$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/68d1a941-51ad-3750-8235-b215425c89f4.roa File: 68d1a941-51ad-3750-8235-b215425c89f4.roa (raw, json) Hash identifier: +Y1IYPcSfuirlO0jEizniIp5GdN1h8Jr9AXTRxMlvqA= Subject key identifier: 9C:24:07:CF:7A:D2:49:F3:54:A2:4B:22:DE:50:26:3B:5D:C8:4C:0A Certificate issuer: /CN=d512566a-2d54-474a-a1b0-93c74d4f7e45 Certificate serial: 010D0C9F4328584AD0D6448AD02A425DDB8EB980 Authority key identifier: 1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/68d1a941-51ad-3750-8235-b215425c89f4.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 19905 IP address blocks: 167.245.8.0/22 maxlen: 22 167.245.12.0/22 maxlen: 22 167.245.16.0/22 maxlen: 22 167.245.20.0/22 maxlen: 22 167.245.24.0/22 maxlen: 22 167.245.28.0/22 maxlen: 22 167.245.32.0/22 maxlen: 22 167.245.36.0/22 maxlen: 22 167.245.54.0/23 maxlen: 23 167.245.56.0/22 maxlen: 22 167.245.62.0/23 maxlen: 23 167.245.64.0/20 maxlen: 20 167.245.88.0/22 maxlen: 22 167.245.92.0/22 maxlen: 22 167.245.104.0/22 maxlen: 22 167.245.139.0/24 maxlen: 24 167.245.160.0/19 maxlen: 19 167.245.243.0/24 maxlen: 24 167.245.245.0/24 maxlen: 24 167.245.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:44:8a:d0:2a:42:5d:db:8e:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d512566a-2d54-474a-a1b0-93c74d4f7e45 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=b0f108e7-716d-4b58-b9bf-dd055dd06d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:73:86:52:1b:28:5c:fb:99:7d:64:e4:dd:f4: 92:d8:30:e1:91:ca:9e:ff:5a:6c:55:69:86:7b:14: d6:28:70:a2:1a:44:ff:c2:de:ec:07:43:60:43:a5: 2d:b3:54:b8:25:98:01:a8:4b:f1:da:ad:9e:98:22: c0:37:43:9c:54:f5:9d:2b:97:7d:db:01:f9:a7:65: a6:22:94:ff:50:c9:ec:b4:0b:56:f3:1a:37:f3:eb: 5f:4a:1d:d4:92:40:05:f5:52:34:3e:80:da:0a:ac: a2:51:11:6f:46:f8:f8:60:dd:09:d2:d7:e8:cf:47: 1f:50:5b:c9:bb:7e:64:eb:ad:90:d7:20:8b:8c:fe: 2f:f1:5b:e3:c5:38:8b:47:9f:05:b8:e3:af:b5:35: d5:4d:b8:fd:d4:b5:d3:f5:f9:dd:ae:d6:6d:7d:3d: e9:5f:6a:aa:ef:46:60:60:33:df:53:48:16:ab:11: fb:6d:05:e7:57:e8:47:6b:5a:6e:d3:f4:39:ba:82: 83:d9:f8:63:a3:48:69:b0:86:98:16:54:a8:27:cf: 10:61:98:ae:9b:65:94:06:53:5b:3c:3c:a4:a7:0a: 7d:04:a9:f1:b8:b0:3a:1e:06:d2:c6:93:78:31:65: 6c:d7:a5:8b:a4:ec:50:6b:b1:ff:46:41:ca:2c:2f: e4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:24:07:CF:7A:D2:49:F3:54:A2:4B:22:DE:50:26:3B:5D:C8:4C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/68d1a941-51ad-3750-8235-b215425c89f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl X509v3 Authority Key Identifier: keyid:1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer sbgp-ipAddrBlock: critical IPv4: 167.245.8.0-167.245.39.255 167.245.54.0-167.245.59.255 167.245.62.0-167.245.79.255 167.245.88.0/21 167.245.104.0/22 167.245.139.0/24 167.245.160.0/19 167.245.243.0/24 167.245.245.0/24 167.245.