$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d87637ed-589b-3719-b2cf-7799ebf79109.roa File: d87637ed-589b-3719-b2cf-7799ebf79109.roa (raw, json) Hash identifier: fnvGLLx+D2N6RiNhHnZaopKirdq650L0TKvpDV6uof8= Subject key identifier: 7D:EA:39:B1:6C:82:90:0A:A5:F2:E2:7F:F3:1C:BC:E9:47:8C:F3:F5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B821CCC68C973DCB5C476EF80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d87637ed-589b-3719-b2cf-7799ebf79109.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 8075 IP address blocks: 149.1.0.0/16 maxlen: 16 150.212.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:cc:68:c9:73:dc:b5:c4:76:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=c70bd976-088d-4695-8c53-4d25d3da31d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e3:de:32:8e:28:d4:08:41:75:02:c2:cc:2d: 7b:70:86:13:f2:06:b0:59:df:5b:42:d6:13:8c:4f: fa:15:d5:2d:7c:d4:d7:f3:f1:a5:a7:21:ba:9d:8f: f4:cc:f1:1d:26:25:35:85:a8:d9:27:51:fb:71:44: 94:20:4f:ba:ea:77:32:f5:43:e1:c9:dd:f6:e6:62: 01:c4:71:9d:f7:1a:7d:3c:d0:ab:35:0f:18:02:6c: 35:be:cd:47:1e:d0:22:aa:95:e2:2b:9d:bc:19:05: 13:85:6b:29:54:81:64:72:b8:c0:a9:22:93:32:f6: c8:58:78:ee:7c:55:31:1d:70:6c:53:8a:d0:1b:4d: ba:38:70:9d:b1:b3:f5:d6:3f:1e:1c:4f:6d:09:b7: 3a:5e:bf:26:09:a3:b0:af:14:4e:3f:d0:39:33:7b: 59:74:72:80:74:c8:12:38:47:c8:0d:12:5d:1c:76: c9:8d:a3:36:36:96:25:f9:ac:3d:4c:76:3b:95:b1: 67:69:08:ea:32:8e:65:82:e3:c4:3b:a0:04:17:37: b9:27:f6:48:32:f4:2d:7b:38:41:e8:70:ab:96:21: 9d:80:2d:d1:e8:f0:68:f1:cb:62:72:0d:9a:81:80: e5:e2:40:ed:8b:5a:3c:b0:0e:c6:70:da:7e:ab:02: 61:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EA:39:B1:6C:82:90:0A:A5:F2:E2:7F:F3:1C:BC:E9:47:8C:F3:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d87637ed-589b-3719-b2cf-7799ebf79109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 149.1.0.0/16 150.212.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:dc:f3:99:cf:1a:41:cf:83:84:ae:43:02:01:2d:46:15:1b: f0:cd:77:4f:91:c3:57:36:59:06:b3:33:32:56:be:5c:b5:d9: c0:ee:19:e9:16:d7:53:30:c1:3f:67:76:66:17:11:77:30:e6: 79:bb:46:53:9a:ff:e7:0d:33:48:6a:53:93:bf:85:9c:a1:00: 72:e4:ae:04:dc:8f:e5:ab:df:5e:4c:36:97:f8:ec:68:17:bb: 57:83:24:8e:88:f4:bf:ad:8b:af:2a:91:08:5b:27:c6:ca:20: 7f:1d:a9:b2:8f:19:c0:68:5c:25:8e:54:7d:38:51:50:f4:f7: 15:84:2c:4e:23:e0:61:63:eb:f0:09:95:68:09:b5:45:99:17: 95:e4:9c:89:76:8d:d1:54:8f:5e:0f:4b:f6:97:2c:b5:b1:f4: 65:66:3b:58:c6:c9:dc:63:5a:dd:42:fd:e0:ec:02:b4:73:b4: fa:71:00:2d:8d:a4:ad:20:00:a2:e7:f1:b1:02:e8:1b:98:19: 02:23:f2:09:68:c1:b2:fd:5d:2a:81:45:5d:fd:b0:db:71:b5: c6:76:3b:44:d4:52:73:0c:98:b9:9d:68:59:a8:29:d5:a9:36: 09:dc:43:49:98:c5:cb:ef:78:cb:48:fa:2b:4d:9b:81:a4:60: 4a:38:73:7c -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEuCHMxoyXPctcR274AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YzcwYmQ5NzYtMDg4ZC00Njk1LThjNTMtNGQyNWQzZGEzMWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ePeMo4o1AhBdQLCzC17cIYT8gawWd9bQtYT jE/6FdUtfNTX8/GlpyG6nY/0zPEdJiU1hajZJ1H7cUSUIE+66ncy9UPhyd325mIB xHGd9xp9PNCrNQ8YAmw1vs1HHtAiqpXiK528GQUThWspVIFkcrjAqSKTMvbIWHju fFUxHXBsU4rQG026OHCdsbP11j8eHE9tCbc6Xr8mCaOwrxROP9A5M3tZdHKAdMgS OEfIDRJdHHbJjaM2NpYl+aw9THY7lbFnaQjqMo5lguPEO6AEFze5J/ZIMvQtezhB 6HCrliGdgC3R6PBo8cticg2agYDl4kDti1o8sA7GcNp+qwJhNwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFH3qObFsgpAKpfLif/McvOlHjPP1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDg3NjM3ZWQtNTg5Yi0z NzE5LWIyY2YtNzc5OWViZjc5MTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAlQEDAwCW 1DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBw3POZzxpBz4OErkMCAS1GFRvwzXdPkcNXNlkGszMyVr5ctdnA 7hnpFtdTMME/Z3ZmFxF3MOZ5u0ZTmv/nDTNIalOTv4WcoQBy5K4E3I/lq99eTDaX +OxoF7tXgySOiPS/rYuvKpEIWyfGyiB/HamyjxnAaFwljlR9OFFQ9PcVhCxOI+Bh Y+vwCZVoCbVFmReV5JyJdo3RVI9eD0v2lyy1sfRlZjtYxsncY1rdQv3g7AK0c7T6 cQAtjaStIACi5/GxAugbmBkCI/IJaMGy/V0qgUVd/bDbcbXGdjtE1FJzDJi5nWhZ qCnVqTYJ3ENJmMXL73jLSPorTZuBpGBKOHN8 -----END CERTIFICATE-----Generated at Sun Oct 19 20:24:13 2025 by rpki-client