$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a6b88847-a0c7-3626-975e-b5416d5337c7.roa File: a6b88847-a0c7-3626-975e-b5416d5337c7.roa (raw, json) Hash identifier: 0d65lOV9J4KexodDR41dP2qiS1p+FBQ4tETqsLK18QM= Subject key identifier: 5D:C6:C6:D1:CC:06:12:25:ED:69:FB:5E:4A:53:8D:6A:5C:03:BD:72 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B5141C0A1EAFAAE823E9520A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a6b88847-a0c7-3626-975e-b5416d5337c7.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 8075 IP address blocks: 40.47.0.0/16 maxlen: 16 40.146.0.0/16 maxlen: 16 40.148.0.0/16 maxlen: 16 40.155.0.0/16 maxlen: 16 40.159.0.0/16 maxlen: 16 40.212.0.0/16 maxlen: 16 40.253.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:c0:a1:ea:fa:ae:82:3e:95:20:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=d16f7a61-ca98-42df-8500-a32bd9735f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f6:54:bf:1f:11:55:1e:21:a5:7a:09:22:60: 11:05:4c:62:3f:dd:83:96:42:ed:40:7e:72:db:c0: 13:32:4e:8d:6f:fb:11:bf:ac:be:84:ff:b4:31:d2: a1:c3:80:46:d1:d5:4d:79:00:40:0b:02:a6:1b:9f: 12:d5:89:28:3c:eb:23:66:73:ae:55:5e:4f:5b:82: da:ed:b5:fe:14:7d:a6:f2:c6:26:15:04:87:0b:00: 47:1a:8f:b8:c1:83:b5:c3:93:dc:ab:2f:73:8d:d1: 88:e9:ad:1b:c9:7f:d2:dc:fd:ca:e5:c9:2e:ac:36: f0:25:96:91:fd:52:bd:4a:f6:84:85:0a:97:16:e9: 2d:93:f4:12:bb:63:7a:2d:ca:c0:79:db:88:fb:c5: 4e:76:5e:a9:d5:7f:ee:0d:cb:96:08:74:08:e3:97: 1f:1f:80:20:dc:be:0e:41:1d:1a:6b:4b:25:41:78: c4:f5:c8:eb:b3:ce:6f:30:0d:b5:d5:86:1e:ac:71: 29:8b:80:49:35:c5:7d:ce:85:bd:c5:74:8a:19:73: 5b:e8:10:5d:45:bd:42:6a:0d:72:38:a9:de:da:eb: 87:07:52:19:a6:11:16:cf:82:82:96:c7:f4:70:10: 79:f6:76:b1:9a:78:e5:c9:4f:ea:3e:3f:8f:a8:92: 5b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C6:C6:D1:CC:06:12:25:ED:69:FB:5E:4A:53:8D:6A:5C:03:BD:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a6b88847-a0c7-3626-975e-b5416d5337c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.47.0.0/16 40.146.0.0/16 40.148.0.0/16 40.155.0.0/16 40.159.0.0/16 40.212.0.0/16 40.253.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:2f:0f:d6:15:fd:e8:dd:e0:39:9d:e5:6e:74:15:cd:d4:c6: 14:f9:5a:21:11:7f:d8:6c:b2:68:3d:40:ef:b9:93:39:68:f5: 17:40:b8:06:22:cb:fd:74:a4:74:7d:cc:56:46:be:dc:fa:46: 7f:7d:cb:c0:46:2a:8d:00:bf:65:cd:cc:b2:fe:76:f3:64:56: 5d:6c:5e:93:df:14:25:25:82:ce:bd:69:47:dc:16:56:1f:64: ba:06:87:93:96:f9:74:d3:e8:ea:8a:a8:50:2d:4e:d9:d4:3e: 17:0b:a9:e0:f2:d3:43:d0:71:35:3d:60:00:41:00:e2:0e:82: 54:be:e2:12:3d:e6:45:13:76:1d:bc:7a:df:cc:67:c0:41:d9: 57:f1:7b:b2:42:ff:65:d7:37:a6:4a:56:e8:c7:9b:c3:b7:cb: d4:e1:3c:fb:10:13:36:dc:c3:4e:ec:31:54:d6:4c:b2:a6:83: 09:a5:32:e2:c9:04:ef:e1:ad:f9:8b:9a:fd:ce:c4:82:cc:a6: 0c:8c:d9:74:57:db:f1:d4:9c:17:d1:ee:ab:36:6e:a6:54:3c: 57:bd:a5:20:e2:ec:9c:4e:76:ba:1c:aa:e0:f1:f8:66:da:72: 2e:d3:61:01:ec:d4:54:b9:ba:69:15:f0:c4:7e:0a:f4:bb:93: b0:a5:b1:12 -----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgIUAQ0Mn0MoWEtRQcCh6vqugj6VIKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk ZDE2ZjdhNjEtY2E5OC00MmRmLTg1MDAtYTMyYmQ5NzM1Zjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvZUvx8RVR4hpXoJImARBUxiP92DlkLtQH5y 28ATMk6Nb/sRv6y+hP+0MdKhw4BG0dVNeQBACwKmG58S1YkoPOsjZnOuVV5PW4La 7bX+FH2m8sYmFQSHCwBHGo+4wYO1w5Pcqy9zjdGI6a0byX/S3P3K5ckurDbwJZaR /VK9SvaEhQqXFuktk/QSu2N6LcrAeduI+8VOdl6p1X/uDcuWCHQI45cfH4Ag3L4O QR0aa0slQXjE9cjrs85vMA211YYerHEpi4BJNcV9zoW9xXSKGXNb6BBdRb1Cag1y OKne2uuHB1IZphEWz4KClsf0cBB59naxmnjlyU/qPj+PqJJb0wIDAQABo4IDcjCC A24wHQYDVR0OBBYEFF3GxtHMBhIl7Wn7XkpTjWpcA71yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTZiODg4NDctYTBjNy0z NjI2LTk3NWUtYjU0MTZkNTMzN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAATAjAwMAKC8DAwAo kgMDACiUAwMAKJsDAwAonwMDACjUAwMAKP0wVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlC8P1hX96N3gOZ3l bnQVzdTGFPlaIRF/2GyyaD1A77mTOWj1F0C4BiLL/XSkdH3MVka+3PpGf33LwEYq jQC/Zc3Msv5282RWXWxek98UJSWCzr1pR9wWVh9kugaHk5b5dNPo6oqoUC1O2dQ+ Fwup4PLTQ9BxNT1gAEEA4g6CVL7iEj3mRRN2Hbx638xnwEHZV/F7skL/Zdc3pkpW 6Mebw7fL1OE8+xATNtzDTuwxVNZMsqaDCaUy4skE7+Gt+Yua/c7EgsymDIzZdFfb 8dScF9HuqzZuplQ8V72lIOLsnE52uhyq4PH4ZtpyLtNhAezUVLm6aRXwxH4K9LuT sKWxEg== -----END CERTIFICATE-----Generated at Sun Oct 19 23:07:19 2025 by rpki-client