$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd24330c-2d8b-393f-b19e-cf6546da1c4d.roa File: dd24330c-2d8b-393f-b19e-cf6546da1c4d.roa (raw, json) Hash identifier: NGiPwuQGbXsVKxVflVyVUuqtvAOkJMdK68GWupO7BQA= Subject key identifier: A0:59:AF:F2:B9:46:00:CF:16:E6:09:49:D7:22:A8:A5:8D:E4:49:9E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B766DB309200A900E29FF7500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd24330c-2d8b-393f-b19e-cf6546da1c4d.roa Signing time: Thu 09 Oct 2025 08:34:07 +0000 ROA not before: Thu 09 Oct 2025 08:34:07 +0000 ROA not after: Wed 07 Jan 2026 09:34:07 +0000 asID: 152689 IP address blocks: 68.165.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:6d:b3:09:20:0a:90:0e:29:ff:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 9 08:34:07 2025 GMT Not After : Jan 7 09:34:07 2026 GMT Subject: CN=514f4c10-958a-483a-bf7d-6902bdeaef5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2a:11:8e:dd:1c:c4:57:17:39:f9:2a:9e:0c: be:59:39:d4:96:48:af:3f:a4:ad:a6:fc:7f:69:43: b4:b6:5f:fd:19:23:0f:ae:3d:bc:8e:de:b2:3d:db: df:66:fc:94:cd:d8:b6:c5:0b:44:1a:02:16:de:3a: 00:35:26:27:9e:ff:f5:8d:9a:9d:d1:c8:44:df:48: f9:81:dd:8d:36:83:47:ab:9e:bc:28:fd:00:58:f2: 40:19:86:ee:4f:bb:de:a7:8c:74:45:2d:b6:0c:f7: ba:16:6e:41:ea:f9:13:f2:36:db:42:d8:20:cd:b6: 0f:92:93:72:b3:77:d7:57:9a:33:78:36:36:0e:22: 5c:ed:f7:cb:49:80:9a:a6:c6:23:ba:35:10:11:0a: 36:48:c3:15:9c:10:9f:48:3e:f8:9e:1e:d1:e8:2f: a8:b9:95:b6:f4:ea:8c:5f:a3:3c:cd:fc:a4:0e:2f: b4:19:58:cb:3b:c0:ae:f6:49:4f:1f:43:85:6b:2e: 7e:ac:e7:1e:b0:17:26:6f:f4:87:2e:8d:b5:97:78: cf:5a:34:ba:85:21:b6:b9:db:7f:85:2a:69:16:d7: 8a:dc:82:7b:d2:97:af:c8:a3:d7:cc:b4:94:34:27: 8f:88:ec:b3:18:b5:47:01:0a:ef:be:69:c1:47:65: ee:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:59:AF:F2:B9:46:00:CF:16:E6:09:49:D7:22:A8:A5:8D:E4:49:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd24330c-2d8b-393f-b19e-cf6546da1c4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a2:b6:9b:0b:21:02:b6:aa:48:07:41:9f:7b:3e:97:e0:7f: bf:1c:40:c7:7c:41:ee:62:e2:a7:ca:bc:7a:40:4b:ef:0f:dd: 82:5b:19:56:5e:cc:74:f6:e1:e5:13:0e:6f:49:bc:1a:22:66: 28:d4:27:33:2e:5b:70:96:f2:58:47:bc:69:9b:bf:68:f8:a6: 10:9d:53:ee:52:d4:73:c1:b8:f2:f0:f7:14:10:47:bc:88:6a: 7e:16:9e:78:16:58:73:85:d1:20:59:0f:d0:ab:b6:22:30:c9: 4d:9d:57:42:5c:a1:a3:62:68:34:e6:45:4f:15:90:88:84:d0: 2b:f6:a7:f4:40:0f:8b:b6:19:ac:cc:0d:fb:a1:c8:ea:d6:12: 55:9e:da:cd:f1:ff:ac:8f:ae:26:a5:d4:ae:22:00:99:62:85: 99:f5:5a:bc:5a:64:0b:ab:82:60:e3:1c:15:6d:29:77:81:07: 3e:0d:35:dd:24:aa:0a:ea:3c:90:7c:bb:6e:45:42:3e:18:fa: f3:dd:ad:88:1d:f4:34:76:7d:f2:59:bc:f7:35:95:0e:59:86: b6:95:9a:08:9f:d5:6a:fe:0c:1d:d3:9b:a4:c0:bd:a0:da:f4: 9c:1b:08:91:5c:21:bc:52:cd:ca:5e:62:71:51:4d:40:cb:de: 22:c0:44:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2bbMJIAqQDin/dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwOTA4MzQwN1oXDTI2MDEwNzA5MzQwN1owLzEtMCsGA1UEAxMk NTE0ZjRjMTAtOTU4YS00ODNhLWJmN2QtNjkwMmJkZWFlZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ioRjt0cxFcXOfkqngy+WTnUlkivP6Stpvx/ aUO0tl/9GSMPrj28jt6yPdvfZvyUzdi2xQtEGgIW3joANSYnnv/1jZqd0chE30j5 gd2NNoNHq568KP0AWPJAGYbuT7vep4x0RS22DPe6Fm5B6vkT8jbbQtggzbYPkpNy s3fXV5ozeDY2DiJc7ffLSYCapsYjujUQEQo2SMMVnBCfSD74nh7R6C+ouZW29OqM X6M8zfykDi+0GVjLO8Cu9klPH0OFay5+rOcesBcmb/SHLo21l3jPWjS6hSG2udt/ hSppFteK3IJ70pevyKPXzLSUNCePiOyzGLVHAQrvvmnBR2XuyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBZr/K5RgDPFuYJSdciqKWN5EmeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGQyNDMzMGMtMmQ4Yi0z OTNmLWIxOWUtY2Y2NTQ2ZGExYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKitpsLIQK2qkgHQZ97Ppfgf78cQMd8Qe5i4qfKvHpAS+8P3YJbGVZe zHT24eUTDm9JvBoiZijUJzMuW3CW8lhHvGmbv2j4phCdU+5S1HPBuPLw9xQQR7yI an4WnngWWHOF0SBZD9CrtiIwyU2dV0JcoaNiaDTmRU8VkIiE0Cv2p/RAD4u2GazM DfuhyOrWElWe2s3x/6yPrial1K4iAJlihZn1WrxaZAurgmDjHBVtKXeBBz4NNd0k qgrqPJB8u25FQj4Y+vPdrYgd9DR2ffJZvPc1lQ5ZhraVmgif1Wr+DB3Tm6TAvaDa 9JwbCJFcIbxSzcpeYnFRTUDL3iLARB8= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:51 2025 by rpki-client