$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa File: ceeaa841-ed82-33d1-843a-3a411e6fee58.roa (raw, json) Hash identifier: EolmCqXZtsC2BXjZq7FNATUA8ATwoIS0Sc9FVKg1Wug= Subject key identifier: DC:8A:7E:CA:6C:89:A4:2D:A4:9C:B5:C2:88:3B:47:F9:DD:E7:07:41 Certificate issuer: /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Certificate serial: 010D0C9F4328584B477C7D23C7E98EBC0CC26E58 Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 394195 IP address blocks: 68.64.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:7d:23:c7:e9:8e:bc:0c:c2:6e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=4f4d59d0-b2c3-48d4-91aa-67a021ba1677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:e6:58:a4:b4:eb:15:de:b6:0c:47:b6:80: 23:ce:74:50:dc:f7:ec:23:a4:3a:9f:a1:21:49:85: b9:f1:2b:31:4e:d5:24:36:dd:89:e7:fe:22:f5:0b: 42:16:9a:aa:98:71:e9:cd:57:10:67:30:a2:64:ab: 20:bc:2f:a1:20:60:8d:83:f3:c2:8a:ce:ff:8b:49: 22:c5:ac:12:29:83:7c:2c:7e:a1:67:28:f2:b6:02: 1a:fb:82:f4:bb:fb:5b:ec:eb:af:c2:8d:41:62:52: 05:aa:1a:52:61:45:d2:44:a8:d2:79:b6:b5:41:00: a4:fa:8a:28:f2:bc:8b:a1:f0:20:c6:eb:7f:d0:c9: 68:04:a6:93:66:70:28:3c:21:db:16:fc:c7:69:8a: f4:58:de:12:3f:b0:d3:f9:8a:56:ca:f9:21:7a:43: 0c:c9:70:52:fb:9a:ce:2d:59:c6:16:d5:20:1f:78: 0a:6d:90:87:b3:43:d0:00:c8:99:91:0d:17:31:3a: 48:3b:6f:52:94:f4:19:98:26:e3:08:68:db:e7:49: 37:2b:b4:29:70:a8:45:26:e7:ba:2f:79:c0:ae:78: c6:65:97:6e:bc:e3:0d:10:a7:5c:6a:b2:d0:cb:cc: 28:6d:35:7b:97:e3:e5:02:7f:54:b5:b6:9e:f9:f5: 60:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8A:7E:CA:6C:89:A4:2D:A4:9C:B5:C2:88:3B:47:F9:DD:E7:07:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl X509v3 Authority Key Identifier: keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer sbgp-ipAddrBlock: critical IPv4: 68.64.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:fb:26:0f:8b:9e:8f:b4:05:78:78:38:d1:46:25:04:ea:2d: fc:c9:54:c7:71:05:8b:ef:e1:40:50:3c:17:b0:8a:5f:4b:f6: 82:ef:50:12:bd:4d:37:1e:f2:93:65:f2:9f:64:c5:05:f0:96: 9f:5c:ff:8f:bc:37:5d:ca:cb:6c:66:3e:50:cd:36:70:e5:27: a1:f3:d1:3b:55:dc:3d:5b:22:a0:47:77:9c:09:a5:91:ab:78: 47:f9:b3:ea:33:52:86:c1:69:14:8f:d6:b6:c9:de:44:73:0e: 66:0b:ee:ea:6b:41:26:d9:6e:c1:2b:f3:ce:38:58:54:88:7f: c9:92:20:af:b3:e7:ee:05:e8:7b:16:08:40:c1:5e:4e:b7:4a: 68:6d:1f:b3:64:99:7e:f4:9c:f1:03:1e:a1:eb:03:32:d6:fb: ac:71:14:d4:98:35:a5:b7:08:e5:26:cb:07:c6:9d:2b:39:84: cc:79:09:28:16:fe:35:f6:24:12:13:01:3a:dc:82:53:7b:7b: e2:f7:87:6d:5d:a4:c9:e7:36:ae:a6:04:80:ed:d4:da:77:43: 6b:73:a2:01:a0:33:a9:d5:eb:81:46:37:cb:ee:3b:48:8f:61: b1:1e:dd:60:63:94:c7:5e:09:a3:6c:90:a9:c9:cc:89:13:4d: 38:be:ed:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfH0jx+mOvAzCblgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjY2ZjOGUtOTY4MC00MDgwLWEzZjQtZWYxYTllMGRj MzZjMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NGY0ZDU5ZDAtYjJjMy00OGQ0LTkxYWEtNjdhMDIxYmExNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx/mWKS06xXetgxHtoAjznRQ3PfsI6Q6n6Eh SYW58SsxTtUkNt2J5/4i9QtCFpqqmHHpzVcQZzCiZKsgvC+hIGCNg/PCis7/i0ki xawSKYN8LH6hZyjytgIa+4L0u/tb7Ouvwo1BYlIFqhpSYUXSRKjSeba1QQCk+ooo 8ryLofAgxut/0MloBKaTZnAoPCHbFvzHaYr0WN4SP7DT+YpWyvkhekMMyXBS+5rO LVnGFtUgH3gKbZCHs0PQAMiZkQ0XMTpIO29SlPQZmCbjCGjb50k3K7QpcKhFJue6 L3nArnjGZZduvOMNEKdcarLQy8wobTV7l+PlAn9Utbae+fVg0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyKfspsiaQtpJy1wog7R/nd5wdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWNj ZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFhOWUwZGMzNmMvY2VlYWE4NDEtZWQ4Mi0z M2QxLTg0M2EtM2E0MTFlNmZlZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFjY2ZjOGUtOTY4MC00MDgwLWEz ZjQtZWYxYTllMGRjMzZjL2ExY2NmYzhlLTk2ODAtNDA4MC1hM2Y0LWVmMWE5ZTBk YzM2Yy5jcmwwHwYDVR0jBBgwFoAURcVOV0j2ImhwS/VuMNIMT3qkLGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWNjZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFh OWUwZGMzNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREDeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz7Jg+Lno+0BXh4ONFGJQTqLfzJVMdxBYvv4UBQPBewil9L9oLvUBK9 TTce8pNl8p9kxQXwlp9c/4+8N13Ky2xmPlDNNnDlJ6Hz0TtV3D1bIqBHd5wJpZGr eEf5s+ozUobBaRSP1rbJ3kRzDmYL7uprQSbZbsEr8844WFSIf8mSIK+z5+4F6HsW CEDBXk63SmhtH7NkmX70nPEDHqHrAzLW+6xxFNSYNaW3COUmywfGnSs5hMx5CSgW /jX2JBITATrcglN7e+L3h21dpMnnNq6mBIDt1Np3Q2tzogGgM6nV64FGN8vuO0iP YbEe3WBjlMdeCaNskKnJzIkTTTi+7c4= -----END CERTIFICATE-----Generated at Tue Oct 21 00:01:34 2025 by rpki-client