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:5c:3c:9f:a8:69:af:76:f4:da:07:9f:20:37:a6:6d:68:35: b5:9e:99:fa:ab:a8:ff:a8:59:ea:55:5d:25:58:79:0c:dd:93: 77:4d:03:a1:53:65:27:a6:38:60:f6:01:58:73:99:fd:a0:96: 22:ad:e7:fb:4d:65:86:b5:a3:af:14:b8:b3:c0:69:40:a3:36: c8:82:b0:8a:ce:b8:18:7c:56:c8:15:9d:c1:4e:11:c4:69:10: 84:2b:af:f9:84:f8:d1:7b:ed:d8:0b:50:29:b0:23:20:af:8b: a5:1a:23:d9:4f:fa:09:8d:8b:e2:60:88:98:5c:2a:61:93:2c: 7e:d9:e3:8f:d9:be:73:a2:92:a5:43:f3:ac:57:75:41:db:1b: 1c:ce:e9:ed:ca:63:77:53:f4:63:90:5e:f9:eb:30:d7:3f:ef: 0b:a2:8d:6a:9e:6e:f0:58:64:36:f5:89:a0:e5:5b:72:94:37: 6c:5c:14:d8:82:7b:3f:bf:ca:2f:93:fa:68:4f:35:83:f5:63: 54:a4:3b:59:76:3a:0a:61:c7:6e:be:a1:42:29:66:5e:ee:fa: 93:2d:6d:02:a4:b6:49:2e:32:12:d5:39:91:db:4c:86:30:8a: 2f:76:4e:fb:58:e0:e8:ef:d5:91:d2:d3:83:aa:aa:8a:f1:82: d4:28:f6:b3 -----BEGIN CERTIFICATE----- MIIGkTCCBXmgAwIBAgIUAQ0Mn0MoWErQ1kSK0CpCXduOuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUxMjU2NmEtMmQ1NC00NzRhLWExYjAtOTNjNzRkNGY3 ZTQ1MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YjBmMTA4ZTctNzE2ZC00YjU4LWI5YmYtZGQwNTVkZDA2ZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHOGUhsoXPuZfWTk3fSS2DDhkcqe/1psVWmG exTWKHCiGkT/wt7sB0NgQ6Uts1S4JZgBqEvx2q2emCLAN0OcVPWdK5d92wH5p2Wm IpT/UMnstAtW8xo38+tfSh3UkkAF9VI0PoDaCqyiURFvRvj4YN0J0tfoz0cfUFvJ u35k662Q1yCLjP4v8VvjxTiLR58FuOOvtTXVTbj91LXT9fndrtZtfT3pX2qq70Zg YDPfU0gWqxH7bQXnV+hHa1pu0/Q5uoKD2fhjo0hpsIaYFlSoJ88QYZium2WUBlNb PDykpwp9BKnxuLA6HgbSxpN4MWVs16WLpOxQa7H/RkHKLC/kwQIDAQABo4IDozCC A58wHQYDVR0OBBYEFJwkB8960knzVKJLIt5QJjtdyEwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kNTEy NTY2YS0yZDU0LTQ3NGEtYTFiMC05M2M3NGQ0ZjdlNDUvNjhkMWE5NDEtNTFhZC0z NzUwLTgyMzUtYjIxNTQyNWM4OWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDUxMjU2NmEtMmQ1NC00NzRhLWEx YjAtOTNjNzRkNGY3ZTQ1L2Q1MTI1NjZhLTJkNTQtNDc0YS1hMWIwLTkzYzc0ZDRm N2U0NS5jcmwwHwYDVR0jBBgwFoAUH/ptla9aC78xFEw8xq/lUQ9BVfYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kNTEyNTY2YS0yZDU0LTQ3NGEtYTFiMC05M2M3 NGQ0ZjdlNDUuY2VyMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUMAwDBAOn9QgD BAOn9SAwDAMEAaf1NgMEAqf1ODAMAwQBp/U+AwQEp/VAAwQDp/VYAwQCp/VoAwQA p/WLAwQFp/WgAwQAp/XzAwQAp/X1AwQAp/X3MFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADdcPJ+oaa929NoH nyA3pm1oNbWemfqrqP+oWepVXSVYeQzdk3dNA6FTZSemOGD2AVhzmf2gliKt5/tN ZYa1o68UuLPAaUCjNsiCsIrOuBh8VsgVncFOEcRpEIQrr/mE+NF77dgLUCmwIyCv i6UaI9lP+gmNi+JgiJhcKmGTLH7Z44/ZvnOikqVD86xXdUHbGxzO6e3KY3dT9GOQ XvnrMNc/7wuijWqebvBYZDb1iaDlW3KUN2xcFNiCez+/yi+T+mhPNYP1Y1SkO1l2 Ogphx26+oUIpZl7u+pMtbQKktkkuMhLVOZHbTIYwii92TvtY4Ojv1ZHS04Oqqorx gtQo9rM= -----END CERTIFICATE-----Generated at Sat Oct 25 23:09:36 2025 by rpki-client