$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e350631e-5a38-3d5c-94da-fe4b4f6da5a6.roa File: e350631e-5a38-3d5c-94da-fe4b4f6da5a6.roa (raw, json) Hash identifier: OpDoiAVLg1GM+DRm17iJXWIeHP3onjOfJ9HXStxCOwI= Subject key identifier: 6B:62:D2:C4:17:25:EB:40:7E:3C:92:9A:E8:51:BD:6C:C5:EC:A7:92 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B766DC6A615E66AED3D253A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e350631e-5a38-3d5c-94da-fe4b4f6da5a6.roa Signing time: Thu 09 Oct 2025 08:34:16 +0000 ROA not before: Thu 09 Oct 2025 08:34:16 +0000 ROA not after: Wed 07 Jan 2026 09:34:16 +0000 asID: 152689 IP address blocks: 68.165.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:6d:c6:a6:15:e6:6a:ed:3d:25:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 9 08:34:16 2025 GMT Not After : Jan 7 09:34:16 2026 GMT Subject: CN=76f8af96-ea2b-4d75-b92d-4bcfc359b019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7c:4a:e0:9c:23:e2:ff:9a:2f:81:68:f8:47: 57:cc:8c:63:ca:97:3f:7e:78:50:58:ab:e5:6f:7e: b3:d5:8e:a3:e0:7e:2c:30:51:e8:0c:78:d6:70:f0: 8f:10:86:95:0c:30:81:f2:06:4e:4f:48:a3:29:98: 6e:1f:35:fc:45:29:1c:9a:18:1a:bb:c6:7d:bb:8b: c7:cf:16:b6:b9:69:b0:62:e4:c5:44:11:73:aa:f8: f3:57:47:12:20:76:9d:69:6f:5c:e7:95:85:19:02: 29:cf:6d:a0:44:35:42:cb:40:ef:68:25:e7:ed:51: 5d:97:62:da:65:f3:f0:1c:fb:c0:48:1d:f7:46:df: ad:4e:99:f1:d6:b2:1d:ec:4c:ad:c9:a4:bc:70:5a: 71:fb:0a:40:7f:83:c1:3a:78:1b:7f:6d:cf:d9:89: d3:88:b5:1b:9f:18:cb:4a:df:de:23:83:67:43:0e: a9:a8:2a:f4:ee:09:88:3c:5a:56:95:cc:a2:58:f2: c1:26:36:da:7d:05:8b:a3:1b:ff:28:bb:ee:79:29: 85:ac:86:62:ee:c8:67:21:cc:2c:15:c7:bc:e9:c7: b6:4a:62:03:98:51:f3:f0:3d:d7:77:60:0b:0e:40: f9:83:9a:41:27:77:86:dd:cd:38:b7:e6:97:a2:7d: 9c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:62:D2:C4:17:25:EB:40:7E:3C:92:9A:E8:51:BD:6C:C5:EC:A7:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e350631e-5a38-3d5c-94da-fe4b4f6da5a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:5d:f0:72:3b:bc:86:92:df:86:9f:c9:77:d4:72:8f:f8:a6: b7:ae:e3:89:62:aa:49:c4:86:86:7b:9c:c1:8a:a2:7a:88:d4: 67:90:e5:15:20:36:96:ad:10:7b:65:a0:19:67:81:c7:5c:a0: 68:d1:58:56:d3:52:ec:8e:26:11:3c:d8:8e:44:4a:48:e7:54: 9a:28:5f:33:10:1c:bd:3c:8b:94:c4:62:93:96:56:59:b3:03: 94:e1:90:1e:60:6d:42:67:f2:7c:24:c6:05:f1:01:d6:a3:8a: a1:f3:67:0f:94:1f:f4:f7:bf:3b:47:bd:8b:ad:53:7d:13:0e: a2:a2:71:19:05:a5:60:e1:54:c9:9b:46:ee:b2:de:0f:5d:27: bd:08:93:6d:13:7b:1d:2a:ad:da:e9:34:49:53:93:40:2a:02: e7:3c:29:ba:eb:16:96:9a:2e:1b:1d:b7:cc:4f:87:dd:7e:45: 9e:fb:8e:01:cc:c3:bd:d0:fa:98:40:27:e0:98:bc:ec:cb:c8: f2:2e:ef:d7:70:8c:87:ab:b3:c5:ed:52:f8:70:35:f8:4a:20: 0a:7e:4a:6a:c8:bb:b7:7c:46:0e:3d:61:32:65:0b:ac:d3:93: 7a:97:97:14:20:03:72:7b:ce:5b:8b:f4:48:82:9c:1a:ef:16: c0:62:5c:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2bcamFeZq7T0lOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwOTA4MzQxNloXDTI2MDEwNzA5MzQxNlowLzEtMCsGA1UEAxMk NzZmOGFmOTYtZWEyYi00ZDc1LWI5MmQtNGJjZmMzNTliMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnxK4Jwj4v+aL4Fo+EdXzIxjypc/fnhQWKvl b36z1Y6j4H4sMFHoDHjWcPCPEIaVDDCB8gZOT0ijKZhuHzX8RSkcmhgau8Z9u4vH zxa2uWmwYuTFRBFzqvjzV0cSIHadaW9c55WFGQIpz22gRDVCy0DvaCXn7VFdl2La ZfPwHPvASB33Rt+tTpnx1rId7EytyaS8cFpx+wpAf4PBOngbf23P2YnTiLUbnxjL St/eI4NnQw6pqCr07gmIPFpWlcyiWPLBJjbafQWLoxv/KLvueSmFrIZi7shnIcws Fce86ce2SmIDmFHz8D3Xd2ALDkD5g5pBJ3eG3c04t+aXon2cmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGti0sQXJetAfjySmuhRvWzF7KeSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTM1MDYzMWUtNWEzOC0z ZDVjLTk0ZGEtZmU0YjRmNmRhNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhd8HI7vIaS34afyXfUco/4preu44liqknEhoZ7nMGKonqI1GeQ5RUg NpatEHtloBlngcdcoGjRWFbTUuyOJhE82I5ESkjnVJooXzMQHL08i5TEYpOWVlmz A5ThkB5gbUJn8nwkxgXxAdajiqHzZw+UH/T3vztHvYutU30TDqKicRkFpWDhVMmb Ru6y3g9dJ70Ik20Tex0qrdrpNElTk0AqAuc8KbrrFpaaLhsdt8xPh91+RZ77jgHM w73Q+phAJ+CYvOzLyPIu79dwjIers8XtUvhwNfhKIAp+SmrIu7d8Rg49YTJlC6zT k3qXlxQgA3J7zluL9EiCnBrvFsBiXD8= -----END CERTIFICATE-----Generated at Wed Nov 5 15:29:32 2025 by rpki-client