$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/547a0a7f-24f2-3e7d-8111-3b7f3c3a4e14.roa File: 547a0a7f-24f2-3e7d-8111-3b7f3c3a4e14.roa (raw, json) Hash identifier: 4P/eje3EB2YiVk3/c3xEbQSkp9g1Z8WdFQ85MbxZZ6w= Subject key identifier: D5:2A:48:89:59:29:72:25:AD:95:D8:6A:9C:83:C2:AE:FA:5D:08:55 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B766D80159E94351031FCC5C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/547a0a7f-24f2-3e7d-8111-3b7f3c3a4e14.roa Signing time: Thu 09 Oct 2025 08:33:43 +0000 ROA not before: Thu 09 Oct 2025 08:33:43 +0000 ROA not after: Wed 07 Jan 2026 09:33:43 +0000 asID: 152689 IP address blocks: 68.164.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:6d:80:15:9e:94:35:10:31:fc:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 9 08:33:43 2025 GMT Not After : Jan 7 09:33:43 2026 GMT Subject: CN=e8767ee0-f1fb-4a51-ac2a-b9484ba7d3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9e:89:bd:70:d1:f5:a0:2a:70:e3:d3:e1:f5: 5d:c6:1d:7c:94:cf:92:99:09:b5:b4:48:57:b3:25: 34:83:3e:21:75:c4:72:c4:86:e1:b5:93:96:21:4e: 83:98:ea:09:e7:5a:b2:89:3e:ba:c7:ba:a4:0a:9e: 21:7d:f0:a9:4f:fb:7b:11:11:3c:db:41:a2:f0:2e: 4a:fe:e8:f3:0c:86:b8:45:7d:f2:3d:71:a1:72:5c: 9b:3b:dd:e9:f3:14:13:34:f7:40:92:c0:d0:0a:87: fe:01:2b:51:d0:70:39:42:61:63:33:0a:34:61:e9: e3:da:81:5e:36:01:99:da:31:cd:fe:9b:8f:81:72: 95:15:67:ff:08:f6:bc:26:5b:80:e5:08:e8:5b:7e: 6f:78:63:52:a7:65:5e:bc:33:17:07:a4:21:b8:e0: 25:9a:c3:86:3b:c6:a7:f6:84:0f:16:af:47:b0:dd: 57:a5:ad:aa:35:5b:f3:a3:79:db:b0:bb:4d:c0:9d: 3d:5d:5b:af:b2:4f:fb:0e:37:ce:73:eb:63:36:81: 9b:d7:22:b8:44:6b:86:91:af:4e:1e:72:0a:de:08: 22:12:a4:f3:c7:bf:d9:ee:6b:bb:8f:fa:3a:ff:fd: 61:00:8f:d6:ae:cd:6c:01:3a:25:2a:1e:36:1a:41: 14:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2A:48:89:59:29:72:25:AD:95:D8:6A:9C:83:C2:AE:FA:5D:08:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/547a0a7f-24f2-3e7d-8111-3b7f3c3a4e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:31:63:b6:ae:c6:ac:a7:9d:71:6c:c6:85:da:65:20:84:b5: bf:d0:96:3e:b3:c6:bb:9a:7e:cf:8b:34:53:22:8e:9e:60:e4: 8f:bb:6b:47:93:52:e2:e4:40:f9:27:fa:fb:5c:06:08:e2:75: eb:b3:4c:6d:76:be:7c:ac:f2:6a:92:00:01:e3:f4:d4:77:d1: 88:9a:a2:be:99:d3:49:0a:e7:61:34:c7:9c:c9:f5:af:30:f7: 89:16:a5:40:96:c8:21:cb:63:ac:64:4c:1a:41:d8:5f:1b:d1: 8a:a2:e7:87:86:ec:25:e6:7f:40:46:fa:67:28:39:88:3c:e5: 8b:f2:3e:e4:97:b5:12:67:9c:19:a9:3e:ba:d8:8c:ba:39:1d: a1:01:7d:49:dc:41:6f:23:7e:f7:a2:36:37:86:0f:63:fa:55: d0:4a:57:97:e3:ff:61:24:38:50:05:1c:3c:aa:e9:b2:6a:98: bc:69:35:2e:21:4e:e5:38:ae:99:4d:a5:ca:c0:b7:ef:aa:5a: 3a:0e:6f:89:d2:64:45:26:24:36:82:6c:10:b6:bd:09:d4:29: b3:84:61:d6:01:34:2b:2e:f3:7f:c8:92:f2:97:7e:5e:f6:cb: ae:d0:53:69:0b:23:ef:42:2d:d2:a6:2b:5a:f2:d0:22:4e:be: 26:89:49:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2bYAVnpQ1EDH8xcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwOTA4MzM0M1oXDTI2MDEwNzA5MzM0M1owLzEtMCsGA1UEAxMk ZTg3NjdlZTAtZjFmYi00YTUxLWFjMmEtYjk0ODRiYTdkM2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi56JvXDR9aAqcOPT4fVdxh18lM+SmQm1tEhX syU0gz4hdcRyxIbhtZOWIU6DmOoJ51qyiT66x7qkCp4hffCpT/t7ERE820Gi8C5K /ujzDIa4RX3yPXGhclybO93p8xQTNPdAksDQCof+AStR0HA5QmFjMwo0Yenj2oFe NgGZ2jHN/puPgXKVFWf/CPa8JluA5QjoW35veGNSp2VevDMXB6QhuOAlmsOGO8an 9oQPFq9HsN1Xpa2qNVvzo3nbsLtNwJ09XVuvsk/7DjfOc+tjNoGb1yK4RGuGka9O HnIK3ggiEqTzx7/Z7mu7j/o6//1hAI/Wrs1sATolKh42GkEUcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUqSIlZKXIlrZXYapyDwq76XQhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTQ3YTBhN2YtMjRmMi0z ZTdkLTgxMTEtM2I3ZjNjM2E0ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8xY7auxqynnXFsxoXaZSCEtb/Qlj6zxruafs+LNFMijp5g5I+7a0eT UuLkQPkn+vtcBgjideuzTG12vnys8mqSAAHj9NR30Yiaor6Z00kK52E0x5zJ9a8w 94kWpUCWyCHLY6xkTBpB2F8b0Yqi54eG7CXmf0BG+mcoOYg85YvyPuSXtRJnnBmp PrrYjLo5HaEBfUncQW8jfveiNjeGD2P6VdBKV5fj/2EkOFAFHDyq6bJqmLxpNS4h TuU4rplNpcrAt++qWjoOb4nSZEUmJDaCbBC2vQnUKbOEYdYBNCsu83/IkvKXfl72 y67QU2kLI+9CLdKmK1ry0CJOviaJSXw= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:46 2025 by rpki-client