$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/0bac6c3d-c4d0-3185-9107-292db0efe582.roa File: 0bac6c3d-c4d0-3185-9107-292db0efe582.roa (raw, json) Hash identifier: GP7/D3CjU+YdBvTxlTiM1okGkntL93/InF0JzNPOLFI= Subject key identifier: 2B:2B:A7:C1:E7:63:41:F3:19:90:DD:BA:6A:C9:1B:9D:8F:A9:78:45 Certificate issuer: /CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176 Certificate serial: 010D0C9F4328584B4E77131CD1F8D57B586A67C0 Authority key identifier: 6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/0bac6c3d-c4d0-3185-9107-292db0efe582.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 397898 IP address blocks: 67.159.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:13:1c:d1:f8:d5:7b:58:6a:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=1c510d53-65dd-4101-98bb-a74e4944f34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:e5:b0:15:79:3f:22:87:86:ec:ba:76:0f: 88:be:8f:2c:b3:5f:bb:30:85:0e:9d:5b:38:1e:39: 3b:66:b0:5f:ab:62:75:62:8a:0c:5c:e4:87:6a:87: a7:e1:e7:d1:5c:b1:70:fd:67:1e:70:e2:25:98:08: 94:65:2b:11:b3:13:2e:8c:67:fe:78:dc:02:5d:44: 19:f7:e2:4f:08:c5:89:ac:f9:76:b0:37:1c:fd:02: a4:48:4a:03:e7:ad:bb:26:84:15:21:b1:09:4c:4e: e6:82:95:27:a3:26:48:56:a4:86:79:cf:5f:c0:71: 37:6c:fa:a4:da:38:04:c8:96:1f:e2:94:6d:54:2d: f3:e6:ca:b6:6a:eb:53:f5:db:28:30:f2:2f:0c:d2: 58:c0:33:6d:b4:fc:96:76:05:77:9b:25:97:96:ef: 28:96:a9:14:3b:6d:e7:74:99:0a:a6:4c:98:1f:8c: db:ab:9c:c8:66:fc:c1:2c:14:2f:42:6f:f3:55:45: c1:78:62:90:79:51:aa:6d:3f:6e:5b:2c:8f:43:e2: c9:96:70:d3:30:13:84:7b:70:4f:12:2c:89:63:b2: bd:9b:74:da:18:a1:bf:80:02:e7:1b:75:d5:90:c9: 31:b1:15:7d:9d:42:2e:09:a8:10:0d:00:2f:fc:59: eb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2B:A7:C1:E7:63:41:F3:19:90:DD:BA:6A:C9:1B:9D:8F:A9:78:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/0bac6c3d-c4d0-3185-9107-292db0efe582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl X509v3 Authority Key Identifier: keyid:6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer sbgp-ipAddrBlock: critical IPv4: 67.159.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0e:b4:39:a6:d3:8f:5b:6d:2d:99:93:cf:71:ac:89:b2:09: 9d:ba:7f:d8:3a:64:d9:0c:d6:80:cd:e4:22:58:51:94:c0:c8: c6:08:61:65:5a:70:9f:53:58:03:4b:19:eb:9b:68:dc:05:c7: 13:90:bc:54:ef:5b:e5:de:6d:c0:7f:3e:c9:d7:2c:59:ae:a0: 2d:19:f4:60:35:1a:08:95:ce:2b:64:66:4b:8a:d4:b9:be:0a: 17:9c:86:d1:56:25:52:bf:f1:75:18:dd:d3:c6:65:56:1d:1e: 49:3c:1c:b9:87:c1:ce:ec:ce:a5:f1:62:a9:c2:9c:20:81:7e: 10:dd:aa:95:56:f9:68:4b:7d:d1:0d:9c:10:3e:a7:ea:2e:d6: c4:7d:7e:06:9e:bf:fc:00:37:39:47:5c:44:de:cb:3b:0b:a9: 5c:c3:8a:cc:98:e4:eb:1e:e4:9f:ad:dd:cd:ad:da:af:b1:7b: 8e:b6:a2:7e:30:f1:b0:3c:6a:e4:cf:f5:fb:38:4f:0a:da:75: aa:ff:10:1f:82:98:41:3c:fd:95:13:1a:e9:38:9a:74:bf:2e: f1:6c:1e:c1:93:2f:07:48:e9:1e:79:fd:d7:65:b1:fc:b9:cb: 66:11:9e:d6:f0:be:0e:2d:28:e3:8f:21:2c:78:36:05:28:cb: 2c:85:1a:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxMc0fjVe1hqZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzJmM2FmYjEtMmJmNC00NzE2LTkwM2ItMjlkZmExZTg4 MTc2MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MWM1MTBkNTMtNjVkZC00MTAxLTk4YmItYTc0ZTQ5NDRmMzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+zlsBV5PyKHhuy6dg+Ivo8ss1+7MIUOnVs4 Hjk7ZrBfq2J1YooMXOSHaoen4efRXLFw/WcecOIlmAiUZSsRsxMujGf+eNwCXUQZ 9+JPCMWJrPl2sDcc/QKkSEoD5627JoQVIbEJTE7mgpUnoyZIVqSGec9fwHE3bPqk 2jgEyJYf4pRtVC3z5sq2autT9dsoMPIvDNJYwDNttPyWdgV3myWXlu8olqkUO23n dJkKpkyYH4zbq5zIZvzBLBQvQm/zVUXBeGKQeVGqbT9uWyyPQ+LJlnDTMBOEe3BP EiyJY7K9m3TaGKG/gALnG3XVkMkxsRV9nUIuCagQDQAv/FnrmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsrp8HnY0HzGZDdumrJG52PqXhFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jMmYz YWZiMS0yYmY0LTQ3MTYtOTAzYi0yOWRmYTFlODgxNzYvMGJhYzZjM2QtYzRkMC0z MTg1LTkxMDctMjkyZGIwZWZlNTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzJmM2FmYjEtMmJmNC00NzE2LTkw M2ItMjlkZmExZTg4MTc2L2MyZjNhZmIxLTJiZjQtNDcxNi05MDNiLTI5ZGZhMWU4 ODE3Ni5jcmwwHwYDVR0jBBgwFoAUa1BZ6Q1zBxnfTw0LwaPk2KTTppMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jMmYzYWZiMS0yYmY0LTQ3MTYtOTAzYi0yOWRm YTFlODgxNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5/LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0OtDmm049bbS2Zk89xrImyCZ26f9g6ZNkM1oDN5CJYUZTAyMYIYWVa cJ9TWANLGeubaNwFxxOQvFTvW+XebcB/PsnXLFmuoC0Z9GA1GgiVzitkZkuK1Lm+ ChechtFWJVK/8XUY3dPGZVYdHkk8HLmHwc7szqXxYqnCnCCBfhDdqpVW+WhLfdEN nBA+p+ou1sR9fgaev/wANzlHXETeyzsLqVzDisyY5Ose5J+t3c2t2q+xe462on4w 8bA8auTP9fs4Twradar/EB+CmEE8/ZUTGuk4mnS/LvFsHsGTLwdI6R55/ddlsfy5 y2YRntbwvg4tKOOPISx4NgUoyyyFGiQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:58:05 2025 by rpki-client