$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/d7e961b2-50a1-302c-b680-21a7f62e493d.roa File: d7e961b2-50a1-302c-b680-21a7f62e493d.roa (raw, json) Hash identifier: R/U1EUbcSmoE3skloen77YV2+T+RiU9RBTGRCfOPtqU= Subject key identifier: D8:02:AF:4D:A4:76:B7:EE:08:21:72:B4:C4:2B:C0:EA:09:90:7A:46 Certificate issuer: /CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5 Certificate serial: 010D0C9F4328584B8BE224EC5D7E788CEB814A00 Authority key identifier: 46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/d7e961b2-50a1-302c-b680-21a7f62e493d.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 22711 IP address blocks: 206.83.160.0/20 maxlen: 24 2620:13d:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:24:ec:5d:7e:78:8c:eb:81:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=cd30b08d-ad18-4d59-ba05-6fa9c260e88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a2:e3:8f:c3:aa:eb:f2:5e:62:d6:db:d4:c7: 09:5a:aa:9d:56:45:0e:e2:90:1b:f7:c8:12:1c:af: b3:d5:23:03:34:52:30:40:e5:3a:08:12:c9:91:63: a5:60:95:4c:e0:05:76:50:0b:d5:fc:46:9e:dc:b8: 49:9b:72:9e:1a:55:e1:14:18:bc:c0:c0:61:f9:c2: 86:b4:af:36:9d:ea:24:9b:da:18:8f:1e:5c:29:c2: a7:e2:ba:2d:6e:94:ab:5d:3a:bb:4c:4d:64:ca:7a: 57:b4:01:4e:1c:a5:86:d9:d8:a1:3a:c2:78:44:33: e9:5f:fe:8b:0f:48:12:45:b7:ee:80:a8:d2:d5:fc: 7f:47:f8:e3:b8:2c:e0:2a:6a:34:61:90:f3:5c:14: b7:3c:02:e2:94:be:5d:a2:ff:e6:9a:37:8c:3e:bc: e6:4a:ee:64:98:6d:e2:46:fd:6e:38:cb:e2:fa:a3: b3:b3:39:bc:2a:61:f5:db:f4:6e:fa:7b:55:1a:09: 9e:96:4d:23:74:8f:82:5c:af:e1:f7:78:ff:d4:6e: da:f8:35:56:5c:33:ff:33:a9:5f:83:66:49:00:e8: e1:7c:d9:86:c8:24:7e:a1:ba:c3:21:23:61:33:00: 0a:5a:0d:bd:c7:cf:0e:10:cc:f4:39:54:28:09:c2: 54:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:02:AF:4D:A4:76:B7:EE:08:21:72:B4:C4:2B:C0:EA:09:90:7A:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/d7e961b2-50a1-302c-b680-21a7f62e493d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl X509v3 Authority Key Identifier: keyid:46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer sbgp-ipAddrBlock: critical IPv4: 206.83.160.0/20 IPv6: 2620:13d:f000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:29:e0:71:27:2a:85:6b:6e:ba:91:c4:4b:5a:39:f4:ef:c3: 5b:0f:00:ae:bc:58:d7:41:28:02:87:4b:30:a9:ca:17:4f:92: 29:40:5e:f5:8a:a6:fc:eb:7e:67:48:83:7c:88:ec:6f:d6:0e: cc:35:7d:c8:05:eb:a8:1b:2c:57:95:fc:dc:25:6a:f1:28:d5: 83:37:c7:9f:4e:37:33:fa:af:7d:4f:e1:ff:d5:9c:5f:83:e0: 40:50:f4:6f:66:21:2f:4a:50:f5:01:67:66:30:b1:b0:d2:8b: dc:22:64:1e:88:10:43:82:9b:28:fc:9e:dc:d4:df:ab:c4:51: a9:cd:d2:f4:91:1c:f7:30:c5:c3:35:48:9b:89:76:4b:0e:62: 81:47:8b:48:7e:1c:c2:4d:03:07:5a:f9:89:56:31:58:58:28: ce:dc:5d:5b:a4:f7:8c:e6:f5:64:6b:9d:f8:ae:3d:25:24:50: 44:b9:a1:28:fc:34:c2:b5:c2:41:d5:11:96:66:57:3c:fd:a9: 63:39:1d:ac:90:00:e3:16:45:ec:fb:8f:b8:5b:82:6d:ec:3c: 7c:35:2c:6d:17:83:62:8b:61:c4:ce:76:01:58:d3:b6:68:64: 9e:62:33:6c:cf:04:b3:12:fd:1c:b3:58:2b:6b:58:e5:bc:c2: 47:1d:e3:39 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEuL4iTsXX54jOuBSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjgzNzVjZTQtZjljYi00MGViLTlmODMtNjdkMWNmYWFh M2Y1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk Y2QzMGIwOGQtYWQxOC00ZDU5LWJhMDUtNmZhOWMyNjBlODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaLjj8Oq6/JeYtbb1McJWqqdVkUO4pAb98gS HK+z1SMDNFIwQOU6CBLJkWOlYJVM4AV2UAvV/Eae3LhJm3KeGlXhFBi8wMBh+cKG tK82neokm9oYjx5cKcKn4rotbpSrXTq7TE1kynpXtAFOHKWG2dihOsJ4RDPpX/6L D0gSRbfugKjS1fx/R/jjuCzgKmo0YZDzXBS3PALilL5dov/mmjeMPrzmSu5kmG3i Rv1uOMvi+qOzszm8KmH12/Ru+ntVGgmelk0jdI+CXK/h93j/1G7a+DVWXDP/M6lf g2ZJAOjhfNmGyCR+obrDISNhMwAKWg29x88OEMz0OVQoCcJUMwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNgCr02kdrfuCCFytMQrwOoJkHpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ODM3 NWNlNC1mOWNiLTQwZWItOWY4My02N2QxY2ZhYWEzZjUvZDdlOTYxYjItNTBhMS0z MDJjLWI2ODAtMjFhN2Y2MmU0OTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjgzNzVjZTQtZjljYi00MGViLTlm ODMtNjdkMWNmYWFhM2Y1LzY4Mzc1Y2U0LWY5Y2ItNDBlYi05ZjgzLTY3ZDFjZmFh YTNmNS5jcmwwHwYDVR0jBBgwFoAURup/fr/edULFdRaspZP5BoounswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82ODM3NWNlNC1mOWNiLTQwZWItOWY4My02N2Qx Y2ZhYWEzZjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEzlOgMA4E AgACMAgDBgAmIAE98DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEKeBxJyqFa266kcRLWjn078NbDwCuvFjX QSgCh0swqcoXT5IpQF71iqb8635nSIN8iOxv1g7MNX3IBeuoGyxXlfzcJWrxKNWD N8efTjcz+q99T+H/1Zxfg+BAUPRvZiEvSlD1AWdmMLGw0ovcImQeiBBDgpso/J7c 1N+rxFGpzdL0kRz3MMXDNUibiXZLDmKBR4tIfhzCTQMHWvmJVjFYWCjO3F1bpPeM 5vVka534rj0lJFBEuaEo/DTCtcJB1RGWZlc8/aljOR2skADjFkXs+4+4W4Jt7Dx8 NSxtF4Nii2HEznYBWNO2aGSeYjNszwSzEv0cs1gra1jlvMJHHeM5 -----END CERTIFICATE-----Generated at Mon Oct 20 23:31:14 2025 by rpki-client