$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa File: 42972859-eb24-3402-bd6b-51e9207a7162.roa (raw, json) Hash identifier: ao1515hXjpH84w+yzEjDiSKfsHRPkicq2Kki+dBF2BU= Subject key identifier: 30:6C:88:3E:FC:0B:99:9B:1C:37:86:E1:2C:46:B5:EF:43:0A:90:82 Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F4328584B5DD1EC93D105F25A65FFBDC0 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 11067 IP address blocks: 67.219.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:ec:93:d1:05:f2:5a:65:ff:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=8fd9cba8-fe84-44f4-9fbf-5f6da918e818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:59:bf:2a:16:ca:15:71:df:1c:db:89:d0:3e: 4f:9f:c4:1a:bc:f8:e6:4d:71:54:35:66:b8:3f:a8: 66:93:c0:e8:86:d8:1a:d1:c7:d5:28:0a:a4:29:34: 29:07:d5:cc:7f:41:51:d4:ce:8e:83:5d:ee:a3:91: 48:6d:dc:4f:61:58:55:27:e0:7d:28:4a:55:5b:32: 54:ba:4a:9e:58:ed:f3:91:34:c7:e3:85:a4:24:b7: 63:40:41:b6:f8:4c:a5:91:c9:5f:9c:37:50:4c:36: 80:9b:29:e8:11:e3:b8:59:73:e2:e0:52:4b:5d:5e: 10:39:aa:2b:a2:2c:b7:33:76:ae:37:1d:e6:d0:ec: 2e:13:13:04:25:66:2d:ba:ec:69:62:86:72:c1:67: ee:b3:5d:f8:cc:04:e2:8d:a9:fd:85:af:f0:2e:3a: 93:d9:0b:d7:20:25:b8:b4:c6:4f:37:e4:f1:f5:e0: d5:f1:5d:81:40:54:6b:c3:5e:68:c2:f7:bb:99:37: 6d:fb:62:67:ef:06:cd:d3:3d:c8:a9:fb:14:11:32: 61:22:28:2f:8a:73:ce:f8:8c:3a:6c:d1:bd:a4:71: 0d:5d:3a:d5:83:33:be:1f:f3:49:85:81:d1:82:2a: 55:3a:38:f2:33:4b:42:d3:11:ec:2a:d1:25:f1:0f: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6C:88:3E:FC:0B:99:9B:1C:37:86:E1:2C:46:B5:EF:43:0A:90:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv4: 67.219.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:78:7d:28:ea:76:36:39:91:d3:60:32:7b:bf:11:52:f0:e7: d7:99:6d:74:84:48:3e:70:ba:d3:45:f4:a5:16:6f:82:17:4a: ab:47:03:f0:a1:07:7b:b9:6b:3a:19:64:80:dd:9b:1e:a6:db: e1:8a:c2:cc:f3:01:1a:b4:81:b6:16:2d:48:a9:82:53:e8:5b: 68:55:a6:20:e5:7b:bc:ef:28:db:36:0c:e1:b4:f4:24:26:b3: 12:9f:67:4f:aa:a4:5d:d5:8e:11:f0:1d:3f:71:54:65:d9:d8: b3:31:1b:c4:7f:58:4a:58:64:4b:bb:3d:e1:5b:f5:88:e4:f9: 1b:11:92:bd:91:dd:38:31:88:09:8c:69:75:c3:47:57:38:fd: 94:5d:ea:fc:9d:fd:c7:08:05:d7:ef:f1:9d:39:d4:f6:f9:c4: 44:bf:db:03:f5:8a:fc:7a:33:d6:16:84:3c:a8:db:9b:88:a5: 73:08:e8:39:13:31:91:41:3d:fa:dd:d5:0a:e1:d0:76:fb:78: 32:d3:ef:f8:b4:14:c6:bd:d0:20:e8:0e:82:53:73:c2:04:a7: 91:a1:21:4d:a9:68:45:a1:23:3e:62:c7:1e:e2:88:82:36:e2: a4:e4:a0:ee:cf:1f:1c:8b:a8:aa:1a:90:4f:08:63:a8:09:fc: 56:bb:9c:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0eyT0QXyWmX/vcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk OGZkOWNiYTgtZmU4NC00NGY0LTlmYmYtNWY2ZGE5MThlODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFm/KhbKFXHfHNuJ0D5Pn8QavPjmTXFUNWa4 P6hmk8Dohtga0cfVKAqkKTQpB9XMf0FR1M6Og13uo5FIbdxPYVhVJ+B9KEpVWzJU ukqeWO3zkTTH44WkJLdjQEG2+EylkclfnDdQTDaAmynoEeO4WXPi4FJLXV4QOaor oiy3M3auNx3m0OwuExMEJWYtuuxpYoZywWfus134zATijan9ha/wLjqT2QvXICW4 tMZPN+Tx9eDV8V2BQFRrw15owve7mTdt+2Jn7wbN0z3IqfsUETJhIigvinPO+Iw6 bNG9pHENXTrVgzO+H/NJhYHRgipVOjjyM0tC0xHsKtEl8Q8kPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBsiD78C5mbHDeG4SxGte9DCpCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvNDI5NzI4NTktZWIyNC0z NDAyLWJkNmItNTFlOTIwN2E3MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9ugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIN4fSjqdjY5kdNgMnu/EVLw59eZbXSESD5wutNF9KUWb4IXSqtHA/Ch B3u5azoZZIDdmx6m2+GKwszzARq0gbYWLUipglPoW2hVpiDle7zvKNs2DOG09CQm sxKfZ0+qpF3VjhHwHT9xVGXZ2LMxG8R/WEpYZEu7PeFb9Yjk+RsRkr2R3TgxiAmM aXXDR1c4/ZRd6vyd/ccIBdfv8Z051Pb5xES/2wP1ivx6M9YWhDyo25uIpXMI6DkT MZFBPfrd1Qrh0Hb7eDLT7/i0FMa90CDoDoJTc8IEp5GhIU2paEWhIz5ixx7iiII2 4qTkoO7PHxyLqKoakE8IY6gJ/Fa7nJc= -----END CERTIFICATE-----Generated at Wed Nov 5 20:49:59 2025 by rpki-client