$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2e66207b-318f-3148-9a09-0df2143d5973.roa File: 2e66207b-318f-3148-9a09-0df2143d5973.roa (raw, json) Hash identifier: oiRRoNvluhEVF3rFuZwWYPYkSZ9NgndX27q5hn1ybmU= Subject key identifier: EE:31:4C:E0:10:74:2A:09:69:8D:A9:1D:B5:3C:C8:E4:4E:C6:F9:B0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B766DACF297AAB3E06FD90B40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2e66207b-318f-3148-9a09-0df2143d5973.roa Signing time: Thu 09 Oct 2025 08:34:04 +0000 ROA not before: Thu 09 Oct 2025 08:34:04 +0000 ROA not after: Wed 07 Jan 2026 09:34:04 +0000 asID: 152689 IP address blocks: 68.165.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:6d:ac:f2:97:aa:b3:e0:6f:d9:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 9 08:34:04 2025 GMT Not After : Jan 7 09:34:04 2026 GMT Subject: CN=097eb7a3-c5e4-495d-b266-873152bb108a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:0a:f8:a8:88:a5:a6:44:0a:ee:b8:3f:47: b8:a9:b6:84:81:85:3e:4c:b3:b4:8d:80:1c:80:f6: a2:94:ab:c3:b1:83:a0:94:22:80:6d:77:08:96:78: 22:3a:a8:86:12:21:7b:80:75:53:17:65:92:ee:47: 23:45:48:e5:06:3a:1e:a6:10:19:9c:66:a5:2a:3e: ac:cc:3a:23:77:1a:01:a8:7b:bb:b9:9f:ae:23:dc: 6f:10:6c:f1:06:84:41:e0:e8:a3:78:af:49:b2:b7: 01:f0:92:ab:d0:d4:c4:7f:bb:02:d8:ed:f9:ed:fc: 7d:0e:43:cd:b4:c2:97:af:04:c5:cd:42:b2:70:9c: c1:51:6c:8f:44:c9:70:ce:86:0d:67:bb:30:e0:9d: e6:f1:93:9e:76:de:fe:04:2f:30:72:ce:13:4c:f8: 77:c6:99:63:68:f6:a8:8a:77:71:a6:f0:ea:d9:2a: 32:48:15:d5:70:67:ec:b9:b6:02:9a:a7:fe:b9:9f: d0:5b:58:ff:5a:30:87:b7:35:66:dc:f4:7a:bd:33: 63:a6:d5:3c:74:f3:3b:62:f6:11:9b:d6:96:cc:f2: 27:06:f5:67:78:01:46:0a:38:39:cf:f1:84:fb:92: 98:43:dc:4e:be:f6:0c:38:e2:1e:39:bc:d9:16:7d: 6f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:31:4C:E0:10:74:2A:09:69:8D:A9:1D:B5:3C:C8:E4:4E:C6:F9:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2e66207b-318f-3148-9a09-0df2143d5973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:64:b4:71:ef:8b:29:f5:1a:25:91:cb:9f:1f:3f:f8:a7:38: f3:b7:f4:0e:57:f9:c4:b9:b8:2d:bf:bd:f6:5c:1b:6d:ab:78: d9:bb:a1:ef:49:11:53:e5:91:73:5f:d9:cc:6d:b0:c7:f6:a6: 9d:4e:b5:78:eb:94:ad:d8:3d:eb:1b:8c:fa:b3:ab:c9:f0:93: eb:5f:36:9a:43:8f:0f:73:19:6c:b4:ab:25:84:d9:e6:d8:1a: 8e:41:68:9e:27:13:95:17:7b:fa:dc:91:78:12:65:9b:ef:9f: 5c:75:6d:25:4b:b4:89:1a:b5:61:28:93:57:af:3f:3f:9c:b2: a7:94:12:e4:81:8e:c4:bf:4d:48:e4:68:c8:f4:5d:ff:6e:e8: db:f6:8a:51:5a:03:ea:3a:d9:6d:d0:1c:a0:49:71:21:e6:9f: 7c:a6:d3:03:6b:85:fc:5a:0f:93:ba:c2:df:7d:56:e8:ca:ff: 4f:ca:0c:8a:ec:48:0f:85:09:0e:0d:77:aa:a0:39:c2:b4:f7: c8:c3:92:1c:12:0b:de:58:80:17:91:b8:11:6a:9e:b9:ce:a9: 65:d2:44:4f:7a:44:25:59:0e:25:28:c9:35:5c:bf:22:15:09: 40:58:41:f3:17:68:c7:ad:c7:2e:84:3e:d4:a3:ca:f7:67:5c: 3c:ac:cb:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2bazyl6qz4G/ZC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwOTA4MzQwNFoXDTI2MDEwNzA5MzQwNFowLzEtMCsGA1UEAxMk MDk3ZWI3YTMtYzVlNC00OTVkLWIyNjYtODczMTUyYmIxMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0oK+KiIpaZECu64P0e4qbaEgYU+TLO0jYAc gPailKvDsYOglCKAbXcIlngiOqiGEiF7gHVTF2WS7kcjRUjlBjoephAZnGalKj6s zDojdxoBqHu7uZ+uI9xvEGzxBoRB4OijeK9JsrcB8JKr0NTEf7sC2O357fx9DkPN tMKXrwTFzUKycJzBUWyPRMlwzoYNZ7sw4J3m8ZOedt7+BC8wcs4TTPh3xpljaPao indxpvDq2SoySBXVcGfsubYCmqf+uZ/QW1j/WjCHtzVm3PR6vTNjptU8dPM7YvYR m9aWzPInBvVneAFGCjg5z/GE+5KYQ9xOvvYMOOIeObzZFn1vbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4xTOAQdCoJaY2pHbU8yOROxvmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmU2NjIwN2ItMzE4Zi0z MTQ4LTlhMDktMGRmMjE0M2Q1OTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVktHHviyn1GiWRy58fP/inOPO39A5X+cS5uC2/vfZcG22reNm7oe9J EVPlkXNf2cxtsMf2pp1OtXjrlK3YPesbjPqzq8nwk+tfNppDjw9zGWy0qyWE2ebY Go5BaJ4nE5UXe/rckXgSZZvvn1x1bSVLtIkatWEok1evPz+csqeUEuSBjsS/TUjk aMj0Xf9u6Nv2ilFaA+o62W3QHKBJcSHmn3ym0wNrhfxaD5O6wt99VujK/0/KDIrs SA+FCQ4Nd6qgOcK098jDkhwSC95YgBeRuBFqnrnOqWXSRE96RCVZDiUoyTVcvyIV CUBYQfMXaMetxy6EPtSjyvdnXDysy90= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:08 2025 by rpki-client