$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa File: 479384b1-d41c-3e4d-83f2-176a5be6410a.roa (raw, json) Hash identifier: aX6sE2A1HGKfx4hvymoyvqUi/zZPHxIsNbhlU3V8iN8= Subject key identifier: 03:19:65:E7:0F:36:98:C1:C3:B0:8E:67:24:19:F4:6B:8E:1F:19:2C Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584BCD9B114670436A7176308160 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 8987 IP address blocks: 68.71.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:11:46:70:43:6a:71:76:30:81:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=947fab75-67da-4859-8b53-71447eb71824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:21:a0:aa:61:08:0f:3d:93:7b:f8:57:8d:35: 1c:52:52:09:8c:9b:07:e2:e9:49:78:f4:7b:d3:08: 80:d1:c8:0f:30:37:75:ee:ae:b2:4a:da:41:72:78: f6:6c:b9:f9:18:59:24:8d:d7:ba:cf:35:6f:4f:e3: 61:eb:4e:69:4b:1c:9b:56:ae:5d:71:92:52:f3:f8: 2c:37:a6:d9:7d:ad:db:ff:51:e8:58:f2:fb:22:04: b4:5b:61:b5:c2:1d:bf:19:70:ac:81:e1:8d:b6:c5: 90:02:cf:f1:47:19:5c:8e:4a:bc:21:ae:de:77:3f: 92:3c:2d:61:4c:33:d1:9f:cd:6e:28:61:11:ab:22: 07:94:c7:da:aa:66:53:d5:93:1a:0d:2f:aa:c8:a9: 20:82:52:74:84:b7:2b:77:7c:fd:fb:ca:b4:ad:c4: cb:65:2a:1d:83:d7:00:7b:57:b3:cb:00:48:98:d5: ef:55:fa:41:fd:47:cf:4f:4a:48:16:f7:05:e3:b8: ec:ce:aa:4a:ee:07:7f:78:94:29:be:38:21:33:87: 64:2a:9e:6f:b6:8d:9d:8a:29:c8:75:9f:a5:99:be: 97:7a:d8:00:f0:1b:22:ac:1a:b3:11:38:b8:61:5e: 35:74:0a:7b:c6:8b:cb:25:50:4f:37:6e:07:b8:04: 80:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:19:65:E7:0F:36:98:C1:C3:B0:8E:67:24:19:F4:6B:8E:1F:19:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:85:6b:93:c4:56:0e:cd:0b:6c:df:83:b3:f7:54:70:c6:03: 86:09:be:f4:07:a6:48:77:77:85:ea:ae:14:bd:74:bc:b9:90: 3b:68:cb:d3:61:6c:9f:7d:a9:f1:89:a5:3c:41:6e:49:5a:8a: 9d:5d:9d:4e:ea:4c:27:9f:8e:42:18:b1:12:d7:a4:53:0f:61: dd:a0:e9:9c:61:db:a4:7b:d6:f3:d8:3f:15:28:67:3d:69:6c: 35:3d:ed:45:2f:9f:d5:9b:50:45:90:62:d5:61:d1:df:11:ab: 5b:51:9d:83:f1:84:0a:8f:5b:f7:6c:c7:eb:2e:cf:43:ee:cb: 99:45:45:5e:44:9b:de:7f:16:83:96:9e:89:b0:28:a8:2f:90: 77:fc:15:d9:64:de:e8:d9:26:7f:15:f1:e9:ab:a4:e4:dc:5d: 7e:6f:69:ce:aa:0a:7f:82:43:81:38:f2:61:be:75:01:27:91: 6a:c9:a0:c8:2d:92:83:6d:e1:f7:a5:e4:e4:20:39:4d:86:17: 1c:ec:44:9b:32:1b:5c:97:7a:bb:41:98:3c:dd:98:1c:f9:3d: 8d:aa:9e:b4:cd:6c:35:79:58:ac:79:9a:c5:52:55:1d:56:5b: 7c:0c:30:46:08:ae:f3:95:7e:d3:82:11:7b:78:0f:29:98:16: 63:22:ac:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxFGcENqcXYwgWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk OTQ3ZmFiNzUtNjdkYS00ODU5LThiNTMtNzE0NDdlYjcxODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+SGgqmEIDz2Te/hXjTUcUlIJjJsH4ulJePR7 0wiA0cgPMDd17q6yStpBcnj2bLn5GFkkjde6zzVvT+Nh605pSxybVq5dcZJS8/gs N6bZfa3b/1HoWPL7IgS0W2G1wh2/GXCsgeGNtsWQAs/xRxlcjkq8Ia7edz+SPC1h TDPRn81uKGERqyIHlMfaqmZT1ZMaDS+qyKkgglJ0hLcrd3z9+8q0rcTLZSodg9cA e1ezywBImNXvVfpB/UfPT0pIFvcF47jszqpK7gd/eJQpvjghM4dkKp5vto2diinI dZ+lmb6XetgA8BsirBqzETi4YV41dAp7xovLJVBPN24HuASABQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMZZecPNpjBw7COZyQZ9GuOHxksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvNDc5Mzg0YjEtZDQxYy0z ZTRkLTgzZjItMTc2YTViZTY0MTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2Fa5PEVg7NC2zfg7P3VHDGA4YJvvQHpkh3d4XqrhS9dLy5kDtoy9Nh bJ99qfGJpTxBbklaip1dnU7qTCefjkIYsRLXpFMPYd2g6Zxh26R71vPYPxUoZz1p bDU97UUvn9WbUEWQYtVh0d8Rq1tRnYPxhAqPW/dsx+suz0Puy5lFRV5Em95/FoOW nomwKKgvkHf8Fdlk3ujZJn8V8emrpOTcXX5vac6qCn+CQ4E48mG+dQEnkWrJoMgt koNt4fel5OQgOU2GFxzsRJsyG1yXertBmDzdmBz5PY2qnrTNbDV5WKx5msVSVR1W W3wMMEYIrvOVftOCEXt4DymYFmMirPA= -----END CERTIFICATE-----Generated at Sun Nov 16 22:10:25 2025 by rpki-client