$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/68d1a941-51ad-3750-8235-b215425c89f4.roa File: 68d1a941-51ad-3750-8235-b215425c89f4.roa (raw, json) Hash identifier: Te5Tc3Cmu9PttCVvd0+8kHwg8hT/2OBskf454hTFmpk= Subject key identifier: CC:37:7F:33:BF:7B:66:D6:1A:0F:09:7B:C5:6F:FC:AD:73:FE:8B:E4 Certificate issuer: /CN=d512566a-2d54-474a-a1b0-93c74d4f7e45 Certificate serial: 010D0C9F4328584BB19263A6943961B88503AAC0 Authority key identifier: 1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/68d1a941-51ad-3750-8235-b215425c89f4.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 19905 IP address blocks: 167.245.8.0/22 maxlen: 22 167.245.12.0/22 maxlen: 22 167.245.16.0/22 maxlen: 22 167.245.20.0/22 maxlen: 22 167.245.24.0/22 maxlen: 22 167.245.28.0/22 maxlen: 22 167.245.32.0/22 maxlen: 22 167.245.36.0/22 maxlen: 22 167.245.54.0/23 maxlen: 23 167.245.56.0/22 maxlen: 22 167.245.62.0/23 maxlen: 23 167.245.64.0/20 maxlen: 20 167.245.88.0/22 maxlen: 22 167.245.92.0/22 maxlen: 22 167.245.104.0/22 maxlen: 22 167.245.139.0/24 maxlen: 24 167.245.160.0/19 maxlen: 19 167.245.243.0/24 maxlen: 24 167.245.245.0/24 maxlen: 24 167.245.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:63:a6:94:39:61:b8:85:03:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d512566a-2d54-474a-a1b0-93c74d4f7e45 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=12d0a568-76fe-401b-8ba1-b81baf57c70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c3:93:8b:c7:f8:c6:c3:d9:3d:51:42:38:c8: 41:d2:8c:1a:26:49:6e:0e:71:57:b6:7f:e9:84:ab: 72:86:06:ac:be:1c:8c:48:6e:43:df:b0:b9:1f:a8: 86:d3:77:c1:97:8d:27:a0:06:d3:dd:ec:0b:9f:c3: 83:18:a4:72:38:c7:6e:83:06:eb:81:c6:6c:73:6d: 12:86:4c:1d:f3:5f:e3:bc:5c:05:e8:b8:e1:a9:ed: e6:7d:1c:32:68:fb:b7:a6:4e:61:31:9d:4a:40:16: 1c:1d:18:eb:39:f9:72:82:72:f0:d3:50:09:18:a4: 4d:3a:f1:d2:04:10:a3:03:58:83:60:93:d1:77:71: 93:7a:3e:43:fd:91:92:9e:7d:77:02:55:28:7c:ed: da:e8:a8:78:82:6e:02:d3:d6:c5:4c:35:4b:32:a5: 74:47:08:3d:62:80:23:ee:b8:35:c5:cc:32:c9:95: 13:dc:68:4d:d8:81:49:57:1e:e0:93:dc:4b:d8:65: 25:83:c4:ac:28:4a:9c:86:79:c0:21:c5:2b:6f:73: 5f:a5:d2:7d:04:a4:0d:b5:6d:67:8e:47:58:1f:f8: e1:41:0f:2c:90:fc:43:f1:5d:ae:bd:10:44:70:0e: 98:db:e5:35:ab:ea:b4:c6:52:bd:e8:dd:b8:cc:e3: 6c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:37:7F:33:BF:7B:66:D6:1A:0F:09:7B:C5:6F:FC:AD:73:FE:8B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/68d1a941-51ad-3750-8235-b215425c89f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl X509v3 Authority Key Identifier: keyid:1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer sbgp-ipAddrBlock: critical IPv4: 167.245.8.0-167.245.39.255 167.245.54.0-167.245.59.255 167.245.62.0-167.245.79.255 167.245.88.0/21 167.245.104.0/22 167.245.139.0/24 167.245.160.0/19 167.245.243.0/24 167.245.245.0/24 167.245.