$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ddac8040-0755-3a68-96e5-fdd3e8469a34.roa File: ddac8040-0755-3a68-96e5-fdd3e8469a34.roa (raw, json) Hash identifier: xaYWO0/FsMlJiYD2Ik+b6O2HTMIWhKv4xnKDCocyGBI= Subject key identifier: 71:F7:9A:C1:EE:E3:76:75:EF:B5:F9:0F:37:E0:A1:F5:27:C1:78:84 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B25FC3B9F2866AF7A4BCB5E00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ddac8040-0755-3a68-96e5-fdd3e8469a34.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 68.182.190.0/24 maxlen: 24 68.182.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:3b:9f:28:66:af:7a:4b:cb:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=d758ac01-edf2-4ebc-b105-3ab73404a5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:57:86:56:d7:8b:69:6b:91:57:df:70:b8:38: ea:39:17:70:e4:ca:66:82:20:44:d2:58:35:c1:ed: d5:bc:31:ae:80:c4:0f:4a:48:a3:33:e0:3c:8c:ff: b6:c4:02:7f:de:8c:ec:a7:b7:a4:4a:a8:1b:31:94: cc:56:66:26:2d:6f:1a:a8:3c:6e:02:00:fc:b7:e9: 32:69:34:cb:33:3a:a7:8c:b3:31:60:68:91:c1:3d: ad:8d:67:7c:e7:a1:a8:28:d1:2d:1e:f6:e4:c5:67: 97:99:1d:f0:85:e2:19:ec:39:8e:26:79:3e:0d:b1: ae:51:c4:99:5a:5e:c8:ca:24:7f:06:28:a2:1b:ce: 35:e5:f5:cc:58:74:fa:28:ca:50:8e:62:ac:23:fb: 29:e8:45:b4:77:2c:59:f4:93:4d:be:28:76:4d:c4: df:00:c3:4c:01:a9:99:34:73:ee:23:03:34:3a:f5: 63:7f:94:84:cb:80:bc:d3:cd:d6:11:d8:9c:c2:a5: d7:02:78:85:38:08:81:29:07:63:3e:0c:b0:ba:d1: 36:d0:0f:2a:0d:d1:e7:ff:9e:3d:76:c1:3b:1b:95: 87:ce:c9:c0:28:a5:82:50:5b:ca:56:bf:8d:bd:97: b2:7e:bc:b5:78:fb:12:57:5a:0f:22:1d:b1:fd:c0: 8d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F7:9A:C1:EE:E3:76:75:EF:B5:F9:0F:37:E0:A1:F5:27:C1:78:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ddac8040-0755-3a68-96e5-fdd3e8469a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:1d:36:2b:e6:35:c4:d1:0b:26:fe:36:1d:a8:dc:7b:4b:24: f9:95:a7:2b:59:47:6b:70:49:9a:7a:c0:01:e9:3e:d2:56:2e: 61:23:7c:4d:69:e7:f9:b1:6a:a0:84:83:9c:4e:91:4c:bf:29: 4a:c8:17:42:36:0d:a4:9b:45:06:df:e8:7c:41:76:56:4c:9f: 6a:12:cd:77:64:01:84:7e:cc:d6:74:9a:16:d7:18:2a:76:a9: 4d:71:7f:45:f7:1b:23:16:2c:b3:d3:bc:9a:9b:dc:90:b6:86: b0:10:d2:57:99:32:34:1e:a5:9e:27:97:2c:e1:11:7a:09:07: 24:80:12:82:54:76:d2:ee:71:28:dd:b4:fd:0d:ef:43:dc:6f: e1:e7:e1:37:a0:72:e8:6e:db:3a:88:d3:61:59:6d:3f:78:15: 2c:27:b3:23:b6:c3:17:60:c4:4b:49:1a:29:46:70:88:3a:ab: 36:7d:94:6f:f8:3e:76:bd:aa:4f:9e:eb:8b:6f:16:9d:c4:8e: a6:f0:c6:74:0a:d0:76:85:4b:23:1f:20:fb:e0:fd:df:2a:81: 7d:2e:6f:54:85:ea:1b:76:b3:cd:51:d5:28:79:b6:0d:5b:14: ad:da:c6:fa:d0:d1:70:90:77:ec:40:0e:16:0e:76:b6:ca:f4: af:54:d3:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DufKGavekvLXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZDc1OGFjMDEtZWRmMi00ZWJjLWIxMDUtM2FiNzM0MDRhNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFeGVteLaWuRV99wuDjqORdw5MpmgiBE0lg1 we3VvDGugMQPSkijM+A8jP+2xAJ/3ozsp7ekSqgbMZTMVmYmLW8aqDxuAgD8t+ky aTTLMzqnjLMxYGiRwT2tjWd856GoKNEtHvbkxWeXmR3wheIZ7DmOJnk+DbGuUcSZ Wl7IyiR/BiiiG8415fXMWHT6KMpQjmKsI/sp6EW0dyxZ9JNNvih2TcTfAMNMAamZ NHPuIwM0OvVjf5SEy4C8083WEdicwqXXAniFOAiBKQdjPgywutE20A8qDdHn/549 dsE7G5WHzsnAKKWCUFvKVr+NvZeyfry1ePsSV1oPIh2x/cCNwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHH3msHu43Z177X5DzfgofUnwXiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGRhYzgwNDAtMDc1NS0z YTY4LTk2ZTUtZmRkM2U4NDY5YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRLa+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4dNivmNcTRCyb+Nh2o3HtLJPmVpytZR2twSZp6wAHpPtJWLmEjfE1p 5/mxaqCEg5xOkUy/KUrIF0I2DaSbRQbf6HxBdlZMn2oSzXdkAYR+zNZ0mhbXGCp2 qU1xf0X3GyMWLLPTvJqb3JC2hrAQ0leZMjQepZ4nlyzhEXoJBySAEoJUdtLucSjd tP0N70Pcb+Hn4Tegcuhu2zqI02FZbT94FSwnsyO2wxdgxEtJGilGcIg6qzZ9lG/4 Pna9qk+e64tvFp3EjqbwxnQK0HaFSyMfIPvg/d8qgX0ub1SF6ht2s81R1Sh5tg1b FK3axvrQ0XCQd+xADhYOdrbK9K9U06o= -----END CERTIFICATE-----Generated at Fri Oct 24 08:22:14 2025 by rpki-client