$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa File: 9ecd159a-1f96-32de-b9d1-11893c413104.roa (raw, json) Hash identifier: bH6QNAvLhJ8xIhCdLTNCCKlkO1ePnL7H44Gs0IR1IBw= Subject key identifier: B6:6E:E7:7C:27:CC:BE:A9:B5:90:E3:B4:DA:A7:F9:E6:7F:F4:89:FB Certificate issuer: /CN=10fde7ec-a369-497a-a493-87b3e2e08143 Certificate serial: 010D0C9F4328584B79BCB7BE491F93C6DA960980 Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397606 IP address blocks: 207.174.68.0/22 maxlen: 24 216.152.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b7:be:49:1f:93:c6:da:96:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=4e437361-2c29-48a1-8752-2ff946e09d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:07:62:97:54:e0:0f:b2:e0:01:14:78:74:7c: 1e:b2:15:bf:cd:22:41:06:eb:71:bc:59:34:4a:d9: d1:a9:2e:ea:94:bf:e0:a0:d0:14:2c:5c:e7:3e:34: 53:ff:5f:6b:63:da:26:bc:1b:52:fb:23:d7:28:3e: ff:d4:5b:bf:0a:c6:65:4b:74:0e:d6:8e:d9:a4:28: 1b:73:0b:5c:b2:eb:30:d4:dc:61:62:9c:d8:5a:17: 46:8a:a3:81:be:89:5b:06:49:f4:a9:cf:1a:4d:5d: b0:bd:85:20:20:f6:78:56:ca:98:90:0e:eb:54:7b: bb:a0:8b:b7:0a:d0:14:28:9d:7b:01:39:57:76:11: 81:e6:3a:b7:3d:ab:b9:68:07:5c:cb:44:28:b8:14: d7:96:f6:f3:7d:d7:09:31:5f:c8:cd:ac:5d:ff:c8: 97:ea:73:ca:5c:79:cc:a3:88:09:13:42:eb:88:79: 67:28:cc:19:a6:aa:23:14:b8:7f:9e:63:e8:64:f2: 70:e9:4e:e3:48:80:6e:ea:e5:e4:75:06:bd:e5:db: e9:0a:73:c5:80:96:6a:17:1f:6c:27:06:be:dc:db: 1d:59:14:be:03:60:8f:04:a0:7d:21:22:b1:02:c6: a0:9e:f6:0d:6c:1a:95:f6:58:af:77:1b:03:8d:12: 19:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6E:E7:7C:27:CC:BE:A9:B5:90:E3:B4:DA:A7:F9:E6:7F:F4:89:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl X509v3 Authority Key Identifier: keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer sbgp-ipAddrBlock: critical IPv4: 207.174.68.0/22 216.152.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:9d:c8:5e:4e:13:65:14:ab:20:45:07:15:9c:a6:a0:bf:7d: b9:cd:d6:53:95:86:a6:f0:9f:9c:b6:b5:7a:d8:40:c4:e7:de: f5:67:b0:68:ed:a1:b0:cf:64:49:ff:56:3f:7d:6d:c3:61:aa: 34:50:41:8e:6d:e4:32:d4:16:89:09:53:c0:93:5a:56:59:56: 77:ba:8c:52:de:1e:d0:6e:4a:d8:d6:c0:5c:d4:2f:de:0d:5d: 0f:27:7f:61:db:05:5d:8d:c6:88:fb:74:0d:e2:d5:c5:ca:45: 38:12:37:55:6a:e3:4a:0b:81:b1:fb:d0:5f:6f:54:d6:fb:24: eb:a3:9a:3d:08:4f:b4:15:49:17:2c:80:ce:76:5b:ab:3f:9a: 18:f6:a4:51:7d:73:3c:26:fb:95:53:66:17:24:85:c3:df:52: db:6d:ac:45:8c:1e:20:c1:1f:6a:03:cc:45:e8:65:44:3d:a3: 4d:39:6c:6a:81:57:32:22:a7:90:97:67:2a:45:ed:a3:b7:8f: a7:e9:0c:ff:06:1a:28:dc:cd:8b:c4:44:a5:44:bc:8f:0c:43: e2:27:d6:ee:f4:a1:14:b6:cf:fa:b3:c3:59:7e:b1:51:f3:6f: b6:19:a3:88:cf:8d:cf:5a:72:44:8f:fc:34:16:e4:46:9a:8c: 8d:c3:ab:64 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEt5vLe+SR+TxtqWCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBmZGU3ZWMtYTM2OS00OTdhLWE0OTMtODdiM2UyZTA4 MTQzMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NGU0MzczNjEtMmMyOS00OGExLTg3NTItMmZmOTQ2ZTA5ZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Adil1TgD7LgARR4dHweshW/zSJBButxvFk0 StnRqS7qlL/goNAULFznPjRT/19rY9omvBtS+yPXKD7/1Fu/CsZlS3QO1o7ZpCgb cwtcsusw1NxhYpzYWhdGiqOBvolbBkn0qc8aTV2wvYUgIPZ4VsqYkA7rVHu7oIu3 CtAUKJ17ATlXdhGB5jq3Pau5aAdcy0QouBTXlvbzfdcJMV/Izaxd/8iX6nPKXHnM o4gJE0LriHlnKMwZpqojFLh/nmPoZPJw6U7jSIBu6uXkdQa95dvpCnPFgJZqFx9s Jwa+3NsdWRS+A2CPBKB9ISKxAsagnvYNbBqV9livdxsDjRIZ6QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLZu53wnzL6ptZDjtNqn+eZ/9In7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMGZk ZTdlYy1hMzY5LTQ5N2EtYTQ5My04N2IzZTJlMDgxNDMvOWVjZDE1OWEtMWY5Ni0z MmRlLWI5ZDEtMTE4OTNjNDEzMTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTBmZGU3ZWMtYTM2OS00OTdhLWE0 OTMtODdiM2UyZTA4MTQzLzEwZmRlN2VjLWEzNjktNDk3YS1hNDkzLTg3YjNlMmUw ODE0My5jcmwwHwYDVR0jBBgwFoAUPexB37hn1p9jivfrHah4kZhKpJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMGZkZTdlYy1hMzY5LTQ5N2EtYTQ5My04N2Iz ZTJlMDgxNDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCz65EAwQB 2JhEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABGdyF5OE2UUqyBFBxWcpqC/fbnN1lOVhqbwn5y2tXrYQMTn 3vVnsGjtobDPZEn/Vj99bcNhqjRQQY5t5DLUFokJU8CTWlZZVne6jFLeHtBuStjW wFzUL94NXQ8nf2HbBV2Nxoj7dA3i1cXKRTgSN1Vq40oLgbH70F9vVNb7JOujmj0I T7QVSRcsgM52W6s/mhj2pFF9czwm+5VTZhckhcPfUtttrEWMHiDBH2oDzEXoZUQ9 o005bGqBVzIip5CXZypF7aO3j6fpDP8GGijczYvERKVEvI8MQ+In1u70oRS2z/qz w1l+sVHzb7YZo4jPjc9ackSP/DQW5EaajI3Dq2Q= -----END CERTIFICATE-----Generated at Wed Nov 5 03:15:25 2025 by rpki-client