$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa File: 14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa (raw, json) Hash identifier: E0BcQPVEgvBICyMai3YLRjrX7LlnwWC+0/J2SJjJtUs= Subject key identifier: 9D:66:A7:D4:6A:C8:B9:18:46:5D:1E:EB:0C:8B:E8:6B:F6:99:43:1C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B583CA96A6054C5DF997F2D80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 54004 IP address blocks: 68.182.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:a9:6a:60:54:c5:df:99:7f:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=29423d1f-494b-44e5-bf75-cb9faaa4cc18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1b:af:05:91:1e:70:24:9c:61:dd:ec:2e:7f: 93:c7:5a:cf:1d:30:a6:2b:ba:02:88:ee:35:23:4a: 97:21:27:56:4f:2c:37:bd:68:5f:84:01:97:1b:01: 4f:ef:29:ee:03:43:54:13:45:3e:83:9f:f5:fa:2e: 30:f6:39:1a:8d:4a:d4:5a:53:c9:1d:4a:86:24:88: df:08:89:e2:8d:27:23:db:43:54:be:6f:6d:74:98: c5:80:93:a9:98:c1:11:f6:85:8b:b9:1a:ec:e0:8d: 96:ca:d7:6e:42:c2:74:60:f6:d9:32:2e:ae:69:d4: 7c:d6:1e:10:70:b6:b9:ac:91:73:70:ba:80:97:35: be:a7:89:e4:d5:77:89:8d:06:44:d7:03:f4:c4:c7: f4:6c:7e:0f:43:c1:21:17:b3:93:63:a3:78:41:a4: 8e:c6:cd:81:14:1a:b7:6d:9c:66:df:0a:69:50:ef: 15:ce:be:03:c0:8b:b1:0c:ae:a6:95:24:96:26:df: 30:48:bb:b5:f9:d3:0e:8d:70:e4:2b:d3:04:fd:d9: 53:93:b9:bc:74:e3:bf:53:70:30:00:f4:05:76:95: f2:32:48:98:94:7f:29:0b:c7:55:17:30:0d:80:99: a2:12:ef:56:99:ef:36:b0:c9:c9:6d:80:af:80:05: ea:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:66:A7:D4:6A:C8:B9:18:46:5D:1E:EB:0C:8B:E8:6B:F6:99:43:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:81:e9:d7:d6:25:e3:45:4c:3d:f8:5b:16:ae:b5:b3:fc:96: 45:bf:a3:b6:05:dc:ac:1f:4e:32:18:4d:a2:14:21:f1:6b:5f: ab:ac:e3:fe:47:c4:ea:4d:d8:74:dc:8c:e5:ec:c1:31:88:d0: 8a:23:86:00:5e:02:70:41:ae:3b:be:1e:c3:31:99:14:16:f6: 68:b3:0c:36:a9:75:7a:64:4a:bf:c5:b6:07:68:15:82:0a:ce: 9b:63:d5:3e:e5:7c:e8:b5:75:7c:89:55:13:46:4e:2f:20:80: 42:8a:b4:48:cb:d2:1a:a0:98:78:33:08:03:10:ff:dd:88:70: f9:29:54:20:60:59:ca:cd:65:f6:1e:f2:6c:45:36:6f:a1:b0: e9:9e:0c:00:72:5d:7e:09:96:c1:d8:e5:68:8f:cc:d5:7f:f1: fb:f6:11:07:5f:11:3d:fb:0a:67:d8:bb:10:ab:be:9e:88:af: 90:8a:d5:b4:e3:47:f0:da:1f:06:8f:08:75:61:42:50:53:77: 24:4a:3c:07:c0:3f:ad:bd:0b:a4:33:3b:99:94:c5:49:28:53: bb:6e:2a:16:d2:59:09:c7:e3:92:f7:35:85:9b:52:35:35:89: e6:bf:94:f7:65:dd:9c:8f:1a:4f:e7:9a:38:71:c3:46:e8:04: c3:88:20:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKlqYFTF35l/LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk Mjk0MjNkMWYtNDk0Yi00NGU1LWJmNzUtY2I5ZmFhYTRjYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxuvBZEecCScYd3sLn+Tx1rPHTCmK7oCiO41 I0qXISdWTyw3vWhfhAGXGwFP7ynuA0NUE0U+g5/1+i4w9jkajUrUWlPJHUqGJIjf CInijScj20NUvm9tdJjFgJOpmMER9oWLuRrs4I2WytduQsJ0YPbZMi6uadR81h4Q cLa5rJFzcLqAlzW+p4nk1XeJjQZE1wP0xMf0bH4PQ8EhF7OTY6N4QaSOxs2BFBq3 bZxm3wppUO8Vzr4DwIuxDK6mlSSWJt8wSLu1+dMOjXDkK9ME/dlTk7m8dOO/U3Aw APQFdpXyMkiYlH8pC8dVFzANgJmiEu9Wme82sMnJbYCvgAXqSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1mp9RqyLkYRl0e6wyL6Gv2mUMcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTRlMDIwYTYtOGRlOS0z YjhhLTg3ZjItMTdhOWRiMWFhYmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRLbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKB6dfWJeNFTD34WxautbP8lkW/o7YF3KwfTjIYTaIUIfFrX6us4/5H xOpN2HTcjOXswTGI0IojhgBeAnBBrju+HsMxmRQW9mizDDapdXpkSr/FtgdoFYIK zptj1T7lfOi1dXyJVRNGTi8ggEKKtEjL0hqgmHgzCAMQ/92IcPkpVCBgWcrNZfYe 8mxFNm+hsOmeDAByXX4JlsHY5WiPzNV/8fv2EQdfET37CmfYuxCrvp6Ir5CK1bTj R/DaHwaPCHVhQlBTdyRKPAfAP629C6QzO5mUxUkoU7tuKhbSWQnH45L3NYWbUjU1 iea/lPdl3ZyPGk/nmjhxw0boBMOIII8= -----END CERTIFICATE-----Generated at Sun Oct 19 20:19:11 2025 by rpki-client