$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db631a39-547d-3b24-99ed-6a656f2cc701.roa File: db631a39-547d-3b24-99ed-6a656f2cc701.roa (raw, json) Hash identifier: NKN/jTr25CpBfb1L1xZ24JeMvNlfHpSwD9N2a78Wl4w= Subject key identifier: 1C:17:2F:EA:66:77:02:51:71:4B:8A:00:2A:C8:51:D9:C4:1E:29:3B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B2AB3087E67D4E496F5ABFCF0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db631a39-547d-3b24-99ed-6a656f2cc701.roa Signing time: Fri 12 Sep 2025 05:32:23 +0000 ROA not before: Fri 12 Sep 2025 05:32:23 +0000 ROA not after: Thu 11 Dec 2025 06:32:23 +0000 asID: 53397 IP address blocks: 68.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:b3:08:7e:67:d4:e4:96:f5:ab:fc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 12 05:32:23 2025 GMT Not After : Dec 11 06:32:23 2025 GMT Subject: CN=5cc0a640-4b18-41ae-be8f-8e757554fb15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:36:e2:71:6a:29:80:9f:3f:7a:ae:8f:b2:ba: a8:5b:0d:1b:7d:56:e5:80:a9:5a:b0:2b:18:b1:83: 22:ca:5e:e6:64:a5:a7:65:1d:09:70:56:21:7f:3f: 5f:de:6a:91:00:12:55:81:7e:59:e2:77:f2:d1:a5: 5c:fb:fc:1d:65:73:00:0a:af:42:17:0c:6b:a7:97: c0:94:bd:43:00:5b:74:c6:4a:fd:bb:e7:aa:08:15: 65:7c:f1:49:cc:37:bb:e2:90:57:b2:53:ff:90:e9: 30:a3:dc:ac:3d:09:9e:43:e2:68:b6:19:92:40:14: 8d:f2:28:d0:bd:be:7e:6f:c7:0b:02:f2:87:3c:67: cb:1d:fb:1b:0d:ce:d3:58:70:ad:66:d7:2e:ec:8a: aa:fb:1b:d5:17:1c:6c:cc:37:d0:a8:67:92:dd:98: b8:bb:92:5c:e2:d6:9a:e0:23:96:33:42:3d:8b:38: 9a:3b:ca:e3:88:99:ee:89:fb:53:93:2a:8e:15:6e: d7:77:dd:7f:e9:ae:3a:cf:c6:8a:30:e2:66:2c:9d: 33:9a:8a:37:4c:fb:3d:42:ef:4e:3f:72:e1:6e:a7: 11:e2:17:aa:7a:3c:89:59:62:da:45:b1:97:bf:09: 2d:6f:1d:b2:20:7f:6b:19:ac:00:26:ba:ce:03:49: 36:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:17:2F:EA:66:77:02:51:71:4B:8A:00:2A:C8:51:D9:C4:1E:29:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db631a39-547d-3b24-99ed-6a656f2cc701.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:30:de:4b:33:8d:7e:cb:16:a0:bf:78:bb:c9:59:4a:68:a0: 16:e0:09:72:56:37:20:68:c9:fd:5e:f8:e6:34:05:ec:7c:66: da:0c:f5:fa:89:0d:78:43:98:ce:4e:f8:9c:3a:00:55:4f:ee: 99:0a:78:d7:0b:f5:63:8d:d0:52:23:a0:00:86:a0:ae:f7:e1: cb:2a:ed:58:48:0d:8a:e4:9b:bd:85:2b:e3:78:30:4f:6c:cb: 5f:6c:b6:b2:2b:76:b1:3f:94:b5:62:1c:a6:e3:62:4d:8a:f5: 5e:57:35:71:ce:bd:c7:ad:c0:4f:39:f2:e0:d8:6d:70:39:99: aa:8b:29:a0:08:6c:e0:3c:f8:7e:0b:1e:2b:27:e7:94:69:9e: 29:ff:08:84:10:99:00:c4:ee:7c:43:52:ed:5d:21:86:29:fb: ea:f5:ef:4a:17:de:59:ed:07:50:00:46:0c:2e:1e:9c:5f:18: 6d:a1:e4:8d:a0:7a:43:df:77:ff:af:e2:4c:31:b8:42:9e:ac: 6f:a7:39:2d:3f:2c:27:ef:66:ca:dd:d7:5f:1d:67:60:d8:82: 96:80:7f:07:09:bb:23:03:84:61:20:93:5b:e1:99:78:65:69: 94:65:5b:fa:76:ae:a7:45:2d:de:a0:fe:43:4a:6c:a1:de:30: 8d:7d:71:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqswh+Z9TklvWr/PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxMjA1MzIyM1oXDTI1MTIxMTA2MzIyM1owLzEtMCsGA1UEAxMk NWNjMGE2NDAtNGIxOC00MWFlLWJlOGYtOGU3NTc1NTRmYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTbicWopgJ8/eq6PsrqoWw0bfVblgKlasCsY sYMiyl7mZKWnZR0JcFYhfz9f3mqRABJVgX5Z4nfy0aVc+/wdZXMACq9CFwxrp5fA lL1DAFt0xkr9u+eqCBVlfPFJzDe74pBXslP/kOkwo9ysPQmeQ+JothmSQBSN8ijQ vb5+b8cLAvKHPGfLHfsbDc7TWHCtZtcu7Iqq+xvVFxxszDfQqGeS3Zi4u5Jc4taa 4COWM0I9iziaO8rjiJnuiftTkyqOFW7Xd91/6a46z8aKMOJmLJ0zmoo3TPs9Qu9O P3LhbqcR4heqejyJWWLaRbGXvwktbx2yIH9rGawAJrrOA0k2gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwXL+pmdwJRcUuKACrIUdnEHik7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGI2MzFhMzktNTQ3ZC0z YjI0LTk5ZWQtNmE2NTZmMmNjNzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRKaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYw3kszjX7LFqC/eLvJWUpooBbgCXJWNyBoyf1e+OY0Bex8ZtoM9fqJ DXhDmM5O+Jw6AFVP7pkKeNcL9WON0FIjoACGoK734csq7VhIDYrkm72FK+N4ME9s y19strIrdrE/lLViHKbjYk2K9V5XNXHOvcetwE858uDYbXA5maqLKaAIbOA8+H4L Hisn55Rpnin/CIQQmQDE7nxDUu1dIYYp++r170oX3lntB1AARgwuHpxfGG2h5I2g ekPfd/+v4kwxuEKerG+nOS0/LCfvZsrd118dZ2DYgpaAfwcJuyMDhGEgk1vhmXhl aZRlW/p2rqdFLd6g/kNKbKHeMI19cTc= -----END CERTIFICATE-----Generated at Wed Nov 5 09:46:10 2025 by rpki-client