$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa File: a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa (raw, json) Hash identifier: OeRl2sDvZxQuf62vEgS407K/dAn26u3d2RDNzJ9Rm+Q= Subject key identifier: 67:DF:AB:84:F6:61:8F:0A:6D:3E:AA:5F:50:49:10:91:A0:E5:D9:A0 Certificate issuer: /CN=dac515b7-f8d7-42ab-b935-00cc0ff3d35b Certificate serial: 010D0C9F4328584B328C3A4DA95294E54E816100 Authority key identifier: 24:23:8B:A4:70:A5:FF:E2:68:6E:8F:BB:5D:41:87:0D:A9:1E:9D:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 396163 IP address blocks: 69.194.4.0/23 maxlen: 24 104.225.212.0/23 maxlen: 24 162.251.240.0/21 maxlen: 24 198.181.60.0/23 maxlen: 24 208.84.90.0/24 maxlen: 24 208.84.92.0/23 maxlen: 24 208.117.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:3a:4d:a9:52:94:e5:4e:81:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac515b7-f8d7-42ab-b935-00cc0ff3d35b Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=10adac8e-add4-4538-af68-ff185419914f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:34:c6:70:82:ab:75:80:ed:cd:a4:4a:a3:f1: 12:40:4f:1b:d7:c7:cd:62:40:a3:39:41:3b:0e:b3: d2:84:b0:f7:57:a7:d2:98:6b:5b:d8:e2:9f:b0:4d: 63:78:15:da:bb:4b:0b:ee:b2:20:29:07:b0:c1:a1: 07:e3:37:f1:14:00:28:00:24:ce:fd:b4:eb:82:3a: 55:a4:83:29:a9:50:b4:22:ea:1c:3e:6b:ab:19:c3: 9c:6a:1e:36:ba:83:54:96:f8:03:b6:9e:ab:a9:3e: 1b:1f:10:ff:51:b5:17:4b:16:f4:e9:13:85:e0:db: 53:6c:7c:e5:e3:b8:5c:a0:24:b6:32:16:ce:b4:ef: 35:fb:6c:f7:43:0a:e2:5f:25:69:0d:7a:b3:1a:2e: 04:1b:22:5c:d7:56:b2:ff:0f:a4:e0:a7:50:93:6b: ec:de:b5:ea:e7:16:c9:90:04:8d:3b:e1:a7:00:05: 1e:61:5b:1f:96:65:e8:ed:55:fc:b4:80:4b:cd:a6: 92:b3:06:12:ce:29:54:f7:de:7f:cb:70:4d:8e:2f: 05:96:5c:5f:2d:3f:85:0e:e3:d4:8f:96:a1:11:2b: 22:e0:bb:37:ec:59:64:ca:03:04:60:93:fe:7c:d6: 7e:f5:e9:e6:5e:e0:26:47:1c:95:87:2a:3e:35:1e: 4a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DF:AB:84:F6:61:8F:0A:6D:3E:AA:5F:50:49:10:91:A0:E5:D9:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.crl X509v3 Authority Key Identifier: keyid:24:23:8B:A4:70:A5:FF:E2:68:6E:8F:BB:5D:41:87:0D:A9:1E:9D:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.cer sbgp-ipAddrBlock: critical IPv4: 69.194.4.0/23 104.225.212.0/23 162.251.240.0/21 198.181.60.0/23 208.84.90.0/24 208.84.92.0/23 208.117.