$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa File: bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa (raw, json) Hash identifier: j0k4B+RbpKnPjg2mlHr7ZAKf5d1LwwVncdTBVj2WG/c= Subject key identifier: 29:A1:0F:E7:8D:13:E5:F6:68:54:66:09:C2:9F:6E:3A:93:A0:92:3F Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F4328584B821CC5292DC972466E8AD380 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 1403 IP address blocks: 67.221.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c5:29:2d:c9:72:46:6e:8a:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=6ee54d27-37be-4cdc-b901-1bd1509ac6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dc:be:0f:35:44:e9:1d:43:c1:04:5e:c2:e3: ba:73:58:67:37:0d:ab:d8:27:c3:d6:dd:06:8e:e7: cd:d6:1d:44:48:03:b5:20:68:0b:b3:7e:24:6a:f6: 90:54:9a:07:30:41:1d:c2:e2:cb:46:38:34:ac:86: e7:93:c5:7f:59:1c:54:83:9d:ec:48:dd:0c:7e:59: 6b:93:4e:d5:84:11:a1:7a:74:18:7e:e1:0e:30:59: 36:a4:8b:98:f9:ec:b4:2c:8f:4a:5e:87:38:ed:6e: 66:dd:8c:b4:f9:40:26:10:cc:44:83:0a:04:ba:06: ca:34:dc:69:53:1b:8d:ea:b5:bc:db:42:8c:1c:e1: 26:d1:aa:58:8f:94:b3:5f:f6:6f:3d:83:80:a5:3d: c2:ec:de:08:9c:f1:e4:d8:14:1b:33:3c:23:b1:f7: 5b:dc:91:25:98:9d:3a:4e:dd:4d:44:d3:93:cb:f1: 6a:7a:fb:2d:dc:a4:45:ca:32:59:c5:9c:e9:cb:d7: 92:00:62:2e:3e:06:d0:2c:db:fe:dd:7d:ee:ad:b1: cb:ee:0a:d7:27:f9:aa:45:1c:83:e9:0c:fa:20:f2: 47:54:a9:e6:e0:85:2d:4c:8e:bc:68:95:8a:eb:e5: d7:93:12:45:e1:c2:99:3a:0f:7f:8d:49:b7:85:bc: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A1:0F:E7:8D:13:E5:F6:68:54:66:09:C2:9F:6E:3A:93:A0:92:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 67.221.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:77:d8:ee:8e:a7:63:89:35:8c:2c:7a:fb:f9:af:85:19:fa: 4e:b1:51:4c:14:29:c3:0b:5c:a6:ba:d1:40:f5:8c:36:05:8d: 2d:12:0b:e3:2b:3a:d5:c2:12:4c:50:9a:08:9b:03:e4:5a:64: 0c:91:a7:83:47:0e:3b:a8:1e:89:91:73:0f:7f:1e:cb:1d:a7: 6d:10:60:52:d2:56:6b:33:20:63:bc:73:66:ba:37:c2:5a:33: 84:1a:6b:c2:54:18:1f:6f:81:ac:c9:00:2c:e2:c0:d9:ba:3d: e0:7c:93:70:c1:5a:5a:4b:fd:a7:9b:17:7b:77:97:e6:1d:db: 8d:da:17:0b:fb:3f:c5:7c:0a:fe:a0:76:74:39:a0:d0:48:5e: e6:60:a2:fe:59:1e:db:51:2d:49:bb:98:f6:72:c4:ac:ac:46: 76:38:1f:cc:31:38:46:eb:67:47:b3:7d:d4:f2:62:d2:ce:f1: 93:b4:ee:e0:a5:5e:81:9d:46:18:6f:82:3b:0e:96:b4:5d:79: a1:d5:77:5b:7f:ab:92:c6:c9:75:9b:da:27:b4:b9:87:0f:ad: 6f:03:46:48:39:e6:06:62:da:40:e2:c6:0f:32:d6:4b:11:17: f0:15:2b:4e:62:42:22:65:59:0b:fb:b6:1d:12:ee:b7:93:2b: 83:83:20:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMUpLclyRm6K04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NmVlNTRkMjctMzdiZS00Y2RjLWI5MDEtMWJkMTUwOWFjNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ny+DzVE6R1DwQRewuO6c1hnNw2r2CfD1t0G jufN1h1ESAO1IGgLs34kavaQVJoHMEEdwuLLRjg0rIbnk8V/WRxUg53sSN0Mfllr k07VhBGhenQYfuEOMFk2pIuY+ey0LI9KXoc47W5m3Yy0+UAmEMxEgwoEugbKNNxp UxuN6rW820KMHOEm0apYj5SzX/ZvPYOApT3C7N4InPHk2BQbMzwjsfdb3JElmJ06 Tt1NRNOTy/Fqevst3KRFyjJZxZzpy9eSAGIuPgbQLNv+3X3urbHL7grXJ/mqRRyD 6Qz6IPJHVKnm4IUtTI68aJWK6+XXkxJF4cKZOg9/jUm3hbyg8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmhD+eNE+X2aFRmCcKfbjqToJI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvYmQ5Y2EwMDYtMWQwOC0z YjQyLTk4YTctY2IzYjk3MjhhZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ90wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ32O6Op2OJNYwsevv5r4UZ+k6xUUwUKcMLXKa60UD1jDYFjS0SC+Mr OtXCEkxQmgibA+RaZAyRp4NHDjuoHomRcw9/Hssdp20QYFLSVmszIGO8c2a6N8Ja M4Qaa8JUGB9vgazJACziwNm6PeB8k3DBWlpL/aebF3t3l+Yd243aFwv7P8V8Cv6g dnQ5oNBIXuZgov5ZHttRLUm7mPZyxKysRnY4H8wxOEbrZ0ezfdTyYtLO8ZO07uCl XoGdRhhvgjsOlrRdeaHVd1t/q5LGyXWb2ie0uYcPrW8DRkg55gZi2kDixg8y1ksR F/AVK05iQiJlWQv7th0S7reTK4ODICQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:49 2025 by rpki-client