$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de43b843-7e32-30b0-9407-e8dca58980c1.roa File: de43b843-7e32-30b0-9407-e8dca58980c1.roa (raw, json) Hash identifier: tbrx+337uU6EthiTqz7aDi9SXjLZrtqQz7L7SWalaU0= Subject key identifier: D9:6F:C0:4F:95:CB:F7:2B:C4:78:37:64:BB:0D:85:66:44:27:C3:B2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B766DA5F2ECB650278EFAC1E0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de43b843-7e32-30b0-9407-e8dca58980c1.roa Signing time: Thu 09 Oct 2025 08:34:01 +0000 ROA not before: Thu 09 Oct 2025 08:34:01 +0000 ROA not after: Wed 07 Jan 2026 09:34:01 +0000 asID: 152689 IP address blocks: 68.164.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:6d:a5:f2:ec:b6:50:27:8e:fa:c1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 9 08:34:01 2025 GMT Not After : Jan 7 09:34:01 2026 GMT Subject: CN=cea72fd7-8d7e-4abb-a37d-eae6e7698fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:fc:fd:1f:6f:79:64:c6:10:c2:a4:06:16: 0e:20:f8:a0:f4:a8:64:fc:89:91:9b:55:29:b1:7e: 1c:5f:87:50:a0:7d:9e:6a:29:71:fb:c8:d8:e0:9c: b4:15:3c:45:8c:13:ed:0a:22:18:0d:a6:a2:5c:34: e1:31:ec:01:cb:e2:81:ea:4b:63:8c:04:dc:3e:97: 58:58:c4:57:70:9a:82:a0:c4:56:bf:dd:c8:21:61: 98:35:52:56:30:5d:65:64:2d:7e:a3:9c:bb:72:76: 4d:56:d3:a1:a4:d8:80:a1:4a:3a:42:ec:4b:0c:8f: 21:66:98:e4:0a:9f:07:db:ed:b8:77:db:62:0f:78: 99:c9:2b:93:9e:65:e1:ea:d3:46:4b:88:f0:d8:26: 19:cd:01:66:17:98:87:cf:2c:8a:2f:c6:f1:a6:f2: 6f:7d:d2:b0:c0:1c:08:fd:82:d8:98:8a:90:d9:c7: 02:43:c9:aa:f2:2b:8e:13:cf:49:7d:15:87:e5:4a: 90:53:34:d2:59:38:5a:5f:52:ca:04:50:7c:72:b3: 61:87:fc:c0:66:c3:bd:80:f8:6f:44:43:14:0f:d0: dd:38:dc:b5:8b:67:88:9e:e8:0b:5f:51:11:0b:1b: ba:4f:25:67:e6:08:f9:56:60:d2:15:01:a7:e7:b1: f4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6F:C0:4F:95:CB:F7:2B:C4:78:37:64:BB:0D:85:66:44:27:C3:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de43b843-7e32-30b0-9407-e8dca58980c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:af:cb:54:29:43:f3:22:7e:35:36:9e:e5:81:de:de:d9:73: 51:e1:6b:fc:b3:b9:55:01:39:4b:0c:89:1a:bf:be:e2:69:a7: b2:56:cc:46:4e:e4:4e:ba:62:91:ca:7a:5c:8a:d9:4c:9f:4d: a3:d4:4e:54:fa:1a:5c:b9:4a:1d:9f:57:4e:99:de:5c:8d:77: f8:9c:8a:4b:83:7e:77:84:b3:65:65:ba:21:75:1e:55:ab:22: 27:3d:44:af:e2:ba:b4:81:fb:42:d0:f2:a9:3d:1c:e6:1e:8a: 46:b6:76:df:3e:94:4a:fb:b6:87:02:63:f4:4b:2f:b8:2d:da: 62:e9:78:2f:c6:78:12:b2:39:8f:70:a4:e9:15:c7:38:4a:ec: ef:0d:81:38:83:62:dd:54:f7:8a:8b:c2:70:3e:be:f1:ac:83: 3e:1f:7b:22:dc:01:3c:73:93:1a:b9:71:7b:78:94:52:fb:68: ab:cf:92:f0:fb:20:22:c8:9b:fe:19:d2:4c:2c:ef:d2:61:78: 56:3d:f8:8e:7e:57:97:e7:a4:1b:0e:d6:a2:08:6a:18:38:5a: 3d:16:f3:75:e9:f5:e5:c8:9e:a5:d3:ff:8d:42:52:01:3f:77: 34:77:6e:9b:35:11:2d:ff:d8:c4:99:a8:bf:d5:cb:95:68:3c: 44:6c:84:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2baXy7LZQJ476weAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwOTA4MzQwMVoXDTI2MDEwNzA5MzQwMVowLzEtMCsGA1UEAxMk Y2VhNzJmZDctOGQ3ZS00YWJiLWEzN2QtZWFlNmU3Njk4ZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0L8/R9veWTGEMKkBhYOIPig9Khk/ImRm1Up sX4cX4dQoH2eailx+8jY4Jy0FTxFjBPtCiIYDaaiXDThMewBy+KB6ktjjATcPpdY WMRXcJqCoMRWv93IIWGYNVJWMF1lZC1+o5y7cnZNVtOhpNiAoUo6QuxLDI8hZpjk Cp8H2+24d9tiD3iZySuTnmXh6tNGS4jw2CYZzQFmF5iHzyyKL8bxpvJvfdKwwBwI /YLYmIqQ2ccCQ8mq8iuOE89JfRWH5UqQUzTSWThaX1LKBFB8crNhh/zAZsO9gPhv REMUD9DdONy1i2eInugLX1ERCxu6TyVn5gj5VmDSFQGn57H0twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlvwE+Vy/crxHg3ZLsNhWZEJ8OyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGU0M2I4NDMtN2UzMi0z MGIwLTk0MDctZThkY2E1ODk4MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKSkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImvy1QpQ/MifjU2nuWB3t7Zc1Hha/yzuVUBOUsMiRq/vuJpp7JWzEZO 5E66YpHKelyK2UyfTaPUTlT6Gly5Sh2fV06Z3lyNd/icikuDfneEs2VluiF1HlWr Iic9RK/iurSB+0LQ8qk9HOYeika2dt8+lEr7tocCY/RLL7gt2mLpeC/GeBKyOY9w pOkVxzhK7O8NgTiDYt1U94qLwnA+vvGsgz4feyLcATxzkxq5cXt4lFL7aKvPkvD7 ICLIm/4Z0kws79JheFY9+I5+V5fnpBsO1qIIahg4Wj0W83Xp9eXInqXT/41CUgE/ dzR3bps1ES3/2MSZqL/Vy5VoPERshCs= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:34 2025 by rpki-client