$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/ecb9c51f-fb20-3e39-8147-377bd65163bc.roa File: ecb9c51f-fb20-3e39-8147-377bd65163bc.roa (raw, json) Hash identifier: 5yiC6EFazNCrZMR8pXWk0RwoPl3a7rfrhQH+EUi0kPo= Subject key identifier: 0F:7A:C6:1B:21:DA:0E:AE:A0:DC:C1:54:84:C5:DB:3D:F0:E3:32:21 Certificate issuer: /CN=70a36240-104b-454c-b230-bf415e356e88 Certificate serial: 010D0C9F4328584BA145BB4CFDE76AE71FEAEC80 Authority key identifier: 60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/ecb9c51f-fb20-3e39-8147-377bd65163bc.roa Signing time: Fri 24 Oct 2025 16:53:21 +0000 ROA not before: Fri 24 Oct 2025 16:53:21 +0000 ROA not after: Thu 22 Jan 2026 17:53:21 +0000 asID: 13405 IP address blocks: 142.249.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a1:45:bb:4c:fd:e7:6a:e7:1f:ea:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a36240-104b-454c-b230-bf415e356e88 Validity Not Before: Oct 24 16:53:21 2025 GMT Not After : Jan 22 17:53:21 2026 GMT Subject: CN=7f181da1-7d3e-4e73-85e6-9126cacf8df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bc:ed:fd:f2:95:55:7c:fe:22:da:6b:4d:a1: fd:59:10:ce:92:2b:14:c1:86:90:8c:08:1d:c1:ab: a1:7e:62:ea:71:72:9e:0c:a0:13:8e:c8:b3:a6:a0: 70:25:3b:2d:25:ad:fe:0e:43:66:87:11:6e:74:bc: 52:b9:c2:6f:8d:ae:56:1a:3a:88:4b:60:5a:30:50: 28:d9:ff:33:c6:bd:2f:2f:2c:13:2b:64:82:3b:6b: 7a:28:87:a5:ce:90:8f:19:dc:2a:bf:d9:51:d0:c2: 21:3a:29:25:8b:8d:c2:4d:61:de:7e:2f:48:e3:64: e3:16:79:80:43:62:5d:26:e4:3f:12:0a:36:5b:af: 25:62:35:8e:ce:2a:da:cd:92:f1:85:b6:0c:e7:6e: 0d:1e:cd:c9:a5:52:31:0c:00:04:72:a0:f7:ed:bf: 4a:84:bf:0a:03:85:ba:83:cd:ee:6b:76:7d:3e:15: c1:9f:08:a7:6f:03:04:8e:9a:e2:31:24:c0:73:9d: 98:32:3a:02:da:78:38:93:84:f0:ba:44:cd:4f:24: e7:69:b9:e8:5e:7f:1b:bf:65:59:96:cb:85:29:24: ba:9e:36:da:fe:14:7f:6e:1c:37:ab:3e:ee:43:f8: a4:d0:12:09:fc:ff:ec:b0:94:91:26:87:c0:62:5d: a7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7A:C6:1B:21:DA:0E:AE:A0:DC:C1:54:84:C5:DB:3D:F0:E3:32:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/ecb9c51f-fb20-3e39-8147-377bd65163bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl X509v3 Authority Key Identifier: keyid:60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer sbgp-ipAddrBlock: critical IPv4: 142.249.