$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/073d1502-cc7e-32a3-8236-35de56e630d5.roa File: 073d1502-cc7e-32a3-8236-35de56e630d5.roa (raw, json) Hash identifier: A/Zx6Tnfx5Ho3hWUHjiOHcddsSepSAlEgYPoUnZVaYs= Subject key identifier: AD:E2:E1:AA:41:7D:E7:2D:48:BA:F7:48:F8:EB:F3:F7:79:FC:D7:19 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B70BD221228615415AFD4F0C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/073d1502-cc7e-32a3-8236-35de56e630d5.roa Signing time: Tue 07 Oct 2025 07:39:19 +0000 ROA not before: Tue 07 Oct 2025 07:39:19 +0000 ROA not after: Mon 05 Jan 2026 08:39:19 +0000 asID: 7922 IP address blocks: 68.167.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:70:bd:22:12:28:61:54:15:af:d4:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 7 07:39:19 2025 GMT Not After : Jan 5 08:39:19 2026 GMT Subject: CN=cd6b2a02-8fa9-4ff9-8700-dfc6f4423d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:56:5a:bb:d1:88:69:46:bd:3e:77:5d:28:41: c1:e9:b5:b9:8f:dc:40:14:79:b9:72:95:30:0c:d0: b9:f5:ca:cf:1b:c7:e1:46:bc:77:c1:8a:25:4a:93: 97:17:3b:82:81:9e:33:78:32:24:14:7f:4f:cc:50: 83:5c:d2:71:96:18:4b:83:d3:8a:43:e1:c3:aa:b3: 75:3d:3d:ac:6e:9c:28:e2:b2:97:85:a1:05:4d:2c: 89:10:e1:c8:cb:15:57:f6:35:8a:07:d7:75:4e:b2: 17:13:63:b9:ec:d3:f1:2a:1f:8f:83:3f:27:07:e4: c8:b2:1b:93:f6:89:5d:c7:da:b0:0e:d5:72:ed:3b: e8:64:10:70:7d:20:08:e6:50:34:eb:cd:3a:49:c5: e0:1e:06:2c:e8:9a:72:ef:8a:1f:e6:08:d9:d8:1d: 5a:88:73:7a:ef:a3:29:46:89:0b:f7:79:81:93:d6: 6c:5c:35:aa:d2:6d:30:8d:66:4e:31:65:88:35:ff: cc:c2:90:d5:8d:04:0b:b8:49:65:ed:02:3d:d1:8b: 5b:c7:8f:1d:3a:14:6a:d4:de:02:e6:41:42:d8:a7: e2:b1:23:56:95:6c:e1:fb:52:45:a8:ca:ba:8a:76: 7f:d0:75:c9:60:76:f9:09:60:b7:0f:57:64:dd:96: 03:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E2:E1:AA:41:7D:E7:2D:48:BA:F7:48:F8:EB:F3:F7:79:FC:D7:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/073d1502-cc7e-32a3-8236-35de56e630d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6f:12:7d:1a:53:b8:e6:b3:9e:7a:8b:c4:8c:21:f9:a9:81: d5:46:83:d7:2b:53:e4:b8:aa:97:eb:b8:ef:9e:65:ca:5b:84: e0:1d:04:26:36:8d:35:88:a6:3a:43:6c:e4:8a:0c:5a:45:0a: bc:3b:64:13:d2:10:79:76:cc:ab:37:1a:3d:09:af:26:bf:9d: a9:d3:c8:96:26:c2:c1:cb:ac:cc:74:80:1f:4b:76:2b:92:11: 9a:36:f4:62:48:ae:88:9d:4e:23:89:59:f2:89:c7:ad:9c:92: f7:e1:53:8e:09:f9:e9:f4:14:18:42:b1:c7:0a:91:cb:a5:19: c9:7d:d8:43:6b:ac:bc:99:6a:de:8b:99:a9:ca:87:35:d6:1e: 67:df:30:05:10:1f:82:e4:b3:6b:3f:f5:9d:91:a4:33:88:f4: 0c:84:2d:85:0f:20:86:76:bd:0a:60:ca:5e:e2:64:0a:fe:bf: cc:98:89:84:a1:49:42:11:1b:77:3a:ae:c6:ab:dd:c8:b2:c6: bd:a4:1e:7d:59:45:82:75:8f:11:28:00:4e:e3:bb:b1:59:1c: c1:ad:8f:1e:c7:b3:1a:79:3c:a9:3d:a3:7d:ee:f6:44:8b:77: 90:5d:87:bd:70:f4:03:b1:dc:af:70:cd:2e:52:d8:29:26:8a: ff:90:26:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtwvSISKGFUFa/U8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwNzA3MzkxOVoXDTI2MDEwNTA4MzkxOVowLzEtMCsGA1UEAxMk Y2Q2YjJhMDItOGZhOS00ZmY5LTg3MDAtZGZjNmY0NDIzZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklZau9GIaUa9PnddKEHB6bW5j9xAFHm5cpUw DNC59crPG8fhRrx3wYolSpOXFzuCgZ4zeDIkFH9PzFCDXNJxlhhLg9OKQ+HDqrN1 PT2sbpwo4rKXhaEFTSyJEOHIyxVX9jWKB9d1TrIXE2O57NPxKh+Pgz8nB+TIshuT 9oldx9qwDtVy7TvoZBBwfSAI5lA06806ScXgHgYs6Jpy74of5gjZ2B1aiHN676Mp RokL93mBk9ZsXDWq0m0wjWZOMWWINf/MwpDVjQQLuEll7QI90Ytbx48dOhRq1N4C 5kFC2KfisSNWlWzh+1JFqMq6inZ/0HXJYHb5CWC3D1dk3ZYDvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3i4apBfectSLr3SPjr8/d5/NcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDczZDE1MDItY2M3ZS0z MmEzLTgyMzYtMzVkZTU2ZTYzMGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKc5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNvEn0aU7jms556i8SMIfmpgdVGg9crU+S4qpfruO+eZcpbhOAdBCY2 jTWIpjpDbOSKDFpFCrw7ZBPSEHl2zKs3Gj0Jrya/nanTyJYmwsHLrMx0gB9LdiuS EZo29GJIroidTiOJWfKJx62ckvfhU44J+en0FBhCsccKkculGcl92ENrrLyZat6L manKhzXWHmffMAUQH4Lks2s/9Z2RpDOI9AyELYUPIIZ2vQpgyl7iZAr+v8yYiYSh SUIRG3c6rsar3ciyxr2kHn1ZRYJ1jxEoAE7ju7FZHMGtjx7Hsxp5PKk9o33u9kSL d5Bdh71w9AOx3K9wzS5S2Ckmiv+QJjk= -----END CERTIFICATE-----Generated at Thu Oct 9 01:18:46 2025 by rpki-client