$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1f488ac3-ad33-356c-988c-89da07e21928.roa File: 1f488ac3-ad33-356c-988c-89da07e21928.roa (raw, json) Hash identifier: sHtIQdDEjmwoJwjw+K3ZDAVJYG4aZDYD6DShbSTAgGk= Subject key identifier: AD:A3:72:2C:E4:16:CF:25:1C:1E:B4:F7:85:67:31:8A:51:04:E0:CB Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584B38219C4CA828BC495E74F200 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1f488ac3-ad33-356c-988c-89da07e21928.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 6621 IP address blocks: 67.142.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:9c:4c:a8:28:bc:49:5e:74:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=6dc14023-07bc-45bb-802c-196fd6d2bd55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:38:7a:a0:8e:94:bf:31:50:d8:84:f2:d7:31: f2:c0:46:0f:54:5d:7e:a3:ec:41:e3:77:e4:5a:7f: b8:57:b5:7b:4d:d3:4c:bb:53:23:e1:81:7e:b9:58: 41:81:bd:c7:5c:0c:f6:94:39:84:8f:17:bd:ef:e4: b4:ff:27:80:c2:bf:5f:e3:1e:33:be:db:da:32:11: e9:9b:52:ec:cc:6a:a0:14:44:c3:5b:4c:a6:20:b4: 11:ba:a4:f6:a5:91:de:00:4d:3e:20:b5:f8:80:50: 47:f8:01:3f:8f:85:40:13:e6:a8:5d:9e:40:65:ff: 49:73:08:e9:4b:3f:45:a1:35:fb:ff:c6:da:6a:d8: 66:86:a4:8f:c0:12:b5:54:07:12:32:e8:1a:60:48: 2c:fa:6a:cc:64:69:23:18:62:93:b6:6e:08:29:10: eb:2b:88:b1:39:92:5b:66:fa:fa:53:36:6a:b5:f3: f2:b1:f9:8f:17:6b:d7:41:46:79:64:d1:24:e0:3a: e8:89:3c:ab:ea:f2:45:cd:54:ed:24:02:03:3d:5d: 2f:7f:d2:95:16:f0:06:e6:7a:64:f1:7d:c9:76:e1: ad:39:35:20:fc:31:20:ef:cf:bc:80:70:a7:00:0c: 0d:25:65:5e:53:fd:64:44:8c:bd:0d:ef:a3:7c:cd: 46:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A3:72:2C:E4:16:CF:25:1C:1E:B4:F7:85:67:31:8A:51:04:E0:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1f488ac3-ad33-356c-988c-89da07e21928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.142.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:53:c7:d2:3b:54:2a:4f:50:d2:20:82:82:5a:b4:c3:03:5d: 5e:ed:77:1c:b9:a1:fe:4e:ab:50:8a:2b:19:40:20:c8:7b:66: 4c:49:15:4e:95:02:87:a3:59:60:04:26:15:84:b0:e9:34:64: d7:87:03:6f:a0:5d:c8:35:26:a7:c5:c7:c6:7b:dd:0d:4e:ba: 83:c9:3e:15:0f:2a:10:5d:93:3d:11:3c:65:3d:28:73:eb:6b: 94:33:b5:56:cc:09:73:1f:90:36:39:7c:5b:de:5f:66:42:ab: 67:9c:a2:ee:a7:73:8a:f2:2b:48:cd:d3:2e:c1:d3:a0:c0:1a: 64:93:d2:90:13:4d:6c:18:d5:23:46:8a:c7:08:63:c4:0a:02: 66:6f:19:6f:50:be:de:98:07:74:92:65:85:59:33:35:42:bb: df:7f:ca:8c:f2:dc:0d:4e:e5:16:8f:2a:37:e4:39:c1:26:37: 7d:a2:cb:ec:60:53:d8:80:b7:62:fc:4b:97:7a:23:dc:5b:33: 8c:69:f0:24:99:ea:8d:ec:5a:80:e0:39:2a:1c:33:36:91:07: 33:b0:be:af:5d:5d:6c:32:d3:b9:68:b5:1f:27:21:00:d4:f6: fe:15:f1:3e:d4:39:d8:59:4c:ec:de:1a:a3:54:b7:43:bf:89: 64:4c:ab:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZxMqCi8SV508gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk NmRjMTQwMjMtMDdiYy00NWJiLTgwMmMtMTk2ZmQ2ZDJiZDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Th6oI6UvzFQ2ITy1zHywEYPVF1+o+xB43fk Wn+4V7V7TdNMu1Mj4YF+uVhBgb3HXAz2lDmEjxe97+S0/yeAwr9f4x4zvtvaMhHp m1LszGqgFETDW0ymILQRuqT2pZHeAE0+ILX4gFBH+AE/j4VAE+aoXZ5AZf9Jcwjp Sz9FoTX7/8baathmhqSPwBK1VAcSMugaYEgs+mrMZGkjGGKTtm4IKRDrK4ixOZJb Zvr6UzZqtfPysfmPF2vXQUZ5ZNEk4DroiTyr6vJFzVTtJAIDPV0vf9KVFvAG5npk 8X3JduGtOTUg/DEg78+8gHCnAAwNJWVeU/1kRIy9De+jfM1G0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2jcizkFs8lHB6094VnMYpRBODLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMWY0ODhhYzMtYWQzMy0z NTZjLTk4OGMtODlkYTA3ZTIxOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ467MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFTx9I7VCpPUNIggoJatMMDXV7tdxy5of5Oq1CKKxlAIMh7ZkxJFU6V AoejWWAEJhWEsOk0ZNeHA2+gXcg1JqfFx8Z73Q1OuoPJPhUPKhBdkz0RPGU9KHPr a5QztVbMCXMfkDY5fFveX2ZCq2ecou6nc4ryK0jN0y7B06DAGmST0pATTWwY1SNG iscIY8QKAmZvGW9Qvt6YB3SSZYVZMzVCu99/yozy3A1O5RaPKjfkOcEmN32iy+xg U9iAt2L8S5d6I9xbM4xp8CSZ6o3sWoDgOSocMzaRBzOwvq9dXWwy07lotR8nIQDU 9v4V8T7UOdhZTOzeGqNUt0O/iWRMq9o= -----END CERTIFICATE-----Generated at Wed Nov 5 01:39:53 2025 by rpki-client