$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67e54f07-e8cf-3354-82d4-202bd216c4c5.roa File: 67e54f07-e8cf-3354-82d4-202bd216c4c5.roa (raw, json) Hash identifier: 9Uj5a6Nn98uLMcg2rqYyQfvri1P05bZPPEV6lsFJ1Yg= Subject key identifier: C3:8D:E8:54:6C:37:56:C2:6E:0E:EA:EB:40:6C:0E:17:AD:7D:1E:AE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B766DC142F7D72240F8023700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67e54f07-e8cf-3354-82d4-202bd216c4c5.roa Signing time: Thu 09 Oct 2025 08:34:14 +0000 ROA not before: Thu 09 Oct 2025 08:34:14 +0000 ROA not after: Wed 07 Jan 2026 09:34:14 +0000 asID: 152689 IP address blocks: 68.165.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:6d:c1:42:f7:d7:22:40:f8:02:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 9 08:34:14 2025 GMT Not After : Jan 7 09:34:14 2026 GMT Subject: CN=03ac8d1b-f618-48b1-b2b1-50700eab70f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:be:ac:0e:db:a8:90:ed:29:14:55:76:08:d6: 1d:30:84:d8:7c:ca:34:cb:e8:1f:4d:0c:f2:3e:b1: 3d:fb:2e:ef:51:86:2c:e5:c6:ed:91:00:e7:63:1f: e0:37:8a:ba:58:28:ff:70:aa:7f:dd:28:4e:f6:f5: 59:7c:08:6d:c1:ce:50:02:e4:62:75:6d:89:c5:e3: 8e:55:28:50:18:76:90:0d:bb:ca:55:11:b9:d2:46: 1d:c9:b4:fa:f1:7e:eb:f9:da:6c:a5:b5:ed:53:5e: 7c:d1:b7:b1:d0:b4:f8:65:6e:61:d3:41:b0:db:f8: cd:4a:62:38:98:45:20:a9:c1:25:4f:67:9e:7e:a3: 0d:f2:59:f8:6d:bb:b1:f3:74:de:78:d9:ec:54:56: 9b:da:e0:70:08:3c:1d:a9:44:bc:31:a4:92:b9:87: b4:ba:e5:39:b9:63:7d:4b:05:bc:c5:de:b6:bf:ba: ed:d0:fc:20:12:da:0c:42:38:f8:5f:69:02:17:9d: 75:61:8b:86:2a:6c:5c:41:d3:a8:1d:fe:9b:6d:c5: 71:ff:f2:4f:5f:dd:e7:68:8b:71:8a:4a:91:13:26: 8d:63:c3:25:25:2e:26:eb:4a:4e:ff:33:c0:06:29: c6:c7:a7:81:04:0e:81:60:d5:ea:41:e7:e2:28:67: cc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8D:E8:54:6C:37:56:C2:6E:0E:EA:EB:40:6C:0E:17:AD:7D:1E:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67e54f07-e8cf-3354-82d4-202bd216c4c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:5b:19:91:8d:0c:ae:88:56:1d:b6:fe:7f:52:95:6b:e8:e7: 1f:78:e6:93:31:96:62:a1:a6:b5:7b:1d:f5:ac:11:b6:07:37: e6:f9:f2:9b:ab:1f:05:bc:68:a3:0c:63:01:e7:b1:0d:23:81: 93:03:84:42:d4:7a:58:f9:4f:6e:89:e5:a6:95:c7:d9:f5:b3: 5f:f2:99:38:34:fa:79:eb:e0:fc:aa:97:b8:e0:32:95:31:87: 0a:3a:e5:0a:59:9a:bb:9f:26:b2:db:f6:8b:f0:d7:11:f7:e4: 00:c4:1a:61:0f:36:84:ca:ae:2e:41:82:63:ca:49:f1:a2:37: 8b:e2:b8:f3:7d:4a:6e:c3:7c:9c:c8:39:ba:f9:8c:26:4d:c1: 39:68:de:f6:d3:9c:57:df:5f:a9:6f:ae:4b:58:d3:d0:ae:7a: c4:7f:24:9a:8b:e2:49:01:f1:58:07:1c:24:2e:66:2e:30:7e: 36:5f:39:4b:2e:80:9f:6d:0e:1f:61:b2:81:c9:c0:05:fe:86: 36:5e:f6:bc:d3:11:d4:da:49:23:22:bb:ea:d1:5c:9f:c9:b8: 5a:15:22:8d:83:13:c7:41:74:32:f4:72:62:26:3d:ec:90:f1: 8e:50:96:e4:77:76:41:73:ae:9b:80:06:23:dc:d9:95:bf:6a: a8:45:ea:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2bcFC99ciQPgCNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwOTA4MzQxNFoXDTI2MDEwNzA5MzQxNFowLzEtMCsGA1UEAxMk MDNhYzhkMWItZjYxOC00OGIxLWIyYjEtNTA3MDBlYWI3MGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL6sDtuokO0pFFV2CNYdMITYfMo0y+gfTQzy PrE9+y7vUYYs5cbtkQDnYx/gN4q6WCj/cKp/3ShO9vVZfAhtwc5QAuRidW2JxeOO VShQGHaQDbvKVRG50kYdybT68X7r+dpspbXtU1580bex0LT4ZW5h00Gw2/jNSmI4 mEUgqcElT2eefqMN8ln4bbux83TeeNnsVFab2uBwCDwdqUS8MaSSuYe0uuU5uWN9 SwW8xd62v7rt0PwgEtoMQjj4X2kCF511YYuGKmxcQdOoHf6bbcVx//JPX93naItx ikqREyaNY8MlJS4m60pO/zPABinGx6eBBA6BYNXqQefiKGfMPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMON6FRsN1bCbg7q60BsDhetfR6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjdlNTRmMDctZThjZi0z MzU0LTgyZDQtMjAyYmQyMTZjNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtbGZGNDK6IVh22/n9SlWvo5x945pMxlmKhprV7HfWsEbYHN+b58pur HwW8aKMMYwHnsQ0jgZMDhELUelj5T26J5aaVx9n1s1/ymTg0+nnr4Pyql7jgMpUx hwo65QpZmrufJrLb9ovw1xH35ADEGmEPNoTKri5BgmPKSfGiN4viuPN9Sm7DfJzI Obr5jCZNwTlo3vbTnFffX6lvrktY09CuesR/JJqL4kkB8VgHHCQuZi4wfjZfOUsu gJ9tDh9hsoHJwAX+hjZe9rzTEdTaSSMiu+rRXJ/JuFoVIo2DE8dBdDL0cmImPeyQ 8Y5QluR3dkFzrpuABiPc2ZW/aqhF6kg= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:57 2025 by rpki-client