$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7af16a38-dc09-3aa9-96ff-592887575f9d.roa File: 7af16a38-dc09-3aa9-96ff-592887575f9d.roa (raw, json) Hash identifier: 7ViBaqAPGDnLndojrXfGQ0JupyguC5xQUcxiGyRh3CM= Subject key identifier: 7C:33:EE:CA:73:98:71:CD:18:B0:37:98:03:F5:E6:03:EE:47:84:FB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B5A1548136CAEA2D0025B0520 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7af16a38-dc09-3aa9-96ff-592887575f9d.roa Signing time: Mon 29 Sep 2025 04:53:20 +0000 ROA not before: Mon 29 Sep 2025 04:53:20 +0000 ROA not after: Sun 28 Dec 2025 05:53:20 +0000 asID: 212238 IP address blocks: 69.3.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5a:15:48:13:6c:ae:a2:d0:02:5b:05:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 29 04:53:20 2025 GMT Not After : Dec 28 05:53:20 2025 GMT Subject: CN=3e0a17a7-798b-46aa-957e-5c328a20faa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:09:9c:a3:65:76:19:68:1b:a5:8e:e3:b5:0f: 02:42:58:43:51:13:b6:ad:78:64:5e:1e:6b:72:44: 31:fc:4d:fb:ac:0f:c2:ee:a4:d4:68:b4:08:d9:55: dc:f4:ce:11:15:cd:65:aa:df:83:04:a5:6f:e5:b4: 65:c1:aa:fb:b7:ec:6a:44:55:68:77:1f:69:f7:e1: 23:6e:cc:89:dd:44:cb:ab:89:d2:a9:1b:7f:ec:82: ac:3c:bb:84:51:cf:17:06:b2:93:98:68:a4:da:50: ea:d1:08:14:0f:44:57:6a:4f:b0:55:c3:e0:45:13: d1:f2:81:18:63:5b:5f:78:f6:3b:06:e0:a5:f4:f5: 90:9a:64:e7:de:17:d1:50:2c:e0:9e:f7:cf:1f:7d: 64:3f:0b:62:6c:09:50:6e:55:be:82:b3:32:8f:11: 30:23:f7:04:fd:00:be:e3:6a:8b:0a:74:09:4d:57: 30:01:97:64:82:0a:87:d9:d7:ff:0e:f8:7e:d3:0f: 5c:80:63:43:49:46:77:3a:c4:66:dc:f8:4c:37:6a: 1e:14:4f:69:02:3b:0a:8c:2b:dc:2f:1c:99:ff:5f: ce:96:85:ef:e7:47:76:90:04:fc:0b:ed:b7:97:06: c0:7e:9c:27:24:d8:23:98:e1:6c:50:83:8c:1b:67: 36:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:33:EE:CA:73:98:71:CD:18:B0:37:98:03:F5:E6:03:EE:47:84:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7af16a38-dc09-3aa9-96ff-592887575f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.3.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:79:13:51:ed:4c:b0:55:dc:e1:ae:a8:83:3b:35:c4:3d:df: ab:b4:58:46:33:6e:9c:a0:cf:8c:69:b8:8a:b0:80:76:2d:73: bd:ca:6e:e4:46:b1:eb:e9:e3:0c:59:1a:e2:56:27:e7:b6:fb: e3:4f:d8:de:2d:ec:bb:25:f0:04:82:e9:57:07:97:06:87:e3: 25:a7:f3:61:5f:83:11:a5:50:c1:93:f5:ad:41:94:30:56:fb: 81:ad:70:8c:ec:45:ad:e0:92:32:e0:fd:52:a1:34:13:2d:18: fb:4e:45:a3:a5:a4:f6:9d:d3:1b:16:f4:7b:1c:f6:86:91:86: cd:00:91:bd:6f:98:b4:8a:65:b3:96:4b:d5:df:ca:73:7b:f1: 8b:47:bd:5e:f6:d7:66:42:ad:ed:3a:9d:9a:ac:3b:54:a7:67: 0d:00:5b:9f:84:4e:ea:b3:d9:1d:ce:3c:85:08:b3:2f:be:2d: 1d:1b:5b:5a:8c:5c:e4:b7:a1:45:f4:78:8a:d0:f1:7d:be:6a: e3:ff:2b:5d:5f:0f:56:99:d6:47:16:9f:80:e7:19:53:ac:d5: fb:96:ae:a0:cf:28:16:4b:a8:35:1b:f8:82:26:3b:f9:f1:28: b9:b0:71:e6:df:5a:a0:6c:82:78:d4:9e:97:43:27:fb:44:94: a7:fc:11:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtaFUgTbK6i0AJbBSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyOTA0NTMyMFoXDTI1MTIyODA1NTMyMFowLzEtMCsGA1UEAxMk M2UwYTE3YTctNzk4Yi00NmFhLTk1N2UtNWMzMjhhMjBmYWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQmco2V2GWgbpY7jtQ8CQlhDURO2rXhkXh5r ckQx/E37rA/C7qTUaLQI2VXc9M4RFc1lqt+DBKVv5bRlwar7t+xqRFVodx9p9+Ej bsyJ3UTLq4nSqRt/7IKsPLuEUc8XBrKTmGik2lDq0QgUD0RXak+wVcPgRRPR8oEY Y1tfePY7BuCl9PWQmmTn3hfRUCzgnvfPH31kPwtibAlQblW+grMyjxEwI/cE/QC+ 42qLCnQJTVcwAZdkggqH2df/Dvh+0w9cgGNDSUZ3OsRm3PhMN2oeFE9pAjsKjCvc LxyZ/1/OloXv50d2kAT8C+23lwbAfpwnJNgjmOFsUIOMG2c2RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwz7spzmHHNGLA3mAP15gPuR4T7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2FmMTZhMzgtZGMwOS0z YWE5LTk2ZmYtNTkyODg3NTc1ZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRQPSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJN5E1HtTLBV3OGuqIM7NcQ936u0WEYzbpygz4xpuIqwgHYtc73KbuRG sevp4wxZGuJWJ+e2++NP2N4t7Lsl8ASC6VcHlwaH4yWn82FfgxGlUMGT9a1BlDBW +4GtcIzsRa3gkjLg/VKhNBMtGPtORaOlpPad0xsW9Hsc9oaRhs0Akb1vmLSKZbOW S9XfynN78YtHvV7212ZCre06nZqsO1SnZw0AW5+ETuqz2R3OPIUIsy++LR0bW1qM XOS3oUX0eIrQ8X2+auP/K11fD1aZ1kcWn4DnGVOs1fuWrqDPKBZLqDUb+IImO/nx KLmwcebfWqBsgnjUnpdDJ/tElKf8ERg= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:25 2025 by rpki-client