$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa File: bdd949a7-e0e1-3b8e-81bc-94238a595155.roa (raw, json) Hash identifier: tkePlEqz949iw9JX1aKt2V2nVFyVQDQ/HqPj+Ous1xM= Subject key identifier: 09:B6:AE:0A:A9:63:16:CB:79:C8:76:F8:AC:B0:03:46:7D:34:6A:5B Certificate issuer: /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939 Certificate serial: 010D0C9F4328584B84E776B217DB79DD0443EF80 Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 67.226.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:76:b2:17:db:79:dd:04:43:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=064cf35e-bcf3-4611-94b1-7d7b38ee3f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:b8:25:8b:8b:80:73:03:0f:fa:16:3a:f8: 27:c1:cd:35:22:0f:cc:7b:17:ba:1c:42:6e:ff:1f: 64:6d:80:e7:8f:73:85:91:76:26:bd:1f:a0:1c:a7: d7:b4:c6:94:7a:4b:75:d1:9b:9a:48:34:4c:d0:e0: ac:72:53:69:43:9e:0b:a2:8e:8a:92:bf:4b:1f:b6: 2c:fa:a0:dd:8f:1b:44:a0:0f:5f:9e:bf:c9:00:4a: ad:e9:7d:f2:ee:4b:19:78:6e:bd:fe:14:bd:5a:3a: c0:9f:54:7c:54:70:42:b6:80:b3:5f:45:5d:ad:fd: 3e:38:2a:f0:f9:a8:47:fb:1f:9c:4c:37:d6:5a:a4: 08:64:95:ab:5c:56:73:5d:7a:63:e1:fa:dc:5b:44: de:17:37:50:fc:15:3e:24:42:43:80:21:79:4f:c3: 37:31:1a:23:d9:d7:d5:46:53:bc:9b:1f:99:da:06: 97:4b:d9:7a:09:3b:3f:f1:2b:80:31:0e:46:b9:2e: ee:a1:ee:35:9d:b6:e2:8e:0c:a4:05:08:63:71:08: 6b:83:f4:c0:e7:25:7b:1d:de:3c:47:42:76:86:86: 92:1c:f7:31:e8:9b:27:62:46:19:69:58:97:d0:fa: 9a:00:a4:c8:4d:50:c1:e3:fb:30:4e:8b:b7:af:ab: e3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B6:AE:0A:A9:63:16:CB:79:C8:76:F8:AC:B0:03:46:7D:34:6A:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl X509v3 Authority Key Identifier: keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer sbgp-ipAddrBlock: critical IPv4: 67.226.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:27:0f:a1:de:ca:cf:cd:38:20:53:d7:4c:fd:77:da:84:1c: 7a:27:f4:9c:8b:8c:3d:e6:e5:8b:75:39:79:cc:35:7a:b6:dd: 8c:5d:a7:f4:a5:a3:ce:b5:29:9a:96:ac:b3:ec:42:89:78:e1: 62:b0:60:ae:49:e2:b3:5c:55:58:32:9e:7b:85:5a:61:76:eb: 20:49:54:4a:1b:a9:d1:47:01:2e:00:a8:19:30:a6:99:97:47: ec:b5:c0:a3:bd:e1:90:67:d1:5e:51:60:30:de:cf:0a:ec:4e: 7b:00:1f:16:ab:e7:4b:dc:4b:ba:37:77:14:03:e0:7b:4e:9f: fa:de:19:66:6a:f4:90:f3:24:82:ad:02:4d:89:c2:38:36:c8: 5a:b5:07:0f:af:9d:72:0d:ac:77:59:13:08:03:3a:f0:ad:05: b1:ca:d5:4a:1b:46:2c:7f:63:d2:34:c3:91:04:c6:0b:01:c1: 3b:7f:62:58:25:85:a0:32:99:b5:e4:73:7b:7e:aa:b7:5b:4a: 5b:2e:11:15:ad:6f:c3:86:75:f0:19:d2:7c:02:7f:2e:5d:b9: 25:bc:09:33:60:c1:fe:3c:0d:90:5d:a8:60:df:2f:bb:de:54: 28:6c:42:c9:5b:bf:51:8f:78:70:c9:28:af:aa:ab:62:9a:77: bb:d8:42:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53ayF9t53QRD74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI4Y2NjYzgtNGMxZC00NTdiLWE3MDktMmYyYzVkODNj OTM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MDY0Y2YzNWUtYmNmMy00NjExLTk0YjEtN2Q3YjM4ZWUzZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLy4JYuLgHMDD/oWOvgnwc01Ig/Mexe6HEJu /x9kbYDnj3OFkXYmvR+gHKfXtMaUekt10ZuaSDRM0OCsclNpQ54Loo6Kkr9LH7Ys +qDdjxtEoA9fnr/JAEqt6X3y7ksZeG69/hS9WjrAn1R8VHBCtoCzX0Vdrf0+OCrw +ahH+x+cTDfWWqQIZJWrXFZzXXpj4frcW0TeFzdQ/BU+JEJDgCF5T8M3MRoj2dfV RlO8mx+Z2gaXS9l6CTs/8SuAMQ5GuS7uoe41nbbijgykBQhjcQhrg/TA5yV7Hd48 R0J2hoaSHPcx6JsnYkYZaViX0PqaAKTITVDB4/swTou3r6vjJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAm2rgqpYxbLech2+KywA0Z9NGpbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Mjhj Y2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJjNWQ4M2M5MzkvYmRkOTQ5YTctZTBlMS0z YjhlLTgxYmMtOTQyMzhhNTk1MTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTI4Y2NjYzgtNGMxZC00NTdiLWE3 MDktMmYyYzVkODNjOTM5LzkyOGNjY2M4LTRjMWQtNDU3Yi1hNzA5LTJmMmM1ZDgz YzkzOS5jcmwwHwYDVR0jBBgwFoAU50jP7N+pFw+ueUr7PjNtsErFiKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MjhjY2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJj NWQ4M2M5MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ+LdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUnD6Heys/NOCBT10z9d9qEHHon9JyLjD3m5Yt1OXnMNXq23Yxdp/Sl o861KZqWrLPsQol44WKwYK5J4rNcVVgynnuFWmF26yBJVEobqdFHAS4AqBkwppmX R+y1wKO94ZBn0V5RYDDezwrsTnsAHxar50vcS7o3dxQD4HtOn/reGWZq9JDzJIKt Ak2Jwjg2yFq1Bw+vnXINrHdZEwgDOvCtBbHK1UobRix/Y9I0w5EExgsBwTt/Ylgl haAymbXkc3t+qrdbSlsuERWtb8OGdfAZ0nwCfy5duSW8CTNgwf48DZBdqGDfL7ve VChsQslbv1GPeHDJKK+qq2Kad7vYQs4= -----END CERTIFICATE-----Generated at Sun Oct 19 23:21:01 2025 by rpki-client