$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1c5abbb-e10d-3fea-81eb-57d58eb16054.roa File: e1c5abbb-e10d-3fea-81eb-57d58eb16054.roa (raw, json) Hash identifier: Hr87iXQdfnO0L4QDFenaxV5xV/7ZpX8AEGJuGYAM7d8= Subject key identifier: D1:D4:05:B3:54:5B:72:E1:04:DF:A0:1D:3D:AE:6F:69:96:A1:9D:F3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B3F620C969B663A3226CC9600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1c5abbb-e10d-3fea-81eb-57d58eb16054.roa Signing time: Fri 19 Sep 2025 15:21:11 +0000 ROA not before: Fri 19 Sep 2025 15:21:11 +0000 ROA not after: Thu 18 Dec 2025 16:21:11 +0000 asID: 5650 IP address blocks: 68.167.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:62:0c:96:9b:66:3a:32:26:cc:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 19 15:21:11 2025 GMT Not After : Dec 18 16:21:11 2025 GMT Subject: CN=aa17a6bd-e6cb-473a-b0ab-ce0641146b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e1:eb:1f:4e:c1:53:ad:a1:3b:20:3a:b0:98: 5a:ce:2d:7e:d6:c4:fc:30:65:68:ea:e6:94:77:9e: e0:7f:ed:73:05:9f:c7:06:eb:53:38:96:cc:a2:88: 9d:a7:b2:5c:c7:88:62:45:70:e8:6b:66:15:76:fc: c2:d5:b7:43:ee:dd:91:37:5c:17:d5:7f:2f:69:b8: 26:b1:41:7e:29:7d:b7:8e:2f:69:e1:54:3b:13:cf: 02:12:00:21:b3:52:08:fb:da:6a:ed:93:02:5e:1a: 12:60:63:ac:8c:13:6d:d3:03:b1:7e:34:82:ba:5e: 70:8f:d3:f8:27:2a:6d:a2:32:a6:ff:8c:86:25:3f: 97:16:07:3c:ce:e0:38:fe:51:20:02:4d:31:12:fb: bc:0e:9a:5c:29:3b:c8:fb:6e:ef:50:c3:a4:d1:e8: cb:3d:33:ca:ca:ff:f4:bf:85:6a:a7:97:18:9c:4b: 54:62:b7:c5:dc:bb:74:54:ca:1e:0d:1f:8a:9d:d6: c3:93:5b:7b:5f:dd:d3:e9:2f:76:3e:2a:a6:38:fd: 9a:b7:a2:96:f1:71:78:68:ee:48:68:7e:70:da:c8: 15:d7:dd:7b:6f:24:cf:e3:29:c0:25:62:0b:3d:4a: 77:dd:05:aa:6b:d3:b2:17:92:dc:72:ad:c0:26:08: ab:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D4:05:B3:54:5B:72:E1:04:DF:A0:1D:3D:AE:6F:69:96:A1:9D:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1c5abbb-e10d-3fea-81eb-57d58eb16054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:73:5e:f9:71:04:5e:de:73:f4:1b:9b:bc:91:83:73:ac:cf: ad:26:8e:8c:23:3c:31:b7:94:a1:36:10:fa:e7:1c:6f:5c:dc: 4a:b7:19:4d:c2:3f:2f:a9:1a:bf:c6:67:53:ac:4a:df:27:18: 94:c0:eb:6c:ad:36:55:c5:b5:46:e8:ac:b0:b5:46:2c:13:39: 8e:3f:01:74:91:f4:0c:d2:7d:2f:c5:a1:2e:ef:93:e8:bc:7f: 29:67:f9:c5:c7:c9:2b:d4:0f:77:84:e0:b9:77:ea:f6:ec:6b: fe:ec:2b:1f:32:43:79:e0:35:21:dd:1c:09:2b:1b:a5:4d:3e: 85:11:b3:8b:7d:4a:e8:a3:b2:76:6f:e6:07:f4:8e:52:57:4b: bb:3a:fa:03:fe:e9:f3:21:6e:ae:23:ce:65:b6:e3:d7:9f:5c: 82:8f:14:91:b5:73:43:85:bd:30:f4:ae:e1:67:e6:3b:0a:3d: 9b:be:89:00:62:a2:54:66:68:a8:b2:a0:ed:06:2c:7e:fd:bb: a6:95:ef:32:9c:d1:9e:7f:5f:23:07:26:cc:d1:25:be:35:ec: c0:55:48:70:19:bd:4e:5a:b8:af:42:34:ec:fb:a5:44:e0:98: 1a:85:4d:b9:c0:a7:e2:e4:43:ea:60:1d:8b:b0:70:bf:53:0d: 06:b1:bf:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/YgyWm2Y6MibMlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxOTE1MjExMVoXDTI1MTIxODE2MjExMVowLzEtMCsGA1UEAxMk YWExN2E2YmQtZTZjYi00NzNhLWIwYWItY2UwNjQxMTQ2Yjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOHrH07BU62hOyA6sJhazi1+1sT8MGVo6uaU d57gf+1zBZ/HButTOJbMooidp7Jcx4hiRXDoa2YVdvzC1bdD7t2RN1wX1X8vabgm sUF+KX23ji9p4VQ7E88CEgAhs1II+9pq7ZMCXhoSYGOsjBNt0wOxfjSCul5wj9P4 JyptojKm/4yGJT+XFgc8zuA4/lEgAk0xEvu8DppcKTvI+27vUMOk0ejLPTPKyv/0 v4Vqp5cYnEtUYrfF3Lt0VMoeDR+KndbDk1t7X93T6S92PiqmOP2at6KW8XF4aO5I aH5w2sgV1917byTP4ynAJWILPUp33QWqa9OyF5Lccq3AJgiriQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHUBbNUW3LhBN+gHT2ub2mWoZ3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTFjNWFiYmItZTEwZC0z ZmVhLTgxZWItNTdkNThlYjE2MDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMhzXvlxBF7ec/Qbm7yRg3Osz60mjowjPDG3lKE2EPrnHG9c3Eq3GU3C Py+pGr/GZ1OsSt8nGJTA62ytNlXFtUborLC1RiwTOY4/AXSR9AzSfS/FoS7vk+i8 fyln+cXHySvUD3eE4Ll36vbsa/7sKx8yQ3ngNSHdHAkrG6VNPoURs4t9SuijsnZv 5gf0jlJXS7s6+gP+6fMhbq4jzmW249efXIKPFJG1c0OFvTD0ruFn5jsKPZu+iQBi olRmaKiyoO0GLH79u6aV7zKc0Z5/XyMHJszRJb417MBVSHAZvU5auK9CNOz7pUTg mBqFTbnAp+LkQ+pgHYuwcL9TDQaxvxs= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:10 2025 by rpki-client