$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/7015b68a-8eb8-39c6-bddc-d9ee8fe349a4.roa File: 7015b68a-8eb8-39c6-bddc-d9ee8fe349a4.roa (raw, json) Hash identifier: FSLOGcrTBbDBV2UXn+62N9Ix0pIF8zQvr3/TMq4c3nk= Subject key identifier: 8B:E8:3D:B3:99:27:48:16:8C:58:10:AD:D8:03:43:B5:86:FF:75:79 Certificate issuer: /CN=6457bd98-4cd5-4766-a190-844b93a354f2 Certificate serial: 010D0C9F4328584B047C09CEB345E967821FF2C0 Authority key identifier: C2:05:CE:FE:36:D2:DC:A6:D9:0A:D3:E6:25:6B:11:7C:D2:0E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/7015b68a-8eb8-39c6-bddc-d9ee8fe349a4.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 46088 IP address blocks: 67.209.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:09:ce:b3:45:e9:67:82:1f:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6457bd98-4cd5-4766-a190-844b93a354f2 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=17fdefe4-7509-485d-a64f-94e8a7951ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:63:4a:0a:dc:d6:99:54:cf:6b:13:83:9a: bb:7c:a3:c0:4c:e3:d3:d6:b6:fd:d3:4b:4c:66:e1: e5:51:75:36:e9:e6:d7:0c:02:9e:aa:a5:f3:29:94: 6c:f4:01:b7:cd:f0:90:13:ab:92:e0:c9:87:16:3f: 4a:b0:a1:a9:41:62:5b:29:4e:6d:03:a4:98:e7:b3: 27:2e:11:03:c3:b0:4f:a0:12:9a:1b:6a:f5:8e:f4: 98:7f:7c:8c:cb:58:01:8f:fb:48:49:fc:c2:e6:b8: d3:b8:7f:b0:35:ac:c7:a1:cc:18:1b:d5:a9:54:6d: 19:54:16:36:e6:32:5d:c6:08:2d:45:6e:fd:44:06: ef:96:df:4b:06:ca:6d:54:04:c3:95:d8:d2:a1:fb: 0e:3a:11:c8:59:cf:d4:24:10:50:e2:3e:e5:e3:f0: da:35:05:cb:92:ec:d8:61:37:d6:88:00:1f:e2:86: 8e:b2:8f:51:dc:a6:bb:7c:8d:39:95:39:51:47:46: 72:6f:b5:54:3b:49:b4:99:74:46:54:bf:08:44:07: 33:e4:b0:a7:1f:5a:73:10:67:14:25:68:48:23:e7: 00:b8:6d:44:6c:3b:e3:2f:d3:c8:b2:72:ff:9c:25: b0:9f:72:67:65:d5:57:0e:65:44:ef:af:13:b2:c5: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E8:3D:B3:99:27:48:16:8C:58:10:AD:D8:03:43:B5:86:FF:75:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/7015b68a-8eb8-39c6-bddc-d9ee8fe349a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.crl X509v3 Authority Key Identifier: keyid:C2:05:CE:FE:36:D2:DC:A6:D9:0A:D3:E6:25:6B:11:7C:D2:0E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2.cer sbgp-ipAddrBlock: critical IPv4: 67.209.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:90:c6:9d:7c:20:ec:bc:39:69:fc:ad:a6:67:cb:78:71:31: 8b:25:18:c9:83:48:89:14:17:ef:29:3f:8c:d8:91:2e:3f:48: 4a:04:bf:58:48:ec:50:ac:49:a3:48:56:1f:0f:e2:e2:ca:1c: b5:75:fd:0d:ff:20:8c:d0:48:ee:27:8e:89:6b:b0:60:1a:8d: 6a:ea:e9:35:7b:d3:9c:a9:a4:90:bb:b1:26:ce:2f:a8:8a:67: 1e:38:23:8a:02:d8:8c:de:b3:39:17:e0:d6:67:06:0f:fb:bc: c9:aa:ba:71:06:0f:27:b0:98:cc:76:29:25:e0:e7:a6:41:59: a2:a5:93:a7:01:94:14:7e:9c:08:ca:24:e9:64:12:d0:bb:b1: 07:0c:25:63:b8:3c:f3:5d:79:53:a1:b5:91:45:f6:fe:13:2d: b2:e1:62:b4:5a:ee:c9:08:9e:cf:03:73:ac:7e:05:89:6b:da: 96:95:1b:eb:d7:35:75:98:5f:08:3d:7f:e8:a6:26:29:b9:31: 52:39:61:bc:5d:1d:85:42:b9:92:b6:ac:64:bc:11:ec:a4:6f: 0c:57:11:4c:b9:28:5e:1b:df:f7:08:f6:17:c2:da:22:a7:e4: 66:83:2c:77:21:fa:85:fc:a8:2d:f4:8f:6e:cf:93:9d:a9:e3: 6b:31:11:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAnOs0XpZ4If8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1N2JkOTgtNGNkNS00NzY2LWExOTAtODQ0YjkzYTM1 NGYyMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MTdmZGVmZTQtNzUwOS00ODVkLWE2NGYtOTRlOGE3OTUxYWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3VjSgrc1plUz2sTg5q7fKPATOPT1rb900tM ZuHlUXU26ebXDAKeqqXzKZRs9AG3zfCQE6uS4MmHFj9KsKGpQWJbKU5tA6SY57Mn LhEDw7BPoBKaG2r1jvSYf3yMy1gBj/tISfzC5rjTuH+wNazHocwYG9WpVG0ZVBY2 5jJdxggtRW79RAbvlt9LBsptVATDldjSofsOOhHIWc/UJBBQ4j7l4/DaNQXLkuzY YTfWiAAf4oaOso9R3Ka7fI05lTlRR0Zyb7VUO0m0mXRGVL8IRAcz5LCnH1pzEGcU JWhII+cAuG1EbDvjL9PIsnL/nCWwn3JnZdVXDmVE768TssVu5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvoPbOZJ0gWjFgQrdgDQ7WG/3V5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU3 YmQ5OC00Y2Q1LTQ3NjYtYTE5MC04NDRiOTNhMzU0ZjIvNzAxNWI2OGEtOGViOC0z OWM2LWJkZGMtZDllZThmZTM0OWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjQ1N2JkOTgtNGNkNS00NzY2LWEx OTAtODQ0YjkzYTM1NGYyLzY0NTdiZDk4LTRjZDUtNDc2Ni1hMTkwLTg0NGI5M2Ez NTRmMi5jcmwwHwYDVR0jBBgwFoAUwgXO/jbS3KbZCtPmJWsRfNIOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU3YmQ5OC00Y2Q1LTQ3NjYtYTE5MC04NDRi OTNhMzU0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9GgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOQxp18IOy8OWn8raZny3hxMYslGMmDSIkUF+8pP4zYkS4/SEoEv1hI 7FCsSaNIVh8P4uLKHLV1/Q3/IIzQSO4njolrsGAajWrq6TV705yppJC7sSbOL6iK Zx44I4oC2IzeszkX4NZnBg/7vMmqunEGDyewmMx2KSXg56ZBWaKlk6cBlBR+nAjK JOlkEtC7sQcMJWO4PPNdeVOhtZFF9v4TLbLhYrRa7skIns8Dc6x+BYlr2paVG+vX NXWYXwg9f+imJim5MVI5YbxdHYVCuZK2rGS8EeykbwxXEUy5KF4b3/cI9hfC2iKn 5GaDLHch+oX8qC30j27Pk52p42sxEXc= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:46 2025 by rpki-client