$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4bf6cf33-9087-3e58-abcb-b71596bfefa3.roa File: 4bf6cf33-9087-3e58-abcb-b71596bfefa3.roa (raw, json) Hash identifier: IkMtShHps4QJanhJGgNU+Oc0oN1zOJa+ob16ljRLmQ0= Subject key identifier: 72:CE:70:AB:09:C2:34:AA:87:D3:A0:12:C9:D4:0E:A3:42:3F:44:F1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BAC288624155FDAE05B2AC9EE Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4bf6cf33-9087-3e58-abcb-b71596bfefa3.roa Signing time: Tue 28 Oct 2025 14:28:23 +0000 ROA not before: Tue 28 Oct 2025 14:28:23 +0000 ROA not after: Mon 26 Jan 2026 15:28:23 +0000 asID: 30058 IP address blocks: 68.166.162.0/23 maxlen: 23 68.166.164.0/23 maxlen: 23 68.166.166.0/23 maxlen: 23 68.166.168.0/23 maxlen: 23 68.166.170.0/23 maxlen: 23 68.166.172.0/23 maxlen: 23 68.166.174.0/23 maxlen: 23 68.167.200.0/23 maxlen: 23 68.167.202.0/23 maxlen: 23 68.167.204.0/23 maxlen: 23 68.167.206.0/23 maxlen: 23 69.3.144.0/23 maxlen: 23 69.3.146.0/23 maxlen: 23 69.3.150.0/23 maxlen: 23 69.3.152.0/23 maxlen: 23 69.3.154.0/23 maxlen: 23 69.3.156.0/23 maxlen: 23 69.3.158.0/23 maxlen: 23 69.3.240.0/23 maxlen: 23 69.3.242.0/23 maxlen: 23 69.3.244.0/23 maxlen: 23 69.3.246.0/23 maxlen: 23 69.3.248.0/23 maxlen: 23 69.3.250.0/23 maxlen: 23 69.3.252.0/23 maxlen: 23 69.3.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ac:28:86:24:15:5f:da:e0:5b:2a:c9:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 28 14:28:23 2025 GMT Not After : Jan 26 15:28:23 2026 GMT Subject: CN=c98e0877-9c10-4343-82e5-79447d5dfa67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:ab:ab:74:30:dc:a7:eb:cf:6d:61:e0:f8: 50:0a:7c:ca:3e:c7:f7:44:79:d5:9e:4d:88:6f:b8: c6:ff:d9:1e:d7:e0:75:d4:c4:9e:1b:6a:a7:8c:57: 49:ed:b1:d8:3a:64:fb:5b:53:db:83:63:57:40:68: 23:8b:a4:c2:22:ae:55:44:66:02:b7:88:39:9e:66: 18:1f:45:59:93:6a:29:2c:fa:3c:88:d3:ab:79:0a: 83:e3:a7:2e:9a:9c:14:cb:37:35:a4:f3:30:d4:f5: 42:58:8c:9a:5d:31:17:8e:ba:db:25:b3:98:a0:b6: a2:cb:dd:18:01:e3:99:3d:7a:da:fb:05:fb:d0:2f: 6c:c5:4d:b0:96:4f:07:65:23:04:3f:7f:5e:75:9e: 89:56:e5:36:bf:d1:41:17:91:86:06:8d:ba:44:da: af:80:46:3c:be:ac:48:e3:3d:d1:27:f9:bc:c8:2e: 68:fa:ab:34:40:df:d1:b2:da:c1:b2:93:c8:e4:ea: 33:e1:67:c2:ce:2c:be:15:4e:d5:60:d5:f4:42:98: 2f:63:fe:56:aa:0e:bf:50:78:f7:e0:08:dc:a8:75: ba:d5:c2:a1:92:ba:3c:55:f0:59:d8:e3:50:ad:68: a4:62:fa:32:73:8c:7a:19:38:ca:2a:d4:bb:25:ce: c6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CE:70:AB:09:C2:34:AA:87:D3:A0:12:C9:D4:0E:A3:42:3F:44:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4bf6cf33-9087-3e58-abcb-b71596bfefa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.162.0-68.166.175.255 68.167.200.0/21 69.3.144.0/22 69.3.150.0-69.3.159.255 69.3.