$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/70158a40-1c67-3cb3-a454-85f651195ef6.roa File: 70158a40-1c67-3cb3-a454-85f651195ef6.roa (raw, json) Hash identifier: arAr0ZTuTTatIQQzXNADshSFgd2twGDm029ILV/DZ7E= Subject key identifier: 7B:8D:51:D5:5B:3D:CD:D1:BB:09:4A:42:40:38:4C:DE:31:C1:00:E6 Certificate issuer: /CN=d67d4a84-9f0e-4408-82e7-81c09b7c592d Certificate serial: 010D0C9F4328584B749A7A0A5E53D2989AEB1200 Authority key identifier: 92:F3:D0:75:AF:64:30:7C:7B:4F:EF:33:EC:3A:81:7D:57:4A:8D:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/70158a40-1c67-3cb3-a454-85f651195ef6.roa Signing time: Wed 08 Oct 2025 16:52:43 +0000 ROA not before: Wed 08 Oct 2025 16:52:43 +0000 ROA not after: Tue 06 Jan 2026 17:52:43 +0000 asID: 397423 IP address blocks: 216.239.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:9a:7a:0a:5e:53:d2:98:9a:eb:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d67d4a84-9f0e-4408-82e7-81c09b7c592d Validity Not Before: Oct 8 16:52:43 2025 GMT Not After : Jan 6 17:52:43 2026 GMT Subject: CN=d51240f6-9f69-4a56-ad1e-e181962d4596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fe:fe:6f:39:00:32:43:b7:50:f4:5b:27:07: ce:9e:8a:28:e2:3a:a8:2f:31:fb:a1:65:bd:45:85: 4d:b5:83:65:1c:aa:3f:86:87:99:77:e8:7c:95:41: f2:b8:41:1b:76:74:d8:fe:21:9f:e1:cf:00:e1:58: 28:92:8b:54:72:2f:54:7d:bb:94:d4:52:fc:2a:31: 49:f4:53:47:7b:50:45:fd:e8:23:ed:4f:8f:3c:03: 2b:38:77:60:31:15:d6:37:91:6e:d6:45:2f:af:22: 1e:46:2a:8b:42:5b:15:f5:3b:6a:25:97:f3:15:7b: 3d:4e:cb:7d:51:cc:36:6d:ee:1e:71:6a:7f:f8:ec: 5a:e5:29:70:4c:8c:d1:42:ae:17:64:71:cd:fa:f3: 37:ed:b7:0f:45:7f:05:c2:8b:d1:07:75:1c:51:77: e3:cd:ea:36:96:fe:6b:38:57:ff:63:d0:8b:fb:07: 1a:5a:cf:b5:f1:be:c3:63:ad:2e:c0:4b:cb:f4:1e: 9e:c1:af:c9:54:75:bb:32:74:2e:74:1e:ce:18:34: dc:fa:dd:b1:48:54:7a:3e:4b:a3:76:7e:d2:8d:75: f7:52:38:39:2f:4c:78:ef:af:8a:70:8e:4d:38:85: 32:be:3f:6f:ad:81:63:d8:66:17:81:ad:58:1b:61: af:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8D:51:D5:5B:3D:CD:D1:BB:09:4A:42:40:38:4C:DE:31:C1:00:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/70158a40-1c67-3cb3-a454-85f651195ef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.crl X509v3 Authority Key Identifier: keyid:92:F3:D0:75:AF:64:30:7C:7B:4F:EF:33:EC:3A:81:7D:57:4A:8D:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer sbgp-ipAddrBlock: critical IPv4: 216.239.