$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/229cb0e4-7e2c-351e-9131-c68cc5a67d2d.roa File: 229cb0e4-7e2c-351e-9131-c68cc5a67d2d.roa (raw, json) Hash identifier: c53zkr3/8/fLXKEl0nbMTn+buLOtrkxiwTsGr37nZaU= Subject key identifier: 29:3E:7D:94:05:B9:3E:72:19:76:B7:71:4C:C6:AF:64:17:18:CA:35 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B2AB2BF47D37DA41B2FA49900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/229cb0e4-7e2c-351e-9131-c68cc5a67d2d.roa Signing time: Fri 12 Sep 2025 05:31:48 +0000 ROA not before: Fri 12 Sep 2025 05:31:48 +0000 ROA not after: Thu 11 Dec 2025 06:31:48 +0000 asID: 11611 IP address blocks: 68.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:b2:bf:47:d3:7d:a4:1b:2f:a4:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 12 05:31:48 2025 GMT Not After : Dec 11 06:31:48 2025 GMT Subject: CN=ac66f160-a6fa-499e-b38c-d73d3c869074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:64:a0:34:fe:8c:ce:00:43:83:7d:f6:12:3e: 58:37:6f:93:ac:37:90:ed:e9:f5:d8:09:32:e2:77: 54:1d:1b:f0:ef:1b:de:cc:a6:3d:dc:91:8f:51:73: 9b:b3:86:78:56:b5:d0:1c:77:90:64:36:91:36:c9: 3f:00:e6:7f:5e:a6:b5:ee:75:73:f4:38:d6:6d:d1: ad:45:b5:e6:57:b1:3d:25:4a:f1:0a:1c:16:07:4e: 61:3f:d2:7e:6e:f6:92:04:74:d7:62:ed:8b:ac:65: 42:88:67:43:3a:b5:10:3b:31:4b:b2:9a:70:a8:11: a3:a4:fe:18:7f:40:91:2d:7d:55:4c:a4:1d:44:1d: 24:6f:58:7e:26:ae:fc:3c:c9:c1:95:1c:03:f1:c0: fd:04:17:6f:8d:bf:e3:10:9c:4f:3a:5f:76:79:c3: d0:9c:28:8d:22:18:50:f9:79:3b:f1:13:4f:af:e1: 1c:31:fe:53:4f:8d:76:76:ea:e3:05:a3:27:e9:e7: 00:bf:20:6a:59:4b:d9:63:8e:71:74:2c:2d:55:9c: 09:f0:f3:63:1a:c9:2a:ac:28:37:0c:63:87:d5:68: 30:4d:10:a6:0a:ea:bd:de:65:fd:61:6b:25:9b:0d: fb:86:51:ec:34:a4:cd:57:1a:84:63:bb:51:d2:99: e0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3E:7D:94:05:B9:3E:72:19:76:B7:71:4C:C6:AF:64:17:18:CA:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/229cb0e4-7e2c-351e-9131-c68cc5a67d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ed:b6:d9:b4:9e:67:a6:29:59:35:64:9a:7e:f9:c4:56:43: 33:7f:90:56:4c:3d:49:82:1c:c1:c0:ce:c1:f2:4a:ba:20:74: cd:49:f5:2a:9e:ad:c1:5d:7f:b6:a0:e8:dd:9c:e0:7d:d5:3b: 03:00:5c:94:1d:c6:6a:33:fc:d6:2e:58:4c:7b:de:5b:60:c3: 71:31:63:8c:54:f7:8c:08:7e:7e:c7:bf:06:8e:96:c0:3f:10: 25:fe:c5:b7:f0:32:d6:55:7e:00:ef:d6:74:7e:c8:07:61:c8: c7:64:42:0b:bb:ff:99:a7:ab:cb:10:f2:4a:68:4f:6b:65:f7: 3c:5e:a5:ef:b3:e6:e8:72:45:ee:49:fa:0e:a4:8a:9d:84:0a: 1c:d5:13:d3:d7:2f:0c:e8:f2:69:50:53:1e:96:aa:a8:7e:75: 26:97:e1:d5:1c:b5:73:67:23:ec:64:dd:3f:9e:0c:5d:e8:e0: 71:94:41:de:06:d1:d8:94:dd:d6:0b:02:f1:07:06:8f:b8:7a: 00:71:a6:19:d8:20:51:11:c6:8e:70:c5:09:6e:13:8a:cd:9f: 81:5d:9d:5e:c1:15:63:41:87:21:34:27:9d:2d:96:ce:86:69: b5:96:2e:08:3a:51:a8:a6:5d:1c:d9:56:07:98:56:33:94:90: 54:ab:80:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqsr9H032kGy+kmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxMjA1MzE0OFoXDTI1MTIxMTA2MzE0OFowLzEtMCsGA1UEAxMk YWM2NmYxNjAtYTZmYS00OTllLWIzOGMtZDczZDNjODY5MDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12SgNP6MzgBDg332Ej5YN2+TrDeQ7en12Aky 4ndUHRvw7xvezKY93JGPUXObs4Z4VrXQHHeQZDaRNsk/AOZ/Xqa17nVz9DjWbdGt RbXmV7E9JUrxChwWB05hP9J+bvaSBHTXYu2LrGVCiGdDOrUQOzFLsppwqBGjpP4Y f0CRLX1VTKQdRB0kb1h+Jq78PMnBlRwD8cD9BBdvjb/jEJxPOl92ecPQnCiNIhhQ +Xk78RNPr+EcMf5TT412durjBaMn6ecAvyBqWUvZY45xdCwtVZwJ8PNjGskqrCg3 DGOH1WgwTRCmCuq93mX9YWslmw37hlHsNKTNVxqEY7tR0pngHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCk+fZQFuT5yGXa3cUzGr2QXGMo1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjI5Y2IwZTQtN2UyYy0z NTFlLTkxMzEtYzY4Y2M1YTY3ZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRKaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHztttm0nmemKVk1ZJp++cRWQzN/kFZMPUmCHMHAzsHySrogdM1J9Sqe rcFdf7ag6N2c4H3VOwMAXJQdxmoz/NYuWEx73ltgw3ExY4xU94wIfn7HvwaOlsA/ ECX+xbfwMtZVfgDv1nR+yAdhyMdkQgu7/5mnq8sQ8kpoT2tl9zxepe+z5uhyRe5J +g6kip2EChzVE9PXLwzo8mlQUx6Wqqh+dSaX4dUctXNnI+xk3T+eDF3o4HGUQd4G 0diU3dYLAvEHBo+4egBxphnYIFERxo5wxQluE4rNn4FdnV7BFWNBhyE0J50tls6G abWWLgg6UaimXRzZVgeYVjOUkFSrgOI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:14:00 2025 by rpki-client