$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d5ba652b-3b82-3586-9e7f-dc1038b2e572.roa File: d5ba652b-3b82-3586-9e7f-dc1038b2e572.roa (raw, json) Hash identifier: wcT2X36S/7xyjhOROqCsUFWyYTV77a5ycuT8bLcJI/o= Subject key identifier: 74:D2:D8:0D:15:45:3A:1F:9D:81:EE:86:53:B7:FE:32:65:B1:1E:69 Certificate issuer: /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6 Certificate serial: 010D0C9F4328584B9E07C8A3A9E20F7BC7ED6FE0 Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d5ba652b-3b82-3586-9e7f-dc1038b2e572.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 22504 IP address blocks: 67.58.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c8:a3:a9:e2:0f:7b:c7:ed:6f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=36d576dd-bd97-45a7-bed1-3dc49f9342b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e7:c1:90:ba:fe:6f:e8:4d:48:aa:12:06:30: 5b:39:5a:1b:6a:96:70:38:0d:67:02:35:b6:73:9a: 55:86:00:7c:38:fb:e6:8b:c9:8e:c7:a9:48:ea:bb: 66:e8:29:d6:b6:7b:d0:f2:38:09:7b:56:65:e0:66: 6a:7b:71:9e:fe:e2:04:83:b7:80:db:37:e1:63:50: c4:98:30:1c:f8:f8:6e:69:9f:79:e7:f1:ab:9d:cd: 00:12:81:3a:af:d5:7d:82:a2:c5:a5:5b:2e:e0:ec: e8:49:ca:7d:b0:1c:7b:3b:93:50:17:59:59:89:4f: 33:a1:68:ec:b9:14:ab:34:5d:7c:2f:7e:27:81:31: c8:59:1d:bb:b8:1c:da:56:85:10:0d:ed:92:d0:1e: 14:c8:4d:0e:5f:6a:75:5a:36:58:6a:d8:5e:ee:19: d7:09:75:72:a9:24:50:00:bd:c1:13:19:56:e6:f1: 29:ab:57:02:2f:9b:02:47:8d:90:08:6b:a9:7b:79: 81:5e:fa:a2:65:bf:b6:cf:9f:7d:47:a6:19:11:92: 7e:dc:d1:64:3e:9a:04:08:e2:42:d3:06:70:5e:bb: ce:5e:d6:b3:d0:10:61:f6:12:5f:40:d5:50:4e:1f: 57:26:ee:8f:26:10:6c:23:35:f0:7b:50:62:16:5f: 67:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D2:D8:0D:15:45:3A:1F:9D:81:EE:86:53:B7:FE:32:65:B1:1E:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d5ba652b-3b82-3586-9e7f-dc1038b2e572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl X509v3 Authority Key Identifier: keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer sbgp-ipAddrBlock: critical IPv4: 67.58.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:47:70:13:30:75:1d:50:c8:8d:c9:60:69:f7:da:af:74:11: ca:81:87:ac:85:3b:d3:b7:91:b0:29:d1:6e:c6:45:e4:e6:75: 50:7f:6e:e5:01:6c:55:22:77:c2:f8:57:09:5d:a9:78:bf:d1: 8d:ae:48:70:4b:f3:89:97:61:ee:ca:2d:13:05:6e:f3:7b:52: d5:4a:85:7b:a4:30:36:d1:e8:88:37:9d:8e:72:c5:01:3e:d4: f3:92:9a:63:5a:68:50:ac:84:26:d7:f1:56:41:2b:62:e8:49: 07:34:1c:5b:ff:a2:f3:de:8d:85:c8:8b:32:e7:16:ed:1d:dd: d7:36:58:4d:c0:d7:fb:9e:57:e1:b2:1e:07:f3:e4:8d:20:70: c8:03:d0:e0:46:10:e4:a1:ab:28:66:31:a6:6b:4a:10:66:1d: 7d:22:fc:f6:b6:43:68:39:a4:5b:21:cf:86:7a:87:35:28:9d: 3e:98:f4:a6:75:09:c9:09:d8:c6:61:e9:42:21:96:f5:bc:58: 41:e4:0d:62:0c:b0:35:e0:64:d0:f6:82:fd:1f:40:e7:c4:28: f6:2e:e3:4d:42:92:f3:52:b2:aa:71:ac:a7:73:3b:9b:dd:49: 21:38:09:6f:86:38:59:55:f1:1c:6a:49:0f:5a:7a:16:a5:28: 19:e8:75:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8ijqeIPe8ftb+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi MGY2MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MzZkNTc2ZGQtYmQ5Ny00NWE3LWJlZDEtM2RjNDlmOTM0MmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+fBkLr+b+hNSKoSBjBbOVobapZwOA1nAjW2 c5pVhgB8OPvmi8mOx6lI6rtm6CnWtnvQ8jgJe1Zl4GZqe3Ge/uIEg7eA2zfhY1DE mDAc+PhuaZ955/Grnc0AEoE6r9V9gqLFpVsu4OzoScp9sBx7O5NQF1lZiU8zoWjs uRSrNF18L34ngTHIWR27uBzaVoUQDe2S0B4UyE0OX2p1WjZYathe7hnXCXVyqSRQ AL3BExlW5vEpq1cCL5sCR42QCGupe3mBXvqiZb+2z599R6YZEZJ+3NFkPpoECOJC 0wZwXrvOXtaz0BBh9hJfQNVQTh9XJu6PJhBsIzXwe1BiFl9nFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTS2A0VRTofnYHuhlO3/jJlsR5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvZDViYTY1MmItM2I4Mi0z NTg2LTllN2YtZGMxMDM4YjJlNTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2 OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3 YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzpVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARHcBMwdR1QyI3JYGn32q90EcqBh6yFO9O3kbAp0W7GReTmdVB/buUB bFUid8L4VwldqXi/0Y2uSHBL84mXYe7KLRMFbvN7UtVKhXukMDbR6Ig3nY5yxQE+ 1POSmmNaaFCshCbX8VZBK2LoSQc0HFv/ovPejYXIizLnFu0d3dc2WE3A1/ueV+Gy Hgfz5I0gcMgD0OBGEOShqyhmMaZrShBmHX0i/Pa2Q2g5pFshz4Z6hzUonT6Y9KZ1 CckJ2MZh6UIhlvW8WEHkDWIMsDXgZND2gv0fQOfEKPYu401CkvNSsqpxrKdzO5vd SSE4CW+GOFlV8RxqSQ9aehalKBnodXs= -----END CERTIFICATE-----Generated at Wed Nov 5 11:50:07 2025 by rpki-client