$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa File: 0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa (raw, json) Hash identifier: AZphU5zn6MX/YwI0x+yqapUoKq0s0r37GHUwd8Eudx4= Subject key identifier: 5C:67:33:4C:CD:02:23:A2:CB:68:3C:D3:83:5E:54:CD:79:1B:43:75 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584B715CA5DF4D51FBB9B7F66D50 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 6621 IP address blocks: 67.44.0.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a5:df:4d:51:fb:b9:b7:f6:6d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=690c2d79-f84f-4e78-add7-0f21be24ba99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:19:11:6a:6a:c9:e3:2f:cf:bf:14:1f:54: ab:71:1a:e8:38:3f:65:91:3b:3b:a7:9f:2b:87:9d: 16:35:e3:15:b5:d6:38:c0:58:03:4e:d3:cb:c1:7a: c5:90:02:4d:90:ad:82:d8:fd:e7:a9:de:5c:bb:6a: 97:c4:48:04:8a:1f:f5:69:e4:d5:df:6f:ed:c6:ed: 96:f3:f1:6c:be:6f:f7:2b:74:3d:6d:8d:f3:8f:04: 09:71:d4:be:96:9a:7f:e5:c7:31:fa:af:6d:90:b0: 5f:7e:f9:59:ed:71:f9:d2:3d:2d:0e:84:bb:8e:1b: c6:61:67:2c:98:ce:71:ae:48:93:c1:20:7d:18:a8: 90:0a:1c:bd:1e:a5:6f:eb:67:ef:ca:2c:d9:c6:9e: c9:95:e5:16:af:34:eb:93:4b:61:08:b7:30:8a:8f: d0:1c:ce:12:a1:4e:ef:81:55:62:89:8c:50:ca:0c: 64:ab:e5:75:cf:9d:b8:61:f8:8a:d2:66:2a:3c:88: 12:80:ac:42:96:a9:a7:47:c7:ef:31:a2:2a:71:a3: 58:09:d7:3b:55:e6:1e:18:7b:89:08:00:22:04:7d: ef:c2:2e:30:27:a3:ba:43:8b:1c:e8:71:52:ac:7c: d5:ba:86:1c:24:f4:91:ca:79:82:d4:7b:2e:5a:ad: ad:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:67:33:4C:CD:02:23:A2:CB:68:3C:D3:83:5E:54:CD:79:1B:43:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:17:4c:d2:ef:d4:15:24:2b:5e:16:2c:64:88:54:4f:a2:54: dd:96:eb:07:29:cd:73:a9:19:16:7d:15:ae:e9:4d:88:d1:18: f4:01:a0:96:20:78:0b:42:e3:25:25:76:45:b9:50:44:33:53: 01:b4:25:33:b0:ae:80:f4:d9:81:d3:f1:91:75:68:3c:b1:ad: ef:93:9b:bb:4c:d4:f7:6e:2e:aa:88:63:84:ad:7b:94:81:e2: d1:5a:e9:9e:68:fb:fb:21:e1:bd:0b:b8:2d:7b:73:2b:16:48: db:fa:ea:89:cd:70:6d:28:1e:ae:7d:6f:da:63:7a:58:6b:05: 58:fa:09:83:c1:4f:26:df:a4:37:6a:67:89:b1:f3:b9:69:b4: 6f:ba:4f:5c:bc:10:83:69:25:a5:e9:bb:7e:58:0c:1b:54:60: 1d:09:09:cf:dc:3e:9d:1d:da:ea:c2:1f:b6:b7:5e:fe:e3:5c: 1a:fe:bd:e8:d7:f3:8b:ef:f8:a9:2f:d5:2d:c4:9a:29:76:2f: 52:d7:bd:69:71:0b:cf:51:a2:83:f1:0b:ea:6f:10:4b:70:fa: 6e:3a:8f:cf:34:a7:72:97:24:8c:17:0b:23:63:56:b6:93:62: 6c:94:49:2f:b4:4b:b9:0b:88:e4:a0:1b:51:6d:f5:2a:e0:a3: 94:b1:44:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKXfTVH7ubf2bVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NjkwYzJkNzktZjg0Zi00ZTc4LWFkZDctMGYyMWJlMjRiYTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQgZEWpqyeMvz78UH1SrcRroOD9lkTs7p58r h50WNeMVtdY4wFgDTtPLwXrFkAJNkK2C2P3nqd5cu2qXxEgEih/1aeTV32/txu2W 8/Fsvm/3K3Q9bY3zjwQJcdS+lpp/5ccx+q9tkLBffvlZ7XH50j0tDoS7jhvGYWcs mM5xrkiTwSB9GKiQChy9HqVv62fvyizZxp7JleUWrzTrk0thCLcwio/QHM4SoU7v gVViiYxQygxkq+V1z524YfiK0mYqPIgSgKxClqmnR8fvMaIqcaNYCdc7VeYeGHuJ CAAiBH3vwi4wJ6O6Q4sc6HFSrHzVuoYcJPSRynmC1HsuWq2tBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxnM0zNAiOiy2g804NeVM15G0N1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMGQ1ZjdlN2YtMDRmZC0z ZWIzLTg0ZmItYTAyYTUwZjBjOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEXTNLv1BUkK14WLGSIVE+iVN2W6wcpzXOpGRZ9Fa7pTYjRGPQBoJYg eAtC4yUldkW5UEQzUwG0JTOwroD02YHT8ZF1aDyxre+Tm7tM1PduLqqIY4Ste5SB 4tFa6Z5o+/sh4b0LuC17cysWSNv66onNcG0oHq59b9pjelhrBVj6CYPBTybfpDdq Z4mx87lptG+6T1y8EINpJaXpu35YDBtUYB0JCc/cPp0d2urCH7a3Xv7jXBr+vejX 84vv+Kkv1S3Emil2L1LXvWlxC89RooPxC+pvEEtw+m46j880p3KXJIwXCyNjVraT YmyUSS+0S7kLiOSgG1Ft9Srgo5SxRCU= -----END CERTIFICATE-----Generated at Sat Oct 11 13:24:31 2025 by rpki-client