$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa File: bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa (raw, json) Hash identifier: JiktezO9nGzQlR3x1W7/c8/9ONDgm91YTYH6Hw5JHyw= Subject key identifier: 46:E7:C5:D9:08:CB:C2:75:EB:88:EE:79:E5:CA:A3:8F:00:CC:27:88 Certificate issuer: /CN=e8a5a257-a121-41de-b0be-6ab191fc4486 Certificate serial: 010D0C9F4328584B41E720F8A1DF6F414167AC40 Authority key identifier: 32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 32709 IP address blocks: 168.92.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:20:f8:a1:df:6f:41:41:67:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a5a257-a121-41de-b0be-6ab191fc4486 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=11b504d3-c0ec-4e97-8395-1c692a687efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ac:f2:9a:2e:3d:0e:02:5b:5a:2b:f8:45:f1: 3e:ff:eb:46:93:1c:e9:ed:68:6b:3e:8f:11:58:36: 92:82:35:56:46:dc:4c:b7:41:d5:98:be:8f:de:5f: 59:cc:23:4e:08:8b:d3:7d:af:db:fd:4e:13:0b:02: db:ef:c2:7c:96:16:eb:b6:2b:bf:a3:28:f0:5f:dc: 76:2b:0e:a3:15:61:20:5c:02:7b:fe:94:ce:6f:dc: d7:cc:c9:3b:19:bf:6f:99:36:26:60:48:cc:b5:12: 9b:13:5f:7e:54:47:a7:bb:79:b4:83:54:cd:f6:ec: 46:bb:36:53:71:a3:e7:0f:fe:43:6b:2b:26:8c:b6: b4:60:d8:ce:b7:3d:97:6a:e8:d9:13:37:c7:22:4c: 00:29:2c:73:0a:dd:0f:a4:dc:19:ab:7c:8f:1a:db: ea:22:64:f8:1c:21:ef:24:16:b1:1b:94:9d:47:82: 02:1b:9c:9b:81:88:af:c4:dd:16:59:46:2a:3a:e7: f3:df:4f:ba:6c:0d:e4:af:eb:7a:b9:a3:e5:0f:84: 72:8c:f6:7e:5d:9f:13:71:5a:33:68:a9:23:1f:2f: 48:d7:46:e6:d2:be:38:1b:c2:d4:58:f8:91:b8:2b: f0:e1:55:32:b8:2b:d3:3b:60:3f:d5:bb:79:ec:1c: 82:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E7:C5:D9:08:CB:C2:75:EB:88:EE:79:E5:CA:A3:8F:00:CC:27:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl X509v3 Authority Key Identifier: keyid:32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer sbgp-ipAddrBlock: critical IPv4: 168.92.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:69:28:33:f0:eb:7d:c7:79:c2:b2:91:21:d1:fc:3b:12:4a: 4e:73:a0:0d:27:0f:cc:17:c3:2d:4f:91:e1:bb:ec:71:70:a5: 8f:55:35:f4:15:c9:94:9d:a9:c7:76:23:72:0e:f5:b9:ef:88: 37:ab:17:cd:92:db:23:86:80:97:2f:d8:b8:33:b9:95:dc:e8: 3a:25:cc:f0:f1:e6:4c:93:5e:92:0f:8d:bf:d9:2c:40:dd:e9: 77:e1:37:93:72:4d:0c:48:75:2e:72:e6:cd:9f:df:48:29:d4: 1a:38:21:3a:39:b6:33:8d:e2:85:44:02:e2:cc:93:7f:f0:c3: f7:05:a2:e1:a2:84:39:4c:3d:ea:22:d3:95:b0:7c:a0:07:2e: 80:a5:df:b8:5a:7f:de:64:0a:11:73:cd:50:ff:28:2a:e9:a1: 22:e3:52:32:08:5b:88:9e:9f:d5:41:ec:89:bd:6a:96:d8:27: 4e:80:66:78:6b:f7:08:1b:c7:31:cb:1d:78:92:6f:d3:b1:6c: c7:70:84:25:62:39:c9:36:cd:6e:db:89:47:34:7d:fb:9b:2c: c0:1a:7a:bd:34:d4:fa:27:8e:a6:d8:38:1a:bc:57:25:fd:8a: 3d:1a:10:d4:09:2e:fa:4d:e1:d7:82:9e:fb:ba:aa:e9:da:1f: b1:3e:e5:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5yD4od9vQUFnrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhNWEyNTctYTEyMS00MWRlLWIwYmUtNmFiMTkxZmM0 NDg2MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MTFiNTA0ZDMtYzBlYy00ZTk3LTgzOTUtMWM2OTJhNjg3ZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKzymi49DgJbWiv4RfE+/+tGkxzp7WhrPo8R WDaSgjVWRtxMt0HVmL6P3l9ZzCNOCIvTfa/b/U4TCwLb78J8lhbrtiu/oyjwX9x2 Kw6jFWEgXAJ7/pTOb9zXzMk7Gb9vmTYmYEjMtRKbE19+VEenu3m0g1TN9uxGuzZT caPnD/5DaysmjLa0YNjOtz2XaujZEzfHIkwAKSxzCt0PpNwZq3yPGtvqImT4HCHv JBaxG5SdR4ICG5ybgYivxN0WWUYqOufz30+6bA3kr+t6uaPlD4RyjPZ+XZ8TcVoz aKkjHy9I10bm0r44G8LUWPiRuCvw4VUyuCvTO2A/1bt57ByC/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbnxdkIy8J164jueeXKo48AzCeIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOGE1 YTI1Ny1hMTIxLTQxZGUtYjBiZS02YWIxOTFmYzQ0ODYvYmZmYzIyN2MtMjM0OC0z NzI4LWJmZDEtY2Y0NDJlYzZjMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZThhNWEyNTctYTEyMS00MWRlLWIw YmUtNmFiMTkxZmM0NDg2L2U4YTVhMjU3LWExMjEtNDFkZS1iMGJlLTZhYjE5MWZj NDQ4Ni5jcmwwHwYDVR0jBBgwFoAUMoEBACTss5HVn2xikJ/BC2weBc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOGE1YTI1Ny1hMTIxLTQxZGUtYjBiZS02YWIx OTFmYzQ0ODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqFxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFpKDPw633HecKykSHR/DsSSk5zoA0nD8wXwy1PkeG77HFwpY9VNfQV yZSdqcd2I3IO9bnviDerF82S2yOGgJcv2LgzuZXc6DolzPDx5kyTXpIPjb/ZLEDd 6XfhN5NyTQxIdS5y5s2f30gp1Bo4ITo5tjON4oVEAuLMk3/ww/cFouGihDlMPeoi 05WwfKAHLoCl37haf95kChFzzVD/KCrpoSLjUjIIW4ien9VB7Im9apbYJ06AZnhr 9wgbxzHLHXiSb9OxbMdwhCViOck2zW7biUc0ffubLMAaer001PonjqbYOBq8VyX9 ij0aENQJLvpN4deCnvu6qunaH7E+5bY= -----END CERTIFICATE-----Generated at Tue Oct 21 02:34:25 2025 by rpki-client