$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a1f679e9-93c2-3e77-95a1-1645e078e38e.roa File: a1f679e9-93c2-3e77-95a1-1645e078e38e.roa (raw, json) Hash identifier: hDJS8Xd26VFsBuh707Kjq/NdGS9yJOoxyKlvyS0DoGU= Subject key identifier: 20:D1:95:42:AD:19:EA:CC:AD:31:D0:4C:74:0B:4B:3A:3F:C1:BB:48 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584B821DA89396AEBDA87C124D00 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a1f679e9-93c2-3e77-95a1-1645e078e38e.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 11427 IP address blocks: 68.201.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:a8:93:96:ae:bd:a8:7c:12:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=f29a5145-6b3b-491a-87f9-127aefdec509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:91:ee:9d:37:2a:77:f9:c4:44:c4:a0:37: 10:d8:d0:d9:a9:1c:ba:d7:63:52:cb:e4:74:36:4b: de:b7:d2:65:2a:37:0e:96:e4:34:57:93:33:28:4e: d6:dc:f7:4d:23:e1:57:d2:34:da:92:a1:d6:16:d0: 03:aa:a7:db:d8:b8:58:01:77:b0:f4:80:ad:b6:10: 78:f2:35:2c:e1:44:b4:23:df:20:dd:ab:e4:8c:a0: 24:07:44:bd:56:89:42:3a:56:3d:6a:4f:1c:8a:4a: 5a:61:5a:40:77:ff:a2:bf:61:b9:81:b9:2c:85:79: 7b:74:b5:31:91:80:0d:6c:f9:4b:b4:c2:e9:be:05: 5f:bb:4b:a1:55:20:f1:f2:d4:3e:a1:a1:47:47:8c: d6:78:62:1c:3b:65:61:6e:3c:79:98:18:33:2b:4a: 79:de:78:9a:ac:b7:ce:00:e8:6f:a3:35:2c:fd:dd: 24:2e:9b:fb:c2:58:ab:53:44:1d:72:e0:c1:41:af: d6:79:4e:f0:ce:b4:dd:20:73:20:9e:a3:f1:e7:f0: ca:83:20:ef:ef:f8:80:72:20:83:2d:a7:24:7c:54: 61:83:57:2c:14:2f:2b:37:1a:a6:18:9a:54:02:e1: 88:17:22:e9:68:c8:5d:62:21:8d:0a:fd:b5:fe:96: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D1:95:42:AD:19:EA:CC:AD:31:D0:4C:74:0B:4B:3A:3F:C1:BB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a1f679e9-93c2-3e77-95a1-1645e078e38e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 68.201.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:47:4b:7d:11:49:50:e4:fb:50:72:3a:5e:a8:17:3f:fc:7f: 29:5d:f0:88:58:3e:8b:b9:55:dc:04:7b:54:00:57:ce:af:b6: a8:40:ff:10:d6:0f:68:12:42:22:b8:bf:07:8a:48:98:b9:eb: 1a:6d:93:60:fb:da:5e:8f:e1:3a:b6:64:0d:81:9a:8e:28:67: 90:e3:4a:f9:fc:b9:22:20:ee:6d:f6:bb:8c:66:b0:53:f7:ae: 20:3d:91:72:0c:4d:81:d0:7c:fd:d8:a1:cc:c7:73:71:8b:93: c7:a0:4f:05:a0:e3:92:b4:8c:f2:0c:10:ce:da:4e:fe:91:65: 2f:87:a2:e3:fa:65:46:c2:24:ce:ee:f4:1a:ce:e3:d8:17:ab: 0a:1d:5c:70:b0:e9:83:09:fa:4f:63:bb:b1:7d:f3:2a:f0:4f: 5f:6f:08:87:74:fb:fd:f6:30:8e:05:0d:4e:d2:de:22:fa:23: 3b:f9:cf:61:58:34:b9:6f:a2:0c:56:bb:76:2d:22:ed:b3:ef: 3b:a1:b0:22:27:02:2b:13:fc:0b:26:6f:6d:2c:06:26:05:41: 69:cc:51:de:75:f7:74:95:47:d3:25:5e:90:5e:c9:90:19:21: d2:76:06:4f:28:18:23:2d:eb:f2:4b:2b:72:af:8d:2f:12:03: eb:e4:f6:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHaiTlq69qHwSTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZjI5YTUxNDUtNmIzYi00OTFhLTg3ZjktMTI3YWVmZGVjNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyiR7p03Knf5xETEoDcQ2NDZqRy612NSy+R0 Nkvet9JlKjcOluQ0V5MzKE7W3PdNI+FX0jTakqHWFtADqqfb2LhYAXew9ICtthB4 8jUs4US0I98g3avkjKAkB0S9VolCOlY9ak8cikpaYVpAd/+iv2G5gbkshXl7dLUx kYANbPlLtMLpvgVfu0uhVSDx8tQ+oaFHR4zWeGIcO2Vhbjx5mBgzK0p53niarLfO AOhvozUs/d0kLpv7wlirU0QdcuDBQa/WeU7wzrTdIHMgnqPx5/DKgyDv7/iAciCD LackfFRhg1csFC8rNxqmGJpUAuGIFyLpaMhdYiGNCv21/pYE0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDRlUKtGerMrTHQTHQLSzo/wbtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYTFmNjc5ZTktOTNjMi0z ZTc3LTk1YTEtMTY0NWUwNzhlMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRMlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNHS30RSVDk+1ByOl6oFz/8fyld8IhYPou5VdwEe1QAV86vtqhA/xDW D2gSQiK4vweKSJi56xptk2D72l6P4Tq2ZA2Bmo4oZ5DjSvn8uSIg7m32u4xmsFP3 riA9kXIMTYHQfP3YoczHc3GLk8egTwWg45K0jPIMEM7aTv6RZS+HouP6ZUbCJM7u 9BrO49gXqwodXHCw6YMJ+k9ju7F98yrwT19vCId0+/32MI4FDU7S3iL6Izv5z2FY NLlvogxWu3YtIu2z7zuhsCInAisT/Asmb20sBiYFQWnMUd5193SVR9MlXpBeyZAZ IdJ2Bk8oGCMt6/JLK3KvjS8SA+vk9u8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:44:58 2025 by rpki-client