$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa File: 8235dfbe-b3ab-3735-aab7-c2955069fad0.roa (raw, json) Hash identifier: y6JTSPV63Ex7Qrg8VJmAF9darDxH6hZcSZOmRDBLNf0= Subject key identifier: 4C:BA:D4:A6:1B:17:C5:61:40:C5:47:15:40:D1:CB:B8:5B:17:53:C2 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584BCD9B116E95C38C9F872E4100 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 16509 IP address blocks: 68.71.224.0/24 maxlen: 24 68.71.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:11:6e:95:c3:8c:9f:87:2e:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=0c1522c4-b503-4cdc-be23-aca8ed42f8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f7:54:e5:bd:36:10:87:1b:c7:3c:1a:c4:ae: 97:b2:c7:58:25:1a:ac:28:c9:4b:ae:bd:41:1a:d6: c3:a1:30:70:01:34:09:eb:84:38:af:ff:29:6d:5a: ee:be:95:a9:78:5d:7a:93:d4:80:e5:60:b3:de:63: bf:52:5c:e5:af:9d:78:29:2f:40:9f:d7:a5:c2:83: 8e:dc:0a:0a:11:1a:72:b3:93:30:ee:d1:77:a9:b8: 2f:93:29:1a:96:e7:35:f0:6d:5d:4a:4c:37:d2:fd: 7f:3d:0c:0a:7e:82:12:8d:42:31:12:3e:02:62:7a: 32:6a:36:d4:96:38:52:2d:29:cc:78:75:c0:64:6f: 52:c5:d6:ec:b7:77:46:38:20:dc:04:cc:8a:34:c1: 00:43:a9:e0:ff:cf:08:14:04:04:70:82:e8:9c:7e: 54:b4:b4:13:2a:b5:a9:b3:15:76:fa:b0:c9:7a:3f: 36:81:52:89:5d:6c:24:2d:c8:62:ce:bd:24:38:29: cc:f2:c9:a0:6e:cb:c3:0e:db:fb:e6:30:2f:c0:19: 39:06:a0:3b:5b:e5:41:d5:5d:47:0a:fe:7a:63:9b: af:76:5a:be:e8:8d:32:a8:23:2f:40:65:b6:79:7a: 66:cc:94:07:2e:a8:ad:24:5e:c8:fb:35:1e:9f:7c: 80:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BA:D4:A6:1B:17:C5:61:40:C5:47:15:40:D1:CB:B8:5B:17:53:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.224.0/24 68.71.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:33:c9:e8:35:6a:d4:38:a0:8f:29:5e:cc:2b:9c:d7:a2:64: 34:df:23:7d:2c:9e:73:e0:8d:8b:8d:40:b4:94:f3:5d:a1:3f: 56:05:a7:3d:6a:ea:0e:79:2f:f2:44:01:95:e3:c8:b1:14:ad: 2d:a9:a4:c7:d9:ca:0d:3d:58:93:b5:84:7c:bb:c4:ff:7d:b9: 73:a4:f1:e9:67:14:d4:6a:2c:bc:d2:ec:ae:04:cc:6b:54:89: 7a:33:85:30:0b:51:0e:ed:8d:4b:47:19:30:66:ea:ab:17:54: cd:9c:62:29:71:be:e5:e7:71:2e:70:53:be:bd:cf:28:56:81: 3e:a4:38:30:f1:1f:1d:f8:64:d0:59:8c:c6:3c:ab:a8:cf:7d: 4b:5a:b2:84:b4:1b:af:79:ed:c2:76:52:74:19:87:f7:e1:e0: 12:59:68:e1:64:ec:04:cb:d2:73:7c:91:32:88:e9:cd:e2:1a: b3:25:18:a0:03:c9:78:4a:4d:20:52:41:42:32:6f:b0:45:38: 41:5b:14:0d:0f:7d:8c:2b:47:a0:f5:11:66:53:e3:95:24:b8: 1d:ef:01:e1:e3:2f:76:db:a2:a1:da:37:ae:54:d0:3d:2c:68: dd:d8:e5:94:cf:63:46:55:1e:9f:01:c0:1c:8a:d3:35:60:a9: 7e:ea:da:b5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvNmxFulcOMn4cuQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk MGMxNTIyYzQtYjUwMy00Y2RjLWJlMjMtYWNhOGVkNDJmOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/dU5b02EIcbxzwaxK6XssdYJRqsKMlLrr1B GtbDoTBwATQJ64Q4r/8pbVruvpWpeF16k9SA5WCz3mO/Ulzlr514KS9An9elwoOO 3AoKERpys5Mw7tF3qbgvkykaluc18G1dSkw30v1/PQwKfoISjUIxEj4CYnoyajbU ljhSLSnMeHXAZG9Sxdbst3dGOCDcBMyKNMEAQ6ng/88IFAQEcILonH5UtLQTKrWp sxV2+rDJej82gVKJXWwkLchizr0kOCnM8smgbsvDDtv75jAvwBk5BqA7W+VB1V1H Cv56Y5uvdlq+6I0yqCMvQGW2eXpmzJQHLqitJF7I+zUen3yA4QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEy61KYbF8VhQMVHFUDRy7hbF1PCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvODIzNWRmYmUtYjNhYi0z NzM1LWFhYjctYzI5NTUwNjlmYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAREfgAwQB REfkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIszyeg1atQ4oI8pXswrnNeiZDTfI30snnPgjYuNQLSU812h P1YFpz1q6g55L/JEAZXjyLEUrS2ppMfZyg09WJO1hHy7xP99uXOk8elnFNRqLLzS 7K4EzGtUiXozhTALUQ7tjUtHGTBm6qsXVM2cYilxvuXncS5wU769zyhWgT6kODDx Hx34ZNBZjMY8q6jPfUtasoS0G6957cJ2UnQZh/fh4BJZaOFk7ATL0nN8kTKI6c3i GrMlGKADyXhKTSBSQUIyb7BFOEFbFA0PfYwrR6D1EWZT45UkuB3vAeHjL3bboqHa N65U0D0saN3Y5ZTPY0ZVHp8BwByK0zVgqX7q2rU= -----END CERTIFICATE-----Generated at Sun Nov 16 22:11:19 2025 by rpki-client