$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/dc6b981b-3332-38fa-b76d-e398bcf36767.roa File: dc6b981b-3332-38fa-b76d-e398bcf36767.roa (raw, json) Hash identifier: sTUWpARJeiKK2tzHtCVZuP6SBLQtYlRorp2UuGc2wlk= Subject key identifier: 98:8A:2A:50:C5:96:A2:55:1F:FC:FC:AD:EA:93:BE:E8:FD:3A:58:D9 Certificate issuer: /CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176 Certificate serial: 010D0C9F4328584B4E771338772F8DE9DFCE9440 Authority key identifier: 6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/dc6b981b-3332-38fa-b76d-e398bcf36767.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 20473 IP address blocks: 67.159.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:13:38:77:2f:8d:e9:df:ce:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=6d3ef3da-59b4-4c71-8d1b-d940d0fb8fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6d:66:c9:12:f5:54:81:0c:44:61:2f:70:f5: 44:0c:a1:86:ff:dd:c0:ee:0c:15:19:62:c6:1b:df: f7:15:fd:47:a0:a4:15:fa:d6:e2:08:92:f6:69:d5: 6a:21:a7:49:d0:c6:7f:7a:dc:b5:3f:bf:19:08:5d: 21:ac:26:05:bf:0e:ab:fa:32:28:0c:0e:1d:21:95: f2:26:72:1f:a8:44:ef:74:d7:8b:02:6b:3a:8e:2d: 42:53:82:a6:84:b2:75:ac:9f:77:1f:f5:13:9c:37: 1d:0c:a6:f3:8b:bd:3e:25:98:a5:01:8d:81:e0:47: f2:24:98:6e:f5:73:f1:42:bf:97:e0:28:d2:a8:06: 9c:77:b0:03:d2:d5:03:dd:cd:fe:d8:39:4e:72:cb: 17:05:14:7c:84:bc:5f:4a:99:25:49:75:00:33:aa: cf:ec:6e:fe:11:40:0e:2d:45:28:c7:60:d2:37:b8: fc:f3:bd:b9:f2:40:62:71:29:a3:08:f8:96:3f:d8: f4:fe:77:60:9f:ba:a6:04:d5:42:cc:c5:a2:48:91: 46:e7:cd:ff:32:d2:b0:5e:02:e9:55:c9:98:90:59: d0:39:31:74:ce:01:4c:10:d2:13:88:b7:85:5d:d7: 37:81:0a:81:b3:f2:ff:25:c6:c9:1b:ef:4d:07:f3: 58:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8A:2A:50:C5:96:A2:55:1F:FC:FC:AD:EA:93:BE:E8:FD:3A:58:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/dc6b981b-3332-38fa-b76d-e398bcf36767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl X509v3 Authority Key Identifier: keyid:6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer sbgp-ipAddrBlock: critical IPv4: 67.159.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:7c:75:3b:7d:31:ab:27:0a:03:9d:a1:a0:ec:42:38:f3:07: f9:96:28:47:88:ca:28:82:4f:67:84:04:32:4a:41:c5:ea:d7: 61:36:e2:58:45:f5:47:b1:f7:5e:a7:fc:38:98:3e:1b:42:f2: 1a:e8:37:eb:5f:c7:fa:3a:43:c2:d7:07:c9:75:d1:c7:1e:f5: b1:21:ef:24:7b:a4:8f:14:b9:e7:28:ce:01:01:19:a6:69:3e: 15:ad:b5:ca:6c:43:2f:e5:94:9c:8a:11:88:9c:c4:68:a0:3e: 6a:d6:58:40:4f:eb:02:74:fb:be:15:ea:fb:e9:9c:b2:17:6f: d5:5a:a5:6c:66:c6:83:24:3a:ae:e9:c0:6b:c3:23:fc:e4:71: de:fb:2e:51:65:7e:1d:9b:9e:66:59:75:ff:c8:72:5b:04:2d: f8:b6:96:ae:93:03:11:d8:f5:26:68:93:b6:88:d4:25:78:90: de:64:01:31:11:8f:03:61:4e:86:52:3c:6b:a4:e7:55:8f:82: 47:0a:2d:ef:6b:54:a7:47:4b:da:28:26:19:8e:cf:e7:c6:c9: bc:ca:27:fa:f2:a5:e4:0d:1f:2d:23:61:38:73:49:26:4b:7c: e6:2d:20:49:5d:96:49:ea:ec:6f:6c:16:10:6d:dc:25:89:9e: 81:53:04:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxM4dy+N6d/OlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzJmM2FmYjEtMmJmNC00NzE2LTkwM2ItMjlkZmExZTg4 MTc2MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NmQzZWYzZGEtNTliNC00YzcxLThkMWItZDk0MGQwZmI4ZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG1myRL1VIEMRGEvcPVEDKGG/93A7gwVGWLG G9/3Ff1HoKQV+tbiCJL2adVqIadJ0MZ/ety1P78ZCF0hrCYFvw6r+jIoDA4dIZXy JnIfqETvdNeLAms6ji1CU4KmhLJ1rJ93H/UTnDcdDKbzi70+JZilAY2B4EfyJJhu 9XPxQr+X4CjSqAacd7AD0tUD3c3+2DlOcssXBRR8hLxfSpklSXUAM6rP7G7+EUAO LUUox2DSN7j887258kBicSmjCPiWP9j0/ndgn7qmBNVCzMWiSJFG583/MtKwXgLp VcmYkFnQOTF0zgFMENITiLeFXdc3gQqBs/L/JcbJG+9NB/NYiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiKKlDFlqJVH/z8reqTvuj9OljZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jMmYz YWZiMS0yYmY0LTQ3MTYtOTAzYi0yOWRmYTFlODgxNzYvZGM2Yjk4MWItMzMzMi0z OGZhLWI3NmQtZTM5OGJjZjM2NzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzJmM2FmYjEtMmJmNC00NzE2LTkw M2ItMjlkZmExZTg4MTc2L2MyZjNhZmIxLTJiZjQtNDcxNi05MDNiLTI5ZGZhMWU4 ODE3Ni5jcmwwHwYDVR0jBBgwFoAUa1BZ6Q1zBxnfTw0LwaPk2KTTppMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jMmYzYWZiMS0yYmY0LTQ3MTYtOTAzYi0yOWRm YTFlODgxNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5/LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKx8dTt9MasnCgOdoaDsQjjzB/mWKEeIyiiCT2eEBDJKQcXq12E24lhF 9Uex916n/DiYPhtC8hroN+tfx/o6Q8LXB8l10cce9bEh7yR7pI8UuecozgEBGaZp PhWttcpsQy/llJyKEYicxGigPmrWWEBP6wJ0+74V6vvpnLIXb9VapWxmxoMkOq7p wGvDI/zkcd77LlFlfh2bnmZZdf/IclsELfi2lq6TAxHY9SZok7aI1CV4kN5kATER jwNhToZSPGuk51WPgkcKLe9rVKdHS9ooJhmOz+fGybzKJ/rypeQNHy0jYThzSSZL fOYtIEldlknq7G9sFhBt3CWJnoFTBEQ= -----END CERTIFICATE-----Generated at Mon Oct 13 22:16:04 2025 by rpki-client