$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/254218cb-ce1f-38f3-ae09-4e801333a2e2.roa File: 254218cb-ce1f-38f3-ae09-4e801333a2e2.roa (raw, json) Hash identifier: 3F6puCpI+Eg9oUisvyFGApP+SIOx3S1NVcR8E1cquBc= Subject key identifier: AC:76:B0:2C:A7:8E:23:72:51:5A:0B:8F:B6:92:12:F6:11:47:D0:15 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B70BD2AB107F6C8E1D6C2CFC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/254218cb-ce1f-38f3-ae09-4e801333a2e2.roa Signing time: Tue 07 Oct 2025 07:39:23 +0000 ROA not before: Tue 07 Oct 2025 07:39:23 +0000 ROA not after: Mon 05 Jan 2026 08:39:23 +0000 asID: 7922 IP address blocks: 68.167.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:70:bd:2a:b1:07:f6:c8:e1:d6:c2:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 7 07:39:23 2025 GMT Not After : Jan 5 08:39:23 2026 GMT Subject: CN=cf063012-8291-4863-8287-a3f494ff1a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:94:69:26:be:81:0f:61:da:68:3a:ef:41:ad: e8:2e:7e:5d:b5:93:1c:c2:a5:09:3b:e9:af:e8:c8: 4c:3a:ea:8e:05:d0:9a:40:5a:31:96:be:7e:64:9d: 33:26:da:f9:94:6d:ad:24:90:ff:bd:d3:3a:36:9c: d9:8a:37:d4:32:95:ca:3b:f5:49:0c:6b:25:55:7d: 65:02:ea:71:9c:da:3d:5d:4a:ec:9f:d8:1a:2d:39: 9a:e2:1f:cc:d7:e5:d4:e1:dd:7d:9e:3f:01:25:3d: e8:25:d3:dd:6b:e2:57:3f:ed:78:a4:f1:93:c8:d0: 2d:47:ab:91:a2:25:48:5a:cf:ef:ff:f4:6e:24:2e: e7:f2:8b:05:b9:ed:88:fb:53:be:a0:c4:54:4e:24: c8:25:9b:fa:37:6b:5d:57:3c:96:9c:db:ff:56:55: 51:fb:52:27:dc:da:56:d4:d8:b4:82:15:85:f5:1e: c4:62:31:79:66:76:33:0b:db:fe:f4:3b:84:34:85: c0:12:ed:c9:35:b8:b2:c1:0d:28:73:31:07:b3:e7: d3:c8:73:7b:0c:2a:25:57:ad:d9:56:5d:90:65:bc: 72:16:51:35:a8:14:39:13:99:d4:f4:e8:3a:fa:76: 11:d1:b2:c6:2f:ff:64:53:3d:0d:10:47:05:79:59: 77:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:76:B0:2C:A7:8E:23:72:51:5A:0B:8F:B6:92:12:F6:11:47:D0:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/254218cb-ce1f-38f3-ae09-4e801333a2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:59:a4:83:e8:94:19:59:ef:bf:f9:c1:75:94:12:46:29:2a: 76:dd:7a:3a:4e:92:4b:4c:bb:1b:99:d2:4a:62:5e:60:08:3b: 35:7d:79:07:5c:29:fe:14:ed:a0:66:12:5d:36:7d:80:33:ea: 6d:e8:c4:9a:40:74:3a:10:3d:6d:fb:67:52:08:17:12:0a:9c: 4d:e3:fa:fb:0b:a8:8f:a5:92:a5:67:09:fe:25:8f:bb:1a:15: 0a:d0:f7:15:de:ab:f7:c8:4a:f9:93:08:ac:d4:c6:4d:ac:1a: d1:52:09:78:d7:35:db:db:6f:22:9b:f3:ac:ee:66:55:76:18: 2d:c9:b7:3d:e8:85:ca:d1:c9:ab:de:d0:c6:25:77:c0:54:cf: cd:b6:6d:68:70:f9:66:e2:f4:31:b8:7b:db:3c:30:ff:a8:27: a8:3a:72:13:b4:64:6d:d2:4e:3d:93:72:ae:66:b7:35:c4:b2: e6:22:35:6a:03:1f:3c:cf:63:97:a3:13:5d:27:bb:45:f0:ec: 42:32:9a:5b:1a:e7:59:63:45:36:3d:83:65:2f:5a:27:9a:d2: f0:c4:e3:fc:c9:17:59:fb:3f:da:21:33:d8:62:38:56:7b:5e: ed:b2:ab:12:fd:75:fa:bf:56:cd:ca:5e:cb:d4:3c:24:4b:22: 69:16:36:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtwvSqxB/bI4dbCz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwNzA3MzkyM1oXDTI2MDEwNTA4MzkyM1owLzEtMCsGA1UEAxMk Y2YwNjMwMTItODI5MS00ODYzLTgyODctYTNmNDk0ZmYxYTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZRpJr6BD2HaaDrvQa3oLn5dtZMcwqUJO+mv 6MhMOuqOBdCaQFoxlr5+ZJ0zJtr5lG2tJJD/vdM6NpzZijfUMpXKO/VJDGslVX1l AupxnNo9XUrsn9gaLTma4h/M1+XU4d19nj8BJT3oJdPda+JXP+14pPGTyNAtR6uR oiVIWs/v//RuJC7n8osFue2I+1O+oMRUTiTIJZv6N2tdVzyWnNv/VlVR+1In3NpW 1Ni0ghWF9R7EYjF5ZnYzC9v+9DuENIXAEu3JNbiywQ0oczEHs+fTyHN7DColV63Z Vl2QZbxyFlE1qBQ5E5nU9Og6+nYR0bLGL/9kUz0NEEcFeVl3yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKx2sCynjiNyUVoLj7aSEvYRR9AVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjU0MjE4Y2ItY2UxZi0z OGYzLWFlMDktNGU4MDEzMzNhMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpZpIPolBlZ77/5wXWUEkYpKnbdejpOkktMuxuZ0kpiXmAIOzV9eQdc Kf4U7aBmEl02fYAz6m3oxJpAdDoQPW37Z1IIFxIKnE3j+vsLqI+lkqVnCf4lj7sa FQrQ9xXeq/fISvmTCKzUxk2sGtFSCXjXNdvbbyKb86zuZlV2GC3Jtz3ohcrRyave 0MYld8BUz822bWhw+Wbi9DG4e9s8MP+oJ6g6chO0ZG3STj2Tcq5mtzXEsuYiNWoD HzzPY5ejE10nu0Xw7EIymlsa51ljRTY9g2UvWiea0vDE4/zJF1n7P9ohM9hiOFZ7 Xu2yqxL9dfq/Vs3KXsvUPCRLImkWNtE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:47:18 2025 by rpki-client