$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7cc8c38f-55d3-3da4-be34-371756e8595f.roa File: 7cc8c38f-55d3-3da4-be34-371756e8595f.roa (raw, json) Hash identifier: Oi3n+V7/lof68wflmYXwiQkxShoX0sHME967lqfzGzc= Subject key identifier: 90:E4:60:95:F1:F1:79:11:93:D5:6E:1D:4C:AE:10:D1:C1:D1:C6:22 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B65B16C3C983C7CF1B2D3C200 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7cc8c38f-55d3-3da4-be34-371756e8595f.roa Signing time: Fri 03 Oct 2025 08:41:50 +0000 ROA not before: Fri 03 Oct 2025 08:41:50 +0000 ROA not after: Thu 01 Jan 2026 09:41:50 +0000 asID: 20473 IP address blocks: 68.167.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:65:b1:6c:3c:98:3c:7c:f1:b2:d3:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 3 08:41:50 2025 GMT Not After : Jan 1 09:41:50 2026 GMT Subject: CN=b2c8e6a1-e3fa-4ccb-8a74-456b24533a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5d:d3:f3:0a:2a:cd:99:62:1c:d6:9f:e2:b8: e8:94:f9:de:6f:8d:d6:3c:f4:bf:92:23:6c:0e:18: 65:fe:ab:56:2f:ac:f5:78:e7:cd:2a:c8:af:39:45: c7:ee:60:24:54:be:bb:63:d9:73:c9:7c:3e:2a:12: 1e:da:a0:3f:2a:28:20:6e:3f:05:ce:83:80:39:7b: 80:79:76:21:8d:e5:60:50:52:2c:f8:96:59:2a:03: 6e:5b:fa:e2:17:87:f8:41:1c:cd:9d:c3:b2:86:8d: 91:b7:dd:cb:c1:23:9c:f3:af:c6:fa:82:6e:38:c6: 5c:b8:e4:17:b6:2d:27:d2:a9:c4:7f:83:98:21:84: e5:f2:86:ac:fb:70:63:7c:f0:92:5e:cb:97:ae:d6: 05:c1:ed:a4:d4:e5:c7:cd:91:9f:dd:83:74:10:b5: df:2c:0b:84:77:97:9e:ed:1a:1c:27:73:46:fc:ea: de:92:4b:14:96:1c:3c:8e:31:28:55:9f:0e:8b:99: 6d:b3:d6:86:6d:34:4c:99:17:09:8c:7e:fb:b2:f9: 47:f6:c2:45:6d:6f:c0:f3:8f:8b:6a:15:5a:29:1d: 1b:ed:2c:8e:2e:aa:bb:c2:4c:22:ac:72:4a:bb:5b: bc:b9:68:a6:83:ff:6e:ad:97:90:b9:39:15:b5:6a: 79:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E4:60:95:F1:F1:79:11:93:D5:6E:1D:4C:AE:10:D1:C1:D1:C6:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7cc8c38f-55d3-3da4-be34-371756e8595f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:f7:32:ac:3c:11:60:d1:d2:d0:02:04:97:6b:60:bc:79:3a: 13:dc:de:b9:61:ed:8b:35:bf:a0:c7:57:f3:e5:3f:27:d2:bf: f5:88:71:c2:ef:38:1a:70:d4:25:d9:bc:1f:d2:20:df:d7:52: 2d:bd:c0:cf:bd:c9:e3:5c:c0:e4:2a:2e:4f:31:34:d6:9c:ab: d3:18:67:24:08:55:1e:e2:5a:e8:e8:a2:f5:86:49:61:3a:ad: 41:d1:06:82:cc:6a:27:0a:ba:5a:d6:2f:e7:a7:a4:f4:42:9d: e8:85:63:1e:d1:c0:b7:d6:9c:e9:6c:2c:45:3a:e0:ef:21:16: 3f:25:11:6d:1e:48:ca:81:7e:ae:dd:03:02:3e:72:31:af:02: 8a:75:08:2b:e2:53:e9:2f:9b:8f:d0:a7:43:67:65:5b:fd:1c: 63:38:eb:2f:5a:d3:67:89:22:bf:89:b8:d3:e9:38:d0:10:d0: dc:0c:be:28:2a:75:4a:05:f7:9c:7e:19:be:f3:9f:f2:8d:a6: 54:1f:58:79:f5:9a:b2:f0:ac:a0:dd:c8:99:73:5c:92:4e:5d: 6f:24:6c:04:9f:f3:8d:c3:4f:12:1c:28:91:d2:cb:53:e0:09: 2f:52:9a:ef:5c:c3:37:da:b2:3c:c5:18:92:3f:45:c7:62:28: b0:b5:31:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtlsWw8mDx88bLTwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwMzA4NDE1MFoXDTI2MDEwMTA5NDE1MFowLzEtMCsGA1UEAxMk YjJjOGU2YTEtZTNmYS00Y2NiLThhNzQtNDU2YjI0NTMzYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV3T8woqzZliHNaf4rjolPneb43WPPS/kiNs Dhhl/qtWL6z1eOfNKsivOUXH7mAkVL67Y9lzyXw+KhIe2qA/Kiggbj8FzoOAOXuA eXYhjeVgUFIs+JZZKgNuW/riF4f4QRzNncOyho2Rt93LwSOc86/G+oJuOMZcuOQX ti0n0qnEf4OYIYTl8oas+3BjfPCSXsuXrtYFwe2k1OXHzZGf3YN0ELXfLAuEd5ee 7RocJ3NG/OrekksUlhw8jjEoVZ8Oi5lts9aGbTRMmRcJjH77svlH9sJFbW/A84+L ahVaKR0b7SyOLqq7wkwirHJKu1u8uWimg/9urZeQuTkVtWp5KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDkYJXx8XkRk9VuHUyuENHB0cYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2NjOGMzOGYtNTVkMy0z ZGE0LWJlMzQtMzcxNzU2ZTg1OTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKcsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALf3Mqw8EWDR0tACBJdrYLx5OhPc3rlh7Ys1v6DHV/PlPyfSv/WIccLv OBpw1CXZvB/SIN/XUi29wM+9yeNcwOQqLk8xNNacq9MYZyQIVR7iWujoovWGSWE6 rUHRBoLMaicKulrWL+enpPRCneiFYx7RwLfWnOlsLEU64O8hFj8lEW0eSMqBfq7d AwI+cjGvAop1CCviU+kvm4/Qp0NnZVv9HGM46y9a02eJIr+JuNPpONAQ0NwMvigq dUoF95x+Gb7zn/KNplQfWHn1mrLwrKDdyJlzXJJOXW8kbASf843DTxIcKJHSy1Pg CS9Smu9cwzfasjzFGJI/RcdiKLC1MfA= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:27 2025 by rpki-client