$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e37df8f8-1a64-3cdd-9dc9-be3c141c4a3e.roa File: e37df8f8-1a64-3cdd-9dc9-be3c141c4a3e.roa (raw, json) Hash identifier: ykDf5FmWNzkFMNyeUuPr7Cms9XlmE3J/jtK5RtEYeZE= Subject key identifier: D1:29:72:3C:E5:B7:82:E4:BD:E0:CB:74:C3:7F:DF:FD:79:DE:C9:3C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B99D7FD9BB58F22263E152760 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e37df8f8-1a64-3cdd-9dc9-be3c141c4a3e.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 40403 IP address blocks: 69.17.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:fd:9b:b5:8f:22:26:3e:15:27:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=013ba698-1516-48ba-9d20-fd0becf96ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:c4:c7:d5:93:f4:b8:d1:64:64:bc:6a:09: 36:51:c1:59:5a:51:c1:09:24:01:70:de:a6:71:1e: 48:58:0f:20:ab:5a:86:f8:1f:71:84:91:b1:af:4b: 3c:82:7e:c7:93:d0:a3:eb:46:db:3d:67:6c:a1:50: 60:db:4f:10:e8:1e:33:75:6a:84:07:b5:0a:0b:5a: ec:fd:13:8d:98:42:80:fb:80:97:9b:53:37:f6:34: d3:c6:62:70:86:47:52:cd:09:2c:3d:b6:5d:49:c3: a8:88:73:1e:95:ee:72:7d:9f:89:1e:43:34:da:83: 8b:54:a8:11:eb:0d:91:d3:98:64:ba:6b:e1:73:e5: 73:ec:0e:2c:f3:56:52:49:78:a6:4e:35:31:31:2f: 6f:8a:41:d7:a0:5f:c9:ea:d8:42:a5:d3:65:c2:51: ec:64:12:72:7a:5a:fd:eb:f1:03:c1:fc:04:f7:be: 28:5c:22:0c:43:d9:a2:f2:60:99:5f:a9:1c:e9:9b: 9e:da:77:f8:a2:cd:00:f5:ef:12:ee:8b:91:51:7f: 8d:19:1f:d7:79:81:06:98:a8:b1:b5:ec:15:25:5a: 8e:0c:d0:76:d1:9a:40:28:7a:56:08:d5:16:fc:0a: 5c:ea:30:b2:93:39:9a:17:3a:2d:d9:c0:e9:59:67: a3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:29:72:3C:E5:B7:82:E4:BD:E0:CB:74:C3:7F:DF:FD:79:DE:C9:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e37df8f8-1a64-3cdd-9dc9-be3c141c4a3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.17.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:fb:c2:cf:98:2b:8e:74:d9:d8:cc:26:56:7c:33:2b:73:b1: 66:ae:60:a2:48:d3:0e:0b:77:af:2f:0d:bb:ca:3e:59:e8:a5: 9b:63:43:1b:44:af:58:a2:03:72:b2:bd:40:e4:24:11:be:a1: 7c:34:82:1f:d3:3d:1e:9a:2d:0c:d6:bc:36:18:16:85:dc:3d: 36:75:0e:19:84:a6:40:09:ab:c8:60:8e:a2:84:01:b6:fe:93: c1:94:8c:2e:d4:dc:04:58:4f:44:dd:77:2b:6b:05:65:96:d3: 1e:3d:f5:86:ad:fe:ee:0b:63:87:ba:f1:df:6e:03:39:f9:47: b7:41:2c:93:65:14:93:a2:54:46:f5:c9:d5:3a:f0:a9:f6:7f: d8:56:16:d5:ff:48:81:21:c4:81:5d:e7:5a:67:64:4b:46:53: 65:92:ea:df:b0:e8:20:a2:71:73:9a:0f:68:4f:53:63:36:0c: bf:3b:c6:3f:6a:e3:df:45:57:18:c5:98:eb:46:71:6c:83:7d: f4:62:d2:38:26:f0:0f:c7:53:61:c3:58:a8:ab:86:64:a2:c2: 05:4f:a4:fa:64:36:ec:33:86:d9:9c:ea:a9:51:44:bb:72:72: 63:4c:71:7e:27:08:99:ce:ac:fd:32:75:0e:eb:b1:eb:a1:33: 44:56:9d:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1/2btY8iJj4VJ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MDEzYmE2OTgtMTUxNi00OGJhLTlkMjAtZmQwYmVjZjk2ZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHzEx9WT9LjRZGS8agk2UcFZWlHBCSQBcN6m cR5IWA8gq1qG+B9xhJGxr0s8gn7Hk9Cj60bbPWdsoVBg208Q6B4zdWqEB7UKC1rs /RONmEKA+4CXm1M39jTTxmJwhkdSzQksPbZdScOoiHMele5yfZ+JHkM02oOLVKgR 6w2R05hkumvhc+Vz7A4s81ZSSXimTjUxMS9vikHXoF/J6thCpdNlwlHsZBJyelr9 6/EDwfwE974oXCIMQ9mi8mCZX6kc6Zue2nf4os0A9e8S7ouRUX+NGR/XeYEGmKix tewVJVqODNB20ZpAKHpWCNUW/Apc6jCykzmaFzot2cDpWWejBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEpcjzlt4LkveDLdMN/3/153sk8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTM3ZGY4ZjgtMWE2NC0z Y2RkLTlkYzktYmUzYzE0MWM0YTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERREgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK77ws+YK4502djMJlZ8MytzsWauYKJI0w4Ld68vDbvKPlnopZtjQxtE r1iiA3KyvUDkJBG+oXw0gh/TPR6aLQzWvDYYFoXcPTZ1DhmEpkAJq8hgjqKEAbb+ k8GUjC7U3ARYT0TddytrBWWW0x499Yat/u4LY4e68d9uAzn5R7dBLJNlFJOiVEb1 ydU68Kn2f9hWFtX/SIEhxIFd51pnZEtGU2WS6t+w6CCicXOaD2hPU2M2DL87xj9q 499FVxjFmOtGcWyDffRi0jgm8A/HU2HDWKirhmSiwgVPpPpkNuwzhtmc6qlRRLty cmNMcX4nCJnOrP0ydQ7rseuhM0RWnTk= -----END CERTIFICATE-----Generated at Wed Nov 5 11:48:39 2025 by rpki-client