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:89:1f:09:ce:4a:c3:2b:b7:b2:9f:e3:93:1a:a5:29:c9:81: 3a:67:fb:6d:9b:44:2d:71:26:3e:f1:44:60:d7:fe:74:f7:1b: b5:e5:67:13:17:6a:9f:31:13:9b:da:e8:fe:2c:c2:d2:27:cc: a9:4b:11:ef:47:89:e6:67:0f:0f:ec:ab:db:6f:6f:fb:ec:1e: eb:52:8b:14:2f:f5:01:4f:01:81:c1:cd:fa:1f:b0:4e:58:eb: 57:3e:1a:da:8f:2e:24:d7:5c:0c:70:c4:e7:9b:1c:89:ce:36: 46:3e:c0:40:ce:e1:07:3e:51:6a:53:0e:12:73:53:44:84:27: b3:2d:2f:a8:22:d7:4c:69:1b:1c:b9:4d:65:5e:5f:99:05:39: 20:2f:5e:b9:36:71:ab:92:41:3c:2d:7c:91:08:cc:bf:90:a9: d2:c8:c5:1e:18:61:b5:8d:92:a3:03:a0:42:0c:ed:d4:dc:0f: f5:a4:a3:03:01:8d:74:88:36:6c:53:17:73:3e:bf:c7:88:84: 4e:1a:08:c4:a5:3a:e3:30:46:cb:4f:f2:db:bf:d8:f5:25:90: 65:2f:33:cd:0f:fa:9e:6e:d5:8c:36:31:75:b3:a9:8c:3d:85: cf:17:c8:62:48:2e:d1:ef:31:1d:a3:b9:81:8e:a6:91:4c:1b: f4:8d:4a:5d -----BEGIN CERTIFICATE----- MIIGkTCCBXmgAwIBAgIUAQ0Mn0MoWEuxkmOmlDlhuIUDqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUxMjU2NmEtMmQ1NC00NzRhLWExYjAtOTNjNzRkNGY3 ZTQ1MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MTJkMGE1NjgtNzZmZS00MDFiLThiYTEtYjgxYmFmNTdjNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MOTi8f4xsPZPVFCOMhB0owaJkluDnFXtn/p hKtyhgasvhyMSG5D37C5H6iG03fBl40noAbT3ewLn8ODGKRyOMdugwbrgcZsc20S hkwd81/jvFwF6Ljhqe3mfRwyaPu3pk5hMZ1KQBYcHRjrOflygnLw01AJGKRNOvHS BBCjA1iDYJPRd3GTej5D/ZGSnn13AlUofO3a6Kh4gm4C09bFTDVLMqV0Rwg9YoAj 7rg1xcwyyZUT3GhN2IFJVx7gk9xL2GUlg8SsKEqchnnAIcUrb3NfpdJ9BKQNtW1n jkdYH/jhQQ8skPxD8V2uvRBEcA6Y2+U1q+q0xlK96N24zONskQIDAQABo4IDozCC A58wHQYDVR0OBBYEFMw3fzO/e2bWGg8Je8Vv/K1z/ovkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kNTEy NTY2YS0yZDU0LTQ3NGEtYTFiMC05M2M3NGQ0ZjdlNDUvNjhkMWE5NDEtNTFhZC0z NzUwLTgyMzUtYjIxNTQyNWM4OWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDUxMjU2NmEtMmQ1NC00NzRhLWEx YjAtOTNjNzRkNGY3ZTQ1L2Q1MTI1NjZhLTJkNTQtNDc0YS1hMWIwLTkzYzc0ZDRm N2U0NS5jcmwwHwYDVR0jBBgwFoAUH/ptla9aC78xFEw8xq/lUQ9BVfYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kNTEyNTY2YS0yZDU0LTQ3NGEtYTFiMC05M2M3 NGQ0ZjdlNDUuY2VyMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUMAwDBAOn9QgD BAOn9SAwDAMEAaf1NgMEAqf1ODAMAwQBp/U+AwQEp/VAAwQDp/VYAwQCp/VoAwQA p/WLAwQFp/WgAwQAp/XzAwQAp/X1AwQAp/X3MFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA6JHwnOSsMrt7Kf 45MapSnJgTpn+22bRC1xJj7xRGDX/nT3G7XlZxMXap8xE5va6P4swtInzKlLEe9H ieZnDw/sq9tvb/vsHutSixQv9QFPAYHBzfofsE5Y61c+GtqPLiTXXAxwxOebHInO NkY+wEDO4Qc+UWpTDhJzU0SEJ7MtL6gi10xpGxy5TWVeX5kFOSAvXrk2cauSQTwt fJEIzL+QqdLIxR4YYbWNkqMDoEIM7dTcD/WkowMBjXSINmxTF3M+v8eIhE4aCMSl OuMwRstP8tu/2PUlkGUvM80P+p5u1Yw2MXWzqYw9hc8XyGJILtHvMR2juYGOppFM G/SNSl0= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:29 2025 by rpki-client