$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/640938b3-682f-3b9f-b3c1-443bc6a0606f.roa File: 640938b3-682f-3b9f-b3c1-443bc6a0606f.roa (raw, json) Hash identifier: 4lnG8LlEV8MOGmybk72ZSeH2mrkPW3JxBIVyzkVRrxY= Subject key identifier: B4:B0:55:4B:02:21:B0:19:B9:1D:09:5A:1C:F6:29:AA:AF:30:1E:AC Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584B004BEFFF7F472862096E8C00 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/640938b3-682f-3b9f-b3c1-443bc6a0606f.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 63062 IP address blocks: 67.143.106.0/24 maxlen: 24 72.169.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:ef:ff:7f:47:28:62:09:6e:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=335b1220-969d-468e-b465-ac4e100ca380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4b:67:8d:7a:3e:7c:1e:22:33:86:d4:34:5e: ff:47:51:99:58:93:a1:bb:05:76:c2:39:58:4b:37: 18:a9:f7:da:06:f8:ca:0a:0c:f0:cb:f3:09:b0:c4: 6b:8e:78:ec:67:1c:0b:2b:81:5f:29:32:e3:56:29: 1d:2a:ae:c6:cd:36:c3:6e:73:6e:1f:27:2f:97:f9: b8:b0:c6:76:49:df:d8:98:a7:b1:49:b5:fb:06:8e: db:7a:b4:3f:67:27:c5:b6:90:af:22:eb:79:9a:c9: 04:17:33:78:19:53:62:8f:02:68:1a:bb:27:25:a4: f6:21:57:13:17:d2:63:69:cb:1c:c1:23:ee:28:02: b2:f0:6d:93:09:20:ac:4d:a0:92:5f:8e:45:80:ae: bb:c3:72:08:5c:01:c1:fb:bf:01:b1:01:0e:c0:25: aa:b6:bb:23:6d:52:f6:a5:1d:40:37:2e:08:8c:99: 69:aa:0c:85:fc:f4:c9:d8:ca:ef:f7:54:3a:54:31: e3:eb:3d:75:ea:f8:df:9f:92:8a:44:47:04:ea:45: 0c:43:67:18:c2:48:be:0b:2b:f8:6e:4b:52:95:30: fc:b8:b7:ed:b9:33:af:fe:e7:e3:08:8d:85:85:16: a7:ed:6c:a6:81:1f:84:95:28:09:a7:17:3b:52:bc: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B0:55:4B:02:21:B0:19:B9:1D:09:5A:1C:F6:29:AA:AF:30:1E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/640938b3-682f-3b9f-b3c1-443bc6a0606f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.143.106.0/24 72.169.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c8:e8:38:26:ea:a1:2e:51:83:40:34:32:af:f4:b5:89:f6: 35:fc:0c:86:65:9f:89:7d:e9:6e:d8:34:92:aa:42:18:74:bf: 61:c1:c2:3c:15:9e:f9:af:90:09:b2:85:09:34:7a:ee:de:76: 1c:03:83:19:c2:35:27:26:60:d4:83:3a:35:1c:a2:b5:d8:4f: 23:c1:a7:13:b8:57:03:21:c3:8a:58:c8:e9:1b:d4:95:c2:32: ec:3a:00:13:f2:fe:80:f7:9c:53:e3:0f:2c:32:3d:1b:bc:ca: 03:39:ee:41:26:84:4c:02:18:76:83:33:02:02:2d:d6:11:12: 97:c8:af:0f:dd:04:54:21:ad:c9:b7:ea:ed:20:6b:63:91:b8: 34:7b:8a:b4:9c:ae:8f:d7:e8:c3:2b:88:45:f9:04:ca:48:bd: 51:02:d5:9b:ff:19:0b:a3:fd:36:45:9c:a5:f3:85:d9:b2:3c: ac:dc:b2:33:8f:5e:82:af:26:09:6e:76:d3:56:9c:52:99:d8: 26:24:01:66:2b:98:1f:8d:48:e3:35:c3:32:93:d5:e6:f0:93: 31:07:e1:e1:ac:2c:aa:b4:94:93:78:90:05:5d:44:0b:9f:a9: d2:d6:86:a2:32:52:0f:a7:47:62:0c:82:2a:d1:22:8c:77:96: 9a:b8:10:d4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsAS+//f0coYglujAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MzM1YjEyMjAtOTY5ZC00NjhlLWI0NjUtYWM0ZTEwMGNhMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00tnjXo+fB4iM4bUNF7/R1GZWJOhuwV2wjlY SzcYqffaBvjKCgzwy/MJsMRrjnjsZxwLK4FfKTLjVikdKq7GzTbDbnNuHycvl/m4 sMZ2Sd/YmKexSbX7Bo7berQ/ZyfFtpCvIut5mskEFzN4GVNijwJoGrsnJaT2IVcT F9JjacscwSPuKAKy8G2TCSCsTaCSX45FgK67w3IIXAHB+78BsQEOwCWqtrsjbVL2 pR1ANy4IjJlpqgyF/PTJ2Mrv91Q6VDHj6z116vjfn5KKREcE6kUMQ2cYwki+Cyv4 bktSlTD8uLftuTOv/ufjCI2FhRan7WymgR+ElSgJpxc7UrzH3QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLSwVUsCIbAZuR0JWhz2KaqvMB6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvNjQwOTM4YjMtNjgyZi0z YjlmLWIzYzEtNDQzYmM2YTA2MDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQ49qAwQA SKnJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHfI6Dgm6qEuUYNANDKv9LWJ9jX8DIZln4l96W7YNJKqQhh0 v2HBwjwVnvmvkAmyhQk0eu7edhwDgxnCNScmYNSDOjUcorXYTyPBpxO4VwMhw4pY yOkb1JXCMuw6ABPy/oD3nFPjDywyPRu8ygM57kEmhEwCGHaDMwICLdYREpfIrw/d BFQhrcm36u0ga2ORuDR7irScro/X6MMriEX5BMpIvVEC1Zv/GQuj/TZFnKXzhdmy PKzcsjOPXoKvJgludtNWnFKZ2CYkAWYrmB+NSOM1wzKT1ebwkzEH4eGsLKq0lJN4 kAVdRAufqdLWhqIyUg+nR2IMgirRIox3lpq4ENQ= -----END CERTIFICATE-----Generated at Sat Oct 11 20:00:56 2025 by rpki-client