$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/f0145ccc-45ea-3701-a635-002354e73bfd.roa File: f0145ccc-45ea-3701-a635-002354e73bfd.roa (raw, json) Hash identifier: ybYPLRUa0o7f250GJYxh0DStabKlRmTSDYexRa4Du3I= Subject key identifier: BC:71:28:AA:8B:9A:64:76:72:5F:FA:CA:B4:BC:5B:A0:FC:36:DC:46 Certificate issuer: /CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c Certificate serial: 010D0C9F4328584B715CA1F2432A7F8771A1F400 Authority key identifier: 4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/f0145ccc-45ea-3701-a635-002354e73bfd.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 397384 IP address blocks: 76.8.60.0/24 maxlen: 24 2604:bf00:210::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a1:f2:43:2a:7f:87:71:a1:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=5345934f-7eff-4137-b9c3-95c015318a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:15:d6:e7:6d:d6:c3:26:b6:8a:25:58:9e:d1: 2a:ac:79:50:0b:7c:e0:90:7d:b3:69:5c:58:39:d4: 8c:b0:08:fa:ee:4e:8a:43:17:af:4c:af:dc:07:95: d1:3f:7e:81:7e:bb:ec:8f:ee:1b:2c:63:fe:01:38: 68:c6:1b:23:ed:d5:fb:e4:49:bf:10:ae:9b:56:ee: 1f:fd:ab:3c:30:0d:a0:1b:88:47:1c:2d:a6:3e:36: a5:cf:28:20:73:4f:f7:a0:6d:86:16:87:d4:d9:10: 44:72:e7:d2:d7:67:71:6e:b4:b6:45:2e:d2:e6:e6: d9:ea:fc:4f:3c:ed:d8:fb:aa:7b:94:f9:59:ee:7d: 41:80:4f:8c:67:fc:2c:96:6f:a3:9a:1b:7a:0d:70: 3f:a5:21:30:6a:1c:b5:4d:de:29:45:35:6e:0e:35: a0:a3:9e:aa:c7:11:37:ee:41:76:b6:19:bb:a4:e4: 54:8f:37:00:91:bc:0f:59:7a:7e:75:59:da:bf:01: 55:ff:9c:cd:dc:8d:f6:07:3f:e4:d5:7a:7a:5b:3e: f4:e2:fb:48:fa:df:c1:3a:29:f4:2d:33:53:95:40: fb:05:cf:92:f6:a1:05:4d:be:3a:53:e0:22:df:29: 26:9e:e3:45:c6:0b:ca:77:9f:88:0c:54:1a:5e:41: 97:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:71:28:AA:8B:9A:64:76:72:5F:FA:CA:B4:BC:5B:A0:FC:36:DC:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/f0145ccc-45ea-3701-a635-002354e73bfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl X509v3 Authority Key Identifier: keyid:4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer sbgp-ipAddrBlock: critical IPv4: 76.8.60.0/24 IPv6: 2604:bf00:210::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c3:87:29:57:87:b7:a2:67:f3:37:cd:50:e9:cc:d1:63:b2: d3:aa:87:f0:2d:55:10:a0:29:62:fc:78:72:fe:5b:a6:c6:70: 67:8c:2e:fa:8c:ee:87:2b:ad:e3:00:a0:32:13:4c:b3:b1:03: cc:f7:26:40:e5:1a:fd:67:29:2f:ef:07:35:26:91:53:44:72: 8c:d8:70:0e:03:96:22:06:11:41:d7:87:02:ae:f1:da:3d:b3: 0b:0f:62:68:5e:d7:15:39:df:b9:05:7a:13:d8:93:af:65:6b: c1:41:b6:2c:d9:3c:61:80:e3:de:8e:8a:e7:de:d8:7b:71:43: 0d:08:0d:96:bc:5c:df:a8:0b:6b:33:93:84:1b:53:66:77:bb: 46:c6:19:f8:78:0f:cb:da:df:37:0a:f7:23:eb:51:40:0e:dc: 72:2e:f3:8e:fb:81:d9:69:9f:49:98:fc:ae:7a:1f:35:0f:b8: 15:3d:2d:da:d5:9d:6d:f0:a9:51:e5:15:df:f9:e0:04:cc:1d: 61:ec:65:2d:18:c6:41:a5:20:46:e5:24:2e:80:82:a2:31:c5: e8:ef:cc:42:fe:50:7b:46:e1:53:b0:76:2e:dc:62:b5:b6:5a: cf:9e:4d:90:83:59:ca:20:91:07:97:2e:fe:6f:5d:93:5a:69: f4:60:c5:dd -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEtxXKHyQyp/h3Gh9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZlOGNhMGItMGY1ZS00MDY3LWFjZDctMmJiYjQwMDhl ZDFjMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NTM0NTkzNGYtN2VmZi00MTM3LWI5YzMtOTVjMDE1MzE4YTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhXW523Wwya2iiVYntEqrHlQC3zgkH2zaVxY OdSMsAj67k6KQxevTK/cB5XRP36Bfrvsj+4bLGP+AThoxhsj7dX75Em/EK6bVu4f /as8MA2gG4hHHC2mPjalzyggc0/3oG2GFofU2RBEcufS12dxbrS2RS7S5ubZ6vxP PO3Y+6p7lPlZ7n1BgE+MZ/wslm+jmht6DXA/pSEwahy1Td4pRTVuDjWgo56qxxE3 7kF2thm7pORUjzcAkbwPWXp+dVnavwFV/5zN3I32Bz/k1Xp6Wz704vtI+t/BOin0 LTNTlUD7Bc+S9qEFTb46U+Ai3ykmnuNFxgvKd5+IDFQaXkGXAQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLxxKKqLmmR2cl/6yrS8W6D8NtxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xNmU4 Y2EwYi0wZjVlLTQwNjctYWNkNy0yYmJiNDAwOGVkMWMvZjAxNDVjY2MtNDVlYS0z NzAxLWE2MzUtMDAyMzU0ZTczYmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTZlOGNhMGItMGY1ZS00MDY3LWFj ZDctMmJiYjQwMDhlZDFjLzE2ZThjYTBiLTBmNWUtNDA2Ny1hY2Q3LTJiYmI0MDA4 ZWQxYy5jcmwwHwYDVR0jBBgwFoAUT6kz7dxBnGP6bwm5Ex/lf45BiBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xNmU4Y2EwYi0wZjVlLTQwNjctYWNkNy0yYmJi NDAwOGVkMWMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQATAg8MA8E AgACMAkDBwAmBL8AAhAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAF8OHKVeHt6Jn8zfNUOnM0WOy06qH8C1V EKApYvx4cv5bpsZwZ4wu+ozuhyut4wCgMhNMs7EDzPcmQOUa/WcpL+8HNSaRU0Ry jNhwDgOWIgYRQdeHAq7x2j2zCw9iaF7XFTnfuQV6E9iTr2VrwUG2LNk8YYDj3o6K 597Ye3FDDQgNlrxc36gLazOThBtTZne7RsYZ+HgPy9rfNwr3I+tRQA7cci7zjvuB 2WmfSZj8rnofNQ+4FT0t2tWdbfCpUeUV3/ngBMwdYexlLRjGQaUgRuUkLoCCojHF 6O/MQv5Qe0bhU7B2LtxitbZaz55NkINZyiCRB5cu/m9dk1pp9GDF3Q== -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:37 2025 by rpki-client