$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/31cad2ee-1a9c-38d0-8bf6-4710693034c5.roa File: 31cad2ee-1a9c-38d0-8bf6-4710693034c5.roa (raw, json) Hash identifier: CJ9SXdkEWHIjyOPRM/PU6dQmIZ1bSNv7oxerOgJlV5s= Subject key identifier: A7:5D:F3:A4:11:F3:12:52:D6:AF:FF:E3:21:8C:E8:32:E9:8E:E5:D5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B8D512FB23841FD4087524660 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/31cad2ee-1a9c-38d0-8bf6-4710693034c5.roa Signing time: Fri 17 Oct 2025 13:20:15 +0000 ROA not before: Fri 17 Oct 2025 13:20:15 +0000 ROA not after: Thu 15 Jan 2026 14:20:15 +0000 asID: 208185 IP address blocks: 68.165.64.0/19 maxlen: 19 72.245.0.0/19 maxlen: 19 72.245.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:51:2f:b2:38:41:fd:40:87:52:46:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 17 13:20:15 2025 GMT Not After : Jan 15 14:20:15 2026 GMT Subject: CN=4f7cf985-3872-4362-ba6a-19aac8a2be5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a4:8d:b7:36:10:63:4b:00:96:78:e0:61:96: 29:a0:35:d5:0d:25:f1:2f:96:c1:82:77:01:a9:29: c5:1d:fb:8f:06:7f:f7:e3:4c:6f:d8:fa:a9:7e:20: 40:d0:1d:4a:b8:e8:57:02:06:3f:5a:b3:6d:77:6d: d5:be:50:3a:77:9b:32:e6:d4:57:33:f1:5e:fa:b2: c0:5e:8c:e1:5e:6c:05:de:cb:ee:7b:3e:3d:c5:6b: 94:5f:9e:40:c3:00:d5:c5:65:75:9a:e8:67:bd:61: 08:b9:a1:48:68:0b:a8:a7:83:b1:fb:35:eb:6f:8f: fc:43:b9:b9:f1:09:65:52:8d:34:be:97:38:bd:50: d7:70:a7:53:e3:06:c7:ec:92:ea:d0:3f:44:89:24: 41:ed:be:d1:8c:3c:50:1d:19:cf:7d:49:3b:44:5e: f1:d6:54:d7:04:26:ef:4b:77:5e:0c:6b:1e:ce:b7: 2e:0d:6c:38:89:92:e2:a9:29:35:3b:96:8a:d4:d1: 32:93:cb:a8:c6:66:b2:f9:89:23:08:d3:dc:ad:f3: 98:a6:30:50:e7:e3:31:4d:a1:93:5c:aa:09:17:3a: 0e:7e:73:dd:9d:a2:d0:c6:9a:f4:7e:81:48:ac:49: 1a:90:53:da:d0:35:2f:10:7c:fb:99:67:47:18:b4: 6a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5D:F3:A4:11:F3:12:52:D6:AF:FF:E3:21:8C:E8:32:E9:8E:E5:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/31cad2ee-1a9c-38d0-8bf6-4710693034c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.64.0/19 72.245.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c7:2e:78:1c:8c:4c:4a:28:4b:50:2b:00:45:c6:54:83:8a: 36:da:e7:45:f8:f8:49:40:22:ab:1b:10:25:44:5b:40:f2:9c: b4:1a:67:18:2d:bb:80:18:e7:9e:0f:72:28:d9:2e:ec:69:37: 50:60:58:2f:48:db:ec:2c:fd:67:17:02:3d:5b:6c:81:f9:e3: ce:e8:66:8e:c7:90:e9:b8:a4:fb:d8:ee:67:70:a7:3c:70:b9: 72:21:dc:f7:00:3e:30:44:10:bf:13:28:cb:a9:9a:97:57:cd: 0f:0c:ae:6b:b3:c8:d5:2a:37:31:64:c5:05:be:a7:54:ab:d9: d4:b0:12:64:67:e8:2e:6c:13:98:80:fc:03:1c:06:f2:9d:62: ec:e3:0c:5e:b8:86:6e:d6:81:0c:95:dd:5e:71:36:0b:79:32: 8d:42:b6:4b:4e:63:bd:65:89:33:85:aa:1a:eb:eb:e0:db:f7: 9a:88:da:13:1d:15:4a:74:79:34:13:09:26:db:48:be:1b:97: db:9f:0f:ea:b3:6b:e6:80:9b:c9:8d:e7:d7:4b:70:ef:25:2a: 65:85:b5:f5:7b:89:71:cf:e3:d8:c8:92:72:82:28:1f:9a:00: 33:60:a1:d7:14:db:f2:64:48:a8:97:70:a6:d6:d4:e7:46:82: 42:83:a4:f3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuNUS+yOEH9QIdSRmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNzEzMjAxNVoXDTI2MDExNTE0MjAxNVowLzEtMCsGA1UEAxMk NGY3Y2Y5ODUtMzg3Mi00MzYyLWJhNmEtMTlhYWM4YTJiZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KSNtzYQY0sAlnjgYZYpoDXVDSXxL5bBgncB qSnFHfuPBn/340xv2PqpfiBA0B1KuOhXAgY/WrNtd23VvlA6d5sy5tRXM/Fe+rLA XozhXmwF3svuez49xWuUX55AwwDVxWV1muhnvWEIuaFIaAuop4Ox+zXrb4/8Q7m5 8QllUo00vpc4vVDXcKdT4wbH7JLq0D9EiSRB7b7RjDxQHRnPfUk7RF7x1lTXBCbv S3deDGsezrcuDWw4iZLiqSk1O5aK1NEyk8uoxmay+YkjCNPcrfOYpjBQ5+MxTaGT XKoJFzoOfnPdnaLQxpr0foFIrEkakFPa0DUvEHz7mWdHGLRqKwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKdd86QR8xJS1q//4yGM6DLpjuXVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzFjYWQyZWUtMWE5Yy0z OGQwLThiZjYtNDcxMDY5MzAzNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFRKVAAwQG SPUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGDHLngcjExKKEtQKwBFxlSDijba50X4+ElAIqsbECVEW0Dy nLQaZxgtu4AY554PcijZLuxpN1BgWC9I2+ws/WcXAj1bbIH5487oZo7HkOm4pPvY 7mdwpzxwuXIh3PcAPjBEEL8TKMupmpdXzQ8MrmuzyNUqNzFkxQW+p1Sr2dSwEmRn 6C5sE5iA/AMcBvKdYuzjDF64hm7WgQyV3V5xNgt5Mo1CtktOY71liTOFqhrr6+Db 95qI2hMdFUp0eTQTCSbbSL4bl9ufD+qza+aAm8mN59dLcO8lKmWFtfV7iXHP49jI knKCKB+aADNgodcU2/JkSKiXcKbW1OdGgkKDpPM= -----END CERTIFICATE-----Generated at Mon Oct 20 01:04:27 2025 by rpki-client