$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0b634fe-2403-312f-9152-13ffaeddd3b6.roa File: a0b634fe-2403-312f-9152-13ffaeddd3b6.roa (raw, json) Hash identifier: 5zNnIPJDDSUJaU9BLQ1dCSSGeqeichQvC6fDL8nqbjo= Subject key identifier: 32:20:74:6F:64:43:BB:11:2C:43:62:F0:D6:46:7F:DA:AA:33:B3:B4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B79AB7A7E78B8F062D5720A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0b634fe-2403-312f-9152-13ffaeddd3b6.roa Signing time: Fri 10 Oct 2025 12:26:01 +0000 ROA not before: Fri 10 Oct 2025 12:26:01 +0000 ROA not after: Thu 08 Jan 2026 13:26:01 +0000 asID: 397630 IP address blocks: 68.167.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:ab:7a:7e:78:b8:f0:62:d5:72:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 10 12:26:01 2025 GMT Not After : Jan 8 13:26:01 2026 GMT Subject: CN=ba4ef63d-6cb2-4297-b568-de43fd8899b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:bf:e9:b6:70:61:04:83:90:a9:f9:db:70: 0d:db:ec:92:be:cd:d6:65:cb:cd:be:7e:12:a4:87: 59:14:0d:d4:c3:39:61:02:77:1d:e4:60:19:bb:dc: ed:61:d6:0f:b2:78:cd:fc:b7:80:73:a3:b9:49:a4: 65:2b:31:ea:86:3e:9e:97:bb:48:28:df:ed:d4:52: 90:a5:85:74:7f:33:a8:97:64:9d:b3:2e:9f:b6:ce: 1b:92:b7:25:00:8a:94:51:e4:c0:18:e5:78:b3:b2: 9c:d5:9b:68:81:34:2d:88:76:04:54:a3:95:f8:f5: ad:87:7f:37:f4:ce:d1:e0:44:47:bc:3b:d2:00:52: 69:18:f4:ea:6b:28:2a:6c:0a:1f:70:14:be:7b:1f: 3b:e8:4b:a6:e5:ec:91:42:bf:a2:90:69:90:16:c4: ff:c1:48:54:e7:1a:21:b7:12:fa:21:c7:37:e2:96: 95:33:64:fa:8a:e2:48:4c:b6:a1:b8:b0:c8:ee:7b: 99:98:4f:d6:b2:b7:6c:b5:e2:83:d2:f0:29:b6:8b: 97:cb:fa:ab:2f:8e:ed:e9:9f:ae:32:71:c5:4c:06: ec:bf:a4:d2:dd:e1:b9:fa:83:cf:b0:c3:29:c9:be: 1d:c6:79:31:4f:e5:8c:3a:b0:1d:5c:83:7d:59:b8: bc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:20:74:6F:64:43:BB:11:2C:43:62:F0:D6:46:7F:DA:AA:33:B3:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0b634fe-2403-312f-9152-13ffaeddd3b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b5:62:88:04:60:94:81:8a:98:cd:02:30:fc:16:17:4e:44: d1:ee:5f:04:01:23:c1:b4:85:ac:ea:5d:c4:35:d0:59:fc:3c: d7:47:35:00:d6:30:c9:25:c1:77:dd:a5:68:89:35:3c:59:4c: 0e:b9:9b:3c:2b:2e:46:cf:fc:92:db:32:97:ae:5a:b1:7e:b0: 52:12:54:26:e9:a3:e9:d9:e2:30:0c:7b:6d:68:68:cd:3d:05: 6b:58:17:03:01:55:a0:14:b0:f2:ab:52:31:e4:a3:2c:e4:cf: ea:b7:17:de:09:fc:4c:64:ed:75:37:eb:28:85:5b:b1:67:52: 73:83:99:84:32:1d:ac:dd:c2:9e:65:49:c4:15:2c:3f:a7:f1: f6:a5:ca:79:29:3d:ce:5f:a2:58:95:f6:6d:c3:41:99:c6:f7: b9:43:01:a8:3f:57:db:45:3c:3f:db:59:eb:9d:f0:92:1e:5d: 91:63:8e:f0:e9:24:6d:3f:bf:0a:11:18:52:0c:5a:ae:05:66: 1b:b6:5c:97:64:d8:5c:51:8f:21:7d:bf:98:86:cf:5f:3a:6e: de:d0:02:4c:a5:a7:6b:81:a1:9d:bb:dd:d5:76:45:5a:21:10: 9c:32:c8:fc:83:b9:5b:5b:35:be:3e:7d:f7:70:7d:0a:93:10: a1:94:fc:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5q3p+eLjwYtVyCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxMDEyMjYwMVoXDTI2MDEwODEzMjYwMVowLzEtMCsGA1UEAxMk YmE0ZWY2M2QtNmNiMi00Mjk3LWI1NjgtZGU0M2ZkODg5OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYe/6bZwYQSDkKn523AN2+ySvs3WZcvNvn4S pIdZFA3UwzlhAncd5GAZu9ztYdYPsnjN/LeAc6O5SaRlKzHqhj6el7tIKN/t1FKQ pYV0fzOol2Sdsy6fts4bkrclAIqUUeTAGOV4s7Kc1ZtogTQtiHYEVKOV+PWth383 9M7R4ERHvDvSAFJpGPTqaygqbAofcBS+ex876Eum5eyRQr+ikGmQFsT/wUhU5xoh txL6Icc34paVM2T6iuJITLahuLDI7nuZmE/WsrdsteKD0vAptouXy/qrL47t6Z+u MnHFTAbsv6TS3eG5+oPPsMMpyb4dxnkxT+WMOrAdXIN9Wbi8DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIgdG9kQ7sRLENi8NZGf9qqM7O0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTBiNjM0ZmUtMjQwMy0z MTJmLTkxNTItMTNmZmFlZGRkM2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq1YogEYJSBipjNAjD8FhdORNHuXwQBI8G0hazqXcQ10Fn8PNdHNQDW MMklwXfdpWiJNTxZTA65mzwrLkbP/JLbMpeuWrF+sFISVCbpo+nZ4jAMe21oaM09 BWtYFwMBVaAUsPKrUjHkoyzkz+q3F94J/Exk7XU36yiFW7FnUnODmYQyHazdwp5l ScQVLD+n8falynkpPc5foliV9m3DQZnG97lDAag/V9tFPD/bWeud8JIeXZFjjvDp JG0/vwoRGFIMWq4FZhu2XJdk2FxRjyF9v5iGz186bt7QAkylp2uBoZ273dV2RVoh EJwyyPyDuVtbNb4+ffdwfQqTEKGU/Os= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:14 2025 by rpki-client