$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c914b651-c1d8-3bdf-88b5-54c9ca7aa9a6.roa File: c914b651-c1d8-3bdf-88b5-54c9ca7aa9a6.roa (raw, json) Hash identifier: X9K1KIg+b7RJXKgG3rJ58cUzB4J/7yjmBLQl/kBZsfQ= Subject key identifier: 6F:17:84:58:FF:10:71:AE:3F:69:01:6D:E2:69:7C:0D:14:9C:1D:8D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B766DCCBD2BAB74FAF283D280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c914b651-c1d8-3bdf-88b5-54c9ca7aa9a6.roa Signing time: Thu 09 Oct 2025 08:34:19 +0000 ROA not before: Thu 09 Oct 2025 08:34:19 +0000 ROA not after: Wed 07 Jan 2026 09:34:19 +0000 asID: 152689 IP address blocks: 68.165.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:6d:cc:bd:2b:ab:74:fa:f2:83:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 9 08:34:19 2025 GMT Not After : Jan 7 09:34:19 2026 GMT Subject: CN=623582d0-6a91-497d-a52b-0a89d284f0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b7:91:a8:11:6b:8b:bc:fb:4c:2a:87:71:02: 82:c9:d8:b5:71:2d:df:74:3c:79:27:99:20:4e:80: 27:79:6c:5e:96:79:ee:d9:fe:0e:d6:03:34:58:31: 49:b9:92:df:f9:2a:c9:e4:f6:e5:32:ab:b7:29:f4: 71:ff:c2:56:32:24:24:ae:48:73:77:2d:1a:56:26: 75:18:35:10:6b:91:63:03:d6:f3:67:15:2c:7e:ce: 6a:82:31:ee:35:5b:49:3e:1e:05:55:59:a3:ab:45: 40:c4:9e:56:8a:bc:48:e7:23:bc:e5:08:7d:69:c8: e0:2b:0c:7c:dc:4e:2b:78:d0:b2:0d:e3:41:7f:01: db:2f:ca:bf:06:af:ec:ec:51:92:7c:c6:30:09:78: 9c:22:69:22:c2:17:12:d1:cc:8f:e1:e5:b9:c9:8c: c7:3a:ac:3c:85:b5:db:2e:43:92:23:6d:44:40:32: fb:69:70:45:3e:d4:ba:25:7d:bf:f7:ce:23:97:2a: 13:82:fe:3a:08:c5:07:bc:68:fb:49:48:41:a6:bb: 02:1a:5f:bc:21:c4:23:53:04:67:21:e0:31:cd:9e: c7:c8:6a:06:aa:0a:06:7f:18:42:64:ab:a9:85:b7: a7:26:e1:be:4f:97:c8:10:13:69:64:48:1a:b4:74: d7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:17:84:58:FF:10:71:AE:3F:69:01:6D:E2:69:7C:0D:14:9C:1D:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c914b651-c1d8-3bdf-88b5-54c9ca7aa9a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:3d:5b:63:25:5b:eb:a4:9a:1a:5d:13:7e:d4:ea:1d:b8:a0: 8c:eb:85:0c:32:53:03:39:0d:9b:cd:80:ad:cf:21:51:8b:9c: f8:7b:75:3d:d7:e0:3c:13:2b:55:15:c7:15:38:0b:e9:85:ed: 4e:ac:a7:9d:a1:7c:2d:f1:bb:18:e4:69:41:12:49:d3:3f:61: 96:58:d3:f6:52:9c:98:4a:ac:24:df:f3:94:e7:50:d5:f4:15: fc:19:df:74:ea:b6:19:7e:fb:e4:9f:e6:a7:ce:89:7e:4c:41: 01:ef:d3:c0:0b:13:0e:29:80:c7:de:51:c3:d4:5e:ad:7d:b7: 02:bd:4a:c9:46:8a:55:e9:98:97:7c:68:4f:f3:bf:93:33:ff: 4e:42:d1:fc:23:f0:82:59:86:2a:8a:5e:36:c3:d6:49:35:fb: 02:77:83:f5:3f:60:63:b3:19:22:eb:9c:2e:6f:69:da:ce:0b: 7d:d5:b3:b1:a7:e6:a6:c9:d4:80:bc:f3:4e:72:ed:21:93:0e: 9a:de:a5:9d:c0:64:17:a1:90:20:52:d2:66:a0:04:e5:36:3e: 6a:3a:1a:3d:b1:67:72:70:5e:a3:02:0b:30:67:f2:b2:e8:60: 12:43:5d:25:f9:4c:a8:fe:b5:fa:e9:a1:6c:54:eb:b5:2a:70: 37:f1:a3:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2bcy9K6t0+vKD0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwOTA4MzQxOVoXDTI2MDEwNzA5MzQxOVowLzEtMCsGA1UEAxMk NjIzNTgyZDAtNmE5MS00OTdkLWE1MmItMGE4OWQyODRmMGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7eRqBFri7z7TCqHcQKCydi1cS3fdDx5J5kg ToAneWxelnnu2f4O1gM0WDFJuZLf+SrJ5PblMqu3KfRx/8JWMiQkrkhzdy0aViZ1 GDUQa5FjA9bzZxUsfs5qgjHuNVtJPh4FVVmjq0VAxJ5WirxI5yO85Qh9acjgKwx8 3E4reNCyDeNBfwHbL8q/Bq/s7FGSfMYwCXicImkiwhcS0cyP4eW5yYzHOqw8hbXb LkOSI21EQDL7aXBFPtS6JX2/984jlyoTgv46CMUHvGj7SUhBprsCGl+8IcQjUwRn IeAxzZ7HyGoGqgoGfxhCZKuphbenJuG+T5fIEBNpZEgatHTX4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8XhFj/EHGuP2kBbeJpfA0UnB2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzkxNGI2NTEtYzFkOC0z YmRmLTg4YjUtNTRjOWNhN2FhOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKA9W2MlW+ukmhpdE37U6h24oIzrhQwyUwM5DZvNgK3PIVGLnPh7dT3X 4DwTK1UVxxU4C+mF7U6sp52hfC3xuxjkaUESSdM/YZZY0/ZSnJhKrCTf85TnUNX0 FfwZ33Tqthl+++Sf5qfOiX5MQQHv08ALEw4pgMfeUcPUXq19twK9SslGilXpmJd8 aE/zv5Mz/05C0fwj8IJZhiqKXjbD1kk1+wJ3g/U/YGOzGSLrnC5vadrOC33Vs7Gn 5qbJ1IC8805y7SGTDprepZ3AZBehkCBS0magBOU2Pmo6Gj2xZ3JwXqMCCzBn8rLo YBJDXSX5TKj+tfrpoWxU67UqcDfxowk= -----END CERTIFICATE-----Generated at Wed Nov 5 15:30:31 2025 by rpki-client