$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bd85e14a-a941-3190-81ec-819309f5fa0e.roa File: bd85e14a-a941-3190-81ec-819309f5fa0e.roa (raw, json) Hash identifier: 3TA+r3NA63nVFkJhrB8xZBdWQwWMe2zAO7IEyP8snYo= Subject key identifier: EE:57:93:F7:AF:DF:CA:00:97:6F:0E:1C:3A:D8:A0:30:15:8B:DD:72 Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1 Certificate serial: 010D0C9F4328584B5571E68F0D5A283DC7C4EE80 Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bd85e14a-a941-3190-81ec-819309f5fa0e.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 69.67.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e6:8f:0d:5a:28:3d:c7:c4:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=18d34f8e-6a82-4e74-bb64-2a9417713b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:fc:a0:8f:99:b1:ec:54:fc:75:c1:b1:03: a0:f6:e4:dc:ea:74:b5:45:3e:06:76:2d:13:00:fd: af:95:a7:5e:f9:2d:24:f5:af:ac:8b:c2:91:af:05: f3:df:75:17:d4:1d:12:f2:0a:88:41:ba:88:a5:7a: 0c:91:06:25:19:7f:4d:19:56:4a:c5:2e:9f:65:76: fc:84:64:d5:73:02:24:b0:e4:fc:60:8d:90:75:c7: 83:be:9c:1f:14:44:46:86:d4:59:46:8e:a0:7e:74: cc:3f:2c:0f:79:37:74:36:28:9b:ac:0c:e7:65:ec: 13:74:49:5b:41:85:99:93:e6:48:bb:63:e3:e1:a0: 38:a7:51:75:2c:2e:68:5f:38:cc:92:9b:ca:03:13: 5a:9d:28:be:38:80:1c:ae:16:97:20:b8:4d:fc:60: e5:26:ef:80:17:74:6e:21:b9:18:61:c2:93:3a:6b: c9:71:91:c0:57:ce:3f:30:95:49:70:ad:2b:68:de: 5b:d6:50:80:92:16:54:5f:68:9f:68:b4:1e:9b:23: e0:cc:d2:06:9b:3b:9b:93:8d:7a:47:82:3f:32:37: b2:f4:5a:d0:59:7d:5e:65:84:68:a7:de:7d:5e:90: 1e:3b:c9:c6:f7:b0:f5:5e:4f:60:d4:31:09:b9:59: 1a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:57:93:F7:AF:DF:CA:00:97:6F:0E:1C:3A:D8:A0:30:15:8B:DD:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bd85e14a-a941-3190-81ec-819309f5fa0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl X509v3 Authority Key Identifier: keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer sbgp-ipAddrBlock: critical IPv4: 69.67.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:13:ad:c8:a9:1f:d7:25:18:6c:c5:6a:20:d6:fa:fd:60:fb: 8e:2c:7b:a7:b2:67:f6:94:fe:70:37:28:88:e0:20:89:a8:91: 76:cf:68:cb:75:2a:90:49:1e:3f:8f:00:58:86:06:48:67:8b: 28:47:ea:1c:d0:ed:b8:4b:98:23:64:79:d8:71:8f:08:92:99: 50:9e:86:f3:09:08:12:1f:3a:da:3a:fc:0d:12:f7:89:64:85: 6a:d5:2f:a7:1d:ca:23:e9:05:9a:aa:27:5c:2c:d2:88:8f:5a: 23:b5:0f:75:90:52:49:15:a1:ec:18:88:7a:41:6a:6a:6e:5c: 86:8a:f1:35:dc:80:76:3e:3d:ea:33:cd:c5:83:fd:29:bf:be: d3:9f:3c:3b:ba:fc:39:fa:87:0d:3f:3f:c1:42:eb:47:57:2e: 74:16:d7:a3:cf:98:d2:a9:1d:61:f0:7e:c6:8d:b5:3d:4d:3d: 28:3e:02:97:9d:ce:3a:b3:5d:d4:83:18:04:5b:70:30:b3:20: 9f:fa:25:43:1b:db:30:46:af:6d:a0:29:a3:4c:20:51:64:1c: ee:ea:b5:bd:b9:54:82:99:3b:de:90:7f:bc:da:23:ab:c1:2b: 41:2b:bb:62:b4:31:04:f9:c6:ab:cc:80:65:b1:da:f7:11:dc: 9e:5e:d3:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVceaPDVooPcfE7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz ZWExMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk MThkMzRmOGUtNmE4Mi00ZTc0LWJiNjQtMmE5NDE3NzEzYjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKb8oI+ZsexU/HXBsQOg9uTc6nS1RT4Gdi0T AP2vlade+S0k9a+si8KRrwXz33UX1B0S8gqIQbqIpXoMkQYlGX9NGVZKxS6fZXb8 hGTVcwIksOT8YI2QdceDvpwfFERGhtRZRo6gfnTMPywPeTd0NiibrAznZewTdElb QYWZk+ZIu2Pj4aA4p1F1LC5oXzjMkpvKAxNanSi+OIAcrhaXILhN/GDlJu+AF3Ru IbkYYcKTOmvJcZHAV84/MJVJcK0raN5b1lCAkhZUX2ifaLQemyPgzNIGmzubk416 R4I/Mjey9FrQWX1eZYRop959XpAeO8nG97D1Xk9g1DEJuVkadwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5Xk/ev38oAl28OHDrYoDAVi91yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvYmQ4NWUxNGEtYTk0MS0z MTkwLTgxZWMtODE5MzA5ZjVmYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3 MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3 M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0 NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUTrcipH9clGGzFaiDW+v1g+44se6eyZ/aU/nA3KIjgIImokXbPaMt1 KpBJHj+PAFiGBkhniyhH6hzQ7bhLmCNkedhxjwiSmVCehvMJCBIfOto6/A0S94lk hWrVL6cdyiPpBZqqJ1ws0oiPWiO1D3WQUkkVoewYiHpBampuXIaK8TXcgHY+Peoz zcWD/Sm/vtOfPDu6/Dn6hw0/P8FC60dXLnQW16PPmNKpHWHwfsaNtT1NPSg+Aped zjqzXdSDGARbcDCzIJ/6JUMb2zBGr22gKaNMIFFkHO7qtb25VIKZO96Qf7zaI6vB K0Eru2K0MQT5xqvMgGWx2vcR3J5e02U= -----END CERTIFICATE-----Generated at Wed Oct 8 19:45:09 2025 by rpki-client