$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/bf109f9e-5659-3acb-ada8-37cdf946b8fc.roa File: bf109f9e-5659-3acb-ada8-37cdf946b8fc.roa (raw, json) Hash identifier: JsXvFEKa+kwZEgpBH37iLh6DrEigkjmjyIcHZwrhNEk= Subject key identifier: AA:0E:FE:6B:65:26:22:2C:F6:15:04:B9:56:F1:08:F9:58:AB:0E:81 Certificate issuer: /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff Certificate serial: 010D0C9F4328584B92DCF429EA766E46C01C54C0 Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/bf109f9e-5659-3acb-ada8-37cdf946b8fc.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 35874 IP address blocks: 69.58.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f4:29:ea:76:6e:46:c0:1c:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=bd4f1d1c-4600-42f3-95a6-a63747fb9fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:60:39:a9:c1:a7:3b:73:99:83:1a:3a:45:df: 62:82:c1:86:d4:c8:d0:7b:a3:78:c2:6d:13:f2:bb: 9c:0b:a2:13:d5:7c:90:a7:48:38:9e:19:e8:fc:6d: 8b:fe:d9:28:b6:53:e0:74:99:59:95:b9:7e:68:7d: 24:a2:91:9a:64:fc:29:cb:a9:ee:04:d2:91:ce:11: 7f:2c:94:ba:c7:d3:6a:e0:f8:8f:ef:d1:1e:a5:86: 6e:b2:d8:ad:1f:ce:ca:e7:16:cb:3f:de:98:c7:34: 0b:7b:cb:97:cb:68:7b:a3:40:d0:b7:fb:e9:51:eb: a4:08:35:04:39:f7:a4:16:7d:cc:e9:03:67:ad:5a: 5f:d4:64:ae:d8:f4:5f:2c:da:9b:bb:bb:61:66:df: f5:ff:39:64:e8:b4:d2:e2:58:1a:3d:97:1f:21:0b: f9:72:f6:28:e4:9d:9d:f6:cb:bd:6b:7d:66:0e:9d: fb:a1:ec:8e:b7:7d:32:73:90:fc:9f:30:30:af:0d: b6:3f:9a:76:1e:11:43:d0:91:89:3e:33:77:c5:cf: 98:8a:5c:a4:7c:2d:80:4c:ae:e1:22:bd:4d:00:ca: e8:e7:24:7a:85:18:af:f8:b4:7e:72:67:39:29:79: 92:91:79:27:f6:5c:ef:c8:7c:23:14:da:37:5f:fc: d8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0E:FE:6B:65:26:22:2C:F6:15:04:B9:56:F1:08:F9:58:AB:0E:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/bf109f9e-5659-3acb-ada8-37cdf946b8fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl X509v3 Authority Key Identifier: keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer sbgp-ipAddrBlock: critical IPv4: 69.58.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4b:fe:57:90:e6:d3:4c:0d:eb:77:16:36:38:8a:a4:ae:0a: 1c:2d:b9:21:42:c0:49:41:ac:7b:65:8c:0f:c9:9c:30:13:3e: 9d:c2:eb:69:90:b7:86:ae:7c:1f:1d:0b:2c:b6:aa:23:65:fa: 29:de:88:6b:4c:d4:d7:d3:cd:1f:a5:42:cc:01:0b:9c:fd:5c: c7:c3:eb:2f:61:8e:73:3c:d2:45:48:c3:7c:ad:00:84:cd:e5: 95:68:52:82:f1:83:ab:7a:e6:be:4a:d2:f8:9e:7b:01:43:f8: e0:27:46:3c:1f:ba:08:15:0a:9a:0e:28:ce:a9:80:16:1f:5f: 2e:a5:8b:ca:17:53:f9:a4:f0:71:3f:d6:f4:9f:3c:22:73:43: a2:08:a9:7c:64:88:d9:fc:21:7b:fd:44:dd:a5:df:76:27:b6: 0e:c4:27:77:32:bb:27:e7:c7:08:f6:b6:a0:4d:89:d5:2e:36: 91:e6:b8:22:15:26:f9:89:b9:2f:9a:52:26:04:0c:05:ca:0e: 89:9e:0d:d7:90:5f:d9:fd:72:68:1a:bd:1a:13:fa:86:6f:5b: eb:83:e6:c8:e3:99:ad:ec:49:57:da:d8:b7:6f:37:7b:bf:a4: b7:4a:5c:51:f6:0c:ed:fd:ea:bc:f8:39:12:72:b7:d1:4f:c5: 0a:37:d5:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PQp6nZuRsAcVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZmOTUzOWUtYTY4Yy00ZWVkLWFkOTgtMjZmNjdmZjQ0 NmZmMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk YmQ0ZjFkMWMtNDYwMC00MmYzLTk1YTYtYTYzNzQ3ZmI5ZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGA5qcGnO3OZgxo6Rd9igsGG1MjQe6N4wm0T 8rucC6IT1XyQp0g4nhno/G2L/tkotlPgdJlZlbl+aH0kopGaZPwpy6nuBNKRzhF/ LJS6x9Nq4PiP79EepYZustitH87K5xbLP96YxzQLe8uXy2h7o0DQt/vpUeukCDUE OfekFn3M6QNnrVpf1GSu2PRfLNqbu7thZt/1/zlk6LTS4lgaPZcfIQv5cvYo5J2d 9su9a31mDp37oeyOt30yc5D8nzAwrw22P5p2HhFD0JGJPjN3xc+YilykfC2ATK7h Ir1NAMro5yR6hRiv+LR+cmc5KXmSkXkn9lzvyHwjFNo3X/zY1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoO/mtlJiIs9hUEuVbxCPlYqw6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5 NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2N2ZmNDQ2ZmYvYmYxMDlmOWUtNTY1OS0z YWNiLWFkYTgtMzdjZGY5NDZiOGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZmOTUzOWUtYTY4Yy00ZWVkLWFk OTgtMjZmNjdmZjQ0NmZmL2RmZjk1MzllLWE2OGMtNGVlZC1hZDk4LTI2ZjY3ZmY0 NDZmZi5jcmwwHwYDVR0jBBgwFoAUHAFNTc9v/pfaLCJJg2pEXCR0ajYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2 N2ZmNDQ2ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTomMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdL/leQ5tNMDet3FjY4iqSuChwtuSFCwElBrHtljA/JnDATPp3C62mQ t4aufB8dCyy2qiNl+ineiGtM1NfTzR+lQswBC5z9XMfD6y9hjnM80kVIw3ytAITN 5ZVoUoLxg6t65r5K0vieewFD+OAnRjwfuggVCpoOKM6pgBYfXy6li8oXU/mk8HE/ 1vSfPCJzQ6IIqXxkiNn8IXv9RN2l33Yntg7EJ3cyuyfnxwj2tqBNidUuNpHmuCIV JvmJuS+aUiYEDAXKDomeDdeQX9n9cmgavRoT+oZvW+uD5sjjma3sSVfa2LdvN3u/ pLdKXFH2DO396rz4ORJyt9FPxQo31bQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:50:23 2025 by rpki-client