$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/8b9703ea-15af-3104-8c2a-8494561f93c3.roa File: 8b9703ea-15af-3104-8c2a-8494561f93c3.roa (raw, json) Hash identifier: Eeh9in1M2oz1NBRHkHD+XefW1+D5T3Pz/8ItksmL+2k= Subject key identifier: C2:08:63:C2:A0:60:F8:7D:DF:E8:B6:A6:47:DF:14:96:D0:EE:59:65 Certificate issuer: /CN=e085fa70-312c-4786-b587-bdb5fc87c36e Certificate serial: 010D0C9F4328584B95A79388B44EE360E38494A0 Authority key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/8b9703ea-15af-3104-8c2a-8494561f93c3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 32098 IP address blocks: 68.64.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:93:88:b4:4e:e3:60:e3:84:94:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e085fa70-312c-4786-b587-bdb5fc87c36e Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e7a6eea8-f608-4fa4-8116-22a5442ea73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:73:23:0c:23:e6:a1:e3:28:1c:18:85:82:22: e0:09:02:8c:9a:d0:17:b2:b1:5b:7d:1f:cc:c3:5b: dd:2a:89:da:a5:69:02:0f:a2:c7:ca:e2:15:63:1f: f9:21:da:de:ec:bf:a9:e5:25:4a:9e:ae:d9:ca:3c: 3e:5e:1e:b0:46:d9:43:8a:d0:4f:f4:05:1d:40:66: 8f:c2:07:c5:24:f5:52:98:ad:6a:18:0a:17:a9:d9: 86:7a:68:48:88:1d:2b:96:d4:63:6b:5d:7b:13:66: f8:7b:a0:2c:80:fc:ca:f9:83:26:ca:92:1b:da:e6: 54:75:2d:75:f0:c7:4e:3a:fb:7a:1f:06:40:aa:27: b6:74:47:7c:87:27:d0:1e:a0:a1:84:52:f0:03:d5: be:49:5c:8a:fe:50:c9:10:31:1c:a3:47:04:44:ab: 27:c7:4f:9d:ff:58:0f:31:ed:a1:f0:93:9d:d9:4c: 33:af:44:b0:99:a4:49:13:39:6b:80:1c:9c:c5:47: 16:a3:41:97:c6:a6:2c:5c:f9:84:6e:d9:f3:eb:a1: dc:b0:fb:eb:91:22:53:1f:42:e5:21:18:be:d6:dc: 4c:27:e0:58:b7:27:3c:5b:82:8e:62:53:05:bf:c4: 5b:75:ac:1b:cd:b3:da:ca:ec:90:28:88:26:5d:51: 63:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:08:63:C2:A0:60:F8:7D:DF:E8:B6:A6:47:DF:14:96:D0:EE:59:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/8b9703ea-15af-3104-8c2a-8494561f93c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl X509v3 Authority Key Identifier: keyid:FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer sbgp-ipAddrBlock: critical IPv4: 68.64.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:e0:d0:3a:2f:80:1f:40:cd:0e:0e:58:bc:74:d8:2a:18:8c: a5:b5:36:9a:81:ad:7a:66:5e:ab:b7:b1:3b:70:16:04:07:04: d5:8f:39:78:c6:56:35:56:f3:a7:a5:9b:f2:b0:1d:f1:ce:d4: 75:8c:f8:43:31:cb:76:23:f3:7e:99:70:02:f9:c8:8e:2a:e8: e0:a5:e3:44:2c:6a:4b:ea:e5:91:7b:2c:35:0b:b3:32:2b:12: 92:1f:21:89:50:d7:9c:0d:2d:0e:f6:c2:73:c7:b6:28:1e:ae: 38:8a:60:23:44:95:1d:c6:53:aa:8c:1f:76:a4:a4:01:0a:03: 21:a9:81:6d:09:f3:4b:8a:a1:e6:6d:59:3b:4c:7e:aa:21:96: a8:32:e7:56:d9:79:7e:8c:31:fb:d1:19:81:43:81:74:d3:45: 14:b3:27:01:53:84:70:68:82:58:c9:ee:00:53:bc:57:21:87: 74:f2:e0:cd:ae:57:a4:ff:35:c8:91:54:d6:1d:ee:00:94:54: 25:ab:fa:a8:d8:34:36:70:12:77:78:ef:c4:f8:19:b5:59:15: d1:2c:d7:3b:1d:a2:a5:7b:86:e3:06:15:96:da:bb:23:a3:2f: 95:74:fb:37:fd:d9:98:50:50:df:c0:49:ec:b5:8b:79:3e:a8: de:e9:d0:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5OItE7jYOOElKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA4NWZhNzAtMzEyYy00Nzg2LWI1ODctYmRiNWZjODdj MzZlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTdhNmVlYTgtZjYwOC00ZmE0LTgxMTYtMjJhNTQ0MmVhNzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3MjDCPmoeMoHBiFgiLgCQKMmtAXsrFbfR/M w1vdKonapWkCD6LHyuIVYx/5Idre7L+p5SVKnq7Zyjw+Xh6wRtlDitBP9AUdQGaP wgfFJPVSmK1qGAoXqdmGemhIiB0rltRja117E2b4e6AsgPzK+YMmypIb2uZUdS11 8MdOOvt6HwZAqie2dEd8hyfQHqChhFLwA9W+SVyK/lDJEDEco0cERKsnx0+d/1gP Me2h8JOd2Uwzr0SwmaRJEzlrgBycxUcWo0GXxqYsXPmEbtnz66HcsPvrkSJTH0Ll IRi+1txMJ+BYtyc8W4KOYlMFv8RbdawbzbPayuyQKIgmXVFjqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIIY8KgYPh93+i2pkffFJbQ7lllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDg1 ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1ZmM4N2MzNmUvOGI5NzAzZWEtMTVhZi0z MTA0LThjMmEtODQ5NDU2MWY5M2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTA4NWZhNzAtMzEyYy00Nzg2LWI1 ODctYmRiNWZjODdjMzZlL2UwODVmYTcwLTMxMmMtNDc4Ni1iNTg3LWJkYjVmYzg3 YzM2ZS5jcmwwHwYDVR0jBBgwFoAU+wFZJiVq4yf4fvzRnFfiezQbWG4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDg1ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1 ZmM4N2MzNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbg0DovgB9AzQ4OWLx02CoYjKW1NpqBrXpmXqu3sTtwFgQHBNWPOXjG VjVW86elm/KwHfHO1HWM+EMxy3Yj836ZcAL5yI4q6OCl40Qsakvq5ZF7LDULszIr EpIfIYlQ15wNLQ72wnPHtigerjiKYCNElR3GU6qMH3akpAEKAyGpgW0J80uKoeZt WTtMfqohlqgy51bZeX6MMfvRGYFDgXTTRRSzJwFThHBogljJ7gBTvFchh3Ty4M2u V6T/NciRVNYd7gCUVCWr+qjYNDZwEnd478T4GbVZFdEs1zsdoqV7huMGFZbauyOj L5V0+zf92ZhQUN/ASey1i3k+qN7p0F0= -----END CERTIFICATE-----Generated at Mon Oct 20 23:35:25 2025 by rpki-client