$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa File: 68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa (raw, json) Hash identifier: 9CyfftrjT8CYEJo7r9B8E43mNc7NLbgrGCRRND+atoA= Subject key identifier: 74:B4:6A:13:D9:B1:F2:F4:73:A5:4C:1D:DE:D7:71:45:5A:48:22:81 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584B25FC31A5DA594FFDDCD3CD40 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 34774 IP address blocks: 199.64.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:31:a5:da:59:4f:fd:dc:d3:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=6889de16-7d7a-4c06-b5cc-19804a4b5e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:32:74:c5:7e:6d:bb:73:75:9b:ac:bc:d9: 9e:1e:e3:07:c5:1a:34:b6:51:e8:f1:0a:cf:1e:d9: ce:1b:06:05:19:81:9f:79:65:70:e8:af:58:a4:20: b1:42:09:82:79:2a:aa:f3:2d:50:6d:36:cf:13:1f: 1a:33:e8:a4:3f:22:34:77:00:32:64:17:f3:25:6a: 56:f9:db:82:99:52:6c:79:fc:79:b1:b9:7d:5a:88: d7:e7:71:a5:09:d3:fb:2f:0c:98:84:88:83:e3:a0: 55:b8:80:ca:ec:e2:48:c3:1c:a2:fa:ea:28:15:ac: 4d:0f:7c:66:f1:78:a7:9a:87:c3:b7:bc:60:11:83: 43:f3:42:5c:f6:dd:8f:00:79:82:71:8f:53:2c:e2: f5:66:76:20:9b:8d:ef:f6:57:7b:72:1e:1e:bc:b9: 88:f4:a4:7e:40:06:af:95:6e:39:47:31:fe:80:6f: c9:71:0d:35:d8:c7:5d:df:00:80:a1:14:36:6d:58: 40:ba:9b:ec:ce:f3:6c:cd:61:75:ad:ab:90:8f:4a: 29:eb:dc:a5:fd:b3:06:d3:78:7e:f8:63:48:d2:79: df:22:c4:b5:13:47:f2:00:41:7d:5e:e4:d9:a5:35: 4d:1e:86:12:7f:83:a1:61:62:5d:d7:ef:57:1b:b7: d9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B4:6A:13:D9:B1:F2:F4:73:A5:4C:1D:DE:D7:71:45:5A:48:22:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:51:f5:0d:ff:f5:76:7d:c9:93:a0:5d:cd:47:85:ec:8e:d5: f0:f6:5c:1b:25:69:ac:b4:9f:8c:85:a9:f7:f5:4d:8a:6d:9b: 6d:64:17:90:01:5e:ad:ab:c3:30:dd:c9:19:dc:2b:a4:6c:7f: 0e:32:03:9c:31:0e:b8:a7:0a:b0:47:e3:03:f3:ad:57:62:88: e1:2e:1c:b9:3c:6b:15:ee:b7:65:5e:c9:ce:cc:c3:7e:ab:d9: 07:e5:e8:02:de:5d:23:fd:7d:1f:20:52:00:72:c8:98:bf:6c: a9:e5:52:c1:97:c8:db:3b:57:1d:1c:9a:7b:0c:72:d0:76:86: 71:18:7e:f2:53:70:e6:fe:79:2c:03:a2:75:bc:d0:96:20:f3: ce:e6:e3:b7:0f:74:93:30:a3:f2:1e:df:40:88:31:99:d5:70: 64:8f:24:db:89:c2:3f:f3:26:b5:36:46:23:8b:6a:71:d1:7f: 8e:42:aa:9e:85:92:40:08:06:4c:a0:f6:ff:86:e4:9e:11:59: a7:d7:ec:1c:6e:0c:d3:df:1e:46:ae:ee:a1:e4:f3:35:44:a3: 63:37:69:a6:fb:04:a5:f6:8a:8c:75:65:98:d8:20:6b:9e:fa: de:f7:66:e4:44:af:3d:eb:fb:98:75:bf:d7:9e:5e:78:b1:cd: 18:65:f4:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DGl2llP/dzTzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk Njg4OWRlMTYtN2Q3YS00YzA2LWI1Y2MtMTk4MDRhNGI1ZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYoydMV+bbtzdZusvNmeHuMHxRo0tlHo8QrP HtnOGwYFGYGfeWVw6K9YpCCxQgmCeSqq8y1QbTbPEx8aM+ikPyI0dwAyZBfzJWpW +duCmVJsefx5sbl9WojX53GlCdP7LwyYhIiD46BVuIDK7OJIwxyi+uooFaxND3xm 8XinmofDt7xgEYND80Jc9t2PAHmCcY9TLOL1ZnYgm43v9ld7ch4evLmI9KR+QAav lW45RzH+gG/JcQ012Mdd3wCAoRQ2bVhAupvszvNszWF1rauQj0op69yl/bMG03h+ +GNI0nnfIsS1E0fyAEF9XuTZpTVNHoYSf4OhYWJd1+9XG7fZXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHS0ahPZsfL0c6VMHd7XcUVaSCKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvNjhmYmY0NmEtNjAzMC0z ZWI5LWExYTUtNzIwNjBhNWU3MDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0BUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1R9Q3/9XZ9yZOgXc1HheyO1fD2XBslaay0n4yFqff1TYptm21kF5AB Xq2rwzDdyRncK6Rsfw4yA5wxDrinCrBH4wPzrVdiiOEuHLk8axXut2Veyc7Mw36r 2Qfl6ALeXSP9fR8gUgByyJi/bKnlUsGXyNs7Vx0cmnsMctB2hnEYfvJTcOb+eSwD onW80JYg887m47cPdJMwo/Ie30CIMZnVcGSPJNuJwj/zJrU2RiOLanHRf45Cqp6F kkAIBkyg9v+G5J4RWafX7BxuDNPfHkau7qHk8zVEo2M3aab7BKX2iox1ZZjYIGue +t73ZuRErz3r+5h1v9eeXnixzRhl9L8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:21 2025 by rpki-client