$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/1e51682c-b9d8-3bf4-ad93-42f10f661e4f.roa File: 1e51682c-b9d8-3bf4-ad93-42f10f661e4f.roa (raw, json) Hash identifier: MkFRXor/Uu//1aMQHfiWp3bq5gNuY4VegWxyB/alJqE= Subject key identifier: 31:84:17:B7:BC:01:55:7E:6D:48:46:A3:66:D6:E7:5A:16:B1:34:80 Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Certificate serial: 010D0C9F4328584B0CDC09AF65D4121A99B818E0 Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/1e51682c-b9d8-3bf4-ad93-42f10f661e4f.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 21803 IP address blocks: 67.223.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:09:af:65:d4:12:1a:99:b8:18:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=45df6604-294e-418e-91ed-949895afe425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2d:9d:5a:fa:60:8b:41:ab:ec:8c:05:7e:c6: 7e:d7:bb:54:a5:3e:e5:1b:59:f7:30:e9:bf:84:e7: 76:65:3f:9d:bf:c9:47:5d:e2:4b:07:f9:56:a8:d7: 6c:a6:ff:a2:28:32:21:0e:28:33:df:e2:e9:73:36: 5a:43:55:e8:f9:79:13:bd:b2:88:72:c6:7e:af:cc: 9d:6c:61:7b:7e:9e:64:ea:98:b6:66:09:c8:33:62: c7:a7:89:f6:db:40:f2:9b:34:d0:d4:3a:f3:d2:1c: 50:f9:cf:18:51:c4:81:f3:cc:03:19:6e:85:a5:b4: 39:a2:f4:47:ce:c6:13:49:0e:af:6e:f4:97:d9:68: 60:c2:36:5b:9b:bb:31:88:34:ea:0d:eb:e6:fe:af: 7b:04:30:ac:41:88:63:7d:53:99:c4:92:72:bd:97: 65:33:25:47:65:45:65:b6:18:37:8c:7a:53:f8:5b: d9:ec:ca:e4:be:4b:1c:45:a4:a8:3f:08:cb:8e:18: 75:71:b9:6e:f4:d0:93:4d:87:44:d2:8d:1b:60:c1: d9:68:42:16:33:97:56:7b:66:28:02:37:c9:7e:4e: 1a:68:18:a7:8c:ae:3a:c2:99:a2:90:24:ad:bc:1d: 37:43:4c:73:de:f7:7d:d6:c6:01:6f:fd:d8:48:48: 02:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:84:17:B7:BC:01:55:7E:6D:48:46:A3:66:D6:E7:5A:16:B1:34:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/1e51682c-b9d8-3bf4-ad93-42f10f661e4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl X509v3 Authority Key Identifier: keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer sbgp-ipAddrBlock: critical IPv4: 67.223.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:8e:63:a6:c6:c8:2d:39:ed:ed:39:e2:4b:dc:52:6e:82:58: 37:8c:da:5d:c1:d6:92:42:14:49:a7:32:93:d9:d5:09:71:7d: f5:3c:5e:c3:78:a9:2c:b2:c6:92:86:44:f8:b8:a3:7c:ad:54: a2:7b:b0:09:a7:d4:f9:12:e6:19:41:8a:66:60:83:c8:37:dd: 0c:b5:b1:93:cc:d7:07:aa:8f:3c:d1:1e:6f:0f:2a:a4:19:f4: 08:1d:0d:2f:ff:dc:18:8b:35:f6:c0:6a:9a:df:6f:2c:2e:a3: b1:08:8d:5c:5d:dc:0b:76:03:3b:0b:b0:65:61:84:0b:2e:9d: 00:af:af:0e:09:82:34:38:a4:cb:90:f8:1b:19:8b:07:d2:93: bd:d4:05:f8:fd:8c:d7:0b:db:8b:20:34:99:14:84:5d:92:af: cd:51:60:31:bd:72:9a:8c:57:db:a4:ac:da:40:36:e6:36:df: 55:6a:d1:ab:92:54:d2:2a:71:24:c3:55:e7:ba:1a:3a:d8:2b: 72:01:47:40:c0:a2:46:81:24:49:ef:ee:94:de:a6:8e:51:20: 8d:9d:40:26:80:ee:30:ce:9e:a6:5c:25:0f:33:1f:9c:47:43: 7f:93:20:a5:5f:f6:61:ba:ba:75:70:dc:af:6e:2f:18:07:7a: b9:8f:39:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3AmvZdQSGpm4GOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUx OTdhMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NDVkZjY2MDQtMjk0ZS00MThlLTkxZWQtOTQ5ODk1YWZlNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki2dWvpgi0Gr7IwFfsZ+17tUpT7lG1n3MOm/ hOd2ZT+dv8lHXeJLB/lWqNdspv+iKDIhDigz3+LpczZaQ1Xo+XkTvbKIcsZ+r8yd bGF7fp5k6pi2ZgnIM2LHp4n220DymzTQ1Drz0hxQ+c8YUcSB88wDGW6FpbQ5ovRH zsYTSQ6vbvSX2WhgwjZbm7sxiDTqDevm/q97BDCsQYhjfVOZxJJyvZdlMyVHZUVl thg3jHpT+FvZ7MrkvkscRaSoPwjLjhh1cblu9NCTTYdE0o0bYMHZaEIWM5dWe2Yo AjfJfk4aaBinjK46wpmikCStvB03Q0xz3vd91sYBb/3YSEgCHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGEF7e8AVV+bUhGo2bW51oWsTSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDVh N2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvMWU1MTY4MmMtYjlkOC0z YmY0LWFkOTMtNDJmMTBmNjYxZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdmNzYtYmNlMy00ZDg1LWE4 MWUtYzg0ZGY4ZDUxOTdhLzk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFlLWM4NGRmOGQ1 MTk3YS5jcmwwHwYDVR0jBBgwFoAUycbekH+3MjHBmmelTWkcFSB9dfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRk ZjhkNTE5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACOY6bGyC057e054kvcUm6CWDeM2l3B1pJCFEmnMpPZ1QlxffU8XsN4 qSyyxpKGRPi4o3ytVKJ7sAmn1PkS5hlBimZgg8g33Qy1sZPM1weqjzzRHm8PKqQZ 9AgdDS//3BiLNfbAaprfbywuo7EIjVxd3At2AzsLsGVhhAsunQCvrw4JgjQ4pMuQ +BsZiwfSk73UBfj9jNcL24sgNJkUhF2Sr81RYDG9cpqMV9ukrNpANuY231Vq0auS VNIqcSTDVee6GjrYK3IBR0DAokaBJEnv7pTepo5RII2dQCaA7jDOnqZcJQ8zH5xH Q3+TIKVf9mG6unVw3K9uLxgHermPOcI= -----END CERTIFICATE-----Generated at Tue Oct 21 01:59:04 2025 by rpki-client