$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dea0ffe9-0f82-3f9e-af30-23d432fe1c95.roa File: dea0ffe9-0f82-3f9e-af30-23d432fe1c95.roa (raw, json) Hash identifier: Pp17y0O6TrLbbJ3ZwDRaH6pZiiUls8b53ieAx6quVNU= Subject key identifier: 67:63:0A:A5:75:27:36:3D:56:5B:BC:CE:58:A6:00:29:AD:D0:A9:B1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9795CB19B8EAD3E4CCFD9220 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dea0ffe9-0f82-3f9e-af30-23d432fe1c95.roa Signing time: Tue 21 Oct 2025 05:36:35 +0000 ROA not before: Tue 21 Oct 2025 05:36:35 +0000 ROA not after: Mon 19 Jan 2026 06:36:35 +0000 asID: 3257 IP address blocks: 68.167.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:95:cb:19:b8:ea:d3:e4:cc:fd:92:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 21 05:36:35 2025 GMT Not After : Jan 19 06:36:35 2026 GMT Subject: CN=de9ed0e5-4238-4de5-ac04-8b386bae062f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c3:d5:4a:64:74:b1:fa:f9:b6:84:6b:cd:e2: 6d:3c:54:59:10:c1:6b:f1:2f:bc:92:be:e7:ac:de: b5:23:8a:e4:d5:dd:89:d5:46:61:6d:ab:c9:18:a9: fa:7f:6e:9b:e2:02:39:d7:34:73:8e:53:68:6b:40: 26:01:78:aa:75:ed:13:82:52:45:6f:f6:3f:39:5d: f7:f7:19:b7:69:2e:26:be:d0:fa:bc:ad:5a:91:ee: d6:39:3e:c8:3e:c3:9e:e0:7f:be:08:19:25:a2:23: 87:4f:ef:1e:fa:54:9c:2e:e9:b9:8f:10:56:07:e7: ef:a1:6f:d2:80:19:dd:25:96:0e:06:47:6b:b8:0d: 3c:f6:55:8d:a7:96:94:05:6e:68:6a:7d:19:3c:a2: bc:2e:60:f4:63:98:1b:b2:f2:66:bf:78:39:76:8f: 53:ef:66:df:87:ea:2c:e0:ff:4d:84:5b:8c:2f:e9: a3:ad:a4:cf:73:8b:67:0c:9b:de:61:63:54:6c:74: 9d:7f:be:1c:0d:d9:b9:2e:9a:75:12:4c:7b:30:81: 22:d2:c2:98:2a:11:2e:05:7d:6a:07:bc:49:a8:e8: da:d6:3e:ab:e6:44:5a:ac:36:aa:bc:cf:ab:93:85: c4:d4:aa:6b:14:13:23:de:76:17:79:90:ab:94:1e: d1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:63:0A:A5:75:27:36:3D:56:5B:BC:CE:58:A6:00:29:AD:D0:A9:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dea0ffe9-0f82-3f9e-af30-23d432fe1c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6d:1a:59:e4:a4:af:03:31:33:1e:d6:77:b7:d1:85:9d:37: 72:f2:0f:1a:e5:a7:1a:90:7d:81:1b:67:64:c7:3a:b4:c6:7f: 7d:35:fd:c9:05:bf:bc:2c:ed:c4:fd:70:80:f2:ae:9d:c7:db: d5:5b:64:5f:0b:72:f1:79:b8:d9:21:02:74:5b:12:54:68:a6: e5:3a:c5:5b:9d:b9:3c:26:29:d4:f2:73:1e:a1:df:a6:e3:e7: 7d:35:30:a9:b9:a8:31:27:91:58:26:3d:45:cf:e8:2a:14:65: 5e:ed:5d:11:67:90:f1:b0:10:ba:5e:89:5d:92:58:92:2e:b8: e7:5c:03:11:08:82:89:6c:f3:b0:d4:a7:1f:33:b2:bd:4e:57: 5d:32:ea:b2:f7:b6:48:be:50:c7:fe:af:6d:19:0e:22:36:10: a1:19:11:4f:26:69:c8:a4:e0:6a:17:68:c4:5f:1a:c4:65:40: dd:8e:07:08:a6:a8:67:b9:6a:70:26:c8:3c:89:41:9c:32:6e: e7:56:0f:d9:e1:5d:70:bf:29:c2:8b:31:7c:6c:1f:41:46:a5: 19:75:5c:22:45:ae:46:1b:45:a5:87:5c:07:fd:23:ba:61:19: 56:5a:18:1a:57:d2:c8:10:6b:75:31:c8:ce:38:69:3b:2b:b4: 49:a5:fe:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXlcsZuOrT5Mz9kiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMTA1MzYzNVoXDTI2MDExOTA2MzYzNVowLzEtMCsGA1UEAxMk ZGU5ZWQwZTUtNDIzOC00ZGU1LWFjMDQtOGIzODZiYWUwNjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMPVSmR0sfr5toRrzeJtPFRZEMFr8S+8kr7n rN61I4rk1d2J1UZhbavJGKn6f26b4gI51zRzjlNoa0AmAXiqde0TglJFb/Y/OV33 9xm3aS4mvtD6vK1ake7WOT7IPsOe4H++CBkloiOHT+8e+lScLum5jxBWB+fvoW/S gBndJZYOBkdruA089lWNp5aUBW5oan0ZPKK8LmD0Y5gbsvJmv3g5do9T72bfh+os 4P9NhFuML+mjraTPc4tnDJveYWNUbHSdf74cDdm5Lpp1Ekx7MIEi0sKYKhEuBX1q B7xJqOja1j6r5kRarDaqvM+rk4XE1KprFBMj3nYXeZCrlB7RHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdjCqV1JzY9Vlu8zlimACmt0KmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGVhMGZmZTktMGY4Mi0z ZjllLWFmMzAtMjNkNDMyZmUxYzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNtGlnkpK8DMTMe1ne30YWdN3LyDxrlpxqQfYEbZ2THOrTGf301/ckF v7ws7cT9cIDyrp3H29VbZF8LcvF5uNkhAnRbElRopuU6xVuduTwmKdTycx6h36bj 5301MKm5qDEnkVgmPUXP6CoUZV7tXRFnkPGwELpeiV2SWJIuuOdcAxEIgols87DU px8zsr1OV10y6rL3tki+UMf+r20ZDiI2EKEZEU8macik4GoXaMRfGsRlQN2OBwim qGe5anAmyDyJQZwybudWD9nhXXC/KcKLMXxsH0FGpRl1XCJFrkYbRaWHXAf9I7ph GVZaGBpX0sgQa3UxyM44aTsrtEml/tc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:24:04 2025 by rpki-client