$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d35f2539-69c0-354e-a638-c70af4abdc6d.roa File: d35f2539-69c0-354e-a638-c70af4abdc6d.roa (raw, json) Hash identifier: o5gpgNEv2xJahAt3W4uPSpb+21XCn3W4PmQSTtVHzw8= Subject key identifier: A2:BA:BE:8B:C8:37:35:0C:BA:2B:71:11:BD:D9:B0:D1:D9:7E:B6:15 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584B2FC18F246E69A72EEB8BA880 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d35f2539-69c0-354e-a638-c70af4abdc6d.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 6621 IP address blocks: 67.142.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:8f:24:6e:69:a7:2e:eb:8b:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=408b8c37-03ad-4b7e-bad2-b0f311d3402f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ac:dd:c9:03:e9:29:99:ba:25:61:55:5f:fe: 75:52:d8:5d:bf:5f:ba:32:8a:ea:ba:f4:13:b9:08: ee:a7:97:9a:af:f8:3e:af:61:a6:26:81:7c:e3:b2: 28:9a:b2:52:d9:7b:6c:67:cf:f5:42:4b:86:f3:e1: ee:40:4e:32:27:63:4c:4b:5f:ef:a0:eb:b5:3e:58: d6:67:bb:cf:91:c4:5f:5f:7a:10:67:c2:a6:91:ad: 53:bf:ba:d4:c9:48:45:58:13:ed:db:2a:59:19:40: 40:b2:a5:1a:60:12:ba:61:57:54:35:78:a9:d0:c7: 58:09:36:27:3e:5a:80:2b:e1:27:b7:c1:f2:62:46: 1f:80:9f:81:a1:e9:6c:0b:6f:ee:b0:65:da:f5:bb: d5:da:22:c5:63:20:92:08:67:c2:2f:dd:29:c5:22: f1:cc:68:c1:cd:b6:7b:a1:a4:26:a8:bd:ec:60:39: 1e:89:df:7c:c0:c4:c3:a5:58:72:4c:1d:42:ff:fa: 3f:db:39:44:a3:e5:fc:8e:a3:2a:e1:30:0a:39:02: 44:8d:76:a6:9b:1b:7f:75:13:23:5e:61:f5:75:d8: 30:56:64:ce:b2:f2:a8:91:a4:f5:7f:36:82:23:60: 43:42:58:cb:4b:3b:a6:e8:a4:8d:fa:d6:39:2d:ea: 84:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BA:BE:8B:C8:37:35:0C:BA:2B:71:11:BD:D9:B0:D1:D9:7E:B6:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d35f2539-69c0-354e-a638-c70af4abdc6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.142.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ec:27:89:86:46:81:47:6f:31:fd:7b:93:ea:b4:03:8f:6d: c8:dd:e4:09:3a:1f:24:97:b6:15:7a:fd:38:2b:57:c9:c8:10: 21:c5:fb:79:79:14:fc:03:71:cc:b6:95:a9:f4:d4:01:4e:aa: c3:54:eb:cc:f0:35:52:d0:49:14:e3:06:c7:8f:52:dc:76:2b: 0f:54:49:32:2d:c4:09:ad:d3:97:fc:9d:95:af:11:66:ca:06: 8f:eb:38:ae:bb:dd:f3:a5:63:fb:9e:4b:dc:3c:2d:12:9e:13: ba:9c:08:c0:5e:c2:15:82:6b:ea:00:69:9f:ab:7a:aa:79:9d: 95:69:93:14:90:18:39:59:e6:a2:7a:e4:40:95:50:69:1f:e6: d2:31:ec:61:92:c9:06:29:cb:70:bc:83:7c:69:44:f9:45:2e: 04:64:d4:9f:4e:c1:bb:a5:85:24:07:f0:67:e7:e7:28:68:d4: 6c:23:76:be:06:bf:cc:e2:82:ef:fd:57:bc:17:ea:08:91:be: 98:11:d3:1b:f3:cd:47:fc:28:b9:4f:f5:b0:8d:46:85:32:59: a1:3b:20:c9:88:8e:58:8c:d7:0d:ae:da:38:67:ae:12:09:ef: 54:a1:3f:14:0c:7f:b1:ad:0e:17:c8:d4:fe:63:9a:a5:a6:44: 1e:7e:29:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwY8kbmmnLuuLqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk NDA4YjhjMzctMDNhZC00YjdlLWJhZDItYjBmMzExZDM0MDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6zdyQPpKZm6JWFVX/51Uthdv1+6MorquvQT uQjup5ear/g+r2GmJoF847IomrJS2XtsZ8/1QkuG8+HuQE4yJ2NMS1/voOu1PljW Z7vPkcRfX3oQZ8Kmka1Tv7rUyUhFWBPt2ypZGUBAsqUaYBK6YVdUNXip0MdYCTYn PlqAK+Ent8HyYkYfgJ+BoelsC2/usGXa9bvV2iLFYyCSCGfCL90pxSLxzGjBzbZ7 oaQmqL3sYDkeid98wMTDpVhyTB1C//o/2zlEo+X8jqMq4TAKOQJEjXammxt/dRMj XmH1ddgwVmTOsvKokaT1fzaCI2BDQljLSzum6KSN+tY5LeqEwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKK6vovINzUMuitxEb3ZsNHZfrYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvZDM1ZjI1MzktNjljMC0z NTRlLWE2MzgtYzcwYWY0YWJkYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ46gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrsJ4mGRoFHbzH9e5PqtAOPbcjd5Ak6HySXthV6/TgrV8nIECHF+3l5 FPwDccy2lan01AFOqsNU68zwNVLQSRTjBsePUtx2Kw9USTItxAmt05f8nZWvEWbK Bo/rOK673fOlY/ueS9w8LRKeE7qcCMBewhWCa+oAaZ+reqp5nZVpkxSQGDlZ5qJ6 5ECVUGkf5tIx7GGSyQYpy3C8g3xpRPlFLgRk1J9OwbulhSQH8Gfn5yho1Gwjdr4G v8zigu/9V7wX6giRvpgR0xvzzUf8KLlP9bCNRoUyWaE7IMmIjliM1w2u2jhnrhIJ 71ShPxQMf7GtDhfI1P5jmqWmRB5+KYg= -----END CERTIFICATE-----Generated at Sat Oct 11 13:29:58 2025 by rpki-client