$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8d9a8fc1-9d96-3e21-ba7c-c10aa89e0228.roa File: 8d9a8fc1-9d96-3e21-ba7c-c10aa89e0228.roa (raw, json) Hash identifier: xqODl2h8x2jH0lD1HJlrDsjikEAwh32m8fvqHHCW1+c= Subject key identifier: F1:90:5C:D7:77:50:14:DB:12:08:80:7E:BE:3D:61:C9:9F:2F:36:FD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B5A12C0801259E6D4AFC57B80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8d9a8fc1-9d96-3e21-ba7c-c10aa89e0228.roa Signing time: Mon 29 Sep 2025 04:48:14 +0000 ROA not before: Mon 29 Sep 2025 04:48:14 +0000 ROA not after: Sun 28 Dec 2025 05:48:14 +0000 asID: 212238 IP address blocks: 68.167.154.0/23 maxlen: 24 209.101.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5a:12:c0:80:12:59:e6:d4:af:c5:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 29 04:48:14 2025 GMT Not After : Dec 28 05:48:14 2025 GMT Subject: CN=a406c175-6930-4f48-8e21-c1551b0d3f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ad:90:07:76:81:d1:86:77:24:37:2a:74:b0: a6:1a:c2:f4:31:a2:5c:d2:06:c4:40:77:4e:13:68: 60:fd:42:d1:6d:1f:32:30:be:ed:54:9b:12:96:7e: 4e:eb:dd:35:bf:cc:e7:c7:6e:e0:38:bb:c7:25:91: 64:62:75:0c:a1:79:3e:42:ab:43:70:a8:e3:77:15: e9:55:88:8b:96:87:46:59:06:c6:cd:d3:83:76:74: cd:2f:7e:e6:7e:8a:91:43:1b:15:62:92:91:8e:91: 41:51:a1:b7:a4:c8:45:c9:ba:44:a0:7b:03:24:fb: 5b:cb:45:99:5a:93:0b:e6:79:46:9f:6f:cd:98:cc: d4:c6:72:b2:a0:20:4e:55:83:ec:94:02:8d:3e:2b: 5b:e1:71:27:c3:19:e5:56:1b:a4:02:72:ba:62:66: 95:b3:32:fe:90:4d:3b:1c:92:64:af:46:af:b9:94: 65:2f:d2:6f:a2:4d:03:66:bf:e3:af:78:d5:ef:4e: 95:39:17:e6:d0:cc:b4:56:95:90:30:a7:b8:e7:54: 95:e5:28:c1:8f:0e:33:8c:78:17:cd:af:40:61:64: 58:0d:31:86:52:40:c2:97:dd:58:d0:6d:8a:1b:d9: d1:ee:2a:53:6c:9f:87:50:a4:b7:af:aa:ce:35:88: 05:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:90:5C:D7:77:50:14:DB:12:08:80:7E:BE:3D:61:C9:9F:2F:36:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8d9a8fc1-9d96-3e21-ba7c-c10aa89e0228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.154.0/23 209.101.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:a7:89:95:5f:cc:2d:3b:8d:d4:95:d6:88:c7:59:d5:ca:6a: 2a:74:de:a4:35:5c:39:90:cf:35:dd:73:81:53:04:5b:45:ab: fd:11:34:8f:46:1f:c8:ed:99:6c:af:a9:68:57:95:de:f6:70: f8:93:36:f9:6a:6e:a0:a8:52:a8:a9:ac:e8:28:32:7f:0d:86: ab:08:05:45:7d:fa:05:97:2a:48:fd:0b:13:29:a8:bc:ea:2c: c1:29:c1:68:5a:86:63:0b:a2:0a:70:d2:0d:dc:64:0d:24:85: 14:e3:ff:f6:97:e6:87:eb:6a:15:ea:c9:fd:ab:16:b3:b7:01: 63:99:af:66:fb:7b:f6:0a:bf:d7:d1:71:22:c6:77:3b:55:03: ec:aa:30:7d:a0:4a:2c:64:ce:4b:01:67:97:3f:61:b2:57:50: b1:5a:13:b4:1c:aa:fd:84:7a:20:7a:f3:f5:c1:e9:0e:e8:25: 14:81:d6:3c:69:58:ee:8f:e2:c1:68:bc:bf:49:58:10:55:df: 1f:7c:f9:f2:a1:77:08:a7:b5:7a:1b:96:98:35:0c:79:b6:6d: 69:6d:a2:ee:46:5d:8f:83:cc:03:e9:23:64:71:f7:08:d1:03: 90:24:f0:81:9e:89:91:33:f1:cf:b7:aa:ae:2c:11:9f:69:1e: 61:e4:c2:cc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtaEsCAElnm1K/Fe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyOTA0NDgxNFoXDTI1MTIyODA1NDgxNFowLzEtMCsGA1UEAxMk YTQwNmMxNzUtNjkzMC00ZjQ4LThlMjEtYzE1NTFiMGQzZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj62QB3aB0YZ3JDcqdLCmGsL0MaJc0gbEQHdO E2hg/ULRbR8yML7tVJsSln5O6901v8znx27gOLvHJZFkYnUMoXk+QqtDcKjjdxXp VYiLlodGWQbGzdODdnTNL37mfoqRQxsVYpKRjpFBUaG3pMhFybpEoHsDJPtby0WZ WpML5nlGn2/NmMzUxnKyoCBOVYPslAKNPitb4XEnwxnlVhukAnK6YmaVszL+kE07 HJJkr0avuZRlL9Jvok0DZr/jr3jV706VORfm0My0VpWQMKe451SV5SjBjw4zjHgX za9AYWRYDTGGUkDCl91Y0G2KG9nR7ipTbJ+HUKS3r6rONYgFXwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPGQXNd3UBTbEgiAfr49YcmfLzb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGQ5YThmYzEtOWQ5Ni0z ZTIxLWJhN2MtYzEwYWE4OWUwMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBRKeaAwQA 0WUTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJqniZVfzC07jdSV1ojHWdXKaip03qQ1XDmQzzXdc4FTBFtF q/0RNI9GH8jtmWyvqWhXld72cPiTNvlqbqCoUqiprOgoMn8NhqsIBUV9+gWXKkj9 CxMpqLzqLMEpwWhahmMLogpw0g3cZA0khRTj//aX5ofrahXqyf2rFrO3AWOZr2b7 e/YKv9fRcSLGdztVA+yqMH2gSixkzksBZ5c/YbJXULFaE7Qcqv2EeiB68/XB6Q7o JRSB1jxpWO6P4sFovL9JWBBV3x98+fKhdwintXoblpg1DHm2bWltou5GXY+DzAPp I2Rx9wjRA5Ak8IGeiZEz8c+3qq4sEZ9pHmHkwsw= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:32 2025 by rpki-client