$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/195a65bc-7a79-3b20-8e10-5794d68025a0.roa File: 195a65bc-7a79-3b20-8e10-5794d68025a0.roa (raw, json) Hash identifier: Jhnu8d9aBBa+YMZZ0m79X/ONGfBA/oyMTpc3Cbv5rSo= Subject key identifier: A9:17:1F:99:B0:8D:71:97:E8:E7:AB:8E:A9:CD:FD:6F:93:07:9B:E1 Certificate issuer: /CN=e9769409-4db3-443e-9837-3afd4dca595d Certificate serial: 010D0C9F4328584B66320538F750AC96A5FB3400 Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/195a65bc-7a79-3b20-8e10-5794d68025a0.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 23316 IP address blocks: 68.170.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:05:38:f7:50:ac:96:a5:fb:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=b1d0763f-b666-4ce8-b053-6ef87302c159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:05:24:40:ca:e5:7f:0d:1b:35:69:a3:de:be: 32:5a:6b:b7:5b:19:93:af:f8:8c:94:55:1c:44:94: 7c:08:b3:82:a1:ee:e0:46:9f:c2:ce:6e:70:01:20: a4:84:c4:8b:63:81:8f:0c:c5:55:a8:1a:74:ca:59: cb:cc:2e:82:18:c5:a7:d4:52:ed:18:30:93:46:5d: fc:4a:0b:54:26:b7:6c:bd:ee:b9:1f:3a:a1:5e:ca: b2:99:1d:b0:2c:22:7d:71:9d:71:3d:24:78:50:46: 08:c6:ea:81:6e:34:8f:08:8c:c5:22:d0:4f:3c:78: a3:a1:73:42:34:e0:e6:22:ca:e3:5b:8e:29:b7:41: 3b:07:c5:4b:57:0d:35:c7:b1:8c:55:aa:56:0c:68: d0:84:7a:75:8e:b1:b0:bc:a1:47:63:e8:14:c8:f0: 18:94:d9:88:24:5c:85:8b:c2:9d:0e:d8:f7:ef:3a: 85:01:60:0d:f3:07:24:d2:16:bd:16:98:ef:53:d7: 99:48:4b:bf:0a:66:a4:76:38:37:17:93:55:a9:6d: 3b:a3:29:11:6c:a9:0b:be:03:3a:24:fd:3f:d8:67: 42:b8:c6:3d:4c:21:3d:47:d2:70:f4:71:e2:da:0b: 0c:54:fa:8c:ca:df:29:c8:de:8b:d3:b1:cd:84:9e: 85:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:17:1F:99:B0:8D:71:97:E8:E7:AB:8E:A9:CD:FD:6F:93:07:9B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/195a65bc-7a79-3b20-8e10-5794d68025a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl X509v3 Authority Key Identifier: keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer sbgp-ipAddrBlock: critical IPv4: 68.170.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c4:09:2d:47:9c:fb:63:e3:b5:ee:ca:0d:6b:41:19:12:d9: 15:4c:15:66:0e:91:6e:69:fe:b1:37:4e:16:18:02:93:10:3b: df:e8:e7:36:8c:6c:76:8d:10:a4:e1:ac:60:d7:36:80:de:68: 08:72:39:84:3a:4a:83:ec:ab:26:84:e9:6f:d9:d6:90:39:78: a1:cc:fa:af:9c:71:f7:da:ae:40:34:95:f0:b4:56:19:ae:70: f8:54:a7:73:fa:a8:95:a6:6a:c7:c5:f1:50:1a:17:32:94:f8: 47:09:84:e3:d3:9c:9b:c9:ac:00:b9:0c:ff:af:78:ce:53:e9: d2:dc:ec:71:5c:92:38:f4:7b:87:a7:20:99:88:6e:cb:74:3b: bd:1f:43:95:e2:c8:2b:a8:e9:e1:34:2c:cf:be:da:58:78:37: ff:c1:d8:5e:5c:f9:a7:4e:67:65:48:a7:4d:dd:ff:65:1e:61: 74:ba:4b:a6:8e:be:9c:d7:cc:d7:29:db:7a:f1:43:55:16:dc: f4:20:c0:2f:ae:a2:64:43:4c:82:75:b8:5a:25:3f:84:6b:90: ff:46:6f:a9:60:6d:9c:db:86:4d:e7:17:e7:51:2c:2d:8e:12: 3f:94:9e:99:34:85:b1:5d:3c:6e:e3:00:36:5e:df:99:34:04: 7e:f7:4e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgU491CslqX7NAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1 OTVkMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YjFkMDc2M2YtYjY2Ni00Y2U4LWIwNTMtNmVmODczMDJjMTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wUkQMrlfw0bNWmj3r4yWmu3WxmTr/iMlFUc RJR8CLOCoe7gRp/Czm5wASCkhMSLY4GPDMVVqBp0ylnLzC6CGMWn1FLtGDCTRl38 SgtUJrdsve65HzqhXsqymR2wLCJ9cZ1xPSR4UEYIxuqBbjSPCIzFItBPPHijoXNC NODmIsrjW44pt0E7B8VLVw01x7GMVapWDGjQhHp1jrGwvKFHY+gUyPAYlNmIJFyF i8KdDtj37zqFAWAN8wck0ha9FpjvU9eZSEu/Cmakdjg3F5NVqW07oykRbKkLvgM6 JP0/2GdCuMY9TCE9R9Jw9HHi2gsMVPqMyt8pyN6L07HNhJ6FuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkXH5mwjXGX6OerjqnN/W+TB5vhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2 OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvMTk1YTY1YmMtN2E3OS0z YjIwLThlMTAtNTc5NGQ2ODAyNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4 MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDECS1HnPtj47Xuyg1rQRkS2RVMFWYOkW5p/rE3ThYYApMQO9/o5zaM bHaNEKThrGDXNoDeaAhyOYQ6SoPsqyaE6W/Z1pA5eKHM+q+ccffarkA0lfC0Vhmu cPhUp3P6qJWmasfF8VAaFzKU+EcJhOPTnJvJrAC5DP+veM5T6dLc7HFckjj0e4en IJmIbst0O70fQ5XiyCuo6eE0LM++2lh4N//B2F5c+adOZ2VIp03d/2UeYXS6S6aO vpzXzNcp23rxQ1UW3PQgwC+uomRDTIJ1uFolP4RrkP9Gb6lgbZzbhk3nF+dRLC2O Ej+Unpk0hbFdPG7jADZe35k0BH73TlM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:22 2025 by rpki-client