$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/cf95393a-e1bd-30c6-a79d-4619c61ec4ff.roa File: cf95393a-e1bd-30c6-a79d-4619c61ec4ff.roa (raw, json) Hash identifier: TXDXpqyElnNIabFTq03W4ivx/lZvgQ1PZOOzSV+gpMY= Subject key identifier: 0A:9E:DB:26:5C:E8:41:7B:59:57:27:7A:BC:11:96:C5:B7:FD:C9:CA Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c Certificate serial: 010D0C9F4328584BAEC7C3194D031C72B2483C80 Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/cf95393a-e1bd-30c6-a79d-4619c61ec4ff.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 6181 IP address blocks: 69.61.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c3:19:4d:03:1c:72:b2:48:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=29ea82ec-b8a0-45f9-90f3-4fa5cf68f5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:44:47:cd:bc:82:c5:e3:4c:b3:49:31:e8:45: 6c:70:0d:e4:80:25:b7:57:67:15:bc:ab:5b:34:ac: e7:03:8d:f4:87:1f:40:aa:38:a4:ca:50:f6:98:ea: 00:ba:96:e0:4c:f8:d7:68:16:85:87:53:ad:1a:53: 63:5a:36:1f:6b:bb:79:02:b5:be:5f:2d:88:e1:8d: dc:25:12:c8:ec:b4:5b:5a:cf:ea:ae:db:2c:b4:e8: 26:3d:4a:5d:d8:df:e8:e7:36:47:66:7d:4b:40:14: 52:49:64:41:5d:91:96:f8:b4:48:de:3a:9c:0c:78: 70:ce:83:ad:2a:42:01:82:65:e0:94:69:aa:5d:08: 93:2e:08:da:38:24:96:7f:a8:5b:8a:39:7f:07:91: 12:24:f3:21:85:e8:b5:14:cd:40:0a:fb:f4:20:82: 9a:70:9d:7c:21:73:08:00:4b:08:06:38:1f:79:18: 8b:95:ab:2c:6b:74:f6:fd:d4:86:2b:8c:62:65:e0: ba:70:f6:70:a0:c0:e2:59:74:10:e3:df:30:b6:07: 81:f5:49:d4:73:f5:77:ef:fb:2e:57:d9:b4:c2:ed: bf:a4:ea:af:02:38:a4:86:14:2c:05:5a:34:77:39: df:16:ff:21:87:e9:6e:f4:4c:a5:4c:81:d1:b6:b1: ee:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9E:DB:26:5C:E8:41:7B:59:57:27:7A:BC:11:96:C5:B7:FD:C9:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/cf95393a-e1bd-30c6-a79d-4619c61ec4ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl X509v3 Authority Key Identifier: keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer sbgp-ipAddrBlock: critical IPv4: 69.61.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5e:6a:97:3c:60:39:e7:74:42:14:2a:c3:64:83:a0:0a:8c: 8d:66:23:7a:5d:23:78:d9:98:47:ef:2f:d9:3f:87:9c:d9:81: 01:36:eb:d1:60:38:2c:92:ff:6d:6e:e7:01:c3:49:96:44:70: 77:fe:6d:02:13:54:b6:8f:dd:94:90:20:10:32:d0:09:f4:6c: ea:7d:26:79:f1:87:70:87:b4:1b:aa:15:e6:03:c2:18:4d:d2: 0a:e2:b5:18:31:69:ea:66:c2:47:5c:89:94:da:cf:e7:22:5e: ea:f7:8d:38:87:b1:ec:ba:9a:1a:03:56:70:91:f6:ff:31:24: 13:a5:7a:cf:8a:ea:80:24:94:51:f7:f0:d1:2d:bd:60:01:dc: 2c:b0:1e:eb:31:d4:f7:bb:5e:0d:93:c7:16:49:d3:33:f0:df: 12:46:9d:ec:bd:9c:1d:6a:93:f7:9e:16:c5:3d:54:49:0c:e4: 77:2f:ed:4d:e6:dd:d4:04:83:59:1a:93:cc:95:5e:f3:b4:45: 97:af:52:c7:eb:2e:57:63:78:c9:ee:2f:38:ac:22:96:fb:f4: e4:bb:53:c1:5f:c5:a9:e4:18:56:fe:ac:7b:43:e7:55:4c:b3: 36:c5:57:91:79:e1:56:e4:bc:00:18:4b:a1:af:6e:0a:88:f6: 29:8b:b3:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8MZTQMccrJIPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz YTBjMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MjllYTgyZWMtYjhhMC00NWY5LTkwZjMtNGZhNWNmNjhmNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ERHzbyCxeNMs0kx6EVscA3kgCW3V2cVvKtb NKznA430hx9AqjikylD2mOoAupbgTPjXaBaFh1OtGlNjWjYfa7t5ArW+Xy2I4Y3c JRLI7LRbWs/qrtsstOgmPUpd2N/o5zZHZn1LQBRSSWRBXZGW+LRI3jqcDHhwzoOt KkIBgmXglGmqXQiTLgjaOCSWf6hbijl/B5ESJPMhhei1FM1ACvv0IIKacJ18IXMI AEsIBjgfeRiLlassa3T2/dSGK4xiZeC6cPZwoMDiWXQQ498wtgeB9UnUc/V37/su V9m0wu2/pOqvAjikhhQsBVo0dznfFv8hh+lu9EylTIHRtrHunQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqe2yZc6EF7WVcnerwRlsW3/cnKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvY2Y5NTM5M2EtZTFiZC0z MGM2LWE3OWQtNDYxOWM2MWVjNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4 YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0 M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRT2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJeapc8YDnndEIUKsNkg6AKjI1mI3pdI3jZmEfvL9k/h5zZgQE269Fg OCyS/21u5wHDSZZEcHf+bQITVLaP3ZSQIBAy0An0bOp9Jnnxh3CHtBuqFeYDwhhN 0gritRgxaepmwkdciZTaz+ciXur3jTiHsey6mhoDVnCR9v8xJBOles+K6oAklFH3 8NEtvWAB3CywHusx1Pe7Xg2TxxZJ0zPw3xJGney9nB1qk/eeFsU9VEkM5Hcv7U3m 3dQEg1kak8yVXvO0RZevUsfrLldjeMnuLzisIpb79OS7U8FfxankGFb+rHtD51VM szbFV5F54VbkvAAYS6GvbgqI9imLs+k= -----END CERTIFICATE-----Generated at Tue Nov 4 09:25:19 2025 by rpki-client