$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5c98cdaf-5127-33d6-825c-2ee7692727b6.roa File: 5c98cdaf-5127-33d6-825c-2ee7692727b6.roa (raw, json) Hash identifier: FOsZq6bNt/PGVAiuCKmtOqyYK9lkcs9th5POmHYJOzo= Subject key identifier: 0D:2B:90:7C:68:0D:13:97:25:49:8D:A0:4E:08:87:3A:13:20:63:37 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584AF521254C12ED590822DC6F50 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5c98cdaf-5127-33d6-825c-2ee7692727b6.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 33208 IP address blocks: 68.65.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:25:4c:12:ed:59:08:22:dc:6f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=f43e87aa-f8c6-483a-99c1-755d1fbec485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:8b:c3:e2:56:c1:a2:92:ff:79:af:b2:33: 25:86:51:83:e4:51:0b:7a:36:55:ad:77:d0:08:05: 7c:ba:84:86:21:79:ba:0e:3b:27:e5:7b:7a:74:92: 4b:a4:08:e0:d5:c2:3f:02:30:22:e0:bf:64:37:7f: 90:35:68:a7:4c:8d:a3:d6:3e:09:2e:ad:a6:06:c7: cc:98:5d:e0:49:fb:de:b9:06:3e:92:e0:44:bd:8c: 86:34:3d:3b:00:10:88:e8:98:3c:b4:bb:6d:19:90: ba:ed:04:08:a7:75:24:b8:f3:65:96:4a:c8:7e:6e: d7:99:c7:30:ad:e0:a9:68:23:fe:68:fb:3d:c9:df: b4:49:7d:34:92:9a:19:13:92:a6:28:38:b9:39:b1: c9:41:80:56:7a:de:7d:3f:2d:e2:48:67:49:44:95: df:1a:be:42:db:a0:fa:f1:a6:81:1c:37:32:c6:21: a6:a5:59:7e:c6:ba:5f:b9:fa:50:1f:02:e7:da:9a: a1:b8:05:bf:ec:56:82:39:32:eb:38:35:57:2d:b8: c0:6d:d5:68:05:5d:46:1c:82:d1:00:8f:8e:e8:3d: ee:57:de:a6:99:56:19:5f:66:ff:20:3a:75:cb:5c: f5:a2:ef:90:94:44:28:fb:34:fb:36:14:60:7b:3b: 2a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2B:90:7C:68:0D:13:97:25:49:8D:A0:4E:08:87:3A:13:20:63:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5c98cdaf-5127-33d6-825c-2ee7692727b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 68.65.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:73:c1:33:3b:40:d3:95:26:aa:79:ed:42:a0:af:bd:61:f0: 9c:97:fa:fa:5b:80:01:04:97:2e:73:43:bb:87:6a:ec:25:ad: 84:99:dc:18:fa:81:5d:07:11:15:d4:19:3a:83:53:c1:45:05: c5:d9:ae:3a:f0:cd:93:b3:0b:50:e2:d5:a4:76:50:76:e4:82: 69:1d:fd:db:eb:57:30:cf:6b:00:d8:8f:c1:62:16:92:2c:ae: 23:13:4b:53:c4:d9:fb:4e:ac:c3:e0:7e:48:92:35:5b:57:c9: 3b:a2:22:d8:ff:ff:d9:9d:3c:01:04:ae:6b:09:2b:12:95:cb: 53:3e:33:f7:3c:e7:cb:fe:af:f2:88:57:16:58:f5:7f:11:2d: d9:17:ff:5c:2e:69:3b:74:ad:6c:5e:8b:b0:75:77:8a:35:d4: 0b:d2:cb:03:6e:8a:62:35:1a:b5:ce:7e:da:d2:4c:1b:0c:24: d2:83:03:da:54:48:dc:89:8b:a3:c9:ef:fc:c0:08:54:6c:02: d4:b1:c9:38:9f:c2:dc:8e:db:ca:e9:f2:6b:de:22:65:97:9a: 29:fa:0c:95:d2:9d:87:92:cb:31:c2:e7:56:60:f2:dc:cc:40: 1c:0a:1c:8a:96:e8:fe:4f:b1:b1:a9:0f:a2:98:2c:25:ca:73: 0c:71:ef:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ISVMEu1ZCCLcb1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjQzZTg3YWEtZjhjNi00ODNhLTk5YzEtNzU1ZDFmYmVjNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8yLw+JWwaKS/3mvsjMlhlGD5FELejZVrXfQ CAV8uoSGIXm6Djsn5Xt6dJJLpAjg1cI/AjAi4L9kN3+QNWinTI2j1j4JLq2mBsfM mF3gSfveuQY+kuBEvYyGND07ABCI6Jg8tLttGZC67QQIp3UkuPNllkrIfm7Xmccw reCpaCP+aPs9yd+0SX00kpoZE5KmKDi5ObHJQYBWet59Py3iSGdJRJXfGr5C26D6 8aaBHDcyxiGmpVl+xrpfufpQHwLn2pqhuAW/7FaCOTLrODVXLbjAbdVoBV1GHILR AI+O6D3uV96mmVYZX2b/IDp1y1z1ou+QlEQo+zT7NhRgezsquQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0rkHxoDROXJUmNoE4IhzoTIGM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNWM5OGNkYWYtNTEyNy0z M2Q2LTgyNWMtMmVlNzY5MjcyN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDREH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtzwTM7QNOVJqp57UKgr71h8JyX+vpbgAEEly5zQ7uHauwlrYSZ3Bj6 gV0HERXUGTqDU8FFBcXZrjrwzZOzC1Di1aR2UHbkgmkd/dvrVzDPawDYj8FiFpIs riMTS1PE2ftOrMPgfkiSNVtXyTuiItj//9mdPAEErmsJKxKVy1M+M/c858v+r/KI VxZY9X8RLdkX/1wuaTt0rWxei7B1d4o11AvSywNuimI1GrXOftrSTBsMJNKDA9pU SNyJi6PJ7/zACFRsAtSxyTifwtyO28rp8mveImWXmin6DJXSnYeSyzHC51Zg8tzM QBwKHIqW6P5PsbGpD6KYLCXKcwxx7zE= -----END CERTIFICATE-----Generated at Sun Oct 19 22:08:07 2025 by rpki-client