$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/7ea757a6-3e0f-3408-9ea2-aa7a7d9207e3.roa File: 7ea757a6-3e0f-3408-9ea2-aa7a7d9207e3.roa (raw, json) Hash identifier: JSWmIXs7YT04PzNV8lRVpg1YYq6hzk0kOuW46L6UaL4= Subject key identifier: 66:DC:3A:38:46:C3:3E:17:F0:44:69:BE:EE:17:64:6A:F9:7A:40:A5 Certificate issuer: /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939 Certificate serial: 010D0C9F4328584B84E76F387564399F982C10E0 Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/7ea757a6-3e0f-3408-9ea2-aa7a7d9207e3.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396140 IP address blocks: 67.226.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6f:38:75:64:39:9f:98:2c:10:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=212b4661-e37f-410c-a06a-e52544e9f491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:59:57:7d:76:41:21:90:10:26:c9:6c:b7:47: 54:68:48:dd:2d:13:a5:45:15:d8:7d:84:b5:33:5e: 8a:42:b3:36:43:df:33:b7:f1:50:a7:e2:e0:ab:ca: a5:20:83:93:3f:ad:f5:d0:fa:e5:07:8b:8c:b5:a7: 2d:31:8d:48:77:4a:6e:0b:d9:14:49:21:58:d0:4e: 4f:3f:49:ed:a1:ba:05:30:4e:7d:69:dd:23:e2:8d: e8:6f:f8:31:2a:0d:64:49:fe:9a:91:ba:41:43:9c: d8:eb:e5:40:d6:a3:b6:28:b0:f8:13:93:27:23:2b: 36:2e:9e:9e:a6:38:1d:8e:8e:67:a3:30:73:37:cb: 91:6f:20:cf:76:ea:29:ee:b1:e2:10:2f:2c:7c:4d: 9d:ce:b2:be:6e:0f:71:e4:e4:76:c8:82:0f:30:40: 3a:98:d4:c9:98:65:49:a1:69:0c:b7:8f:00:9d:a9: 56:7d:38:33:f1:5e:b0:6e:bd:6a:35:c7:57:46:b3: b2:ab:cf:3c:ac:ed:30:00:bf:1b:f8:73:0a:1c:c8: be:e1:cd:dd:8e:b4:d0:c0:f1:59:4f:96:a2:ba:11: 30:c7:0e:ea:7e:8e:2b:b8:84:8b:46:e2:80:f0:df: 72:ea:f1:e9:b9:5f:ab:7d:0d:68:48:ba:1c:c4:2b: f2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DC:3A:38:46:C3:3E:17:F0:44:69:BE:EE:17:64:6A:F9:7A:40:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/7ea757a6-3e0f-3408-9ea2-aa7a7d9207e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl X509v3 Authority Key Identifier: keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer sbgp-ipAddrBlock: critical IPv4: 67.226.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c2:87:6b:e9:86:0a:8e:1d:bb:f6:ee:37:3c:b7:bf:cb:56: fc:21:07:d3:da:db:ba:d7:6d:91:8f:c7:7e:1b:5a:11:c1:ac: 4a:db:d1:5a:a9:98:ef:19:3b:54:9e:d8:18:70:d1:40:9a:b2: 27:7a:d2:ca:5f:00:66:6b:99:64:a2:7c:e6:4e:8f:c2:2b:0a: 0e:f3:ab:0a:1f:f3:6d:27:21:d5:da:f1:7e:7d:e0:d4:af:63: 22:15:11:22:d8:6a:b3:dd:80:21:f6:62:75:17:2b:b5:4f:75: 74:0e:e9:12:ca:18:f0:4c:d8:bd:4b:d3:8a:3f:2c:7a:ce:d8: d6:f9:44:16:b8:e3:b6:e9:0c:f2:74:9a:b2:1e:72:d5:12:74: 7f:e5:36:88:a7:36:31:2a:e0:8e:25:22:a5:4c:83:15:11:cf: 23:99:a4:f8:55:90:ca:8a:dc:44:01:bc:83:7f:04:bb:c1:2b: fc:67:0e:48:f6:5e:a2:d2:c3:77:44:a5:8c:6f:a3:f4:77:4a: f8:81:1a:23:ac:36:a2:78:50:97:47:08:9b:b4:ba:6e:e2:2f: e3:11:d5:27:21:b3:85:33:fe:fc:69:2c:a0:70:20:3c:2a:13: 97:83:0f:92:58:d1:8b:24:53:15:a8:f3:71:3f:ae:55:ee:54: d7:09:d8:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE5284dWQ5n5gsEOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI4Y2NjYzgtNGMxZC00NTdiLWE3MDktMmYyYzVkODNj OTM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MjEyYjQ2NjEtZTM3Zi00MTBjLWEwNmEtZTUyNTQ0ZTlmNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1lXfXZBIZAQJslst0dUaEjdLROlRRXYfYS1 M16KQrM2Q98zt/FQp+Lgq8qlIIOTP6310PrlB4uMtactMY1Id0puC9kUSSFY0E5P P0ntoboFME59ad0j4o3ob/gxKg1kSf6akbpBQ5zY6+VA1qO2KLD4E5MnIys2Lp6e pjgdjo5nozBzN8uRbyDPduop7rHiEC8sfE2dzrK+bg9x5OR2yIIPMEA6mNTJmGVJ oWkMt48AnalWfTgz8V6wbr1qNcdXRrOyq888rO0wAL8b+HMKHMi+4c3djrTQwPFZ T5aiuhEwxw7qfo4ruISLRuKA8N9y6vHpuV+rfQ1oSLocxCvy/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbcOjhGwz4X8ERpvu4XZGr5ekClMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Mjhj Y2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJjNWQ4M2M5MzkvN2VhNzU3YTYtM2UwZi0z NDA4LTllYTItYWE3YTdkOTIwN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTI4Y2NjYzgtNGMxZC00NTdiLWE3 MDktMmYyYzVkODNjOTM5LzkyOGNjY2M4LTRjMWQtNDU3Yi1hNzA5LTJmMmM1ZDgz YzkzOS5jcmwwHwYDVR0jBBgwFoAU50jP7N+pFw+ueUr7PjNtsErFiKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MjhjY2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJj NWQ4M2M5MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ+LdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3Ch2vphgqOHbv27jc8t7/LVvwhB9Pa27rXbZGPx34bWhHBrErb0Vqp mO8ZO1Se2Bhw0UCasid60spfAGZrmWSifOZOj8IrCg7zqwof820nIdXa8X594NSv YyIVESLYarPdgCH2YnUXK7VPdXQO6RLKGPBM2L1L04o/LHrO2Nb5RBa447bpDPJ0 mrIectUSdH/lNoinNjEq4I4lIqVMgxURzyOZpPhVkMqK3EQBvIN/BLvBK/xnDkj2 XqLSw3dEpYxvo/R3SviBGiOsNqJ4UJdHCJu0um7iL+MR1Schs4Uz/vxpLKBwIDwq E5eDD5JY0YskUxWo83E/rlXuVNcJ2Ho= -----END CERTIFICATE-----Generated at Mon Oct 20 15:50:22 2025 by rpki-client