$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/064c7a43-23b5-324f-863c-b6cf83e93ae2.roa File: 064c7a43-23b5-324f-863c-b6cf83e93ae2.roa (raw, json) Hash identifier: rGpnCuDOfKQVpXhjbJQ5m2PTw0y7qNsnQt2RR1mLXfs= Subject key identifier: 53:85:1A:1C:76:E3:69:6D:8B:EE:AD:3E:A9:AB:9C:5E:A8:E1:9C:B7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B766D8835AF5963C15242A380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/064c7a43-23b5-324f-863c-b6cf83e93ae2.roa Signing time: Thu 09 Oct 2025 08:33:47 +0000 ROA not before: Thu 09 Oct 2025 08:33:47 +0000 ROA not after: Wed 07 Jan 2026 09:33:47 +0000 asID: 152689 IP address blocks: 68.164.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:6d:88:35:af:59:63:c1:52:42:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 9 08:33:47 2025 GMT Not After : Jan 7 09:33:47 2026 GMT Subject: CN=345d7f48-0ce0-40fe-a4ee-93d215b831ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:90:09:18:f4:43:0e:c0:a7:af:a4:00:0e:1e: 51:53:24:a0:29:28:cf:c3:fb:4d:e8:f2:c9:1b:f3: d2:52:21:27:f0:77:01:c4:bb:0b:22:22:a9:2a:3f: e0:68:4c:ab:59:f0:33:e6:a6:18:0d:ea:42:62:2d: b6:ea:d3:c9:d5:b7:b2:ab:62:8c:60:19:2d:fa:51: cc:3e:62:42:5e:bd:6a:df:57:f5:ad:17:d6:2c:20: c4:b4:0d:c5:49:21:14:88:c6:46:ad:d0:78:6a:aa: 02:22:e3:36:b9:00:f9:31:cf:65:33:44:28:1b:55: 58:05:a9:de:a3:ab:78:66:cc:ed:df:ea:c6:f1:3a: 1c:e9:e5:07:92:46:32:05:77:c6:46:02:ad:28:f9: ab:13:27:87:8d:36:dc:03:ac:15:b1:13:c2:ca:70: 9b:4b:9c:09:2a:74:ee:24:a9:d1:c8:a2:ad:23:8a: 51:aa:18:37:ee:c6:7e:e8:9a:7b:da:bc:9f:f0:2e: fd:fb:a6:55:bb:d9:2b:f0:5d:f1:9f:20:93:e4:6d: 04:16:11:ad:87:31:a6:68:af:4f:83:c8:55:f7:4a: 99:bc:8d:b4:fd:cb:4e:5a:56:fc:81:fa:32:02:04: 83:7e:54:a3:25:3d:da:5e:7e:89:d5:a2:6c:9c:59: 9c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:85:1A:1C:76:E3:69:6D:8B:EE:AD:3E:A9:AB:9C:5E:A8:E1:9C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/064c7a43-23b5-324f-863c-b6cf83e93ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:fb:83:18:a7:82:ea:1a:54:50:92:d0:b5:67:d8:6a:b0:e3: 96:0e:47:03:e6:58:29:04:95:0a:c1:9f:19:b5:63:eb:d2:20: 04:85:fa:7e:c2:17:16:e2:50:e8:d2:dc:48:bf:36:8a:04:25: 1d:49:ef:49:59:de:b9:e2:46:1b:4a:bd:00:b0:d5:4c:7d:bf: 6c:a8:7b:38:b3:f4:80:31:01:3f:19:3e:45:39:ec:a9:a0:9a: a5:f6:23:7d:dd:6b:3c:6f:1c:f8:f8:1e:ba:60:c9:00:1c:5e: a1:31:79:6c:56:71:10:4a:c5:75:e5:1c:1c:e3:f5:d4:b3:9a: 5f:1d:69:48:c0:bc:09:51:a8:b7:db:e3:55:1c:4b:1c:bf:e3: ec:60:c9:20:17:c6:f6:1d:96:ca:e8:66:c3:b8:95:41:8a:c1: 19:46:6b:ec:9e:f3:2a:1b:b0:dd:1e:e8:57:ae:ed:fc:ff:f9: d5:ee:5f:68:15:d9:ff:90:83:cd:b4:12:d5:a1:4e:7d:83:c3: 6f:96:70:a1:96:c0:a1:0c:56:c8:b3:51:96:4e:81:25:81:d0: 40:4f:5e:00:58:34:53:11:e2:9b:5c:3a:fe:39:0b:a6:2b:58: 97:07:d1:bf:14:18:79:19:94:ae:2a:52:d6:95:f6:34:70:c2: 2d:d9:e4:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2bYg1r1ljwVJCo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwOTA4MzM0N1oXDTI2MDEwNzA5MzM0N1owLzEtMCsGA1UEAxMk MzQ1ZDdmNDgtMGNlMC00MGZlLWE0ZWUtOTNkMjE1YjgzMWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJAJGPRDDsCnr6QADh5RUySgKSjPw/tN6PLJ G/PSUiEn8HcBxLsLIiKpKj/gaEyrWfAz5qYYDepCYi226tPJ1beyq2KMYBkt+lHM PmJCXr1q31f1rRfWLCDEtA3FSSEUiMZGrdB4aqoCIuM2uQD5Mc9lM0QoG1VYBane o6t4Zszt3+rG8Toc6eUHkkYyBXfGRgKtKPmrEyeHjTbcA6wVsRPCynCbS5wJKnTu JKnRyKKtI4pRqhg37sZ+6Jp72ryf8C79+6ZVu9kr8F3xnyCT5G0EFhGthzGmaK9P g8hV90qZvI20/ctOWlb8gfoyAgSDflSjJT3aXn6J1aJsnFmc/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOFGhx242lti+6tPqmrnF6o4Zy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDY0YzdhNDMtMjNiNS0z MjRmLTg2M2MtYjZjZjgzZTkzYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALb7gxinguoaVFCS0LVn2Gqw45YORwPmWCkElQrBnxm1Y+vSIASF+n7C FxbiUOjS3Ei/NooEJR1J70lZ3rniRhtKvQCw1Ux9v2yoeziz9IAxAT8ZPkU57Kmg mqX2I33dazxvHPj4HrpgyQAcXqExeWxWcRBKxXXlHBzj9dSzml8daUjAvAlRqLfb 41UcSxy/4+xgySAXxvYdlsroZsO4lUGKwRlGa+ye8yobsN0e6Feu7fz/+dXuX2gV 2f+Qg820EtWhTn2Dw2+WcKGWwKEMVsizUZZOgSWB0EBPXgBYNFMR4ptcOv45C6Yr WJcH0b8UGHkZlK4qUtaV9jRwwi3Z5Ng= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:47 2025 by rpki-client