$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdc50b8a-0332-3f21-a19f-0bb93b1f8d11.roa File: cdc50b8a-0332-3f21-a19f-0bb93b1f8d11.roa (raw, json) Hash identifier: v4cHVgElxJnAAYJ9BGLdVHo5hdiZMlVqAz+yDzt7a+o= Subject key identifier: C5:7F:69:02:88:2B:4F:93:3E:9A:02:76:D8:7C:2C:B3:73:31:EB:D7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B766D9F064B0B27CEAE28A300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdc50b8a-0332-3f21-a19f-0bb93b1f8d11.roa Signing time: Thu 09 Oct 2025 08:33:57 +0000 ROA not before: Thu 09 Oct 2025 08:33:57 +0000 ROA not after: Wed 07 Jan 2026 09:33:57 +0000 asID: 152689 IP address blocks: 68.164.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:6d:9f:06:4b:0b:27:ce:ae:28:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 9 08:33:57 2025 GMT Not After : Jan 7 09:33:57 2026 GMT Subject: CN=48246a04-8a3e-4725-881d-366095a52ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d2:26:28:71:f0:2d:41:59:2f:02:c8:ec:8d: 60:e2:b0:4a:58:20:82:e2:cd:74:7a:46:e0:48:ef: 5b:95:33:df:6a:23:50:a7:18:9f:8d:92:8f:45:ad: 49:f4:d8:a1:58:2d:d7:47:77:9a:24:89:c0:06:f7: b5:50:e6:d4:23:d6:2c:33:f0:a2:11:83:3e:76:c8: a4:61:96:1c:17:93:1a:2a:64:1d:e0:52:b7:a6:3f: 57:71:32:f2:11:d9:14:7a:6b:eb:08:d8:39:d2:e3: 7a:c8:56:eb:ff:1f:82:6c:32:11:c2:7e:fb:27:ec: 80:3b:7b:41:80:d6:48:33:69:84:1a:29:35:e7:4a: 28:ad:3f:5e:96:f7:a3:d0:2d:21:98:23:c3:db:fa: 8d:a1:93:88:ca:6a:1d:05:1e:7f:d6:1f:8e:72:f1: af:35:1d:2c:16:fa:17:f6:f4:8b:e7:5b:c5:e6:89: 77:07:10:d9:10:6a:3b:11:d1:65:08:82:52:87:1a: 75:c6:b0:10:19:b4:aa:84:a0:f2:8f:3a:10:0f:67: 96:e9:33:35:54:ea:a3:31:e3:98:59:06:bd:41:b4: 29:19:dc:7a:9d:82:91:5c:54:f5:3c:14:6e:80:4e: ac:5e:6e:b2:39:ec:48:96:74:c0:ab:65:94:78:be: 4a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7F:69:02:88:2B:4F:93:3E:9A:02:76:D8:7C:2C:B3:73:31:EB:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdc50b8a-0332-3f21-a19f-0bb93b1f8d11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:07:f2:03:41:15:5c:4b:92:c1:d7:b4:3a:03:8f:08:39:77: 28:81:a9:1b:08:d5:6e:d0:73:5f:75:18:37:2b:30:cb:d0:5b: d4:e4:ff:57:bf:e8:72:34:8f:fd:b2:53:c2:80:42:0d:10:ce: 10:a5:58:1c:fe:7c:e4:a3:74:23:59:6a:7c:b9:10:f7:8c:5d: 28:19:68:e0:84:db:38:01:03:1c:22:23:62:bb:d9:ab:05:de: 64:84:67:36:2c:53:31:70:a5:3a:94:f2:4a:e9:92:d4:24:38: 5f:9a:c5:5b:66:7e:47:47:7c:88:79:e7:ed:34:a6:93:0d:a7: 02:db:b5:2d:da:d0:4f:58:c1:63:f4:69:a5:90:b7:4f:d1:4e: 5c:65:27:7e:3a:bb:90:d6:c0:55:d1:17:ce:63:bb:85:f4:23: 8c:1f:42:55:fb:f2:9e:dc:5a:71:4e:c9:ee:8e:aa:08:bc:5f: 3a:b1:43:04:71:1c:80:da:1c:b1:5b:4c:f6:f9:5f:12:3d:9a: 7a:b5:ad:bb:ed:af:9f:ae:b8:37:f6:08:a6:81:bd:cb:25:bb: 46:94:04:75:3c:bf:a4:26:fc:c3:79:2f:08:c6:40:b3:65:c9: e7:f2:c4:c1:7f:c1:ab:a9:a0:1c:7e:da:be:9b:ab:89:42:fc: 6f:d4:d8:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2bZ8GSwsnzq4oowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwOTA4MzM1N1oXDTI2MDEwNzA5MzM1N1owLzEtMCsGA1UEAxMk NDgyNDZhMDQtOGEzZS00NzI1LTg4MWQtMzY2MDk1YTUyZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidImKHHwLUFZLwLI7I1g4rBKWCCC4s10ekbg SO9blTPfaiNQpxifjZKPRa1J9NihWC3XR3eaJInABve1UObUI9YsM/CiEYM+dsik YZYcF5MaKmQd4FK3pj9XcTLyEdkUemvrCNg50uN6yFbr/x+CbDIRwn77J+yAO3tB gNZIM2mEGik150oorT9elvej0C0hmCPD2/qNoZOIymodBR5/1h+OcvGvNR0sFvoX 9vSL51vF5ol3BxDZEGo7EdFlCIJShxp1xrAQGbSqhKDyjzoQD2eW6TM1VOqjMeOY WQa9QbQpGdx6nYKRXFT1PBRugE6sXm6yOexIlnTAq2WUeL5KjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV/aQKIK0+TPpoCdth8LLNzMevXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2RjNTBiOGEtMDMzMi0z ZjIxLWExOWYtMGJiOTNiMWY4ZDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKS0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMH8gNBFVxLksHXtDoDjwg5dyiBqRsI1W7Qc191GDcrMMvQW9Tk/1e/ 6HI0j/2yU8KAQg0QzhClWBz+fOSjdCNZany5EPeMXSgZaOCE2zgBAxwiI2K72asF 3mSEZzYsUzFwpTqU8krpktQkOF+axVtmfkdHfIh55+00ppMNpwLbtS3a0E9YwWP0 aaWQt0/RTlxlJ346u5DWwFXRF85ju4X0I4wfQlX78p7cWnFOye6Oqgi8XzqxQwRx HIDaHLFbTPb5XxI9mnq1rbvtr5+uuDf2CKaBvcslu0aUBHU8v6Qm/MN5LwjGQLNl yefyxMF/waupoBx+2r6bq4lC/G/U2Bg= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:51 2025 by rpki-client