$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/74866d75-5b18-33f0-a9e1-b5537708191e.roa File: 74866d75-5b18-33f0-a9e1-b5537708191e.roa (raw, json) Hash identifier: rvZOsE9+8Amc7TzGXUl4yz/UTP2pZxrKjiEMkqZMx8k= Subject key identifier: C9:5A:EF:69:E9:E3:2C:82:9A:21:8E:DC:FB:6D:CF:F5:47:24:F3:E2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B35D0FCCC47B03FED52D61080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/74866d75-5b18-33f0-a9e1-b5537708191e.roa Signing time: Tue 16 Sep 2025 05:06:38 +0000 ROA not before: Tue 16 Sep 2025 05:06:38 +0000 ROA not after: Mon 15 Dec 2025 06:06:38 +0000 asID: 208485 IP address blocks: 68.165.64.0/19 maxlen: 24 72.245.0.0/19 maxlen: 24 72.245.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:d0:fc:cc:47:b0:3f:ed:52:d6:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 16 05:06:38 2025 GMT Not After : Dec 15 06:06:38 2025 GMT Subject: CN=f78eeb42-f5b8-4f52-980c-8af01433e884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8b:e9:48:42:8f:aa:ff:f4:eb:72:86:07:42: fc:c5:b3:6f:51:35:c9:b0:bb:06:df:53:2a:a1:59: 1d:22:63:4d:53:7f:86:0b:40:4c:fa:73:06:ee:fc: 69:2c:43:ed:91:5d:4e:81:63:26:e7:a4:64:8c:99: 8e:2f:3c:4a:85:c2:89:8d:10:77:10:52:28:3a:eb: 1c:74:c5:ea:14:ee:26:b9:17:f6:91:d1:4e:b6:5e: 47:7d:54:31:4e:7a:68:3b:ec:e0:ca:25:49:1c:b2: a8:f6:71:43:53:36:0f:3d:0b:d9:3e:86:d3:f2:94: 16:0e:3f:6e:cd:f1:dc:67:5d:ba:78:42:ed:9d:b3: 2b:0d:7a:0b:69:af:6a:66:a8:74:c5:01:c7:e4:2e: d6:41:7d:d6:26:a0:9f:86:c5:54:42:ea:c5:9d:4f: 8a:04:6d:05:63:ed:10:b5:93:f6:a1:5c:a3:62:f2: fe:e3:02:f1:3e:72:da:f8:b0:db:50:49:6d:42:40: cf:4c:3f:68:60:43:29:c7:bd:70:5a:35:2a:a6:b5: 7d:63:fa:fb:cd:59:4f:1b:5c:f9:62:16:06:e7:b7: d3:60:6f:a0:9a:7a:a5:74:4a:47:b6:4a:78:cd:6b: 28:33:97:76:60:24:0a:4a:9a:66:72:5d:d3:7e:f3: e4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5A:EF:69:E9:E3:2C:82:9A:21:8E:DC:FB:6D:CF:F5:47:24:F3:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/74866d75-5b18-33f0-a9e1-b5537708191e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.64.0/19 72.245.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:f0:50:9e:fe:db:3c:7d:7b:37:87:40:a8:b1:6e:37:13:fa: f8:f5:91:d5:27:af:49:ad:c5:f3:fc:19:82:7f:a8:36:f5:cf: 29:f4:75:3b:83:aa:e0:03:93:9a:b1:28:f6:d7:6d:2f:18:26: 0b:0f:16:6c:b8:5c:3e:41:f5:45:09:ab:4e:ff:a2:80:08:a0: a5:d7:ab:1f:76:a5:31:03:4e:70:fc:8d:36:3c:42:ff:32:9e: a6:12:e2:67:5f:13:c4:60:f1:7f:10:01:fe:e7:e3:ce:45:05: 5f:9b:bb:75:ac:6c:37:3f:d6:ee:a2:99:96:32:0b:63:ea:d2: d1:d0:ea:bd:55:03:ab:7b:92:5d:84:56:79:f4:aa:a5:db:a6: f6:35:41:32:16:b4:23:3b:15:73:24:b5:c0:7d:b5:9a:d4:49: 92:df:dd:f5:04:35:8d:ef:14:7f:b7:b2:ae:6b:f0:35:67:6e: 40:2f:f7:a9:f0:59:e7:eb:07:62:e6:ee:f2:36:d0:a3:dd:2f: ca:b9:d7:ab:7a:9b:e2:be:16:26:29:9a:84:4b:28:e6:b2:73: b5:e6:13:d6:77:6c:2f:86:c1:40:78:01:f7:7d:d6:3d:d6:d0: b7:58:8e:9a:cf:dd:2a:7c:32:da:d0:a6:10:97:fc:73:c8:c8: e2:0c:75:5f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEs10PzMR7A/7VLWEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxNjA1MDYzOFoXDTI1MTIxNTA2MDYzOFowLzEtMCsGA1UEAxMk Zjc4ZWViNDItZjViOC00ZjUyLTk4MGMtOGFmMDE0MzNlODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4vpSEKPqv/063KGB0L8xbNvUTXJsLsG31Mq oVkdImNNU3+GC0BM+nMG7vxpLEPtkV1OgWMm56RkjJmOLzxKhcKJjRB3EFIoOusc dMXqFO4muRf2kdFOtl5HfVQxTnpoO+zgyiVJHLKo9nFDUzYPPQvZPobT8pQWDj9u zfHcZ126eELtnbMrDXoLaa9qZqh0xQHH5C7WQX3WJqCfhsVUQurFnU+KBG0FY+0Q tZP2oVyjYvL+4wLxPnLa+LDbUEltQkDPTD9oYEMpx71wWjUqprV9Y/r7zVlPG1z5 YhYG57fTYG+gmnqldEpHtkp4zWsoM5d2YCQKSppmcl3TfvPkxwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMla72np4yyCmiGO3Pttz/VHJPPiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzQ4NjZkNzUtNWIxOC0z M2YwLWE5ZTEtYjU1Mzc3MDgxOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFRKVAAwQG SPUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKzwUJ7+2zx9ezeHQKixbjcT+vj1kdUnr0mtxfP8GYJ/qDb1 zyn0dTuDquADk5qxKPbXbS8YJgsPFmy4XD5B9UUJq07/ooAIoKXXqx92pTEDTnD8 jTY8Qv8ynqYS4mdfE8Rg8X8QAf7n485FBV+bu3WsbDc/1u6imZYyC2Pq0tHQ6r1V A6t7kl2EVnn0qqXbpvY1QTIWtCM7FXMktcB9tZrUSZLf3fUENY3vFH+3sq5r8DVn bkAv96nwWefrB2Lm7vI20KPdL8q516t6m+K+FiYpmoRLKOayc7XmE9Z3bC+GwUB4 Afd91j3W0LdYjprP3Sp8MtrQphCX/HPIyOIMdV8= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:33 2025 by rpki-client