$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/68709e78-5d4d-356f-b01a-04e4a0287898.roa File: 68709e78-5d4d-356f-b01a-04e4a0287898.roa (raw, json) Hash identifier: AJUurNNpeT74dkZKGbmENe/UZL6Khq0RNr1b+VO9lXM= Subject key identifier: 86:37:14:E9:E9:83:16:F9:32:2B:13:B6:72:6C:68:7A:83:D9:51:D1 Certificate issuer: /CN=eeff816f-42ef-47a6-ba61-7075adb85329 Certificate serial: 010D0C9F4328584B7C876465A01FEAA95F546C2C Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/68709e78-5d4d-356f-b01a-04e4a0287898.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 393457 IP address blocks: 64.25.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:64:65:a0:1f:ea:a9:5f:54:6c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=5fdb6e8f-5103-4b9e-ac79-00098da2ca8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:ad:c4:37:e6:14:1c:1a:03:40:a5:eb:2c: 87:05:af:cf:1d:57:b7:11:0a:58:7e:3e:d4:6a:10: 20:00:0f:94:1b:43:72:06:87:9a:ab:ac:29:87:08: aa:56:26:4a:d1:27:30:56:fb:c6:df:64:99:7b:7b: 2d:ec:da:02:26:27:b7:d2:72:9e:c1:df:f0:86:cf: cf:21:3c:99:6b:ba:a1:73:0a:59:e3:f0:01:0f:b0: 2a:dd:b3:dc:ad:ee:8e:e3:98:65:52:78:a0:50:06: c4:f1:d2:cf:96:53:69:22:9c:5b:01:81:23:2d:f3: 9e:46:1b:9f:71:d9:44:82:59:ff:9e:5c:6b:72:79: 77:aa:dc:57:d8:11:fe:43:d6:0e:75:a1:9b:b7:df: 0f:22:0e:dc:38:15:67:0d:70:a0:b9:66:4e:3d:2c: c5:e7:29:3f:a8:c9:ce:a8:f1:02:bd:5e:c3:0a:8e: 09:c7:5a:04:81:9b:b1:d7:f8:19:50:16:92:a7:28: 09:84:85:74:22:dc:ed:60:18:75:a1:d7:d9:9b:05: d8:f9:f1:27:a0:ef:e7:77:de:ce:7e:0e:bc:5f:40: 99:7f:7d:d1:71:95:a1:a1:f1:0e:bb:67:4c:f4:f0: 89:7f:54:b2:8a:10:b1:9e:b0:5c:9d:28:82:2c:4d: c5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:37:14:E9:E9:83:16:F9:32:2B:13:B6:72:6C:68:7A:83:D9:51:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/68709e78-5d4d-356f-b01a-04e4a0287898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl X509v3 Authority Key Identifier: keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer sbgp-ipAddrBlock: critical IPv4: 64.25.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d8:5d:75:6c:81:07:d6:da:17:be:fc:1d:74:f9:4a:98:29: 0f:f9:4b:56:dd:32:7c:9a:bb:a7:a6:61:1d:0c:b3:a7:57:8c: 95:80:98:1b:a9:ae:e3:86:51:78:81:c7:75:10:a7:50:3e:72: 75:27:b8:70:81:15:90:b1:73:e3:3f:19:e8:86:21:ca:03:52: a8:86:a5:4d:b4:6f:fd:5b:f5:9d:83:db:ad:30:f2:a2:d0:36: 3c:49:bd:be:47:0d:6d:45:5c:f5:b5:b8:ae:ff:90:3e:33:1b: bd:fb:ab:c3:fe:a3:61:a9:75:f8:34:ba:bc:e2:19:cf:b1:b7: 8a:c8:e9:a2:55:b7:4c:bf:48:6b:57:22:d4:fd:02:34:76:b3: 88:90:26:0b:3e:c9:b5:f2:e5:1f:a5:54:3f:39:57:a1:07:5c: 94:92:90:65:a0:a2:51:a2:a9:bc:8e:1e:1c:40:56:28:f4:bd: d8:f7:86:27:2b:89:75:0a:39:6c:a3:8f:c5:1a:77:7c:b1:40: 0e:c5:24:99:bf:ce:b1:a7:57:7e:2b:c4:ed:6a:53:e8:9d:82: 64:1f:08:c8:81:67:20:a5:0d:b7:e4:68:a6:68:28:ea:40:a7: eb:81:a0:bb:f9:1c:46:ec:4f:41:0e:89:60:02:5c:c2:bb:f4: b7:e2:f7:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2RloB/qqV9UbCwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVmZjgxNmYtNDJlZi00N2E2LWJhNjEtNzA3NWFkYjg1 MzI5MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk NWZkYjZlOGYtNTEwMy00YjllLWFjNzktMDAwOThkYTJjYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUWtxDfmFBwaA0Cl6yyHBa/PHVe3EQpYfj7U ahAgAA+UG0NyBoeaq6wphwiqViZK0ScwVvvG32SZe3st7NoCJie30nKewd/whs/P ITyZa7qhcwpZ4/ABD7Aq3bPcre6O45hlUnigUAbE8dLPllNpIpxbAYEjLfOeRhuf cdlEgln/nlxrcnl3qtxX2BH+Q9YOdaGbt98PIg7cOBVnDXCguWZOPSzF5yk/qMnO qPECvV7DCo4Jx1oEgZux1/gZUBaSpygJhIV0ItztYBh1odfZmwXY+fEnoO/nd97O fg68X0CZf33RcZWhofEOu2dM9PCJf1SyihCxnrBcnSiCLE3FwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIY3FOnpgxb5MisTtnJsaHqD2VHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZm ODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1YWRiODUzMjkvNjg3MDllNzgtNWQ0ZC0z NTZmLWIwMWEtMDRlNGEwMjg3ODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWVmZjgxNmYtNDJlZi00N2E2LWJh NjEtNzA3NWFkYjg1MzI5L2VlZmY4MTZmLTQyZWYtNDdhNi1iYTYxLTcwNzVhZGI4 NTMyOS5jcmwwHwYDVR0jBBgwFoAU6ll783GIb8wezeqNVRDlPcsR9H0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZmODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1 YWRiODUzMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQBluMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnYXXVsgQfW2he+/B10+UqYKQ/5S1bdMnyau6emYR0Ms6dXjJWAmBup ruOGUXiBx3UQp1A+cnUnuHCBFZCxc+M/GeiGIcoDUqiGpU20b/1b9Z2D260w8qLQ NjxJvb5HDW1FXPW1uK7/kD4zG737q8P+o2Gpdfg0urziGc+xt4rI6aJVt0y/SGtX ItT9AjR2s4iQJgs+ybXy5R+lVD85V6EHXJSSkGWgolGiqbyOHhxAVij0vdj3hicr iXUKOWyjj8Uad3yxQA7FJJm/zrGnV34rxO1qU+idgmQfCMiBZyClDbfkaKZoKOpA p+uBoLv5HEbsT0EOiWACXMK79Lfi93o= -----END CERTIFICATE-----Generated at Mon Oct 20 10:42:11 2025 by rpki-client