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:91:4c:1a:fe:69:55:ff:55:88:ea:86:97:99:98:8c:cb:1b: 2c:be:d1:42:fb:75:5f:cb:a6:71:49:e7:05:9a:d2:ad:80:a4: 9f:2f:a0:23:43:81:2a:0c:f4:1a:94:1b:52:4e:03:2b:94:5e: 22:29:06:74:d2:6e:bb:d1:17:36:d9:b3:1c:a9:f0:c8:ab:bd: c2:33:b6:88:cc:c5:73:28:d1:50:46:0a:8b:ff:32:16:21:80: 50:50:62:23:35:86:4b:5d:bb:f8:21:f0:22:ab:be:17:fa:5e: d3:8d:e3:63:c4:8c:a5:43:ff:41:0c:8a:6d:64:de:46:c3:7d: 4f:13:96:66:86:fe:c3:2e:57:65:5f:2d:bc:06:a2:11:b1:3b: 26:91:3d:b8:6f:e4:64:2c:46:16:5e:e3:23:b1:28:7d:58:19: 3f:d4:98:4e:80:3a:f9:50:d9:ed:9e:d9:32:a4:58:d1:77:3d: 92:45:8e:3c:56:db:3f:6f:fa:2c:77:4e:fe:0e:8a:9d:eb:49: ca:52:f9:9a:b5:fb:83:5a:4b:44:17:25:59:45:98:03:60:6b: 22:5f:a8:e7:d3:ae:49:19:a7:e8:cb:54:36:43:6f:8a:55:24: bd:8e:0e:7b:92:79:fa:31:70:ef:9c:f6:8e:22:78:bb:e4:34: 0d:ad:85:02 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEusKIYkFV/a4Fsqye4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyODE0MjgyM1oXDTI2MDEyNjE1MjgyM1owLzEtMCsGA1UEAxMk Yzk4ZTA4NzctOWMxMC00MzQzLTgyZTUtNzk0NDdkNWRmYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyWrq3Qw3Kfrz21h4PhQCnzKPsf3RHnVnk2I b7jG/9ke1+B11MSeG2qnjFdJ7bHYOmT7W1Pbg2NXQGgji6TCIq5VRGYCt4g5nmYY H0VZk2opLPo8iNOreQqD46cumpwUyzc1pPMw1PVCWIyaXTEXjrrbJbOYoLaiy90Y AeOZPXra+wX70C9sxU2wlk8HZSMEP39edZ6JVuU2v9FBF5GGBo26RNqvgEY8vqxI 4z3RJ/m8yC5o+qs0QN/RstrBspPI5Ooz4WfCziy+FU7VYNX0QpgvY/5Wqg6/UHj3 4AjcqHW61cKhkro8VfBZ2ONQrWikYvoyc4x6GTjKKtS7Jc7GvwIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFHLOcKsJwjSqh9OgEsnUDqNCP0TxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGJmNmNmMzMtOTA4Ny0z ZTU4LWFiY2ItYjcxNTk2YmZlZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAFEpqID BAREpqADBANEp8gDBAJFA5AwDAMEAUUDlgMEBUUDgAMEBEUD8DBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBM kUwa/mlV/1WI6oaXmZiMyxssvtFC+3Vfy6ZxSecFmtKtgKSfL6AjQ4EqDPQalBtS TgMrlF4iKQZ00m670Rc22bMcqfDIq73CM7aIzMVzKNFQRgqL/zIWIYBQUGIjNYZL Xbv4IfAiq74X+l7TjeNjxIylQ/9BDIptZN5Gw31PE5Zmhv7DLldlXy28BqIRsTsm kT24b+RkLEYWXuMjsSh9WBk/1JhOgDr5UNntntkypFjRdz2SRY48Vts/b/osd07+ Doqd60nKUvmatfuDWktEFyVZRZgDYGsiX6jn065JGafoy1Q2Q2+KVSS9jg57knn6 MXDvnPaOIni75DQNrYUC -----END CERTIFICATE-----Generated at Wed Nov 5 00:03:52 2025 by rpki-client