$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a70ea5e5-c609-3abe-9107-36b7ce445d8c.roa File: a70ea5e5-c609-3abe-9107-36b7ce445d8c.roa (raw, json) Hash identifier: vum2kUiKZ4coZAiej+AszEZ4uCZJg3H215+IpZRqoZc= Subject key identifier: AF:A0:7E:3A:F3:85:2A:71:07:AA:75:79:7F:9A:B9:A2:3A:61:F4:CD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B394CE713D97DC3BDB2216570 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a70ea5e5-c609-3abe-9107-36b7ce445d8c.roa Signing time: Wed 17 Sep 2025 11:03:43 +0000 ROA not before: Wed 17 Sep 2025 11:03:43 +0000 ROA not after: Tue 16 Dec 2025 12:03:43 +0000 asID: 9304 IP address blocks: 68.167.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:4c:e7:13:d9:7d:c3:bd:b2:21:65:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 17 11:03:43 2025 GMT Not After : Dec 16 12:03:43 2025 GMT Subject: CN=beee4ed5-0374-4b8d-af75-198201b5def8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e4:cf:46:49:d6:d9:df:94:71:70:0d:bf:f0: 46:b7:fc:fa:d6:83:19:fd:36:1c:00:14:77:ec:9c: 63:d8:ac:36:18:14:89:26:6b:18:3a:fd:1d:5d:5e: c7:99:cc:15:4a:27:75:49:ef:36:1e:eb:a6:8c:4b: 3e:4f:9d:7c:da:26:c8:4f:d7:7d:86:a1:92:dd:f2: da:98:80:57:3c:df:de:7c:61:cb:99:8f:e5:e7:26: db:4c:eb:4a:4a:4d:ee:d0:36:2a:e4:94:54:c1:04: 8b:52:26:6a:83:1b:c3:3d:6e:f7:8d:0a:61:e0:cf: 4f:28:f3:1b:b8:3b:12:8d:b6:ef:0d:64:1b:45:15: 18:0d:53:23:ea:03:7d:50:ec:64:67:e3:a3:3d:bc: 66:60:6d:d7:32:2d:c2:c4:53:a2:82:5a:0c:03:3e: 61:92:02:b7:35:2c:3f:7d:d7:70:28:4f:e4:a0:25: 55:ce:7c:e5:12:fa:b4:92:7e:25:f1:db:89:be:d4: c7:8f:43:69:7f:98:ac:c1:2b:2b:6a:e9:c9:de:6c: dc:15:44:09:60:83:23:dd:a5:71:49:3a:77:77:3e: 87:6e:15:54:ab:79:da:03:c5:14:35:73:52:11:42: 6a:11:eb:d6:e4:19:41:92:4a:8f:ed:af:d9:2b:18: a5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A0:7E:3A:F3:85:2A:71:07:AA:75:79:7F:9A:B9:A2:3A:61:F4:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a70ea5e5-c609-3abe-9107-36b7ce445d8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:93:a9:bc:7a:13:ec:34:cb:4e:ac:07:e5:42:41:66:1a:b6: d0:78:20:aa:50:2f:34:40:e8:79:ab:25:46:11:5f:39:d3:fb: 57:7f:8c:9c:c5:c7:68:ce:cc:08:3c:ff:c1:01:64:84:5f:ff: db:94:b4:9b:65:3a:a6:14:d3:c4:d3:e9:27:92:fc:28:b5:49: 6d:da:4e:7e:f7:2b:1f:ce:d0:b2:94:59:e5:22:dd:00:79:2d: d3:92:08:1b:9d:a1:21:73:2e:7c:ce:8e:25:53:6d:85:f9:c2: 8b:9c:a1:da:0d:ca:79:f3:d1:83:d2:e0:9b:76:d2:be:b3:69: 94:11:7a:86:93:5d:e1:b5:85:2d:ad:74:58:06:64:f7:a6:d9: 0b:54:9b:74:ef:1c:72:ea:5f:6c:07:dc:a0:68:61:40:07:03: 78:44:c9:84:42:49:7c:e3:c4:df:99:fd:ab:eb:0b:db:7d:96: b5:11:01:66:f1:ef:7d:c1:41:fc:ca:d2:fe:03:f7:e8:e3:fb: 0e:56:4e:c3:b8:42:36:a1:e9:82:15:04:74:3d:bc:f9:f1:bd: c8:de:e9:f5:7c:16:13:7a:22:2c:f6:6d:56:d7:be:d4:84:19: a0:1f:43:a7:50:ae:67:5a:4c:dc:6a:a0:68:73:22:3f:88:3a: 0d:57:fa:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5TOcT2X3DvbIhZXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxNzExMDM0M1oXDTI1MTIxNjEyMDM0M1owLzEtMCsGA1UEAxMk YmVlZTRlZDUtMDM3NC00YjhkLWFmNzUtMTk4MjAxYjVkZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeTPRknW2d+UcXANv/BGt/z61oMZ/TYcABR3 7Jxj2Kw2GBSJJmsYOv0dXV7HmcwVSid1Se82HuumjEs+T5182ibIT9d9hqGS3fLa mIBXPN/efGHLmY/l5ybbTOtKSk3u0DYq5JRUwQSLUiZqgxvDPW73jQph4M9PKPMb uDsSjbbvDWQbRRUYDVMj6gN9UOxkZ+OjPbxmYG3XMi3CxFOigloMAz5hkgK3NSw/ fddwKE/koCVVznzlEvq0kn4l8duJvtTHj0Npf5iswSsraunJ3mzcFUQJYIMj3aVx STp3dz6HbhVUq3naA8UUNXNSEUJqEevW5BlBkkqP7a/ZKxil/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+gfjrzhSpxB6p1eX+auaI6YfTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTcwZWE1ZTUtYzYwOS0z YWJlLTkxMDctMzZiN2NlNDQ1ZDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKc0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqTqbx6E+w0y06sB+VCQWYattB4IKpQLzRA6HmrJUYRXznT+1d/jJzF x2jOzAg8/8EBZIRf/9uUtJtlOqYU08TT6SeS/Ci1SW3aTn73Kx/O0LKUWeUi3QB5 LdOSCBudoSFzLnzOjiVTbYX5woucodoNynnz0YPS4Jt20r6zaZQReoaTXeG1hS2t dFgGZPem2QtUm3TvHHLqX2wH3KBoYUAHA3hEyYRCSXzjxN+Z/avrC9t9lrURAWbx 733BQfzK0v4D9+jj+w5WTsO4Qjah6YIVBHQ9vPnxvcje6fV8FhN6Iiz2bVbXvtSE GaAfQ6dQrmdaTNxqoGhzIj+IOg1X+g4= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:26 2025 by rpki-client