$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa File: bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa (raw, json) Hash identifier: v+wTjaO0fw0+zGn0tpS8wt4Q+/XatOJAz6jPCXAT2Kw= Subject key identifier: 2B:04:52:08:B7:10:B4:6B:32:0C:CB:C3:21:B4:F5:98:DD:34:F2:DF Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584B8382162704AA9CDD415317E0 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 91 IP address blocks: 204.76.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:16:27:04:aa:9c:dd:41:53:17:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=95a86d17-8f81-4e27-8ecb-3c466c1d8d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:64:3a:34:87:91:f8:cc:45:fc:dd:28:dd:8d: 4f:9b:8d:32:8d:e7:c3:22:91:9c:16:a7:37:5d:b6: 0a:fc:cd:13:02:21:50:fd:f9:8c:49:cf:33:67:48: 18:d0:83:af:75:15:8a:9c:28:22:21:9b:7e:9e:a7: 0b:42:4b:86:d0:1c:44:62:97:c2:1f:65:20:54:88: 49:af:60:17:e6:e4:ce:be:13:5a:55:43:f2:74:28: d3:19:88:1a:9c:27:6d:66:3d:46:5e:e0:03:4e:d0: a7:70:5b:59:f8:26:a3:59:d7:de:9a:17:aa:03:18: d3:66:3b:35:a7:20:ba:da:c1:fa:6f:0f:f5:04:6d: 9a:6c:7d:b5:20:fd:9b:e8:ae:b2:cd:42:04:f9:54: 81:a0:c5:3f:f2:86:ba:44:42:aa:27:c9:62:33:df: cd:b2:00:6b:6f:03:e5:eb:86:31:81:03:f2:22:16: a5:f8:33:64:13:04:52:f6:81:f8:47:b0:1e:b2:c7: b5:dd:60:db:4d:6e:cb:f5:d4:fb:fe:ba:7a:38:cb: 20:8d:58:c4:25:7e:cd:53:bf:e7:b5:93:f3:51:45: ac:17:a4:9b:da:92:fc:51:08:ac:1a:de:71:52:8c: 8d:ca:d4:e2:9b:88:f4:65:34:25:b5:93:ae:d9:da: 08:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:04:52:08:B7:10:B4:6B:32:0C:CB:C3:21:B4:F5:98:DD:34:F2:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 204.76.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:46:84:ee:17:4f:b7:7e:c0:26:27:47:99:14:22:73:07:f9: f2:99:7d:88:05:b8:f1:cc:6a:70:af:cc:ad:d0:33:49:35:a6: 88:40:4b:c6:34:31:b4:f2:c0:b8:53:02:0d:9f:68:67:58:2f: 99:2f:63:ad:1f:6e:a7:6e:fb:be:9f:9a:fb:8c:3a:96:0e:5a: ba:df:5b:10:13:fc:fc:46:a9:76:8e:8c:46:88:79:14:8e:1c: 2d:33:8d:e3:97:83:1c:9d:6e:e7:a0:ef:c0:6b:87:51:9f:dd: 4b:d4:e3:7e:f2:51:1d:84:e6:b1:96:f1:cb:e5:1b:57:30:2e: 30:49:1e:cd:de:c0:61:fd:09:18:37:d4:d8:21:e2:f0:65:c8: 0f:46:e1:6c:c6:21:21:22:64:06:a2:94:9e:e4:70:40:bf:ad: d5:41:e6:43:86:af:44:86:94:3d:aa:55:c5:17:2f:5c:a5:b3: 4f:c0:ac:46:e9:7d:7b:be:9e:bd:af:ad:27:18:f7:a8:d6:db: 63:8f:84:c8:1f:c2:99:82:39:e5:04:2c:69:23:47:d9:6a:9d: 5c:a5:23:26:c3:7d:ae:86:bb:ac:b2:84:e4:30:70:4a:6d:84: dd:1b:af:cb:00:90:bc:be:b6:55:12:06:69:6f:1c:11:83:ee: 51:42:11:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuDghYnBKqc3UFTF+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk OTVhODZkMTctOGY4MS00ZTI3LThlY2ItM2M0NjZjMWQ4ZDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9mQ6NIeR+MxF/N0o3Y1Pm40yjefDIpGcFqc3 XbYK/M0TAiFQ/fmMSc8zZ0gY0IOvdRWKnCgiIZt+nqcLQkuG0BxEYpfCH2UgVIhJ r2AX5uTOvhNaVUPydCjTGYganCdtZj1GXuADTtCncFtZ+CajWdfemheqAxjTZjs1 pyC62sH6bw/1BG2abH21IP2b6K6yzUIE+VSBoMU/8oa6REKqJ8liM9/NsgBrbwPl 64YxgQPyIhal+DNkEwRS9oH4R7Aesse13WDbTW7L9dT7/rp6OMsgjVjEJX7NU7/n tZPzUUWsF6Sb2pL8UQisGt5xUoyNytTim4j0ZTQltZOu2doICQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsEUgi3ELRrMgzLwyG09ZjdNPLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvYmVmNDdjNmYtMzE5OS0z ZmE1LTgyZGYtY2UzYTUzY2M0Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEzeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBGhO4XT7d+wCYnR5kUInMH+fKZfYgFuPHManCvzK3QM0k1pohAS8Y0 MbTywLhTAg2faGdYL5kvY60fbqdu+76fmvuMOpYOWrrfWxAT/PxGqXaOjEaIeRSO HC0zjeOXgxydbueg78Brh1Gf3UvU437yUR2E5rGW8cvlG1cwLjBJHs3ewGH9CRg3 1Ngh4vBlyA9G4WzGISEiZAailJ7kcEC/rdVB5kOGr0SGlD2qVcUXL1yls0/ArEbp fXu+nr2vrScY96jW22OPhMgfwpmCOeUELGkjR9lqnVylIybDfa6Gu6yyhOQwcEpt hN0br8sAkLy+tlUSBmlvHBGD7lFCEQg= -----END CERTIFICATE-----Generated at Mon Oct 20 22:02:54 2025 by rpki-client