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:59:2f:f6:06:f9:5d:75:5d:d2:f6:74:63:d6:4e:77:1c:71: 3c:58:e2:3a:83:e9:80:5e:52:03:2b:43:ed:5e:67:41:d0:25: dd:af:03:e5:a4:a7:74:19:c9:cb:64:e7:eb:95:f4:e6:cf:d7: 1b:ad:da:58:0c:55:8b:d6:68:0b:a5:4c:6d:91:24:e6:4f:ce: 42:2e:bf:ef:79:fc:a0:b2:18:25:1a:7e:35:fc:a3:2c:4d:a3: 9b:a7:1a:6e:51:ae:bc:fd:e0:e9:d5:6e:69:a5:96:53:79:b8: 77:25:3d:65:dd:0e:c3:b4:f1:36:00:a5:73:fe:59:5d:52:47: 43:5b:93:d6:79:e0:7a:fe:86:86:06:7a:98:97:47:41:1f:47: 5b:54:63:19:dd:79:3e:7c:b2:55:87:71:b1:02:49:1f:41:bb: 37:84:95:04:1b:6e:e3:e6:8a:e0:48:b7:40:69:37:67:f2:38: 3d:cd:67:77:5a:cf:86:b9:5e:35:54:51:9c:3f:6f:f1:33:57: 38:70:53:ca:1f:56:d5:96:1a:7b:40:d6:66:19:55:4f:ac:b2: 87:95:ca:42:07:87:95:b5:0e:37:3b:09:fb:ad:57:fe:f1:3b: 4a:f9:91:bb:fa:a1:76:02:64:b4:71:52:b2:89:e6:ab:45:4f: 70:e8:e7:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuhRbtM/edq5x/q7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhMzYyNDAtMTA0Yi00NTRjLWIyMzAtYmY0MTVlMzU2 ZTg4MB4XDTI1MTAyNDE2NTMyMVoXDTI2MDEyMjE3NTMyMVowLzEtMCsGA1UEAxMk N2YxODFkYTEtN2QzZS00ZTczLTg1ZTYtOTEyNmNhY2Y4ZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7zt/fKVVXz+ItprTaH9WRDOkisUwYaQjAgd wauhfmLqcXKeDKATjsizpqBwJTstJa3+DkNmhxFudLxSucJvja5WGjqIS2BaMFAo 2f8zxr0vLywTK2SCO2t6KIelzpCPGdwqv9lR0MIhOikli43CTWHefi9I42TjFnmA Q2JdJuQ/Ego2W68lYjWOzirazZLxhbYM524NHs3JpVIxDAAEcqD37b9KhL8KA4W6 g83ua3Z9PhXBnwinbwMEjpriMSTAc52YMjoC2ng4k4TwukTNTyTnabnoXn8bv2VZ lsuFKSS6njba/hR/bhw3qz7uQ/ik0BIJ/P/ssJSRJofAYl2ncQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA96xhsh2g6uoNzBVITF2z3w4zIhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83MGEz NjI0MC0xMDRiLTQ1NGMtYjIzMC1iZjQxNWUzNTZlODgvZWNiOWM1MWYtZmIyMC0z ZTM5LTgxNDctMzc3YmQ2NTE2M2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzBhMzYyNDAtMTA0Yi00NTRjLWIy MzAtYmY0MTVlMzU2ZTg4LzcwYTM2MjQwLTEwNGItNDU0Yy1iMjMwLWJmNDE1ZTM1 NmU4OC5jcmwwHwYDVR0jBBgwFoAUYDGdgAKQWMN+aqTm29e3yk6Me+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83MGEzNjI0MC0xMDRiLTQ1NGMtYjIzMC1iZjQx NWUzNTZlODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5ZL/YG+V11XdL2dGPWTncccTxY4jqD6YBeUgMrQ+1eZ0HQJd2vA+Wk p3QZyctk5+uV9ObP1xut2lgMVYvWaAulTG2RJOZPzkIuv+95/KCyGCUafjX8oyxN o5unGm5Rrrz94OnVbmmlllN5uHclPWXdDsO08TYApXP+WV1SR0Nbk9Z54Hr+hoYG epiXR0EfR1tUYxndeT58slWHcbECSR9BuzeElQQbbuPmiuBIt0BpN2fyOD3NZ3da z4a5XjVUUZw/b/EzVzhwU8ofVtWWGntA1mYZVU+ssoeVykIHh5W1Djc7CfutV/7x O0r5kbv6oXYCZLRxUrKJ5qtFT3Do5+U= -----END CERTIFICATE-----Generated at Wed Nov 5 14:48:26 2025 by rpki-client