$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4cebcf62-1b09-3957-a850-8fcf5dd0472e.roa File: 4cebcf62-1b09-3957-a850-8fcf5dd0472e.roa (raw, json) Hash identifier: UM8660ssnFA1DZyrGf6CxA/DhpDRp9LLotYPy8FN3tA= Subject key identifier: D3:E2:31:9C:EF:DF:39:50:D1:5A:CA:4D:98:38:00:59:66:2E:11:33 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B87B21622C66F2A484E470AC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4cebcf62-1b09-3957-a850-8fcf5dd0472e.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 40934 IP address blocks: 69.167.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:16:22:c6:6f:2a:48:4e:47:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=fb1aa571-ecab-430c-ae9a-b072be818060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0e:6a:8e:06:65:1d:eb:65:2e:fe:35:da:d3: f5:ae:ee:1b:d2:f7:d1:a4:f4:7e:9b:44:e7:b5:8e: 55:a6:eb:b7:ec:16:a6:5c:1f:de:88:9f:14:83:5f: 26:9a:67:14:9d:33:d4:b6:5c:9a:9b:64:c6:a7:dd: 90:d3:27:8a:37:e4:64:52:b5:85:0a:d2:92:38:dc: ed:83:60:33:d8:37:d0:26:ab:97:c4:56:12:4e:ff: 07:68:a6:63:d9:8b:f8:71:89:ae:84:61:d0:74:c8: 49:a4:58:0b:87:59:f2:7a:f4:f7:e9:2a:b5:ef:b6: e0:7e:f5:7a:33:7e:89:4d:aa:14:ef:8d:cd:71:ad: 69:b2:11:d8:fe:19:d1:90:2f:c1:74:be:d6:10:fc: 02:8c:7e:b6:96:f2:23:48:c4:62:c8:2d:60:98:f2: 74:e5:2c:35:b9:b1:c0:0d:55:e8:53:6c:01:39:e5: 3a:65:b4:f9:fc:b9:2b:79:b5:9a:9c:8c:82:cb:61: 39:a5:a3:91:b6:22:46:94:6a:bc:84:6d:6c:ff:76: eb:7e:7f:02:b0:20:41:2b:7e:6c:53:01:da:f8:0c: bb:b3:72:bf:1f:fc:02:89:54:3c:b7:cc:93:37:d4: e2:56:e8:66:8c:ec:4b:a1:ee:a5:f4:42:4b:07:c9: b8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E2:31:9C:EF:DF:39:50:D1:5A:CA:4D:98:38:00:59:66:2E:11:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4cebcf62-1b09-3957-a850-8fcf5dd0472e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.167.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:1e:01:cb:6b:7b:96:da:79:0c:85:5a:74:c3:0e:31:3e:34: f0:21:f9:25:5b:df:02:58:b5:df:9b:86:0c:54:21:98:ae:7f: 37:b4:a6:b7:20:82:ce:17:c4:73:c7:79:2b:0a:f5:22:29:ba: 6b:da:77:e4:2f:20:50:b0:eb:33:ff:b8:df:23:11:84:e9:ca: 8e:26:1f:21:95:0e:e6:75:ca:c4:5e:fd:bc:c5:8d:6c:03:60: 42:27:7b:b6:77:79:cf:97:fd:32:fc:b8:0a:f6:5e:d7:ab:ff: bc:79:92:07:6b:a9:a7:62:35:d0:e4:9f:5e:99:54:39:75:be: 59:3c:a9:2f:09:3d:f2:27:02:09:88:58:78:33:75:c8:0d:e3: 85:13:de:aa:94:fb:c2:8a:8c:9f:39:76:e4:33:06:9a:42:ae: 15:0b:66:c1:98:0d:8b:6e:35:e5:2a:33:74:75:4f:cc:e6:5e: 98:41:13:ee:a0:65:4d:12:c2:2d:a0:a7:ea:67:de:2b:d0:34: 36:5e:84:75:4f:44:c7:70:e5:d8:08:6c:22:4b:02:b7:2f:b8: 77:3c:4b:d6:84:87:0f:2f:14:b7:72:17:e6:73:9d:d6:bd:c0: e0:75:7a:c0:98:c8:cf:a5:ac:d0:34:43:99:31:04:4a:3b:f8: ee:9b:e4:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHshYixm8qSE5HCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZmIxYWE1NzEtZWNhYi00MzBjLWFlOWEtYjA3MmJlODE4MDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww5qjgZlHetlLv412tP1ru4b0vfRpPR+m0Tn tY5Vpuu37BamXB/eiJ8Ug18mmmcUnTPUtlyam2TGp92Q0yeKN+RkUrWFCtKSONzt g2Az2DfQJquXxFYSTv8HaKZj2Yv4cYmuhGHQdMhJpFgLh1nyevT36Sq177bgfvV6 M36JTaoU743Nca1pshHY/hnRkC/BdL7WEPwCjH62lvIjSMRiyC1gmPJ05Sw1ubHA DVXoU2wBOeU6ZbT5/LkrebWanIyCy2E5paORtiJGlGq8hG1s/3brfn8CsCBBK35s UwHa+Ay7s3K/H/wCiVQ8t8yTN9TiVuhmjOxLoe6l9EJLB8m4SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPiMZzv3zlQ0VrKTZg4AFlmLhEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGNlYmNmNjItMWIwOS0z OTU3LWE4NTAtOGZjZjVkZDA0NzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARad0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4eActre5baeQyFWnTDDjE+NPAh+SVb3wJYtd+bhgxUIZiufze0prcg gs4XxHPHeSsK9SIpumvad+QvIFCw6zP/uN8jEYTpyo4mHyGVDuZ1ysRe/bzFjWwD YEIne7Z3ec+X/TL8uAr2Xter/7x5kgdrqadiNdDkn16ZVDl1vlk8qS8JPfInAgmI WHgzdcgN44UT3qqU+8KKjJ85duQzBppCrhULZsGYDYtuNeUqM3R1T8zmXphBE+6g ZU0Swi2gp+pn3ivQNDZehHVPRMdw5dgIbCJLArcvuHc8S9aEhw8vFLdyF+Zznda9 wOB1esCYyM+lrNA0Q5kxBEo7+O6b5OY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:40:12 2025 by rpki-client