$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/04ca4493-92f5-337d-b186-db2cfa6ac49b.roa File: 04ca4493-92f5-337d-b186-db2cfa6ac49b.roa (raw, json) Hash identifier: aMNMw0T1f2BRiZXVMRB+YR+NXmsCtw5FizoL807/qfE= Subject key identifier: 75:42:FC:BA:B6:FE:D4:D7:65:60:AA:EF:23:4E:94:71:1A:CE:B1:64 Certificate issuer: /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Certificate serial: 010D0C9F4328584B79BCB581C9DE5DFBC4F90CC0 Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/04ca4493-92f5-337d-b186-db2cfa6ac49b.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397422 IP address blocks: 67.210.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b5:81:c9:de:5d:fb:c4:f9:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=f1963f6a-3788-4d30-8a33-04345fd8b598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ef:89:8b:63:d3:b0:59:92:d3:95:dd:f7:58: ff:28:04:71:bd:7b:64:c2:5a:33:97:97:e2:41:f0: 7f:e2:bc:2b:e3:55:39:28:2d:e8:4a:08:ca:1f:dc: 7b:74:c1:80:4b:27:b0:97:33:0a:9b:a4:04:16:ac: 93:1c:7a:fa:4a:8d:57:89:90:63:c9:dc:bb:64:68: a5:b1:21:c2:5c:53:fd:59:f0:b3:65:b4:32:0a:2e: 6f:72:f1:b6:98:fd:6e:7f:f3:70:17:ce:1c:61:a6: 14:dd:f4:27:25:7e:34:dd:72:7e:97:0d:59:98:eb: f4:92:16:6a:82:c2:db:3e:ef:56:97:f9:02:a9:4e: 19:29:31:c3:40:c7:ba:dd:ae:f2:75:73:af:c7:db: ca:57:f0:3a:a2:bd:92:fd:df:92:4b:bb:5b:9d:a6: 5d:6d:74:50:c7:dd:0a:db:7c:a2:63:b9:af:b2:ae: 02:30:d3:81:c0:f5:d0:27:33:50:7a:1d:48:00:fc: 02:75:30:09:fa:0e:02:17:98:1c:01:35:7d:61:69: bf:1a:d1:e7:aa:11:6b:9f:3e:02:f5:1a:ac:83:04: 4c:df:45:27:43:fd:90:e0:0d:99:7d:c3:b4:bc:e2: 70:07:37:72:2c:5c:24:8f:18:aa:1c:dc:e6:cd:61: 1a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:42:FC:BA:B6:FE:D4:D7:65:60:AA:EF:23:4E:94:71:1A:CE:B1:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/04ca4493-92f5-337d-b186-db2cfa6ac49b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl X509v3 Authority Key Identifier: keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer sbgp-ipAddrBlock: critical IPv4: 67.210.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:bf:88:2a:d4:ee:2a:b6:b5:f9:26:04:ff:57:48:8e:9b:c6: e1:73:0f:e5:fc:88:e5:16:36:c5:3d:75:86:b0:d7:9c:05:fc: 83:8f:8e:40:a2:4b:52:28:45:87:4e:fc:0b:de:bd:4c:68:3e: 1e:04:30:93:9d:18:a7:14:0c:05:62:b0:c9:91:09:60:7b:48: 0d:27:40:7c:f1:36:f9:b1:5a:99:5a:e6:f7:f1:9e:7a:e4:29: ea:03:10:de:8d:6d:e0:b8:44:eb:f6:27:69:48:25:48:52:88: 8b:c7:da:44:61:e7:bc:0e:af:1e:f3:ee:7b:12:75:e0:86:df: ae:41:dc:d0:d8:f3:77:05:7f:25:2a:cd:42:6b:2c:93:9c:0f: a2:f4:8a:9e:3d:16:66:c8:1b:ff:04:11:54:e9:73:d9:43:9a: 70:3f:f0:99:58:d3:85:e7:b6:f3:bf:4b:30:17:c3:9f:46:d4: 0b:eb:26:86:ee:47:3e:cd:eb:c2:d3:d5:b2:e1:ce:af:7a:3e: 48:20:92:30:ef:08:6b:16:8f:c4:a0:06:2b:a4:11:9e:9f:db: 2b:c7:d9:9a:fd:17:71:5e:4b:e9:90:e3:8a:4d:9b:ee:f9:4b: eb:0a:03:98:16:46:7b:a4:94:86:53:56:d5:ff:af:2f:7b:8a: 76:d2:e6:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLWByd5d+8T5DMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz ZmY0MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZjE5NjNmNmEtMzc4OC00ZDMwLThhMzMtMDQzNDVmZDhiNTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw++Ji2PTsFmS05Xd91j/KARxvXtkwlozl5fi QfB/4rwr41U5KC3oSgjKH9x7dMGASyewlzMKm6QEFqyTHHr6So1XiZBjydy7ZGil sSHCXFP9WfCzZbQyCi5vcvG2mP1uf/NwF84cYaYU3fQnJX403XJ+lw1ZmOv0khZq gsLbPu9Wl/kCqU4ZKTHDQMe63a7ydXOvx9vKV/A6or2S/d+SS7tbnaZdbXRQx90K 23yiY7mvsq4CMNOBwPXQJzNQeh1IAPwCdTAJ+g4CF5gcATV9YWm/GtHnqhFrnz4C 9RqsgwRM30UnQ/2Q4A2ZfcO0vOJwBzdyLFwkjxiqHNzmzWEaUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVC/Lq2/tTXZWCq7yNOlHEazrFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3 MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvMDRjYTQ0OTMtOTJmNS0z MzdkLWIxODYtZGIyY2ZhNmFjNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ9LIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm/iCrU7iq2tfkmBP9XSI6bxuFzD+X8iOUWNsU9dYaw15wF/IOPjkCi S1IoRYdO/AvevUxoPh4EMJOdGKcUDAVisMmRCWB7SA0nQHzxNvmxWpla5vfxnnrk KeoDEN6NbeC4ROv2J2lIJUhSiIvH2kRh57wOrx7z7nsSdeCG365B3NDY83cFfyUq zUJrLJOcD6L0ip49FmbIG/8EEVTpc9lDmnA/8JlY04XntvO/SzAXw59G1AvrJobu Rz7N68LT1bLhzq96PkggkjDvCGsWj8SgBiukEZ6f2yvH2Zr9F3FeS+mQ44pNm+75 S+sKA5gWRnuklIZTVtX/ry97inbS5lw= -----END CERTIFICATE-----Generated at Mon Oct 20 20:28:01 2025 by rpki-client