$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a687c46a-89db-380a-b337-cdc67c4ee430.roa File: a687c46a-89db-380a-b337-cdc67c4ee430.roa (raw, json) Hash identifier: 6nQSCf+w2w+p4A4u0r2d7kmVwHCxWF1Ae7p1IUdiBcQ= Subject key identifier: E8:4D:12:77:8C:52:60:06:9D:2F:9D:A0:40:C8:2F:17:67:82:01:21 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584F4C3D54358DBA5379BC1DE280 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a687c46a-89db-380a-b337-cdc67c4ee430.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 25961 IP address blocks: 69.1.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:54:35:8d:ba:53:79:bc:1d:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=2bc25c05-004e-4c54-a499-0299c54533be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1a:b8:62:39:62:7d:b4:d5:f5:26:fd:34:45: b0:58:74:4d:26:07:ca:71:eb:7a:d6:dd:a6:0b:9b: 3d:99:15:2a:2c:3d:97:1e:11:d1:78:3b:22:21:e0: ff:dc:c8:7a:cf:51:75:fd:f3:a7:1a:aa:e6:39:2d: a4:32:92:d2:fc:ad:02:f7:11:18:0a:ed:a8:13:29: 1f:c9:1f:ec:81:e3:04:29:4a:ee:08:b8:64:f6:f0: 11:ca:45:00:b7:50:f5:0b:07:15:58:5e:a1:76:24: 73:3a:42:93:cd:5c:f3:6f:f9:0c:1a:c0:d1:15:82: 75:6b:2b:71:e0:aa:5d:41:06:fe:d8:d8:6c:83:39: fe:cf:37:6e:51:46:42:c1:32:83:9c:ec:d8:75:de: db:4a:56:1c:32:c4:68:fe:b6:26:29:37:01:0a:83: cf:c4:0c:ec:df:3c:81:38:b0:78:41:9b:a2:8f:cc: c0:7b:19:64:c4:53:12:83:96:18:e6:6f:09:a0:0d: 56:77:28:8b:ef:51:8a:4d:eb:ca:ea:43:7c:6d:cc: 9b:71:88:38:0d:5d:3d:71:d2:66:a6:4a:39:3c:b1: 4f:d8:ce:82:96:e4:67:39:ce:06:63:64:de:68:62: 3a:7e:10:40:44:f1:0b:50:a9:d3:80:6e:e5:7b:d0: fc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4D:12:77:8C:52:60:06:9D:2F:9D:A0:40:C8:2F:17:67:82:01:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a687c46a-89db-380a-b337-cdc67c4ee430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 69.1.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:34:59:30:d5:1a:fe:03:44:92:85:da:66:b0:f0:b8:ed:1e: 8a:ba:3b:a0:d1:fa:bd:57:54:49:69:5c:c0:b4:6c:6b:7b:55: 2a:9e:c4:0c:53:60:40:b1:6a:47:6a:bc:6c:ba:06:8d:6d:ad: d2:f0:89:9a:e7:5c:53:a1:75:eb:a1:df:bf:46:ba:eb:c7:5c: d7:2d:f0:8b:bb:4f:83:75:0d:8f:0f:15:9f:aa:80:ea:5d:a4: 2f:9e:fd:bb:5f:96:d6:da:36:d5:4b:4f:45:f2:05:ea:20:80: d9:73:d2:f6:fd:db:fe:83:c2:25:9c:ab:ef:60:39:3d:f4:8f: df:e0:a5:1c:01:b7:af:bc:b6:9a:48:40:2d:05:5b:cb:d1:42: 9e:1b:e1:b2:71:08:17:fe:c3:f9:36:6c:59:50:cd:9e:dc:c7: 8b:b4:4f:68:93:35:a4:e0:ca:ae:a5:19:7b:b0:dc:32:36:d9: f8:c9:8e:39:88:d7:b0:3b:22:05:89:5f:9c:ad:ca:b0:11:d2: 35:21:f7:fc:03:1d:65:82:55:b3:63:8e:92:7b:3a:cc:af:26: 05:6d:c0:f8:53:c4:bb:dc:29:3b:06:e5:e4:06:a2:0f:58:8a: 62:56:45:34:f8:8a:12:1d:6e:4d:3e:42:6e:39:ff:62:e3:37: 61:37:20:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVQ1jbpTebwd4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MmJjMjVjMDUtMDA0ZS00YzU0LWE0OTktMDI5OWM1NDUzM2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBq4YjlifbTV9Sb9NEWwWHRNJgfKcet61t2m C5s9mRUqLD2XHhHReDsiIeD/3Mh6z1F1/fOnGqrmOS2kMpLS/K0C9xEYCu2oEykf yR/sgeMEKUruCLhk9vARykUAt1D1CwcVWF6hdiRzOkKTzVzzb/kMGsDRFYJ1aytx 4KpdQQb+2Nhsgzn+zzduUUZCwTKDnOzYdd7bSlYcMsRo/rYmKTcBCoPPxAzs3zyB OLB4QZuij8zAexlkxFMSg5YY5m8JoA1WdyiL71GKTevK6kN8bcybcYg4DV09cdJm pko5PLFP2M6CluRnOc4GY2TeaGI6fhBARPELUKnTgG7le9D84QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhNEneMUmAGnS+doEDILxdnggEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYTY4N2M0NmEtODlkYi0z ODBhLWIzMzctY2RjNjdjNGVlNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD40WTDVGv4DRJKF2maw8LjtHoq6O6DR+r1XVElpXMC0bGt7VSqexAxT YECxakdqvGy6Bo1trdLwiZrnXFOhdeuh379GuuvHXNct8Iu7T4N1DY8PFZ+qgOpd pC+e/btfltbaNtVLT0XyBeoggNlz0vb92/6DwiWcq+9gOT30j9/gpRwBt6+8tppI QC0FW8vRQp4b4bJxCBf+w/k2bFlQzZ7cx4u0T2iTNaTgyq6lGXuw3DI22fjJjjmI 17A7IgWJX5ytyrAR0jUh9/wDHWWCVbNjjpJ7OsyvJgVtwPhTxLvcKTsG5eQGog9Y imJWRTT4ihIdbk0+Qm45/2LjN2E3IGg= -----END CERTIFICATE-----Generated at Sun Oct 18 12:05:43 2026 by rpki-client