$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa File: 3ae91796-d0c5-382c-af8b-cc422804c680.roa (raw, json) Hash identifier: 6gLRTAzbaIj84OO1lzOYLwwlinBCB90k6ZOtQCQUJ+s= Subject key identifier: 12:17:9F:7E:B2:2D:0D:22:ED:70:E6:A3:5E:58:8A:9E:FA:49:EF:F0 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584B715CA05C357786688AE91018 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 63062 IP address blocks: 67.44.112.0/20 maxlen: 24 174.32.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a0:5c:35:77:86:68:8a:e9:10:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=6d19261c-044c-4aae-b35a-d49520dbeefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c7:df:9c:4c:54:2b:84:4a:50:bc:b9:82:09: 36:fe:e4:9f:b0:ae:da:04:96:72:bc:f5:d6:b2:3b: a6:2c:6a:d5:f0:ac:4e:f8:10:bc:85:0d:e6:dc:b2: 72:09:fc:a0:40:c3:01:00:fb:1a:96:88:09:38:e1: 23:7b:ba:43:30:6b:59:78:0a:e8:7e:21:a1:a2:85: 77:b7:19:b4:1d:0d:b3:8f:50:4b:81:b8:e9:35:97: d0:a8:0f:21:fc:03:89:f4:ad:3e:71:d4:a2:f8:0f: 06:4b:e7:76:b6:5d:7c:a8:5b:12:f6:c7:69:0e:80: 20:28:0d:27:a8:16:a3:6f:a8:00:d5:36:c4:ae:20: 42:26:ef:b0:05:83:88:b7:3b:85:0f:72:da:66:18: c4:ec:a5:ef:6b:1d:bf:20:47:cb:9e:68:ee:98:ab: a5:0a:43:2a:4c:1d:f3:88:f9:42:4d:b2:f8:ab:6e: 23:a9:f9:c5:eb:3a:d8:1c:f6:e3:3e:c0:fb:bd:0b: 3f:9e:e9:a3:b2:ae:57:cb:f9:bc:5d:aa:eb:75:fc: 82:c4:63:da:a3:ae:40:a9:e0:7d:c1:e0:af:30:ed: 0a:66:4e:ab:c0:43:00:36:5e:2a:b0:cb:06:3f:c1: 97:e1:7c:ea:88:b7:0b:66:a0:5f:0a:63:69:40:de: 02:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:17:9F:7E:B2:2D:0D:22:ED:70:E6:A3:5E:58:8A:9E:FA:49:EF:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.112.0/20 174.32.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:26:71:4b:ef:4c:3c:92:38:06:62:04:fd:cc:2b:d8:01:d6: 4d:06:f0:78:e5:4c:09:37:8a:e7:ee:fa:57:ad:6f:2d:e3:12: 2e:f2:78:f0:dc:f1:60:c6:9b:4f:e0:da:69:e8:dd:a5:df:e0: fd:69:f5:01:0b:79:bf:90:db:54:ec:4b:c3:52:d0:45:13:c3: 46:bc:95:c6:72:7c:bb:17:58:13:17:d8:91:4d:ef:0d:f1:57: ca:51:e7:8f:ea:90:aa:a7:75:3a:2b:c7:cb:72:45:02:27:16: e2:d8:8e:ba:09:e5:b3:40:03:c1:3c:8e:3d:3b:d8:96:b3:be: 1a:c7:fc:2e:98:c6:50:e4:18:5c:d2:1b:25:d5:af:91:f4:fc: f8:e6:3d:c2:94:ab:1e:b1:98:2c:fc:0f:ca:bd:4f:07:d8:2a: 4d:ee:f6:c1:fa:1a:a7:f9:da:2d:c6:a4:e6:29:bd:73:6d:e4: 60:d4:cd:4a:95:18:97:49:5d:38:86:5f:1e:01:f6:3d:ab:b6: be:bb:39:23:13:e1:b0:fd:42:c7:8d:c6:04:cd:25:68:69:fa: 24:a7:26:c4:5f:1a:62:f2:82:29:c7:62:f4:e3:3d:dd:4d:06: bc:10:6d:6d:60:90:a4:d4:eb:75:7a:58:2e:79:4d:99:64:75: a3:e6:08:e7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtxXKBcNXeGaIrpEBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NmQxOTI2MWMtMDQ0Yy00YWFlLWIzNWEtZDQ5NTIwZGJlZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8ffnExUK4RKULy5ggk2/uSfsK7aBJZyvPXW sjumLGrV8KxO+BC8hQ3m3LJyCfygQMMBAPsalogJOOEje7pDMGtZeArofiGhooV3 txm0HQ2zj1BLgbjpNZfQqA8h/AOJ9K0+cdSi+A8GS+d2tl18qFsS9sdpDoAgKA0n qBajb6gA1TbEriBCJu+wBYOItzuFD3LaZhjE7KXvax2/IEfLnmjumKulCkMqTB3z iPlCTbL4q24jqfnF6zrYHPbjPsD7vQs/numjsq5Xy/m8XarrdfyCxGPao65AqeB9 weCvMO0KZk6rwEMANl4qsMsGP8GX4XzqiLcLZqBfCmNpQN4CFwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBIXn36yLQ0i7XDmo15Yip76Se/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvM2FlOTE3OTYtZDBjNS0z ODJjLWFmOGItY2M0MjI4MDRjNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEQyxwAwQE riBwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFUmcUvvTDySOAZiBP3MK9gB1k0G8HjlTAk3iufu+letby3j Ei7yePDc8WDGm0/g2mno3aXf4P1p9QELeb+Q21TsS8NS0EUTw0a8lcZyfLsXWBMX 2JFN7w3xV8pR54/qkKqndTorx8tyRQInFuLYjroJ5bNAA8E8jj072JazvhrH/C6Y xlDkGFzSGyXVr5H0/PjmPcKUqx6xmCz8D8q9TwfYKk3u9sH6Gqf52i3GpOYpvXNt 5GDUzUqVGJdJXTiGXx4B9j2rtr67OSMT4bD9QseNxgTNJWhp+iSnJsRfGmLyginH YvTjPd1NBrwQbW1gkKTU63V6WC55TZlkdaPmCOc= -----END CERTIFICATE-----Generated at Sat Oct 11 19:52:48 2025 by rpki-client