$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/c5e0951c-af06-32fd-9c41-e2d6f317bd78.roa File: c5e0951c-af06-32fd-9c41-e2d6f317bd78.roa (raw, json) Hash identifier: JxXfsy+ojkj5WJUb/EHyXU8WO2IrQeBYJuQdGIkJdbc= Subject key identifier: 93:A1:63:4F:A3:10:AD:99:B5:A6:52:07:70:6F:72:87:8B:70:F5:D1 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584BCD9B11B8D60B59A348359540 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/c5e0951c-af06-32fd-9c41-e2d6f317bd78.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 16509 IP address blocks: 68.71.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:11:b8:d6:0b:59:a3:48:35:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=2e9843a9-2fd5-4ce5-9579-6dd7d06e391d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a2:82:f0:38:d5:25:8b:82:f8:66:0b:0f:11: 31:e2:cb:9e:8f:d1:a5:58:69:39:1b:c8:1a:2a:c1: f6:28:d2:37:3b:74:d3:26:fb:d2:38:4b:3e:54:e8: 5f:56:6b:df:49:e9:f5:57:51:78:a8:0f:c9:f0:14: 89:0c:09:a9:40:2a:56:47:65:d5:16:fc:2c:6f:41: a1:d6:e9:3e:63:42:8c:1d:82:c8:a2:29:e1:33:68: 20:8e:f9:7e:be:d6:ea:05:4b:5c:bb:5b:32:d6:5f: 46:41:e5:6d:fb:5b:b0:59:1e:ee:32:e5:da:ad:5c: a3:6c:52:10:66:24:25:22:1d:29:68:fa:a5:6c:aa: f9:6f:bf:ec:5f:26:2d:23:73:e3:d2:49:e8:d2:e1: b7:2b:2c:25:27:b4:95:c2:74:eb:a3:8f:98:98:94: b2:4d:80:9b:15:ff:4e:6c:3b:b6:89:49:98:23:56: 53:d5:62:8d:c7:8c:a1:31:e0:e3:a4:89:b6:3a:5a: 4a:f9:b6:8a:b0:13:a4:59:72:42:3a:f7:55:5f:7a: 02:8b:24:da:40:6f:c8:cc:b1:b8:96:d0:98:74:63: 4c:91:73:b9:d4:34:21:19:ea:f3:90:8a:10:03:4c: 2d:0a:6b:f8:5c:74:0a:0f:9e:68:c0:a8:3a:85:23: 70:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A1:63:4F:A3:10:AD:99:B5:A6:52:07:70:6F:72:87:8B:70:F5:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/c5e0951c-af06-32fd-9c41-e2d6f317bd78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:76:8b:10:31:b6:60:48:70:e2:86:fb:60:f7:b5:92:08:1f: 5b:4d:f8:96:d0:c7:7c:15:df:4f:9a:a9:9d:29:3b:de:ca:98: 93:97:5b:4e:9a:68:f4:40:6c:de:a1:6b:f3:68:6d:a9:8e:ca: 2a:1f:73:8c:a8:36:80:6f:d0:c8:aa:3d:e5:3d:61:6a:84:30: 9f:95:a4:6b:4f:f8:42:c9:24:1a:99:75:a4:28:32:be:95:51: 3a:fd:5b:3f:72:04:0a:0f:3b:7e:14:e4:71:d7:45:35:08:1f: f5:e8:f1:84:02:1a:9f:9e:b9:60:cc:35:b6:7e:b7:74:a8:03: ef:35:18:05:ff:fd:60:72:c6:d7:ba:65:2e:73:85:f1:ca:6f: 17:15:03:b6:45:0b:55:0c:e4:a8:eb:76:04:9c:d1:26:22:83: 73:8d:8d:41:bf:af:c7:9c:f8:d8:3a:8a:72:0b:4c:fe:04:0d: e2:cc:83:e2:37:54:76:61:44:b7:22:cc:e8:65:bf:af:33:e9: 75:6d:c7:7f:12:1f:8b:6b:7a:b2:16:5e:65:f0:60:b5:b7:19: 62:7a:51:be:5e:25:a2:31:e9:04:d4:f2:b2:5a:55:49:27:73: 2e:57:2d:d0:00:78:a9:96:90:9f:e1:08:4b:ef:62:bc:ab:61: 3e:f2:d9:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxG41gtZo0g1lUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk MmU5ODQzYTktMmZkNS00Y2U1LTk1NzktNmRkN2QwNmUzOTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqKC8DjVJYuC+GYLDxEx4suej9GlWGk5G8ga KsH2KNI3O3TTJvvSOEs+VOhfVmvfSen1V1F4qA/J8BSJDAmpQCpWR2XVFvwsb0Gh 1uk+Y0KMHYLIoinhM2ggjvl+vtbqBUtcu1sy1l9GQeVt+1uwWR7uMuXarVyjbFIQ ZiQlIh0paPqlbKr5b7/sXyYtI3Pj0kno0uG3KywlJ7SVwnTro4+YmJSyTYCbFf9O bDu2iUmYI1ZT1WKNx4yhMeDjpIm2OlpK+baKsBOkWXJCOvdVX3oCiyTaQG/IzLG4 ltCYdGNMkXO51DQhGerzkIoQA0wtCmv4XHQKD55owKg6hSNwpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOhY0+jEK2ZtaZSB3BvcoeLcPXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvYzVlMDk1MWMtYWYwNi0z MmZkLTljNDEtZTJkNmYzMTdiZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd2ixAxtmBIcOKG+2D3tZIIH1tN+JbQx3wV30+aqZ0pO97KmJOXW06a aPRAbN6ha/NobamOyiofc4yoNoBv0MiqPeU9YWqEMJ+VpGtP+ELJJBqZdaQoMr6V UTr9Wz9yBAoPO34U5HHXRTUIH/Xo8YQCGp+euWDMNbZ+t3SoA+81GAX//WByxte6 ZS5zhfHKbxcVA7ZFC1UM5KjrdgSc0SYig3ONjUG/r8ec+Ng6inILTP4EDeLMg+I3 VHZhRLcizOhlv68z6XVtx38SH4trerIWXmXwYLW3GWJ6Ub5eJaIx6QTU8rJaVUkn cy5XLdAAeKmWkJ/hCEvvYryrYT7y2Zg= -----END CERTIFICATE-----Generated at Sun Nov 16 22:12:52 2025 by rpki-client