$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2cc7e6d7-52d1-305c-a917-da2148e02567.roa File: 2cc7e6d7-52d1-305c-a917-da2148e02567.roa (raw, json) Hash identifier: nmR8DELLphQqCwcJU+2rUVTAiRHmrDyGW5fJLF9CL+0= Subject key identifier: D8:51:58:C7:48:7F:CF:00:D7:5E:16:9B:86:B1:6C:88:36:57:EA:1E Certificate issuer: /CN=f6414b99-bb9f-492a-a1ac-935a49935d9d Certificate serial: 010D0C9F4328584B48E1B5DDBAF7E9AAAA08E300 Authority key identifier: 5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2cc7e6d7-52d1-305c-a917-da2148e02567.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397122 IP address blocks: 68.234.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b5:dd:ba:f7:e9:aa:aa:08:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6414b99-bb9f-492a-a1ac-935a49935d9d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=24896d19-6c85-459b-94e5-b596ddd0cc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:f1:a5:82:69:66:f0:93:f2:88:f3:1e:db: 5b:bf:43:db:60:47:bc:9a:26:cb:88:e7:a6:cb:8b: 66:a4:29:8c:ce:38:2e:84:85:81:22:5a:82:70:f2: 01:53:20:95:06:61:73:fe:6a:ec:90:b7:10:ed:b9: 66:89:4c:5a:cc:c4:e6:77:b4:83:f7:ea:ab:c3:93: fd:6b:a8:4f:d9:5c:2e:84:e6:77:29:44:e7:20:b5: 12:17:1f:bc:8f:4c:00:e5:8e:c0:ec:e4:01:bc:61: 28:e8:85:e1:0a:66:32:0b:c1:9a:aa:7d:29:3d:95: 3e:8b:30:4c:80:9b:f8:6c:e1:97:f1:d6:23:64:16: d8:8f:09:2f:ec:6a:90:07:80:42:74:70:c7:c3:aa: 8a:57:7e:2c:aa:aa:23:03:b6:fb:53:3c:5c:a1:37: 44:cb:73:6d:b5:3f:b3:0d:d8:2d:d1:34:b8:a4:23: ab:2e:46:1b:ce:d0:f0:08:77:b1:84:b0:53:d0:a3: fa:55:db:9f:47:7c:9b:09:3d:08:2b:34:1c:f3:b8: 30:c7:cf:f1:48:cf:72:4f:3f:79:db:c2:73:ac:28: 0f:9e:70:6b:94:f6:69:e6:e6:98:86:eb:7a:f1:32: 8c:dd:fb:d3:c8:25:81:73:c6:96:be:a5:03:6c:b3: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:51:58:C7:48:7F:CF:00:D7:5E:16:9B:86:B1:6C:88:36:57:EA:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2cc7e6d7-52d1-305c-a917-da2148e02567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl X509v3 Authority Key Identifier: keyid:5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer sbgp-ipAddrBlock: critical IPv4: 68.234.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:1a:fc:8d:c8:8c:5d:3d:96:26:f2:dc:8c:5b:23:2b:c6:18: 28:c0:95:b4:a1:4b:46:d1:6f:ca:1d:fb:c5:7f:bc:aa:47:9f: 6a:94:cd:40:55:10:39:c5:2a:e1:3a:f5:53:2d:5d:2e:74:61: 57:0c:f7:9c:e0:1e:59:62:dc:e2:e1:18:c7:6a:2b:40:27:75: 73:0b:79:95:42:d3:a6:60:bb:b3:d1:f5:80:03:77:96:45:1d: b4:39:48:a8:f7:d4:c5:22:e7:ef:3c:56:b8:90:04:d4:26:b6: 12:56:d3:cb:89:25:b0:09:ff:c6:11:88:56:82:64:68:d9:7a: 37:44:8e:be:9d:fe:e5:e4:03:ab:0c:e1:d8:83:33:f9:da:54: c6:fd:4c:ac:4b:ea:21:83:d0:61:92:85:5f:f7:b6:49:de:dd: c7:a0:ae:bb:53:d1:b7:90:5b:08:d9:a1:0d:32:69:22:ed:c6: d1:d0:28:f5:60:b2:5e:52:67:8e:ac:b4:42:0b:bd:a3:6e:1f: 37:59:a8:5e:66:86:45:72:94:77:d4:f9:a0:c5:04:cb:64:23: 85:af:b9:f4:06:d8:dc:2d:49:d8:ac:9f:3e:00:ed:6f:99:85: 8c:5e:39:0c:c1:70:74:36:b0:cf:51:6a:5e:f1:26:a3:56:e5: 6f:65:4c:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bXduvfpqqoI4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY0MTRiOTktYmI5Zi00OTJhLWExYWMtOTM1YTQ5OTM1 ZDlkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjQ4OTZkMTktNmM4NS00NTliLTk0ZTUtYjU5NmRkZDBjYzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGvxpYJpZvCT8ojzHttbv0PbYEe8mibLiOem y4tmpCmMzjguhIWBIlqCcPIBUyCVBmFz/mrskLcQ7blmiUxazMTmd7SD9+qrw5P9 a6hP2VwuhOZ3KUTnILUSFx+8j0wA5Y7A7OQBvGEo6IXhCmYyC8Gaqn0pPZU+izBM gJv4bOGX8dYjZBbYjwkv7GqQB4BCdHDHw6qKV34sqqojA7b7UzxcoTdEy3NttT+z Ddgt0TS4pCOrLkYbztDwCHexhLBT0KP6VdufR3ybCT0IKzQc87gwx8/xSM9yTz95 28JzrCgPnnBrlPZp5uaYhut68TKM3fvTyCWBc8aWvqUDbLOTVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhRWMdIf88A114Wm4axbIg2V+oeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNjQx NGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVhNDk5MzVkOWQvMmNjN2U2ZDctNTJkMS0z MDVjLWE5MTctZGEyMTQ4ZTAyNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjY0MTRiOTktYmI5Zi00OTJhLWEx YWMtOTM1YTQ5OTM1ZDlkL2Y2NDE0Yjk5LWJiOWYtNDkyYS1hMWFjLTkzNWE0OTkz NWQ5ZC5jcmwwHwYDVR0jBBgwFoAUXyjgr3R9K6UUhQRsKCjt7dfyvZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNjQxNGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVh NDk5MzVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEROpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAa/I3IjF09liby3IxbIyvGGCjAlbShS0bRb8od+8V/vKpHn2qUzUBV EDnFKuE69VMtXS50YVcM95zgHlli3OLhGMdqK0AndXMLeZVC06Zgu7PR9YADd5ZF HbQ5SKj31MUi5+88VriQBNQmthJW08uJJbAJ/8YRiFaCZGjZejdEjr6d/uXkA6sM 4diDM/naVMb9TKxL6iGD0GGShV/3tkne3cegrrtT0beQWwjZoQ0yaSLtxtHQKPVg sl5SZ46stEILvaNuHzdZqF5mhkVylHfU+aDFBMtkI4WvufQG2NwtSdisnz4A7W+Z hYxeOQzBcHQ2sM9Ral7xJqNW5W9lTN4= -----END CERTIFICATE-----Generated at Wed Oct 22 05:10:07 2025 by rpki-client