$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa File: 5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa (raw, json) Hash identifier: 83KZE8/BNfVSUBS+vqgTO6OBe5l6ndLYaSDOuuHfDFY= Subject key identifier: 77:11:2A:3E:56:29:CE:FA:67:58:0B:25:EE:83:62:5B:FD:C4:DB:91 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584BCD9B1193743F2B92EB03B300 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 16509 IP address blocks: 68.71.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:11:93:74:3f:2b:92:eb:03:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=5256cd9d-4b42-4a06-8a25-7f2673f996d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:88:9b:b5:79:c2:f0:0d:b1:47:d3:95:37:6f: da:5d:ec:a7:c7:5d:d7:e3:5a:b4:57:2d:f4:cb:e9: b2:05:16:f4:75:8f:65:3f:a5:48:1e:9b:9c:44:7a: dd:01:cb:dd:ef:87:69:96:f2:e2:6c:43:98:27:b5: 60:b5:23:ef:74:b7:48:7f:91:e8:57:0a:67:3a:c7: 46:d7:8c:32:0c:99:a5:08:b4:a5:9a:38:85:5c:80: a9:0a:23:35:98:32:63:9c:79:1d:25:8c:25:12:dd: b2:0a:c7:ae:35:fb:6a:9f:28:d7:7e:f1:1d:b2:6c: 27:13:33:06:84:c3:f3:c8:c0:ef:6a:fd:f4:28:1e: 98:24:cb:91:cd:39:3b:70:2b:bf:b5:82:b2:95:ab: dd:40:69:ad:83:ba:a2:d4:7d:c3:45:a1:e1:95:9e: 00:cd:ee:97:30:6a:46:3c:cd:52:2c:21:e0:df:ab: bb:ab:63:90:3f:62:fc:0a:37:07:55:ce:a3:45:33: d7:1d:12:80:47:75:1a:77:1d:e7:37:9b:8d:0a:71: a4:9b:f0:4c:37:56:97:45:ac:71:58:18:b6:3f:9f: 0c:d6:43:93:d2:bb:8b:a0:34:61:52:a4:d6:c1:28: 0c:95:ea:3b:45:fe:5e:98:b6:fd:ea:ec:7e:e3:d1: c5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:11:2A:3E:56:29:CE:FA:67:58:0B:25:EE:83:62:5B:FD:C4:DB:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:18:07:9c:e3:f0:a1:7d:cb:9f:f2:77:a2:e4:f2:f4:cc:d0: 45:a3:c9:3b:0b:87:e8:55:c2:d3:4f:85:28:49:bf:94:2c:05: 6b:97:9a:96:f9:4e:a2:18:b1:73:41:2b:60:61:03:63:e5:da: 77:f1:75:39:38:b2:50:3f:8e:00:45:6e:f8:4b:d2:c0:1f:f7: 15:29:f0:c5:75:61:10:74:7d:13:06:b4:47:32:15:ea:54:8f: 25:6b:35:e8:7b:6f:26:1f:09:64:b2:33:90:b5:65:9c:78:a3: a8:20:74:94:d0:c5:3e:46:ab:06:ca:8f:fe:0a:ca:7e:42:11: 16:de:22:02:4e:7b:b6:0a:92:0a:25:34:7a:29:e2:d0:ba:b9: c9:f0:04:9a:8e:e0:2c:38:93:2d:7f:03:eb:28:d2:25:61:62: 9e:c8:f0:11:51:de:8f:62:28:ad:f1:a9:96:e9:87:e3:dd:7b: f9:e6:07:7c:be:59:37:da:fe:f9:6f:6d:7f:d8:ca:07:16:73: 18:6b:95:74:96:7c:d3:0f:82:4d:6e:67:25:55:57:e7:a5:97: 41:47:58:4b:a9:30:c2:cc:d8:34:f6:09:74:8f:b0:81:8c:20: 7c:56:2f:69:a2:5d:25:88:fc:c3:8c:cf:82:42:49:dd:0b:ba: 41:98:5c:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxGTdD8rkusDswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTI1NmNkOWQtNGI0Mi00YTA2LThhMjUtN2YyNjczZjk5NmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIibtXnC8A2xR9OVN2/aXeynx13X41q0Vy30 y+myBRb0dY9lP6VIHpucRHrdAcvd74dplvLibEOYJ7VgtSPvdLdIf5HoVwpnOsdG 14wyDJmlCLSlmjiFXICpCiM1mDJjnHkdJYwlEt2yCseuNftqnyjXfvEdsmwnEzMG hMPzyMDvav30KB6YJMuRzTk7cCu/tYKylavdQGmtg7qi1H3DRaHhlZ4Aze6XMGpG PM1SLCHg36u7q2OQP2L8CjcHVc6jRTPXHRKAR3Uadx3nN5uNCnGkm/BMN1aXRaxx WBi2P58M1kOT0ruLoDRhUqTWwSgMleo7Rf5emLb96ux+49HFgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcRKj5WKc76Z1gLJe6DYlv9xNuRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvNTIxNGU4MmItZDFlYy0z NmQ2LWI1OGEtMDRkODQ1YWVkOWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIYB5zj8KF9y5/yd6Lk8vTM0EWjyTsLh+hVwtNPhShJv5QsBWuXmpb5 TqIYsXNBK2BhA2Pl2nfxdTk4slA/jgBFbvhL0sAf9xUp8MV1YRB0fRMGtEcyFepU jyVrNeh7byYfCWSyM5C1ZZx4o6ggdJTQxT5GqwbKj/4Kyn5CERbeIgJOe7YKkgol NHop4tC6ucnwBJqO4Cw4ky1/A+so0iVhYp7I8BFR3o9iKK3xqZbph+Pde/nmB3y+ WTfa/vlvbX/YygcWcxhrlXSWfNMPgk1uZyVVV+ell0FHWEupMMLM2DT2CXSPsIGM IHxWL2miXSWI/MOMz4JCSd0LukGYXLk= -----END CERTIFICATE-----Generated at Sun Nov 16 22:13:01 2025 by rpki-client