$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/bdc3244e-4ea8-3a24-8894-2a79f0924702.roa File: bdc3244e-4ea8-3a24-8894-2a79f0924702.roa (raw, json) Hash identifier: ic3iGP5+X0qF/GA4Wiy5zrsnhZV8O9C8vkCUZaaYuRI= Subject key identifier: 9A:BD:B9:EF:0C:0D:18:50:1A:40:85:79:7D:D8:5A:04:B4:C7:B4:65 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584BA39D202CBFCF02766EB3E280 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/bdc3244e-4ea8-3a24-8894-2a79f0924702.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 32181 IP address blocks: 69.65.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:20:2c:bf:cf:02:76:6e:b3:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=95b8e0c6-08f6-45f1-ac5f-c956d83e9434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:f5:b0:4c:39:62:56:e4:25:5d:2e:26:0d: 95:b8:f6:20:8f:91:de:6d:e9:ce:0f:5b:b3:14:f7: ca:0e:62:0b:63:63:6b:ff:18:94:3a:c1:40:9a:aa: 53:22:43:ea:41:8b:5a:2c:85:40:17:1b:00:df:e5: b1:09:97:4f:ca:e2:23:1d:59:e5:eb:66:e4:6f:f9: 6f:c1:2a:88:c4:e8:99:c3:78:28:45:68:3a:50:6d: 00:a5:c5:59:47:44:3c:8a:d2:14:93:a6:09:20:d9: 91:7a:f4:81:8f:a7:96:91:40:0f:21:fb:e4:13:4a: 04:5d:ab:b1:5e:a8:26:c1:c4:b9:d6:a1:f0:cd:25: de:cd:1d:e5:9d:07:7b:c8:6a:71:64:13:cd:0d:59: 65:88:10:47:88:08:be:04:64:3f:ed:08:c0:f3:09: fa:09:4d:59:05:b6:7f:7b:43:34:62:af:26:47:7f: 70:47:05:24:a8:63:94:31:80:a4:16:d0:ae:c2:92: 96:cc:9e:b5:28:6f:f9:a9:e5:b2:53:c4:5a:d9:ac: a4:6a:6f:89:51:4d:19:2e:3d:10:90:45:9d:68:6e: 44:ec:3e:4b:c2:fc:5c:e1:1e:34:83:32:85:32:98: 7b:3a:43:1f:7c:8a:c6:86:c3:c3:48:47:ad:74:ea: 01:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BD:B9:EF:0C:0D:18:50:1A:40:85:79:7D:D8:5A:04:B4:C7:B4:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/bdc3244e-4ea8-3a24-8894-2a79f0924702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 69.65.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a6:17:e7:3d:91:ff:97:57:58:5e:77:83:c6:96:8f:47:80: 94:f9:73:4d:cb:6d:4b:ee:d5:9b:fe:20:19:0c:00:12:ab:4c: f5:49:9d:e2:f7:f4:ea:c9:68:a9:62:51:3c:77:7d:72:6a:7c: 49:6d:df:d6:b8:0f:04:6c:e1:44:01:a4:db:e4:ce:31:84:3f: 88:b5:27:64:2e:2d:51:7f:81:4f:34:41:5d:e1:75:38:6a:98: 3e:48:b7:2e:d3:5b:59:61:37:b9:e7:b8:e1:43:7b:26:66:ec: 05:5f:81:2b:67:e8:dd:c0:9f:2e:ce:0a:e6:fc:67:98:8d:36: 56:2a:ef:fa:7b:56:7b:f9:a8:ed:45:38:80:b4:f7:a3:05:cd: 1d:79:9a:88:6c:96:9e:bb:11:98:dd:6f:75:bc:ab:29:97:0a: 3f:98:77:34:01:e6:59:32:4a:65:15:4f:d1:4a:8c:b5:33:2f: 9c:6e:01:99:d9:cf:13:3c:a8:56:16:35:66:37:eb:64:b8:62: 07:40:89:7d:fc:75:a8:3d:6a:ee:de:7f:d4:2e:ad:ea:3b:7a: 12:d6:13:81:91:33:01:1f:21:3a:29:6c:e8:c6:7b:1b:c2:c4: 3b:46:ea:ea:c4:56:29:45:f0:3f:a5:5f:9f:6f:59:30:4f:1d: f7:8e:a1:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSAsv88Cdm6z4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTViOGUwYzYtMDhmNi00NWYxLWFjNWYtYzk1NmQ4M2U5NDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRb1sEw5YlbkJV0uJg2VuPYgj5HebenOD1uz FPfKDmILY2Nr/xiUOsFAmqpTIkPqQYtaLIVAFxsA3+WxCZdPyuIjHVnl62bkb/lv wSqIxOiZw3goRWg6UG0ApcVZR0Q8itIUk6YJINmRevSBj6eWkUAPIfvkE0oEXaux XqgmwcS51qHwzSXezR3lnQd7yGpxZBPNDVlliBBHiAi+BGQ/7QjA8wn6CU1ZBbZ/ e0M0Yq8mR39wRwUkqGOUMYCkFtCuwpKWzJ61KG/5qeWyU8Ra2aykam+JUU0ZLj0Q kEWdaG5E7D5Lwvxc4R40gzKFMph7OkMffIrGhsPDSEetdOoB/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJq9ue8MDRhQGkCFeX3YWgS0x7RlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvYmRjMzI0NGUtNGVhOC0z YTI0LTg4OTQtMmE3OWYwOTI0NzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRUEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2mF+c9kf+XV1hed4PGlo9HgJT5c03LbUvu1Zv+IBkMABKrTPVJneL3 9OrJaKliUTx3fXJqfElt39a4DwRs4UQBpNvkzjGEP4i1J2QuLVF/gU80QV3hdThq mD5Ity7TW1lhN7nnuOFDeyZm7AVfgStn6N3Any7OCub8Z5iNNlYq7/p7Vnv5qO1F OIC096MFzR15mohslp67EZjdb3W8qymXCj+YdzQB5lkySmUVT9FKjLUzL5xuAZnZ zxM8qFYWNWY362S4YgdAiX38dag9au7ef9Qureo7ehLWE4GRMwEfITopbOjGexvC xDtG6urEVilF8D+lX59vWTBPHfeOoWA= -----END CERTIFICATE-----Generated at Wed Nov 5 04:30:00 2025 by rpki-client