$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/9b513f9d-f758-3993-b0d1-85f2305add2d.roa File: 9b513f9d-f758-3993-b0d1-85f2305add2d.roa (raw, json) Hash identifier: 31VBrblsV8wu4rHNc75gAoC9Wxs2RYTW8Ud2qL4CVtw= Subject key identifier: EA:96:18:0D:30:7D:A3:95:A1:4A:DB:D5:B1:EB:5E:EE:24:89:1B:1A Certificate issuer: /CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756 Certificate serial: 010D0C9F4328584B2331836CC6C491CFD89A7000 Authority key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/9b513f9d-f758-3993-b0d1-85f2305add2d.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 53486 IP address blocks: 68.71.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:83:6c:c6:c4:91:cf:d8:9a:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=14f4a4e8-1943-4cee-9a15-43c99c760b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4d:c3:79:92:4d:d9:80:e0:5e:e0:c9:a9:93: 31:74:35:96:27:cf:9a:a0:2e:a2:76:ab:7b:bc:4f: 7c:31:18:af:e9:dc:84:8c:04:47:bc:b1:61:fa:ab: 44:36:aa:bc:62:36:fd:33:a1:4a:01:d3:51:a5:5a: 31:45:6b:74:ab:0e:2c:1d:c2:f4:07:cb:b4:2d:9d: 83:7e:15:10:16:19:77:98:67:dc:f9:ff:f0:0d:1a: 07:4b:4c:f0:6e:66:0c:fe:3b:74:f8:7e:99:db:7c: 15:1e:ed:80:a2:3a:f5:02:93:fd:e3:3a:d8:90:45: 10:d0:2f:14:e8:06:db:53:81:9f:d5:a9:a1:f7:7f: 0b:b7:ed:82:aa:2e:3b:d2:a7:11:73:ae:1e:6f:03: bd:62:c3:70:a2:50:22:2b:dc:eb:0f:c5:b6:04:8f: 6f:3c:aa:5b:31:db:01:86:4b:32:07:2f:11:9d:a7: 71:b3:95:71:14:af:10:c0:c6:e9:b2:c8:68:32:ce: 0f:f7:57:74:00:b7:12:39:6e:70:7f:5c:e8:5b:99: 18:af:00:a9:1a:51:fb:b9:e8:90:e4:ba:e7:c4:5c: 28:7c:c1:18:72:fd:8b:7d:4a:88:16:4b:4a:f2:3c: c1:bf:56:62:17:da:83:e0:a2:06:05:fa:a5:ce:bc: 9a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:96:18:0D:30:7D:A3:95:A1:4A:DB:D5:B1:EB:5E:EE:24:89:1B:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/9b513f9d-f758-3993-b0d1-85f2305add2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl X509v3 Authority Key Identifier: keyid:8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer sbgp-ipAddrBlock: critical IPv4: 68.71.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:1b:be:7b:23:c0:66:8d:29:8e:f3:f4:54:39:5b:01:0e:ff: 5e:4d:ff:f7:6a:84:79:bd:24:a8:81:d9:de:be:48:a2:7c:c0: 19:c4:3e:6c:8a:3e:99:ea:65:c7:fe:06:38:aa:df:1d:aa:c7: da:b1:e8:b9:22:7d:27:fe:8c:62:33:00:a4:c2:88:d1:13:a5: 6c:ca:b8:54:56:e5:84:a8:94:8f:fe:cd:0f:4b:f3:8b:6d:e8: f7:5a:0f:48:4d:3d:8b:19:e9:55:8c:3e:45:75:07:1f:2c:b0: 9e:8f:b5:54:83:cf:14:c2:b5:71:67:3f:22:95:04:2c:76:c0: 2f:c3:b1:a1:64:dc:d3:dd:07:36:7c:31:86:72:02:1f:f5:2c: 3a:2c:40:a1:c8:9a:21:08:1a:78:43:65:81:15:f7:7c:dc:d2: 19:c3:ef:fd:ef:4a:a3:cb:f4:31:79:bf:0e:00:c8:17:00:18: 0c:5d:81:4c:7c:14:61:5c:82:3a:f3:1c:c1:22:08:3c:09:60: 76:19:1f:c2:ea:7d:7f:77:f2:a8:24:6b:86:ac:e0:a0:36:26: 52:53:b4:12:c6:a2:1c:ce:6e:73:39:ef:66:14:e6:ad:e7:dc: 4b:cc:ae:81:ba:1d:63:fa:06:5d:9f:c1:09:95:62:fc:98:c7: 4c:4b:80:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYNsxsSRz9iacAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk1YjkxZGQtM2ExZi00NmU4LTg4ZTktMWEwNmExYzg4 NzU2MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MTRmNGE0ZTgtMTk0My00Y2VlLTlhMTUtNDNjOTljNzYwYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE3DeZJN2YDgXuDJqZMxdDWWJ8+aoC6idqt7 vE98MRiv6dyEjARHvLFh+qtENqq8Yjb9M6FKAdNRpVoxRWt0qw4sHcL0B8u0LZ2D fhUQFhl3mGfc+f/wDRoHS0zwbmYM/jt0+H6Z23wVHu2Aojr1ApP94zrYkEUQ0C8U 6AbbU4Gf1amh938Lt+2Cqi470qcRc64ebwO9YsNwolAiK9zrD8W2BI9vPKpbMdsB hksyBy8Rnadxs5VxFK8QwMbpsshoMs4P91d0ALcSOW5wf1zoW5kYrwCpGlH7ueiQ 5LrnxFwofMEYcv2LfUqIFktK8jzBv1ZiF9qD4KIGBfqlzryaIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqWGA0wfaOVoUrb1bHrXu4kiRsaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84OTVi OTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2YTFjODg3NTYvOWI1MTNmOWQtZjc1OC0z OTkzLWIwZDEtODVmMjMwNWFkZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODk1YjkxZGQtM2ExZi00NmU4LTg4 ZTktMWEwNmExYzg4NzU2Lzg5NWI5MWRkLTNhMWYtNDZlOC04OGU5LTFhMDZhMWM4 ODc1Ni5jcmwwHwYDVR0jBBgwFoAUi6NwzMiWbBSrnLe/LtvxZr9jqMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84OTViOTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2 YTFjODg3NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFREcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0bvnsjwGaNKY7z9FQ5WwEO/15N//dqhHm9JKiB2d6+SKJ8wBnEPmyK PpnqZcf+Bjiq3x2qx9qx6LkifSf+jGIzAKTCiNETpWzKuFRW5YSolI/+zQ9L84tt 6PdaD0hNPYsZ6VWMPkV1Bx8ssJ6PtVSDzxTCtXFnPyKVBCx2wC/DsaFk3NPdBzZ8 MYZyAh/1LDosQKHImiEIGnhDZYEV93zc0hnD7/3vSqPL9DF5vw4AyBcAGAxdgUx8 FGFcgjrzHMEiCDwJYHYZH8LqfX938qgka4as4KA2JlJTtBLGohzObnM572YU5q3n 3EvMroG6HWP6Bl2fwQmVYvyYx0xLgEw= -----END CERTIFICATE-----Generated at Fri Oct 10 22:01:42 2025 by rpki-client