$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1bccb8f9-e6d9-316a-a866-cd6d8b5c8035.roa File: 1bccb8f9-e6d9-316a-a866-cd6d8b5c8035.roa (raw, json) Hash identifier: szp8mYsGn8MehL4dQwyzlgIgI6QLpZ1bOmbJ6vGeP3w= Subject key identifier: 3D:6E:8D:21:13:FB:39:EE:33:C9:60:69:45:25:37:BB:D2:79:BB:0F Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B715CAE1CA003FB448777C6A0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1bccb8f9-e6d9-316a-a866-cd6d8b5c8035.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 13692 IP address blocks: 69.1.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ae:1c:a0:03:fb:44:87:77:c6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ffc69130-439d-4795-97c6-18d8ed38c25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:6b:92:ab:cc:57:02:f2:4c:50:cf:c7:b1: c6:78:ac:e6:80:ab:6d:97:fb:14:e9:9f:43:c3:70: b4:b8:9b:9f:6f:9b:fa:54:53:a5:98:77:83:e5:01: 05:45:e1:aa:aa:7c:b8:18:8c:88:2b:6f:47:49:07: b4:de:4d:1c:2c:b1:17:af:c9:06:2f:23:cb:cd:63: 9b:c2:c8:15:38:51:cb:c6:3c:81:94:11:eb:1a:df: ef:bb:76:4a:2a:1e:cc:08:64:17:17:6d:e6:59:a6: 60:8b:19:55:36:e8:36:55:e9:91:fc:22:32:be:97: 1b:50:e6:dd:c4:73:1a:b2:79:38:0d:da:42:43:53: 50:6c:89:49:cc:d2:af:7c:21:01:5e:53:86:6c:a7: db:b8:26:03:f0:22:be:c0:31:ad:9b:13:e3:63:0a: a5:49:9d:4c:fe:a5:d7:0f:bc:ac:6f:ca:6e:ae:27: 8f:52:74:ca:00:5e:16:9b:e2:f3:07:97:a9:ef:f5: bf:1c:75:2a:d9:39:e7:dd:56:db:a3:15:db:a0:20: 09:d5:20:3f:9c:89:7f:e5:ba:dc:e3:c1:ad:51:f4: 09:ff:7b:aa:99:13:6a:a6:34:5f:79:e4:f8:01:46: 81:a0:3e:0a:a2:6b:52:ac:1f:45:bf:69:9a:60:20: a4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6E:8D:21:13:FB:39:EE:33:C9:60:69:45:25:37:BB:D2:79:BB:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1bccb8f9-e6d9-316a-a866-cd6d8b5c8035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 69.1.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:67:96:11:4a:38:62:6a:f7:92:c5:6d:79:15:72:88:66:da: 0e:cb:b8:85:8e:ef:92:19:10:68:62:b7:fc:b8:41:8d:57:8a: a0:58:20:7a:75:ef:45:f0:03:82:f9:02:13:0b:9a:e5:e6:24: 97:bb:c3:fc:84:46:4c:43:2f:7c:98:1f:82:a2:3e:70:5f:b5: 32:34:2f:a0:f7:e6:bc:b7:63:eb:d3:ea:02:80:a0:dd:f6:81: 89:1e:8e:95:05:44:9b:f7:8a:7a:52:a9:cf:6c:7f:ce:c9:6f: 00:c5:a2:16:90:3f:a3:1b:43:aa:e7:65:8f:49:28:9e:82:c4: 7a:63:6b:c6:f6:0f:52:a1:fd:0f:fd:63:24:0e:e1:ab:2b:be: de:fc:64:f3:cb:65:b6:50:d6:32:a5:a1:5c:29:0f:23:f9:fa: 17:69:34:83:e7:ff:b5:10:18:61:3b:aa:22:8c:b5:6c:51:6d: 3c:f0:ce:49:43:e5:6b:ad:30:ec:72:a0:cc:5f:26:c8:bc:69: 53:64:32:bf:2e:94:11:fd:3d:97:e4:48:00:7c:51:52:a5:ba: cc:b2:01:6f:ed:9c:b2:b5:10:e8:99:4a:bb:68:c1:d4:5d:76: c5:cb:17:45:75:ee:63:17:70:35:cf:89:11:7b:2f:40:82:ef: 29:0b:91:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXK4coAP7RId3xqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZmZjNjkxMzAtNDM5ZC00Nzk1LTk3YzYtMThkOGVkMzhjMjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1ZrkqvMVwLyTFDPx7HGeKzmgKttl/sU6Z9D w3C0uJufb5v6VFOlmHeD5QEFReGqqny4GIyIK29HSQe03k0cLLEXr8kGLyPLzWOb wsgVOFHLxjyBlBHrGt/vu3ZKKh7MCGQXF23mWaZgixlVNug2VemR/CIyvpcbUObd xHMasnk4DdpCQ1NQbIlJzNKvfCEBXlOGbKfbuCYD8CK+wDGtmxPjYwqlSZ1M/qXX D7ysb8puriePUnTKAF4Wm+LzB5ep7/W/HHUq2Tnn3VbboxXboCAJ1SA/nIl/5brc 48GtUfQJ/3uqmRNqpjRfeeT4AUaBoD4KomtSrB9Fv2maYCCk1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1ujSET+znuM8lgaUUlN7vSebsPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMWJjY2I4ZjktZTZkOS0z MTZhLWE4NjYtY2Q2ZDhiNWM4MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtnlhFKOGJq95LFbXkVcohm2g7LuIWO75IZEGhit/y4QY1XiqBYIHp1 70XwA4L5AhMLmuXmJJe7w/yERkxDL3yYH4KiPnBftTI0L6D35ry3Y+vT6gKAoN32 gYkejpUFRJv3inpSqc9sf87JbwDFohaQP6MbQ6rnZY9JKJ6CxHpja8b2D1Kh/Q/9 YyQO4asrvt78ZPPLZbZQ1jKloVwpDyP5+hdpNIPn/7UQGGE7qiKMtWxRbTzwzklD 5WutMOxyoMxfJsi8aVNkMr8ulBH9PZfkSAB8UVKlusyyAW/tnLK1EOiZSrtowdRd dsXLF0V17mMXcDXPiRF7L0CC7ykLkXk= -----END CERTIFICATE-----Generated at Tue Oct 21 02:22:55 2025 by rpki-client