$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/971c8edd-06bb-333f-94f5-8b5f3db41453.roa File: 971c8edd-06bb-333f-94f5-8b5f3db41453.roa (raw, json) Hash identifier: R7LEdoXcgiglS587ib7eqgEjxD2gWFKTk81CM25gIUY= Subject key identifier: 1A:35:74:1E:EF:AB:38:43:A1:AF:B9:81:72:72:E0:A6:F1:89:B8:1A Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584B76F228AF44E5553121DA1180 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/971c8edd-06bb-333f-94f5-8b5f3db41453.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 63062 IP address blocks: 67.44.32.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:28:af:44:e5:55:31:21:da:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=52507b34-93da-4fab-9475-43156afab4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:99:e1:f2:b2:6b:1c:64:d4:e2:b0:24:b3:7f: 40:66:94:5e:ec:8a:99:d9:9f:6a:e0:6d:9b:7a:fa: 59:3e:35:57:0b:cd:a7:86:0d:b6:81:5c:1f:69:95: ef:e8:1d:d2:78:e6:11:68:06:56:f5:36:0f:16:21: a7:6c:4b:82:7b:e6:90:04:08:c4:b5:fc:9c:a4:d9: d4:be:61:21:54:16:a7:ba:cf:09:93:a8:7b:e5:e3: d9:9a:d6:c4:b3:8f:58:f8:2f:78:bf:88:05:1d:be: ea:73:59:d6:4d:9e:00:aa:cf:43:49:02:64:ec:bf: a3:bd:fd:2b:99:66:fa:ec:25:d8:fb:50:dc:a6:ef: 3c:d4:f4:82:ad:1e:cf:59:3c:48:6f:0c:68:e9:16: c9:54:03:66:12:a4:15:af:b8:79:63:67:cb:db:7d: cb:f1:70:3e:c8:f0:32:53:ad:67:93:a5:ee:0a:ce: a4:58:b1:da:f1:17:ec:9a:07:ef:a8:82:fc:01:81: 12:00:55:ca:fa:40:34:fa:ee:8d:cf:36:e9:41:4a: 90:4a:5d:79:00:78:68:8a:5c:00:20:a6:ca:71:a6: b1:67:a8:e0:07:ae:b2:a6:dd:19:ae:0e:11:e5:47: 81:c3:f1:fe:aa:09:fa:06:e5:7a:43:89:1f:62:c4: 06:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:35:74:1E:EF:AB:38:43:A1:AF:B9:81:72:72:E0:A6:F1:89:B8:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/971c8edd-06bb-333f-94f5-8b5f3db41453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2d:69:93:d7:42:3a:8d:86:b2:1d:fe:4c:cf:79:25:f5:46: 64:35:97:b0:eb:9a:56:52:3e:cc:6a:8f:f3:39:35:19:8d:48: 62:38:48:e3:d3:ab:f7:41:53:b5:11:a4:bc:04:aa:0f:95:15: db:82:c5:0e:cb:ff:c4:ab:9c:55:2b:b5:3f:a3:77:c4:3b:71: cf:06:59:55:90:5a:94:cc:81:fe:f5:32:ab:fa:01:53:74:b7: a8:25:d1:60:19:6a:6f:fe:29:92:81:40:40:78:ca:94:c0:88: 2f:89:f3:fd:8b:a9:a1:31:7b:1b:79:c0:ae:0b:1d:9d:35:90: 64:2a:11:ec:e4:38:49:7e:25:88:02:45:ea:6b:1c:e5:44:d3: 95:2a:c4:03:69:30:d5:86:80:09:ed:03:06:96:58:aa:46:af: 94:8e:59:31:26:fa:ca:01:a8:70:b2:6a:84:b1:62:92:eb:39: 38:52:93:b5:2c:c0:a5:e1:d3:50:33:b0:34:d8:b8:90:74:05: 17:60:bb:31:27:94:c0:53:39:af:37:67:3f:43:c3:9f:d2:81: e3:f3:0d:7c:77:3f:d4:50:18:6e:8e:13:c2:2c:62:88:b9:e0: 40:7c:f6:f5:ec:43:f7:cf:fe:94:b1:ce:3c:41:20:3a:41:bd: 4d:07:d6:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iivROVVMSHaEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTI1MDdiMzQtOTNkYS00ZmFiLTk0NzUtNDMxNTZhZmFiNGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpnh8rJrHGTU4rAks39AZpRe7IqZ2Z9q4G2b evpZPjVXC82nhg22gVwfaZXv6B3SeOYRaAZW9TYPFiGnbEuCe+aQBAjEtfycpNnU vmEhVBanus8Jk6h75ePZmtbEs49Y+C94v4gFHb7qc1nWTZ4Aqs9DSQJk7L+jvf0r mWb67CXY+1Dcpu881PSCrR7PWTxIbwxo6RbJVANmEqQVr7h5Y2fL233L8XA+yPAy U61nk6XuCs6kWLHa8RfsmgfvqIL8AYESAFXK+kA0+u6NzzbpQUqQSl15AHhoilwA IKbKcaaxZ6jgB66ypt0Zrg4R5UeBw/H+qgn6BuV6Q4kfYsQGjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo1dB7vqzhDoa+5gXJy4KbxibgaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvOTcxYzhlZGQtMDZiYi0z MzNmLTk0ZjUtOGI1ZjNkYjQxNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAktaZPXQjqNhrId/kzPeSX1RmQ1l7DrmlZSPsxqj/M5NRmNSGI4SOPT q/dBU7URpLwEqg+VFduCxQ7L/8SrnFUrtT+jd8Q7cc8GWVWQWpTMgf71Mqv6AVN0 t6gl0WAZam/+KZKBQEB4ypTAiC+J8/2LqaExext5wK4LHZ01kGQqEezkOEl+JYgC ReprHOVE05UqxANpMNWGgAntAwaWWKpGr5SOWTEm+soBqHCyaoSxYpLrOThSk7Us wKXh01AzsDTYuJB0BRdguzEnlMBTOa83Zz9Dw5/SgePzDXx3P9RQGG6OE8IsYoi5 4EB89vXsQ/fP/pSxzjxBIDpBvU0H1nI= -----END CERTIFICATE-----Generated at Wed Nov 5 00:05:57 2025 by rpki-client