$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cd349d2a-eb94-3d55-8cdc-d567c458db22.roa File: cd349d2a-eb94-3d55-8cdc-d567c458db22.roa (raw, json) Hash identifier: ST6oYzPf8febfEynM++FflZrblpH41k2D+5gU6KzUW4= Subject key identifier: 88:AD:7E:A1:4A:A1:57:02:DE:F3:0C:12:0F:9D:E7:3C:CD:3D:AD:48 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584B477C9CFF28E342D462C60FC0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cd349d2a-eb94-3d55-8cdc-d567c458db22.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 7018 IP address blocks: 69.176.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:9c:ff:28:e3:42:d4:62:c6:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=a9583b41-5597-4853-b364-69582d6356fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:94:d9:33:c2:42:d5:7e:5c:37:54:ce:a4: bb:cd:61:75:1d:ab:de:68:ba:dd:3b:4c:69:e8:a4: 6f:2f:ed:f7:02:c1:cc:1c:83:ce:0d:07:4e:46:2d: e8:b0:f9:58:13:a4:65:c1:d4:a8:1f:f5:84:53:60: 4e:7b:26:86:00:dc:b7:5c:11:66:20:ee:5b:79:29: 26:c1:75:e0:ec:42:85:33:a6:89:0a:e3:ba:26:81: ca:96:a4:8a:e8:d9:9c:94:a1:f2:a8:90:cb:f1:63: 2f:9f:1d:f2:ea:b5:84:9d:f4:75:6f:b8:c4:10:37: 43:72:01:9a:ce:96:89:0d:71:70:26:29:a4:28:d3: d7:5c:9c:d4:b8:7a:96:15:49:37:65:7e:6a:9e:28: 65:c7:05:2d:e5:e0:52:e8:81:eb:78:e5:ca:7a:88: f2:54:c4:18:6d:ac:20:91:ac:b4:c0:cd:77:9e:dc: 12:fd:88:b6:7f:b2:6a:14:93:76:9b:3e:87:73:62: 25:5c:60:da:24:47:13:4b:28:3d:50:f7:68:c0:f3: 2a:4c:f8:93:dc:71:04:99:85:49:c2:80:4e:3c:02: 36:cb:88:be:6e:6b:28:a3:7b:b9:fb:52:03:ed:0d: 71:00:54:f5:4b:d5:72:3f:d5:db:26:da:4a:a6:03: a0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AD:7E:A1:4A:A1:57:02:DE:F3:0C:12:0F:9D:E7:3C:CD:3D:AD:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cd349d2a-eb94-3d55-8cdc-d567c458db22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 69.176.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:27:ad:77:73:dd:23:86:b9:e9:57:b5:b8:5b:66:ec:0f:31: 33:f7:01:88:17:1c:4c:f1:91:f0:49:6f:e1:7b:a4:92:4b:5f: f9:20:46:91:92:c2:79:4f:27:bf:f3:5c:69:74:5b:35:1c:fe: 4a:24:3a:f7:a4:5a:fa:19:05:5a:93:26:fc:c7:f9:2b:18:7e: 88:99:fc:09:1c:4f:88:9c:dd:3b:0e:e4:bf:d0:d7:de:de:26: d5:82:9e:f5:58:77:7b:f3:79:f9:62:b8:b7:7d:5d:21:07:c1: db:bf:79:68:e3:c1:d8:20:2c:fe:fb:97:d6:e6:81:57:de:e4: 4a:ef:c1:0f:fb:fe:27:1e:c3:0c:39:8d:c7:cf:54:06:ce:00: 58:57:8f:2b:5f:2c:0c:f7:d2:f1:4b:b7:99:1c:9f:9e:e0:25: 46:b0:7d:90:b6:2d:54:82:ab:98:30:c0:32:72:b8:95:c1:ed: 57:ee:1a:af:e4:2d:dd:78:28:7d:5f:9c:33:6d:47:db:b6:e9: 90:94:87:76:e1:62:bc:49:55:33:15:83:a2:2d:1a:ad:18:98: b1:b3:8d:cd:68:dd:b5:38:0e:38:02:07:1e:89:3e:88:35:30: 74:c8:13:7b:1e:86:75:1e:0c:1d:09:2d:fa:14:cc:b6:70:eb: 13:c0:a7:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJz/KONC1GLGD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YTk1ODNiNDEtNTU5Ny00ODUzLWIzNjQtNjk1ODJkNjM1NmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WSU2TPCQtV+XDdUzqS7zWF1HaveaLrdO0xp 6KRvL+33AsHMHIPODQdORi3osPlYE6RlwdSoH/WEU2BOeyaGANy3XBFmIO5beSkm wXXg7EKFM6aJCuO6JoHKlqSK6NmclKHyqJDL8WMvnx3y6rWEnfR1b7jEEDdDcgGa zpaJDXFwJimkKNPXXJzUuHqWFUk3ZX5qnihlxwUt5eBS6IHreOXKeojyVMQYbawg kay0wM13ntwS/Yi2f7JqFJN2mz6Hc2IlXGDaJEcTSyg9UPdowPMqTPiT3HEEmYVJ woBOPAI2y4i+bmsoo3u5+1ID7Q1xAFT1S9VyP9XbJtpKpgOguQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIitfqFKoVcC3vMMEg+d5zzNPa1IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvY2QzNDlkMmEtZWI5NC0z ZDU1LThjZGMtZDU2N2M0NThkYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARbBdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsnrXdz3SOGuelXtbhbZuwPMTP3AYgXHEzxkfBJb+F7pJJLX/kgRpGS wnlPJ7/zXGl0WzUc/kokOvekWvoZBVqTJvzH+SsYfoiZ/AkcT4ic3TsO5L/Q197e JtWCnvVYd3vzefliuLd9XSEHwdu/eWjjwdggLP77l9bmgVfe5ErvwQ/7/icewww5 jcfPVAbOAFhXjytfLAz30vFLt5kcn57gJUawfZC2LVSCq5gwwDJyuJXB7VfuGq/k Ld14KH1fnDNtR9u26ZCUh3bhYrxJVTMVg6ItGq0YmLGzjc1o3bU4DjgCBx6JPog1 MHTIE3sehnUeDB0JLfoUzLZw6xPAp5s= -----END CERTIFICATE-----Generated at Mon Oct 20 01:12:39 2025 by rpki-client