$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf335f74-94ba-3973-8541-955843bf86c1.roa File: bf335f74-94ba-3973-8541-955843bf86c1.roa (raw, json) Hash identifier: IB/eXz0lzhdOfjhyIJ4551gyNq2/7qcGexRgUxSYsPs= Subject key identifier: FC:5A:72:21:23:85:6D:97:F0:51:A6:69:97:40:1C:55:0B:58:1E:85 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B33F1B773628A9A8CD6986540 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf335f74-94ba-3973-8541-955843bf86c1.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 9304 IP address blocks: 69.17.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:b7:73:62:8a:9a:8c:d6:98:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=417e8045-7590-4db0-8627-7fab6faaf5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:4c:52:db:1f:60:99:ac:40:6c:98:10:0c: 13:e5:ca:ec:7b:a3:be:04:ba:20:52:15:89:b1:9d: d6:8b:e4:ae:52:81:b1:1e:37:26:ff:dc:00:bd:f2: b2:27:24:02:5b:6a:c5:92:eb:2e:87:1c:a4:86:4a: ee:94:95:7c:d6:b7:01:8b:ea:a5:19:86:79:b6:4f: 38:6e:d5:56:26:e9:b6:2c:77:94:ba:f5:c7:46:8f: 9b:c0:f6:f7:0f:5d:af:9e:fa:7a:09:f7:da:1f:23: 73:73:a8:81:88:0e:80:84:5d:59:a6:b7:5c:a9:08: 25:fb:9d:bb:b7:8b:33:f5:b2:98:86:29:0f:91:4a: 80:f5:d8:08:71:e2:ce:08:06:66:1c:b4:dd:b7:5f: 41:b7:ed:ee:04:4d:a9:8e:61:89:f0:28:08:43:e3: ed:f1:3f:52:17:6a:ac:fc:06:08:90:82:06:ac:75: b8:f0:6b:d0:1b:76:ee:6f:e7:03:3f:40:7c:fc:14: a4:d4:f4:44:68:c9:e8:8c:1f:a5:60:a3:18:c4:01: 10:25:10:5a:61:50:b6:2e:7e:23:e6:e4:02:47:3e: a3:be:40:af:b1:28:ee:4c:bf:fc:e0:4b:c9:26:29: 54:1f:b8:24:52:38:6b:3e:81:a0:5a:9f:cf:25:fe: 22:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5A:72:21:23:85:6D:97:F0:51:A6:69:97:40:1C:55:0B:58:1E:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf335f74-94ba-3973-8541-955843bf86c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.17.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:22:33:0f:16:fc:7b:0c:84:51:a2:e3:06:a1:a4:ae:ec:c9: 69:39:92:5e:e0:d2:a1:7a:cb:17:7a:1f:89:f9:1e:62:89:f7: 8d:e8:ff:36:fa:42:fc:e9:b1:9f:fc:25:d6:ec:50:b3:e9:90: b3:ed:8e:63:b6:75:c8:83:b2:98:0c:f5:f6:5d:60:1b:e0:74: ce:18:7c:8e:7e:11:7f:d1:f9:fd:99:b6:64:13:39:e4:0e:6b: 08:10:a7:d3:1e:3b:d2:a0:cb:0a:ee:38:91:d9:d9:2c:f8:5c: 79:c6:e8:ce:04:86:58:ff:0f:a8:3b:60:00:50:11:ce:93:4f: 98:f8:1f:43:e4:f3:59:34:7c:ac:22:4f:b1:f9:e0:01:11:5a: 25:10:71:22:0b:03:5f:41:73:49:99:c1:a1:77:a8:29:b3:2a: 32:fc:68:5a:6f:62:07:ac:cc:fc:ac:ee:58:f4:0c:8d:5b:6c: b8:59:ee:53:e9:62:72:ab:03:9c:b6:fc:14:c3:76:1a:c9:97: 77:f1:3e:1f:ef:d1:75:98:68:5f:1c:2f:9e:b8:07:66:cd:d9: 4e:04:ed:ca:e8:52:85:68:28:f3:73:11:21:a3:79:d2:46:a3: b1:96:1f:f0:db:d8:3b:92:32:6b:74:ee:77:b0:54:f1:52:e8: 9f:83:1b:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8bdzYoqajNaYZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk NDE3ZTgwNDUtNzU5MC00ZGIwLTg2MjctN2ZhYjZmYWFmNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAtMUtsfYJmsQGyYEAwT5crse6O+BLogUhWJ sZ3Wi+SuUoGxHjcm/9wAvfKyJyQCW2rFkusuhxykhkrulJV81rcBi+qlGYZ5tk84 btVWJum2LHeUuvXHRo+bwPb3D12vnvp6CffaHyNzc6iBiA6AhF1ZprdcqQgl+527 t4sz9bKYhikPkUqA9dgIceLOCAZmHLTdt19Bt+3uBE2pjmGJ8CgIQ+Pt8T9SF2qs /AYIkIIGrHW48GvQG3bub+cDP0B8/BSk1PREaMnojB+lYKMYxAEQJRBaYVC2Ln4j 5uQCRz6jvkCvsSjuTL/84EvJJilUH7gkUjhrPoGgWp/PJf4izwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxaciEjhW2X8FGmaZdAHFULWB6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmYzMzVmNzQtOTRiYS0z OTczLTg1NDEtOTU1ODQzYmY4NmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARREAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUiMw8W/HsMhFGi4wahpK7syWk5kl7g0qF6yxd6H4n5HmKJ943o/zb6 QvzpsZ/8JdbsULPpkLPtjmO2dciDspgM9fZdYBvgdM4YfI5+EX/R+f2ZtmQTOeQO awgQp9MeO9KgywruOJHZ2Sz4XHnG6M4Ehlj/D6g7YABQEc6TT5j4H0Pk81k0fKwi T7H54AERWiUQcSILA19Bc0mZwaF3qCmzKjL8aFpvYgeszPys7lj0DI1bbLhZ7lPp YnKrA5y2/BTDdhrJl3fxPh/v0XWYaF8cL564B2bN2U4E7croUoVoKPNzESGjedJG o7GWH/Db2DuSMmt07newVPFS6J+DG3A= -----END CERTIFICATE-----Generated at Sat Oct 11 08:56:39 2025 by rpki-client