$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa File: 2303d566-c21f-3244-8d4c-6d8d314c79c7.roa (raw, json) Hash identifier: +EVlsupQ043YZ2VtJZIlIbSd6inyGdYGxQK+XWRj/zY= Subject key identifier: 1A:9B:E8:73:7E:88:40:CF:68:C9:44:13:89:6A:89:C1:01:8C:DC:B3 Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708 Certificate serial: 010D0C9F4328584B153C19A2AAAD8270B681E940 Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 46962 IP address blocks: 64.93.68.0/22 maxlen: 24 66.118.224.0/22 maxlen: 24 104.255.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:19:a2:aa:ad:82:70:b6:81:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=622a816b-8033-431b-9cf4-4b4a1b93c289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bb:58:c4:83:d7:62:11:71:7d:6c:75:fe:8a: 81:75:b7:25:a1:4c:ab:ce:b2:be:60:b7:d9:66:92: 22:09:69:5e:bd:3a:18:62:64:52:bd:e6:35:6e:a3: f9:42:68:20:ed:24:ce:b5:f3:cc:e0:52:e1:da:40: 50:b2:6f:dc:30:51:76:cb:31:37:4b:6a:35:b4:c3: f1:ca:a2:16:b5:92:c0:5e:ee:e4:de:8c:89:5f:54: 1b:6b:b8:e2:d7:4d:28:6b:19:e0:60:ec:c8:5e:99: 03:35:23:55:0d:27:39:15:02:48:33:e5:f7:f0:2e: 1d:ff:ba:ff:d7:cb:8d:47:4c:81:c5:47:2a:ec:c3: a9:3f:70:a2:6d:1b:37:4a:48:84:66:03:a3:bd:45: b3:92:b9:fa:6b:92:00:8d:ac:99:ed:c0:5c:e4:7a: cd:34:ab:97:91:4f:c6:b8:74:5b:bb:5b:29:bd:ec: f5:13:ea:17:db:b6:f1:4f:e8:7a:23:4f:57:6d:6f: 14:5c:5d:82:de:20:df:3e:f9:8d:3d:bc:f1:8e:47: 8c:9b:dd:94:48:19:6c:8c:26:37:d6:c2:72:60:ec: ae:36:a3:39:c7:7b:13:c9:8a:24:fc:f8:a3:12:75: 07:f5:24:0a:37:36:b6:0b:f3:3b:5f:c5:cc:00:16: 4a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9B:E8:73:7E:88:40:CF:68:C9:44:13:89:6A:89:C1:01:8C:DC:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl X509v3 Authority Key Identifier: keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer sbgp-ipAddrBlock: critical IPv4: 64.93.68.0/22 66.118.224.0/22 104.255.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:50:70:03:0f:78:93:34:e5:74:a8:56:27:3f:c3:8e:15:5d: 99:da:fa:84:76:60:e4:e4:83:c8:3a:fb:41:4a:75:5c:a9:85: 61:75:d0:9b:69:9b:bf:a8:db:c5:d5:c7:0a:04:1b:dc:72:85: 8c:33:6a:40:63:17:90:50:ad:6f:57:75:b1:b7:0a:d7:53:3e: b6:76:31:c4:02:d9:ae:78:69:e1:49:56:17:08:c1:98:15:4a: 12:0d:16:29:64:7d:ac:56:c4:71:3e:12:f9:23:bf:0b:48:c8: cb:34:be:a6:db:1e:77:74:bc:0c:78:3c:5b:1c:24:b6:85:45: 69:b5:85:ac:8b:d5:9c:80:f7:12:25:8d:71:1d:51:57:ff:11: 7b:ac:c5:ae:94:e6:a3:bf:7c:89:42:96:29:0d:1c:0c:cc:70: 17:9d:b0:71:87:70:e9:02:19:cc:ce:85:36:6e:f4:39:55:3b: 9f:66:c7:f1:4f:86:de:18:ee:76:5f:99:4e:fb:8b:af:a2:d3: 4e:fe:bd:fd:5a:08:93:96:4f:ea:a0:6d:b8:e3:ca:70:93:8e: f2:2d:68:02:9d:59:8b:e2:90:49:a5:74:4f:e7:43:d0:2a:53: 7c:b4:4f:c2:ca:71:78:d1:de:5e:d5:2b:07:79:fe:35:d1:91: 04:a6:02:fa -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEsVPBmiqq2CcLaB6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMzkyYTEtMDdlOS00OWY0LTlhMDMtZGY1MDA1MzMz NzA4MB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk NjIyYTgxNmItODAzMy00MzFiLTljZjQtNGI0YTFiOTNjMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrtYxIPXYhFxfWx1/oqBdbcloUyrzrK+YLfZ ZpIiCWlevToYYmRSveY1bqP5Qmgg7STOtfPM4FLh2kBQsm/cMFF2yzE3S2o1tMPx yqIWtZLAXu7k3oyJX1Qba7ji100oaxngYOzIXpkDNSNVDSc5FQJIM+X38C4d/7r/ 18uNR0yBxUcq7MOpP3CibRs3SkiEZgOjvUWzkrn6a5IAjayZ7cBc5HrNNKuXkU/G uHRbu1spvez1E+oX27bxT+h6I09XbW8UXF2C3iDfPvmNPbzxjkeMm92USBlsjCY3 1sJyYOyuNqM5x3sTyYok/PijEnUH9SQKNza2C/M7X8XMABZKcQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBqb6HN+iEDPaMlEE4lqicEBjNyzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYz OTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUwMDUzMzM3MDgvMjMwM2Q1NjYtYzIxZi0z MjQ0LThkNGMtNmQ4ZDMxNGM3OWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FmMzkyYTEtMDdlOS00OWY0LTlh MDMtZGY1MDA1MzMzNzA4L2NhZjM5MmExLTA3ZTktNDlmNC05YTAzLWRmNTAwNTMz MzcwOC5jcmwwHwYDVR0jBBgwFoAURC8Ry3nbTZVcRvWNkst9EsMqGU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYzOTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUw MDUzMzM3MDguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCQF1EAwQC QnbgAwQCaP+0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABNQcAMPeJM05XSoVic/w44VXZna+oR2YOTkg8g6 +0FKdVyphWF10Jtpm7+o28XVxwoEG9xyhYwzakBjF5BQrW9XdbG3CtdTPrZ2McQC 2a54aeFJVhcIwZgVShINFilkfaxWxHE+EvkjvwtIyMs0vqbbHnd0vAx4PFscJLaF RWm1hayL1ZyA9xIljXEdUVf/EXusxa6U5qO/fIlClikNHAzMcBedsHGHcOkCGczO hTZu9DlVO59mx/FPht4Y7nZfmU77i6+i007+vf1aCJOWT+qgbbjjynCTjvItaAKd WYvikEmldE/nQ9AqU3y0T8LKcXjR3l7VKwd5/jXRkQSmAvo= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:38 2025 by rpki-client