$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ffa51f49-f48d-38d7-a966-039edc7de8c1.roa File: ffa51f49-f48d-38d7-a966-039edc7de8c1.roa (raw, json) Hash identifier: 2VfgRI4TumjlGL8QsU9phOKtZAEKMvWzk1xGSilOG9U= Subject key identifier: 33:DE:CE:1F:FF:87:F4:E5:89:FB:FE:58:AC:FF:00:49:E3:C6:B7:92 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B766D9720421281C3B8B7E280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ffa51f49-f48d-38d7-a966-039edc7de8c1.roa Signing time: Thu 09 Oct 2025 08:33:54 +0000 ROA not before: Thu 09 Oct 2025 08:33:54 +0000 ROA not after: Wed 07 Jan 2026 09:33:54 +0000 asID: 152689 IP address blocks: 68.164.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:6d:97:20:42:12:81:c3:b8:b7:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 9 08:33:54 2025 GMT Not After : Jan 7 09:33:54 2026 GMT Subject: CN=56eb623c-70d9-4e76-b54f-08dde0d20e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:bd:28:68:65:9e:3e:23:03:e3:f4:41:0b: 00:c2:a7:64:aa:ea:7f:b1:db:4c:33:9a:2e:69:cf: 27:15:a8:a7:e8:6b:48:23:28:c2:be:e1:77:cb:08: cb:10:ec:41:ca:be:aa:7b:9c:fc:af:2e:15:f4:ed: e8:25:b2:0b:9b:41:a1:3c:bb:8e:a0:a0:41:ec:aa: 61:a1:8a:7d:80:a7:b0:b4:71:9a:04:9e:a1:50:2a: c1:96:45:54:76:ae:d9:dd:5b:34:72:b2:3e:b8:8f: 07:9e:03:8b:32:e5:ac:6c:b8:01:e2:46:4d:85:88: 71:1f:be:ca:d2:ad:5c:03:ca:37:3e:e4:00:dd:f7: e1:c8:24:41:5b:c5:14:5c:fd:ed:b6:03:99:64:e3: 26:30:af:10:bd:96:f4:02:e0:3c:89:97:48:7d:0e: 56:34:29:56:7a:a6:b5:3b:81:f6:52:3b:d5:30:52: 5b:66:30:72:7a:97:fc:3a:b1:79:c6:4d:ec:03:dd: db:e1:fd:39:fd:b2:70:41:7a:9b:3f:e5:f5:81:ce: 04:19:16:66:84:72:a2:05:4a:3a:b4:48:ef:2c:a2: 36:5e:c0:03:fb:12:7f:5a:89:44:9b:c9:aa:0e:e0: 4e:5c:34:b4:d6:e7:b6:f0:1e:50:bf:c9:ec:4b:d9: 27:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DE:CE:1F:FF:87:F4:E5:89:FB:FE:58:AC:FF:00:49:E3:C6:B7:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ffa51f49-f48d-38d7-a966-039edc7de8c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:70:ba:e0:a1:82:b9:e1:a5:2a:14:71:21:86:b1:1a:79:8b: d0:e7:bb:31:c9:69:81:25:fa:52:30:ba:ed:40:36:56:2a:86: 08:cd:a6:34:de:2f:f0:1a:24:20:18:b5:0a:a9:e6:23:c7:f1: 34:89:ab:47:74:b5:18:a8:00:59:9a:8f:50:a3:e4:5e:42:d8: 51:f5:5e:df:83:db:ae:e9:17:ba:75:1a:82:8f:bd:c4:11:62: 38:f7:69:e3:11:9d:2c:a2:18:27:07:25:bf:34:cf:bc:a2:92: 14:5b:67:3f:b1:71:22:34:8d:a1:cb:40:ba:1b:1f:f8:51:c2: c2:99:ea:86:b0:ce:bd:43:e2:1d:09:b0:2e:da:01:36:b6:68: ec:bd:fb:a9:95:11:94:e9:57:de:29:0d:0b:c1:33:6f:d5:aa: 2f:82:40:14:72:cc:e9:d0:26:52:8a:fb:33:5f:d7:db:7f:64: f1:54:78:82:ba:d9:5a:02:3e:94:7d:b2:5f:4b:00:2e:e4:67: a8:0a:45:be:97:21:10:e9:7a:44:82:35:92:d2:82:7a:e7:a7: 7a:76:68:a3:b3:e9:ba:c8:d9:53:01:12:fc:00:1f:a6:52:23: 3d:23:86:29:b4:c8:bd:b3:47:06:f4:4f:62:02:ec:92:00:50: 48:45:e0:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2bZcgQhKBw7i34oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwOTA4MzM1NFoXDTI2MDEwNzA5MzM1NFowLzEtMCsGA1UEAxMk NTZlYjYyM2MtNzBkOS00ZTc2LWI1NGYtMDhkZGUwZDIwZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9K9KGhlnj4jA+P0QQsAwqdkqup/sdtMM5ou ac8nFain6GtIIyjCvuF3ywjLEOxByr6qe5z8ry4V9O3oJbILm0GhPLuOoKBB7Kph oYp9gKewtHGaBJ6hUCrBlkVUdq7Z3Vs0crI+uI8HngOLMuWsbLgB4kZNhYhxH77K 0q1cA8o3PuQA3ffhyCRBW8UUXP3ttgOZZOMmMK8QvZb0AuA8iZdIfQ5WNClWeqa1 O4H2UjvVMFJbZjByepf8OrF5xk3sA93b4f05/bJwQXqbP+X1gc4EGRZmhHKiBUo6 tEjvLKI2XsAD+xJ/WolEm8mqDuBOXDS01ue28B5Qv8nsS9knywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPezh//h/Tlifv+WKz/AEnjxreSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmZhNTFmNDktZjQ4ZC0z OGQ3LWE5NjYtMDM5ZWRjN2RlOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKTEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxwuuChgrnhpSoUcSGGsRp5i9DnuzHJaYEl+lIwuu1ANlYqhgjNpjTe L/AaJCAYtQqp5iPH8TSJq0d0tRioAFmaj1Cj5F5C2FH1Xt+D267pF7p1GoKPvcQR Yjj3aeMRnSyiGCcHJb80z7yikhRbZz+xcSI0jaHLQLobH/hRwsKZ6oawzr1D4h0J sC7aATa2aOy9+6mVEZTpV94pDQvBM2/Vqi+CQBRyzOnQJlKK+zNf19t/ZPFUeIK6 2VoCPpR9sl9LAC7kZ6gKRb6XIRDpekSCNZLSgnrnp3p2aKOz6brI2VMBEvwAH6ZS Iz0jhim0yL2zRwb0T2IC7JIAUEhF4MI= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:47 2025 by rpki-client