$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/deb8fbf3-dcfc-3922-9f27-5dada7048104.roa File: deb8fbf3-dcfc-3922-9f27-5dada7048104.roa (raw, json) Hash identifier: t787NqNAgOyDVeElownUO1kQHZuT2hrpBQeRvbzrRDM= Subject key identifier: 3E:DE:7D:EF:F4:0F:08:B6:65:0E:43:F7:1E:07:AE:95:D3:2C:68:32 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B766D8F96EA566A9A566CA980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/deb8fbf3-dcfc-3922-9f27-5dada7048104.roa Signing time: Thu 09 Oct 2025 08:33:50 +0000 ROA not before: Thu 09 Oct 2025 08:33:50 +0000 ROA not after: Wed 07 Jan 2026 09:33:50 +0000 asID: 152689 IP address blocks: 68.164.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:6d:8f:96:ea:56:6a:9a:56:6c:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 9 08:33:50 2025 GMT Not After : Jan 7 09:33:50 2026 GMT Subject: CN=82e3b9be-44b0-45d6-b333-9990105567c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:26:d1:5b:4c:bb:21:1a:28:6e:17:d1:01:5a: 7b:bf:97:c5:63:e8:58:e5:1d:21:09:0e:8c:b4:eb: 83:85:1b:8a:a8:c8:76:a4:e1:da:b0:b1:ea:99:a0: f0:42:81:70:a9:12:84:2d:bb:c8:04:95:46:2b:b8: 11:70:8b:cd:6b:56:59:6a:02:49:1e:20:fa:c5:29: 18:56:66:ce:21:c2:47:50:6b:a0:95:22:7e:f5:a8: 76:58:66:23:b1:68:fe:b3:24:8a:e0:8c:1e:98:03: cd:6f:95:01:4f:8f:eb:13:6e:6c:99:26:d1:0f:a5: ab:9d:d3:db:cd:45:65:55:10:95:83:88:98:7f:1b: e3:c5:96:3b:dd:13:55:f9:aa:25:43:44:0b:a9:3e: c6:52:13:04:de:4d:48:44:ba:fa:81:57:18:7d:e3: 3d:94:47:55:b3:2f:65:08:5e:54:f4:42:11:9b:3c: 65:52:d1:d4:c3:c9:76:75:41:d2:4d:44:95:54:4f: bd:14:f4:55:d5:ea:99:d9:26:c0:6d:35:3c:4a:72: 0f:16:b1:9d:e2:27:93:cb:cf:11:53:1e:d0:61:a8: b8:c5:d2:ff:0e:63:bc:3b:e9:6b:b8:88:27:9e:26: 73:2c:27:cc:4c:c2:23:a5:72:71:31:c3:8c:68:41: 1a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DE:7D:EF:F4:0F:08:B6:65:0E:43:F7:1E:07:AE:95:D3:2C:68:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/deb8fbf3-dcfc-3922-9f27-5dada7048104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:f7:c6:64:cc:b1:41:98:fc:f2:2a:65:15:bf:6d:99:5c:6f: 2b:64:78:c7:7a:f1:63:2b:d4:d3:42:d3:4d:0e:2a:0c:3e:ba: ad:a5:0d:d3:d7:ec:9c:6c:09:43:8f:6a:39:a2:07:4c:98:72: 36:25:6a:1e:b7:d8:2c:98:51:1a:20:5f:92:7d:fb:ba:f9:82: 4c:d7:4b:fd:c0:a1:7d:7b:69:61:61:8c:f2:92:8d:60:e8:c8: f5:c1:56:67:9a:ff:1d:7b:12:53:d1:9f:06:ac:ec:c0:82:b1: 69:c1:5c:74:52:0e:6f:ef:15:5d:47:5d:7e:94:87:d1:7f:29: 98:37:46:19:70:81:e0:48:9d:c9:53:da:3a:eb:09:d1:15:30: 13:20:68:eb:88:ad:3d:bc:ec:8e:09:98:be:40:a0:c1:b6:6a: f8:55:e0:ea:60:17:d8:d9:53:9f:a3:a9:32:44:63:96:31:8f: e2:8c:0d:41:31:57:46:30:87:1f:75:1e:79:8f:c2:a7:26:e7: ed:45:19:07:93:82:91:3c:9e:73:3a:2f:55:bf:cb:b9:65:a4: f3:e5:a4:0d:61:0a:05:15:7d:27:43:95:a2:d7:78:0f:46:11: 87:7a:12:bc:70:1d:ea:30:00:25:3a:4a:62:33:8b:33:f1:9c: df:00:dd:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2bY+W6lZqmlZsqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwOTA4MzM1MFoXDTI2MDEwNzA5MzM1MFowLzEtMCsGA1UEAxMk ODJlM2I5YmUtNDRiMC00NWQ2LWIzMzMtOTk5MDEwNTU2N2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ybRW0y7IRoobhfRAVp7v5fFY+hY5R0hCQ6M tOuDhRuKqMh2pOHasLHqmaDwQoFwqRKELbvIBJVGK7gRcIvNa1ZZagJJHiD6xSkY VmbOIcJHUGuglSJ+9ah2WGYjsWj+sySK4IwemAPNb5UBT4/rE25smSbRD6WrndPb zUVlVRCVg4iYfxvjxZY73RNV+aolQ0QLqT7GUhME3k1IRLr6gVcYfeM9lEdVsy9l CF5U9EIRmzxlUtHUw8l2dUHSTUSVVE+9FPRV1eqZ2SbAbTU8SnIPFrGd4ieTy88R Ux7QYai4xdL/DmO8O+lruIgnniZzLCfMTMIjpXJxMcOMaEEanwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7efe/0Dwi2ZQ5D9x4HrpXTLGgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGViOGZiZjMtZGNmYy0z OTIyLTlmMjctNWRhZGE3MDQ4MTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr3xmTMsUGY/PIqZRW/bZlcbytkeMd68WMr1NNC000OKgw+uq2lDdPX 7JxsCUOPajmiB0yYcjYlah632CyYURogX5J9+7r5gkzXS/3AoX17aWFhjPKSjWDo yPXBVmea/x17ElPRnwas7MCCsWnBXHRSDm/vFV1HXX6Uh9F/KZg3RhlwgeBInclT 2jrrCdEVMBMgaOuIrT287I4JmL5AoMG2avhV4OpgF9jZU5+jqTJEY5Yxj+KMDUEx V0Ywhx91HnmPwqcm5+1FGQeTgpE8nnM6L1W/y7llpPPlpA1hCgUVfSdDlaLXeA9G EYd6ErxwHeowACU6SmIzizPxnN8A3ck= -----END CERTIFICATE-----Generated at Wed Nov 5 21:54:11 2025 by rpki-client