$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2d8ee973-4f04-3f39-80ec-35239969bcee.roa File: 2d8ee973-4f04-3f39-80ec-35239969bcee.roa (raw, json) Hash identifier: aqgeHur9A5qDmcPiWkvUsZ8GVOy1Fsw8w5Dn0nHYRVQ= Subject key identifier: 79:7F:31:1A:64:2B:D5:97:2F:22:A1:C1:59:08:58:EC:CE:40:62:AC Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584B6BC776E0D2F0608EC6B54600 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2d8ee973-4f04-3f39-80ec-35239969bcee.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11892 IP address blocks: 168.146.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:76:e0:d2:f0:60:8e:c6:b5:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=4a8910e1-8727-4b11-a48e-b42125cdff75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:cd:05:00:91:37:ed:5d:7f:f6:67:90:d5: c4:8d:e2:42:d7:66:5d:b0:76:22:59:36:64:5c:f8: 36:26:5e:3a:00:63:5f:f4:6a:14:b7:03:01:47:99: c6:4f:07:f5:ed:1e:97:4e:92:b4:90:93:f9:3b:f4: 5b:04:8d:be:40:65:4a:86:e6:62:e5:33:0d:cc:fe: c0:98:f0:f2:bf:90:4a:43:ab:77:3d:b8:eb:33:f4: 3c:88:89:c2:59:8f:69:a0:14:0f:e2:fe:b8:97:d0: 6e:50:87:95:2f:b1:8d:6e:cd:4f:b1:53:f4:88:1a: b8:15:9a:06:27:b0:96:4b:28:0c:5f:03:a8:f9:dd: 30:f5:6a:96:12:6f:11:c1:c8:06:72:83:c3:e3:8a: eb:5e:16:89:24:b3:c9:12:59:57:03:a8:58:70:f5: 37:6f:04:23:c2:5f:1a:84:58:47:b3:f3:22:ab:cd: 36:fc:d9:a9:50:a4:79:8b:1a:a3:87:5f:e6:e6:3a: 6e:82:6f:4a:0b:8d:90:f9:c1:6d:cc:d5:73:fe:55: e0:02:78:af:75:8b:50:ab:87:67:28:6d:7d:16:d9: e6:00:2d:15:f0:a8:48:d0:5f:77:fb:ee:ed:77:24: e0:1d:b7:17:58:cb:60:2f:c5:5b:d5:31:a5:0b:46: 65:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7F:31:1A:64:2B:D5:97:2F:22:A1:C1:59:08:58:EC:CE:40:62:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2d8ee973-4f04-3f39-80ec-35239969bcee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 168.146.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:92:6e:db:c0:db:37:3c:bf:30:05:2b:9d:b5:27:07:4b:87: 36:69:14:cf:a1:34:1e:ac:39:98:28:af:09:1c:70:a7:18:fc: 83:f8:03:98:46:5a:69:34:26:8b:3a:21:9e:3c:ad:d5:48:92: 83:7d:6a:5c:5d:b5:d1:e5:5a:8b:af:a2:43:8c:18:10:33:fb: 7f:0a:ed:aa:e1:d0:1e:9e:6f:94:ad:be:77:57:9f:1e:34:96: 53:da:6f:05:de:6a:1b:18:61:4f:c7:2b:c6:f5:36:7a:78:59: b6:fb:db:0c:61:94:38:8d:51:44:dc:4c:8f:63:9a:40:39:11: 7e:0d:67:77:87:d2:cd:12:f4:64:e1:ef:11:cd:c6:af:47:6a: 6f:59:79:fe:91:db:9a:02:93:a7:4e:e9:c5:22:7f:a9:39:ce: a4:4b:c8:bd:d4:1b:60:ca:3e:8f:ca:be:65:57:10:13:71:f4: 5d:f6:00:be:e4:0d:73:3d:9e:33:eb:eb:23:d3:df:b4:7d:b9: 3b:b3:a4:45:5d:be:fd:63:0d:97:cf:a7:0c:5f:57:99:ee:dc: dd:a5:2c:09:85:2c:43:9a:fd:1c:5c:b9:43:63:83:50:42:48: b6:1d:78:19:75:2d:a0:52:51:1e:09:cc:39:f8:4f:38:83:08: 91:b2:58:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3bg0vBgjsa1RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NGE4OTEwZTEtODcyNy00YjExLWE0OGUtYjQyMTI1Y2RmZjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ/NBQCRN+1df/ZnkNXEjeJC12ZdsHYiWTZk XPg2Jl46AGNf9GoUtwMBR5nGTwf17R6XTpK0kJP5O/RbBI2+QGVKhuZi5TMNzP7A mPDyv5BKQ6t3PbjrM/Q8iInCWY9poBQP4v64l9BuUIeVL7GNbs1PsVP0iBq4FZoG J7CWSygMXwOo+d0w9WqWEm8RwcgGcoPD44rrXhaJJLPJEllXA6hYcPU3bwQjwl8a hFhHs/Miq802/NmpUKR5ixqjh1/m5jpugm9KC42Q+cFtzNVz/lXgAnivdYtQq4dn KG19FtnmAC0V8KhI0F93++7tdyTgHbcXWMtgL8Vb1TGlC0Zl5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHl/MRpkK9WXLyKhwVkIWOzOQGKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvMmQ4ZWU5NzMtNGYwNC0z ZjM5LTgwZWMtMzUyMzk5NjliY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqJJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSSbtvA2zc8vzAFK521JwdLhzZpFM+hNB6sOZgorwkccKcY/IP4A5hG Wmk0Jos6IZ48rdVIkoN9alxdtdHlWouvokOMGBAz+38K7arh0B6eb5StvndXnx40 llPabwXeahsYYU/HK8b1Nnp4Wbb72wxhlDiNUUTcTI9jmkA5EX4NZ3eH0s0S9GTh 7xHNxq9Ham9Zef6R25oCk6dO6cUif6k5zqRLyL3UG2DKPo/KvmVXEBNx9F32AL7k DXM9njPr6yPT37R9uTuzpEVdvv1jDZfPpwxfV5nu3N2lLAmFLEOa/RxcuUNjg1BC SLYdeBl1LaBSUR4JzDn4TziDCJGyWKM= -----END CERTIFICATE-----Generated at Tue Oct 21 05:10:31 2025 by rpki-client