$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/b0abd619-03bb-328a-ac59-85f6eb6f070d.roa File: b0abd619-03bb-328a-ac59-85f6eb6f070d.roa (raw, json) Hash identifier: erx3qeaZTPJiZdsmbuqRLvGEMGuVaHMSfdMHL/mmb58= Subject key identifier: C5:C4:43:7C:E3:50:50:E6:96:86:D0:67:7E:B5:C2:AF:D3:D8:46:B8 Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584B94422E66608A66C3DDA0D2A0 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/b0abd619-03bb-328a-ac59-85f6eb6f070d.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 91 IP address blocks: 204.76.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:2e:66:60:8a:66:c3:dd:a0:d2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=adaa4131-25bb-46a6-b628-d7abb1593cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ef:49:0d:52:dc:21:3d:1b:23:8c:bb:ae:48: 64:70:e2:33:c6:04:47:af:8f:78:1a:7d:ce:4e:a5: f7:11:57:ad:d3:2a:8e:75:d8:61:cc:d1:a1:80:ea: f1:7f:cd:5d:af:66:41:fb:f1:e9:a7:30:d8:2c:28: c5:aa:56:2a:45:d6:07:93:5a:e2:3d:35:d4:92:c9: d0:ec:a8:fc:bb:ad:8e:4c:fc:1c:c4:9b:39:7d:5b: ea:94:b7:51:bf:60:2b:5b:f5:5a:e2:0c:a6:ca:fa: 60:f6:af:69:41:e3:c6:64:dd:1b:77:b1:6b:ca:9d: 58:49:96:a2:32:61:7a:b5:46:d8:06:ec:51:7b:4d: 56:9b:bd:42:32:49:60:aa:9e:0e:86:e7:0b:22:da: c5:dd:fc:4e:3e:83:66:36:20:52:62:96:88:05:e3: 09:9e:68:e6:2b:5b:31:10:c6:98:fc:b5:02:4a:e9: 15:8b:6b:20:cb:eb:6f:75:26:db:a1:33:bf:b2:41: 53:ab:86:4b:73:a2:36:5d:e9:c4:07:fa:0e:eb:fd: 07:24:b6:35:b3:b4:00:0b:21:5a:ab:b8:b9:29:2e: 46:3b:18:35:7f:2a:31:bf:6d:0b:0a:ec:06:1b:99: b7:ce:75:d5:5a:ce:33:9e:a2:2a:ec:ad:29:1d:c5: 14:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C4:43:7C:E3:50:50:E6:96:86:D0:67:7E:B5:C2:AF:D3:D8:46:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/b0abd619-03bb-328a-ac59-85f6eb6f070d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 204.76.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4e:ac:75:76:85:22:45:4e:9e:79:f5:ab:e1:54:ef:d3:08: a4:83:89:e4:fc:ea:c2:c3:ba:26:95:c7:ad:cf:04:c6:43:55: 9e:e7:6c:0b:72:5c:fe:9a:a1:f3:f2:46:f0:e5:ec:e3:95:4a: ef:25:f6:6c:7d:e4:dd:55:b6:c5:2a:a8:97:69:ce:46:e4:a3: 8c:5d:3e:25:d5:ca:b6:6c:58:73:6a:81:51:30:b0:93:5b:40: 2c:3c:3a:2e:39:e7:6f:24:a3:1a:ed:05:c9:f1:1f:97:9c:da: 0b:9b:7c:00:64:fd:a9:13:16:eb:75:73:3b:85:23:2b:f9:c4: ea:f9:c2:c0:a5:91:c3:ab:56:55:55:b3:dd:14:45:e6:e6:c3: 0d:f5:0d:35:1a:52:44:95:56:3e:70:c9:5d:33:4c:45:e1:ab: ac:b1:30:9e:ce:97:56:b8:99:95:2f:f0:d4:7a:6b:8e:ac:23: 76:52:45:a7:af:a0:57:f0:59:74:2e:13:1b:11:e7:f1:19:e3: 93:a9:74:f7:74:da:ae:1f:5c:f6:da:15:87:9d:03:94:08:c4: 89:f5:45:2e:2e:6d:28:63:e3:1a:4c:f6:b0:49:08:40:10:72: d0:6e:c6:a4:98:93:16:72:c0:2a:89:d5:c2:39:e1:ad:47:d0: f2:ab:55:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQi5mYIpmw92g0qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk YWRhYTQxMzEtMjViYi00NmE2LWI2MjgtZDdhYmIxNTkzY2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u9JDVLcIT0bI4y7rkhkcOIzxgRHr494Gn3O TqX3EVet0yqOddhhzNGhgOrxf81dr2ZB+/HppzDYLCjFqlYqRdYHk1riPTXUksnQ 7Kj8u62OTPwcxJs5fVvqlLdRv2ArW/Va4gymyvpg9q9pQePGZN0bd7Fryp1YSZai MmF6tUbYBuxRe01Wm71CMklgqp4OhucLItrF3fxOPoNmNiBSYpaIBeMJnmjmK1sx EMaY/LUCSukVi2sgy+tvdSbboTO/skFTq4ZLc6I2XenEB/oO6/0HJLY1s7QACyFa q7i5KS5GOxg1fyoxv20LCuwGG5m3znXVWs4znqIq7K0pHcUUBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXEQ3zjUFDmlobQZ361wq/T2Ea4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvYjBhYmQ2MTktMDNiYi0z MjhhLWFjNTktODVmNmViNmYwNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEzfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1OrHV2hSJFTp559avhVO/TCKSDieT86sLDuiaVx63PBMZDVZ7nbAty XP6aofPyRvDl7OOVSu8l9mx95N1VtsUqqJdpzkbko4xdPiXVyrZsWHNqgVEwsJNb QCw8Oi45528koxrtBcnxH5ec2gubfABk/akTFut1czuFIyv5xOr5wsClkcOrVlVV s90URebmww31DTUaUkSVVj5wyV0zTEXhq6yxMJ7Ol1a4mZUv8NR6a46sI3ZSRaev oFfwWXQuExsR5/EZ45OpdPd02q4fXPbaFYedA5QIxIn1RS4ubShj4xpM9rBJCEAQ ctBuxqSYkxZywCqJ1cI54a1H0PKrVZ0= -----END CERTIFICATE-----Generated at Tue Oct 21 00:39:07 2025 by rpki-client