$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/d905242f-529d-317e-b5df-4ceefbc4b4fd.roa File: d905242f-529d-317e-b5df-4ceefbc4b4fd.roa (raw, json) Hash identifier: hvZ1lfhT6o9eBPJrWcJLW4vBE5VFHdldnBJb9DdMmyU= Subject key identifier: 6E:17:32:77:63:32:D6:D9:52:E4:C9:2F:06:F0:46:73:D8:C0:02:BC Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584B0746BD4FC7D23548E2E263C0 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/d905242f-529d-317e-b5df-4ceefbc4b4fd.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 393878 IP address blocks: 68.65.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:bd:4f:c7:d2:35:48:e2:e2:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=db6ed92c-38cb-470f-9f31-97b4341ec64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dd:6f:ff:e8:a2:e5:6e:4d:f4:bb:68:5b:7a: 92:3b:bc:e7:59:12:dc:5a:8a:2f:14:d9:f9:cc:81: 3e:53:d2:34:74:2b:64:43:8f:3b:6b:4d:da:87:7c: 7e:5a:d2:e4:1f:d2:e7:43:ad:9f:81:1c:16:79:b1: 92:65:da:89:99:90:b9:40:83:b5:f8:40:70:7c:90: 02:57:d0:9c:47:28:87:01:25:fd:39:76:1d:bf:05: 54:29:c1:3e:40:9e:72:f5:02:09:8a:ec:92:96:7a: cf:fc:3e:bf:fc:b1:fa:f0:8d:55:d7:c4:8e:bb:09: 27:8d:64:55:83:44:26:c0:5d:51:59:8e:74:bc:15: 92:b2:85:c8:eb:a9:6c:1a:3d:f2:56:f9:35:8b:61: 0e:7c:aa:3f:65:ad:59:1a:9a:3c:17:53:57:86:74: e8:41:91:6e:39:b6:bd:8f:bf:59:8e:f0:91:c7:c1: a4:dd:b2:24:1e:07:32:55:a3:ec:44:b4:d0:30:45: 3a:72:5a:f0:f5:73:bf:d6:1a:20:25:c1:a0:5b:62: cd:22:70:17:bc:5b:80:9a:b3:cd:8f:11:72:df:e7: 9e:a3:97:74:36:71:97:a0:e8:08:65:2c:90:d7:0b: 4c:de:5e:b2:b6:a7:59:e3:d4:16:5e:69:91:65:00: 3f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:17:32:77:63:32:D6:D9:52:E4:C9:2F:06:F0:46:73:D8:C0:02:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/d905242f-529d-317e-b5df-4ceefbc4b4fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 68.65.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f8:24:25:5f:7b:ce:05:ad:a3:9b:8f:54:62:6a:97:5a:55: a2:f5:ae:0a:2e:47:61:96:9a:09:46:c0:e0:fd:ac:0e:53:86: 0b:de:18:f7:9b:90:34:b0:6f:50:8a:5d:0c:98:a3:57:2d:c9: be:bf:8d:25:39:3f:f3:62:eb:bf:66:9e:59:3f:4a:f6:77:e4: 89:f6:7a:95:8e:7c:b2:e2:3e:73:3d:fb:74:c5:e1:2f:f8:8f: cb:28:71:67:34:1e:47:b2:bc:fc:12:fe:47:3c:07:d8:02:25: b2:42:b4:38:0e:8e:8e:f6:4d:e5:e1:e5:14:59:9e:fb:79:0a: 28:86:be:b0:4f:ec:ee:8f:b2:80:b6:6e:36:3f:56:18:c8:d3: 85:31:7b:4a:2b:3a:fe:f2:3a:a5:dc:c1:bd:1d:46:c0:33:c8: 7f:bb:3d:f4:ad:5f:aa:82:e5:60:7e:d0:fb:da:44:1b:b1:a5: 68:94:98:8a:6e:b8:86:16:6e:fa:71:ac:87:aa:b6:ff:a6:01: 8b:3e:dc:40:f6:b8:c0:61:0b:0e:66:4b:fd:2f:87:2a:0c:a7: 4d:d1:7d:13:1b:98:6b:4c:4e:9e:2e:a7:57:2b:83:ce:4b:d5: 9f:d6:cc:62:66:ab:28:c7:37:8f:19:7c:14:06:7a:1b:1b:5f: cd:f1:c4:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRr1Px9I1SOLiY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ZGI2ZWQ5MmMtMzhjYi00NzBmLTlmMzEtOTdiNDM0MWVjNjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN1v/+ii5W5N9LtoW3qSO7znWRLcWoovFNn5 zIE+U9I0dCtkQ487a03ah3x+WtLkH9LnQ62fgRwWebGSZdqJmZC5QIO1+EBwfJAC V9CcRyiHASX9OXYdvwVUKcE+QJ5y9QIJiuySlnrP/D6//LH68I1V18SOuwknjWRV g0QmwF1RWY50vBWSsoXI66lsGj3yVvk1i2EOfKo/Za1ZGpo8F1NXhnToQZFuOba9 j79ZjvCRx8Gk3bIkHgcyVaPsRLTQMEU6clrw9XO/1hogJcGgW2LNInAXvFuAmrPN jxFy3+eeo5d0NnGXoOgIZSyQ1wtM3l6ytqdZ49QWXmmRZQA/YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4XMndjMtbZUuTJLwbwRnPYwAK8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvZDkwNTI0MmYtNTI5ZC0z MTdlLWI1ZGYtNGNlZWZiYzRiNGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDREH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/4JCVfe84FraObj1RiapdaVaL1rgouR2GWmglGwOD9rA5ThgveGPeb kDSwb1CKXQyYo1ctyb6/jSU5P/Ni679mnlk/SvZ35In2epWOfLLiPnM9+3TF4S/4 j8socWc0HkeyvPwS/kc8B9gCJbJCtDgOjo72TeXh5RRZnvt5CiiGvrBP7O6PsoC2 bjY/VhjI04Uxe0orOv7yOqXcwb0dRsAzyH+7PfStX6qC5WB+0PvaRBuxpWiUmIpu uIYWbvpxrIeqtv+mAYs+3ED2uMBhCw5mS/0vhyoMp03RfRMbmGtMTp4up1crg85L 1Z/WzGJmqyjHN48ZfBQGehsbX83xxBE= -----END CERTIFICATE-----Generated at Sun Oct 19 22:08:07 2025 by rpki-client