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f6:71:2c:0f:ed:4d:50:fc:f6:f2:9f:60:c1:4f:05:f3:93: e5:46:57:0d:69:19:69:f9:38:7d:00:b8:43:db:73:a9:d0:d5: 61:e3:6a:d5:8f:c8:82:bf:44:b9:56:ff:f7:95:c9:46:bb:7b: 4a:8e:36:8f:21:5f:76:e3:28:2c:83:9f:b7:81:fe:7a:c9:32: b4:24:bd:1f:56:1f:02:09:1d:e6:64:47:14:1c:97:f5:ca:37: f9:3b:35:ed:ab:f5:a6:08:5e:63:11:6a:70:6c:30:d2:c4:29: 40:57:1b:ab:90:0b:cc:25:44:f9:a7:fd:df:3b:b8:60:52:05: 18:4f:3a:1b:14:1e:ba:06:03:ef:d2:ab:94:e8:8e:85:d7:de: c3:12:28:7d:74:d7:ef:2b:8e:88:44:23:3c:5f:98:5e:6b:45: 15:56:98:bd:ef:ef:8b:e2:4e:e1:2b:7f:5d:b8:58:c8:32:69: d2:bb:20:d1:12:34:47:cb:32:fc:e8:00:10:e2:19:63:8f:05: 11:ad:7d:a7:cf:e6:bd:11:87:94:5a:65:5a:3c:7c:e2:52:bb: b6:51:a3:27:82:d4:d7:1d:06:61:ab:bc:c9:d1:54:d2:b9:20: 59:eb:18:ea:6c:d1:eb:29:28:74:a8:ff:7a:a9:86:ed:55:d2: fb:a6:8d:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0mnoKXlPSmJrrEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY3ZDRhODQtOWYwZS00NDA4LTgyZTctODFjMDliN2M1 OTJkMB4XDTI1MTAwODE2NTI0M1oXDTI2MDEwNjE3NTI0M1owLzEtMCsGA1UEAxMk ZDUxMjQwZjYtOWY2OS00YTU2LWFkMWUtZTE4MTk2MmQ0NTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv7+bzkAMkO3UPRbJwfOnooo4jqoLzH7oWW9 RYVNtYNlHKo/hoeZd+h8lUHyuEEbdnTY/iGf4c8A4VgokotUci9UfbuU1FL8KjFJ 9FNHe1BF/egj7U+PPAMrOHdgMRXWN5Fu1kUvryIeRiqLQlsV9TtqJZfzFXs9Tst9 Ucw2be4ecWp/+Oxa5SlwTIzRQq4XZHHN+vM37bcPRX8FwovRB3UcUXfjzeo2lv5r OFf/Y9CL+wcaWs+18b7DY60uwEvL9B6ewa/JVHW7MnQudB7OGDTc+t2xSFR6Pkuj dn7SjXX3Ujg5L0x476+KcI5NOIUyvj9vrYFj2GYXga1YG2GvcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuNUdVbPc3RuwlKQkA4TN4xwQDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNjdk NGE4NC05ZjBlLTQ0MDgtODJlNy04MWMwOWI3YzU5MmQvNzAxNThhNDAtMWM2Ny0z Y2IzLWE0NTQtODVmNjUxMTk1ZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDY3ZDRhODQtOWYwZS00NDA4LTgy ZTctODFjMDliN2M1OTJkL2Q2N2Q0YTg0LTlmMGUtNDQwOC04MmU3LTgxYzA5Yjdj NTkyZC5jcmwwHwYDVR0jBBgwFoAUkvPQda9kMHx7T+8z7DqBfVdKjWcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNjdkNGE4NC05ZjBlLTQ0MDgtODJlNy04MWMw OWI3YzU5MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2O9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFX2cSwP7U1Q/Pbyn2DBTwXzk+VGVw1pGWn5OH0AuEPbc6nQ1WHjatWP yIK/RLlW//eVyUa7e0qONo8hX3bjKCyDn7eB/nrJMrQkvR9WHwIJHeZkRxQcl/XK N/k7Ne2r9aYIXmMRanBsMNLEKUBXG6uQC8wlRPmn/d87uGBSBRhPOhsUHroGA+/S q5TojoXX3sMSKH101+8rjohEIzxfmF5rRRVWmL3v74viTuErf124WMgyadK7INES NEfLMvzoABDiGWOPBRGtfafP5r0Rh5RaZVo8fOJSu7ZRoyeC1NcdBmGrvMnRVNK5 IFnrGOps0espKHSo/3qphu1V0vumjYw= -----END CERTIFICATE-----Generated at Thu Oct 9 06:22:37 2025 by rpki-client