCVOxSLxfjIh1cgYwhXXh9EjOaR0Fz1710tY9kvXN4Ybe V4tf8FAifHkm5piTuF/U4ihzmC4DSaJoPocnl0WvMPKrZ9aUE9k6ZXrYjFGi7v/4 3ceIL5jUDOky3XtJ9+/qTNWBKlQQiwr0UVt/Tp6sgmJ8haYKRNaTt/7LIhxvq7kZ epJj49BoqfMxZokR6OLcKSNquNXPLjDsI2tojX1aDENeucmpzzi8tzwm53VZIURo ZlGn5Bj8ciZGB97PAZ9FF+JSyNchyqImscP9hhJ/2CP1N2HH+FbyEI5gc3pQOV4L aT3NmC27bqo1ZGw= -----END CERTIFICATE-----Generated at Wed Aug 6 11:05:06 2025 by rpki-client