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:58:46:4c:04:cf:03:4c:54:b7:5e:89:03:46:a5:f1:d3:f9: ef:6d:12:63:48:f1:f8:1a:13:82:68:be:27:61:8d:9f:8a:be: 76:27:2b:71:a9:35:2f:e0:a1:df:0d:2c:79:65:8a:09:00:4e: 12:47:f0:5e:21:5c:a9:87:c5:8d:aa:e0:48:22:e4:e2:25:21: 22:6a:d6:a3:a5:8f:63:6b:bd:2c:fe:12:c6:5d:3a:d7:c0:6f: 0d:8e:06:67:ca:a3:cf:32:de:1b:ad:d7:e2:38:c1:ac:82:9b: 31:1d:8c:8c:8c:5d:bd:dc:7d:92:18:aa:48:88:b1:3a:8c:23: 88:24:37:5e:0a:8d:6d:ea:21:5d:06:76:95:b6:34:c0:c4:19: e0:81:df:5b:21:31:85:9f:8c:7a:6f:31:3c:1a:82:37:42:15: 3a:eb:7c:5a:c7:3f:02:e6:81:fc:68:7b:7c:46:00:a1:b7:f7: 27:f2:28:fc:d0:95:bc:78:fc:50:4e:24:4c:e3:43:26:df:5d: cf:32:6b:cf:13:15:fc:96:d2:aa:81:a2:31:e3:a9:f4:b8:68: a6:c3:3f:9a:93:5e:0d:36:74:4c:97:db:a8:eb:cc:9e:29:97: f7:47:8b:1b:85:d3:ad:b2:4b:20:4b:9a:d0:62:08:01:3a:52: b7:cf:0d:bf -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEsyjDpNqVKU5U6BYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjNTE1YjctZjhkNy00MmFiLWI5MzUtMDBjYzBmZjNk MzViMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MTBhZGFjOGUtYWRkNC00NTM4LWFmNjgtZmYxODU0MTk5MTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTTGcIKrdYDtzaRKo/ESQE8b18fNYkCjOUE7 DrPShLD3V6fSmGtb2OKfsE1jeBXau0sL7rIgKQewwaEH4zfxFAAoACTO/bTrgjpV pIMpqVC0IuocPmurGcOcah42uoNUlvgDtp6rqT4bHxD/UbUXSxb06ROF4NtTbHzl 47hcoCS2MhbOtO81+2z3QwriXyVpDXqzGi4EGyJc11ay/w+k4KdQk2vs3rXq5xbJ kASNO+GnAAUeYVsflmXo7VX8tIBLzaaSswYSzilU995/y3BNji8FllxfLT+FDuPU j5ahESsi4Ls37FlkygMEYJP+fNZ+9enmXuAmRxyVhyo+NR5KtQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFGffq4T2YY8KbT6qX1BJEJGg5dmgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYWM1 MTViNy1mOGQ3LTQyYWItYjkzNS0wMGNjMGZmM2QzNWIvYTk0ZTJmZWMtYWIzMi0z OGIwLTkwMzEtOGUyYzZmMWIwZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGFjNTE1YjctZjhkNy00MmFiLWI5 MzUtMDBjYzBmZjNkMzViL2RhYzUxNWI3LWY4ZDctNDJhYi1iOTM1LTAwY2MwZmYz ZDM1Yi5jcmwwHwYDVR0jBBgwFoAUJCOLpHCl/+Jobo+7XUGHDakeneswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYWM1MTViNy1mOGQ3LTQyYWItYjkzNS0wMGNj MGZmM2QzNWIuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBRcIEAwQB aOHUAwQDovvwAwQBxrU8AwQA0FRaAwQB0FRcAwQA0HVfMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACVYRkwE zwNMVLdeiQNGpfHT+e9tEmNI8fgaE4JovidhjZ+KvnYnK3GpNS/god8NLHlligkA ThJH8F4hXKmHxY2q4Egi5OIlISJq1qOlj2NrvSz+EsZdOtfAbw2OBmfKo88y3hut 1+I4wayCmzEdjIyMXb3cfZIYqkiIsTqMI4gkN14KjW3qIV0GdpW2NMDEGeCB31sh MYWfjHpvMTwagjdCFTrrfFrHPwLmgfxoe3xGAKG39yfyKPzQlbx4/FBOJEzjQybf Xc8ya88TFfyW0qqBojHjqfS4aKbDP5qTXg02dEyX26jrzJ4pl/dHixuF062ySyBL mtBiCAE6UrfPDb8= -----END CERTIFICATE-----Generated at Mon Oct 20 04:31:12 2025 by rpki-client