$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/c4a9395f-51c3-34a5-aa0c-d2fe07c2f4e1.roa File: c4a9395f-51c3-34a5-aa0c-d2fe07c2f4e1.roa (raw, json) Hash identifier: JT/h0Zm3zxX5UImUCqorH6cvt9qVClOi6/ESdcJ7ZBw= Subject key identifier: 02:52:CB:67:59:93:00:12:0A:92:9A:3D:DC:2D:16:E3:7F:C0:A9:9F Certificate issuer: /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Certificate serial: 010D0C9F4328584B79BCB572157826166E795000 Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/c4a9395f-51c3-34a5-aa0c-d2fe07c2f4e1.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397422 IP address blocks: 67.210.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b5:72:15:78:26:16:6e:79:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=acebccb1-cf1e-4416-b4c2-756e361aef27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:b5:0b:07:6f:92:99:1a:dc:45:0f:10:17: a5:09:03:a4:11:03:3b:4b:99:67:a6:75:64:32:66: dd:a5:a5:b6:4f:10:cd:e9:eb:ff:a0:01:e4:5c:28: 27:45:65:e0:21:f6:82:c6:5c:c1:3c:07:09:e3:10: c5:de:73:a9:51:17:d4:0b:62:32:6a:30:c1:8b:e5: 8a:65:85:74:13:22:e2:fb:76:f5:3f:8d:79:b4:fa: b1:ac:e4:8a:71:ca:1d:2b:3f:ae:78:8a:70:6e:b5: 60:57:86:62:55:e4:9f:78:0e:63:89:1e:ce:73:6d: f2:52:41:1f:f1:6b:90:49:12:19:1f:1e:11:b5:02: 74:c4:09:01:14:ee:61:c9:8b:fe:ae:6e:d2:2a:79: 90:f0:44:b0:d6:4f:30:5a:3b:db:36:ed:09:76:3b: 92:c6:f9:bb:10:b4:4f:49:e7:c8:15:71:c9:ef:4c: eb:6d:c1:b1:8e:1e:dd:a0:1b:c6:96:9c:9b:b5:5f: 4f:66:7c:c9:89:92:b1:6f:2b:e4:20:a5:87:26:0d: ad:f8:d9:15:a4:fb:86:83:ab:ea:d0:42:6e:30:0f: 87:49:36:c4:63:80:fe:ef:f9:e6:32:55:d4:eb:14: ab:8f:44:47:5c:81:8c:cf:6d:fd:64:18:3a:c7:13: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:52:CB:67:59:93:00:12:0A:92:9A:3D:DC:2D:16:E3:7F:C0:A9:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/c4a9395f-51c3-34a5-aa0c-d2fe07c2f4e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl X509v3 Authority Key Identifier: keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer sbgp-ipAddrBlock: critical IPv4: 67.210.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c8:8a:9b:ae:55:b3:ae:e7:3a:46:6c:86:e9:fc:de:c8:c9: 93:4a:19:90:26:5e:c5:3b:7f:c9:85:66:cd:56:f5:a2:64:02: a3:0e:b6:3e:bb:54:3f:f1:35:88:46:16:3c:ac:bf:7f:db:84: 81:ae:49:59:55:2a:7b:dd:57:b5:ac:f0:4c:8c:c3:a0:10:b2: 38:08:f6:7c:1e:0f:91:a1:5b:1e:25:22:97:82:1e:2d:63:06: 5b:1a:c4:4b:79:63:53:1e:2e:9e:ad:af:8e:c4:28:51:47:83: 48:eb:59:fe:2a:18:3e:84:b6:2c:75:9c:ba:0e:12:f3:bf:09: 2c:9f:80:b4:e9:f5:90:86:c8:fc:29:99:54:af:01:0c:66:c8: 0b:dd:81:14:0f:c2:4f:41:71:89:e3:59:7d:ad:70:b4:04:be: 2f:e3:0b:38:27:ba:a9:85:91:5d:ab:47:2e:9e:f2:2f:a4:c4: 08:31:1d:c5:0c:f6:28:2c:b9:fb:f4:93:32:93:1f:ec:68:a3: d8:6f:bc:52:ec:75:ae:7e:7a:0c:51:7e:cc:83:9a:dc:cc:97: ba:90:e6:b6:fa:f2:39:2c:f3:b4:e5:45:c3:ff:0d:ee:46:44: 07:ab:0f:4a:db:0d:fb:5a:fd:14:43:72:09:52:23:a5:51:f6: 96:31:0f:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLVyFXgmFm55UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz ZmY0MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YWNlYmNjYjEtY2YxZS00NDE2LWI0YzItNzU2ZTM2MWFlZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTu1Cwdvkpka3EUPEBelCQOkEQM7S5lnpnVk MmbdpaW2TxDN6ev/oAHkXCgnRWXgIfaCxlzBPAcJ4xDF3nOpURfUC2IyajDBi+WK ZYV0EyLi+3b1P415tPqxrOSKccodKz+ueIpwbrVgV4ZiVeSfeA5jiR7Oc23yUkEf 8WuQSRIZHx4RtQJ0xAkBFO5hyYv+rm7SKnmQ8ESw1k8wWjvbNu0JdjuSxvm7ELRP SefIFXHJ70zrbcGxjh7doBvGlpybtV9PZnzJiZKxbyvkIKWHJg2t+NkVpPuGg6vq 0EJuMA+HSTbEY4D+7/nmMlXU6xSrj0RHXIGMz239ZBg6xxNU1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJSy2dZkwASCpKaPdwtFuN/wKmfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3 MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvYzRhOTM5NWYtNTFjMy0z NGE1LWFhMGMtZDJmZTA3YzJmNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9LHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPIipuuVbOu5zpGbIbp/N7IyZNKGZAmXsU7f8mFZs1W9aJkAqMOtj67 VD/xNYhGFjysv3/bhIGuSVlVKnvdV7Ws8EyMw6AQsjgI9nweD5GhWx4lIpeCHi1j BlsaxEt5Y1MeLp6tr47EKFFHg0jrWf4qGD6Etix1nLoOEvO/CSyfgLTp9ZCGyPwp mVSvAQxmyAvdgRQPwk9BcYnjWX2tcLQEvi/jCzgnuqmFkV2rRy6e8i+kxAgxHcUM 9igsufv0kzKTH+xoo9hvvFLsda5+egxRfsyDmtzMl7qQ5rb68jks87TlRcP/De5G RAerD0rbDfta/RRDcglSI6VR9pYxD90= -----END CERTIFICATE-----Generated at Mon Oct 20 20:35:01 2025 by rpki-client