$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d070fed8-637c-329e-befc-157362ac7a4b.roa File: d070fed8-637c-329e-befc-157362ac7a4b.roa (raw, json) Hash identifier: o2Cusu9UcP5zZcAy0pDhY6Rz8Y12eZNCfi8g18x3ebg= Subject key identifier: B8:37:1A:16:1E:4C:D3:66:B3:AB:36:8E:1A:37:B6:4F:A3:86:73:02 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BAEE3DD6607553894E8B71A40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d070fed8-637c-329e-befc-157362ac7a4b.roa Signing time: Wed 29 Oct 2025 13:57:28 +0000 ROA not before: Wed 29 Oct 2025 13:57:28 +0000 ROA not after: Tue 27 Jan 2026 14:57:28 +0000 asID: 19318 IP address blocks: 68.164.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:e3:dd:66:07:55:38:94:e8:b7:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 29 13:57:28 2025 GMT Not After : Jan 27 14:57:28 2026 GMT Subject: CN=738131b0-53ce-4314-b064-b1c9f41c3205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4e:79:97:14:08:73:06:00:75:85:1d:e6:b5: 93:bd:42:c4:45:12:77:f6:38:cb:8b:a6:e8:5f:e4: 18:c6:f7:7d:fc:54:86:09:6a:9f:69:7a:e6:c5:4f: 46:b2:61:9b:c4:e9:c4:c8:39:21:89:19:43:23:64: 82:99:f9:5c:b4:b3:82:86:78:8d:eb:32:e6:b4:4e: 29:02:22:79:e2:b5:71:39:dd:ab:26:a6:4c:0f:5d: 22:56:b8:26:93:56:1f:59:29:24:2b:90:3b:9a:54: 55:0c:fa:c3:1a:ed:b8:d7:3b:bc:17:52:20:5e:e4: 77:f9:5a:8d:13:4b:27:af:46:ce:87:33:1f:63:03: 89:5c:2e:b0:b9:8b:31:1e:68:97:7a:47:06:c7:9e: f9:9a:98:13:e3:2d:d3:80:47:b4:dd:0b:f8:53:96: fe:19:5e:e9:5e:7b:1b:75:86:df:fc:57:42:33:a9: 9a:ab:a6:13:9b:30:26:ac:a1:7b:f3:04:7b:35:4e: 19:71:76:1d:8b:fa:41:23:78:0e:c1:1d:1a:74:de: 99:0c:04:69:61:31:10:4b:da:08:99:90:39:67:cb: e0:e9:c6:6b:1f:d9:3c:c6:00:67:c5:3c:4a:c0:a5: 40:86:85:cb:e4:d2:92:8e:c5:2c:5d:82:40:c0:d3: 5a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:37:1A:16:1E:4C:D3:66:B3:AB:36:8E:1A:37:B6:4F:A3:86:73:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d070fed8-637c-329e-befc-157362ac7a4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:5f:41:0e:30:9f:65:00:46:ef:57:ee:f7:5b:7a:e8:fe:ba: a3:3a:21:00:c9:44:7a:aa:f5:bc:7c:a2:32:0d:4b:c9:fb:0b: f3:61:d3:ef:3c:4a:33:dc:fc:30:e1:21:d1:91:8f:f7:11:de: ad:d6:31:36:d2:0a:b2:2c:03:40:69:94:26:39:c5:7c:f1:40: e0:ac:58:05:96:b3:9b:93:6f:27:b1:9a:3e:8d:3e:d1:bf:73: 05:44:c2:a4:b8:50:8b:d1:49:05:1a:63:ac:42:93:81:a4:d7: 52:94:53:60:a6:b8:2e:e9:58:43:39:7a:75:03:18:1f:8f:58: 94:7f:46:72:5f:46:ff:c0:e7:c0:f1:38:85:d0:7e:3b:78:b2: 44:34:c9:53:be:62:2e:6c:12:36:b1:ac:ce:cc:a4:1a:07:55: 69:de:9f:a5:24:a8:4f:d8:ba:72:d3:2e:91:6f:e8:98:92:ef: 1f:ac:d3:0d:28:30:56:32:68:49:92:6c:1e:ce:aa:04:ed:3a: 7a:ac:91:43:86:ce:f1:d9:8e:4c:8a:56:9d:ea:8b:02:28:f1: 11:35:d3:8e:8b:53:de:14:cf:20:17:13:77:3a:b9:5c:5f:8c: 9c:0c:87:d0:b8:83:8b:ab:cc:ec:91:29:70:6c:b4:f8:9b:97: 3a:6c:77:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuu491mB1U4lOi3GkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyOTEzNTcyOFoXDTI2MDEyNzE0NTcyOFowLzEtMCsGA1UEAxMk NzM4MTMxYjAtNTNjZS00MzE0LWIwNjQtYjFjOWY0MWMzMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk55lxQIcwYAdYUd5rWTvULERRJ39jjLi6bo X+QYxvd9/FSGCWqfaXrmxU9GsmGbxOnEyDkhiRlDI2SCmflctLOChniN6zLmtE4p AiJ54rVxOd2rJqZMD10iVrgmk1YfWSkkK5A7mlRVDPrDGu241zu8F1IgXuR3+VqN E0snr0bOhzMfYwOJXC6wuYsxHmiXekcGx575mpgT4y3TgEe03Qv4U5b+GV7pXnsb dYbf/FdCM6maq6YTmzAmrKF78wR7NU4ZcXYdi/pBI3gOwR0adN6ZDARpYTEQS9oI mZA5Z8vg6cZrH9k8xgBnxTxKwKVAhoXL5NKSjsUsXYJAwNNafwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg3GhYeTNNms6s2jho3tk+jhnMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDA3MGZlZDgtNjM3Yy0z MjllLWJlZmMtMTU3MzYyYWM3YTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRKQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVfQQ4wn2UARu9X7vdbeuj+uqM6IQDJRHqq9bx8ojINS8n7C/Nh0+88 SjPc/DDhIdGRj/cR3q3WMTbSCrIsA0BplCY5xXzxQOCsWAWWs5uTbyexmj6NPtG/ cwVEwqS4UIvRSQUaY6xCk4Gk11KUU2CmuC7pWEM5enUDGB+PWJR/RnJfRv/A58Dx OIXQfjt4skQ0yVO+Yi5sEjaxrM7MpBoHVWnen6UkqE/YunLTLpFv6JiS7x+s0w0o MFYyaEmSbB7OqgTtOnqskUOGzvHZjkyKVp3qiwIo8RE1046LU94UzyAXE3c6uVxf jJwMh9C4g4urzOyRKXBstPiblzpsdzc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:24:47 2025 by rpki-client