$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f6c9df29-3b43-3fad-b06a-619bbb47b781.roa File: f6c9df29-3b43-3fad-b06a-619bbb47b781.roa (raw, json) Hash identifier: BEOQCWp7OCJpc9JcQ+iS7j7G404uTHWoVH72Cey7m5s= Subject key identifier: 25:3E:17:00:E4:FE:C0:BC:A1:EE:46:1C:10:61:FF:C7:7E:DF:2F:98 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584AF5212DB0FF8D5321CB379F00 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f6c9df29-3b43-3fad-b06a-619bbb47b781.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 10747 IP address blocks: 68.65.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2d:b0:ff:8d:53:21:cb:37:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=593a6f6b-7455-4569-9b3b-d85bcbc35b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c3:54:a6:f4:df:4d:cd:79:7b:21:dd:cd:80: 87:09:69:4d:1e:7d:16:36:53:9d:52:39:f9:22:31: 2c:28:17:53:30:ab:5b:2e:49:c2:98:37:99:68:b8: 38:ef:68:09:41:e7:1c:3b:cb:eb:6e:b4:54:b5:63: 03:00:ac:5e:4d:d0:6c:6b:7e:70:db:5f:fa:09:b2: 4c:0a:26:7b:97:70:8a:a2:02:30:0d:a3:c6:0d:fd: 97:63:67:84:69:19:2f:3e:d8:83:6d:16:f9:5b:31: f3:3e:8f:10:f8:3c:05:bc:ab:bb:c4:70:35:b5:f1: 62:bb:86:33:a0:9d:37:e0:92:d2:ae:3f:c3:a8:89: 91:47:95:fd:02:c2:ec:bc:a0:bf:cc:7b:2b:95:68: 6e:d1:e3:e1:c2:44:80:34:65:25:a3:ba:be:93:71: 7b:ce:ff:44:bd:ec:9e:96:9c:be:d1:06:0e:bf:35: 39:54:a8:a7:79:9d:e2:12:cd:4f:08:89:f4:e7:8a: ff:55:d7:1a:91:0b:36:e7:eb:36:f3:f1:73:65:d8: 60:9e:03:70:93:97:6d:80:1f:d9:84:27:be:fd:a3: e8:f7:3c:03:18:9c:7e:f9:f1:f8:b8:d2:a7:33:75: 6c:3b:a6:c2:86:37:d8:03:f8:f4:3f:b3:d3:83:d1: 4f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3E:17:00:E4:FE:C0:BC:A1:EE:46:1C:10:61:FF:C7:7E:DF:2F:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f6c9df29-3b43-3fad-b06a-619bbb47b781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 68.65.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b8:f9:94:3f:e8:32:79:0f:9f:f8:bb:c4:8e:aa:a8:e1:88: 2d:50:61:1a:eb:91:a8:f1:4a:15:67:d3:41:73:b6:8a:55:99: e8:a8:4c:6a:8b:9b:82:b2:da:f0:be:60:22:92:a3:66:b7:3c: 65:e0:c7:56:c1:9e:03:cc:39:3b:ba:3e:8a:6f:cc:40:75:e4: dd:e4:6f:d7:48:9e:45:d9:a0:c1:c3:4a:16:ab:7b:32:c8:77: e5:96:0b:5c:e0:c6:e6:15:71:90:47:2d:a3:68:33:c0:fc:45: e6:84:b8:93:29:5d:1c:9a:60:a4:fe:bf:e7:eb:12:3b:c1:ee: 1f:6a:e4:7f:75:e6:ed:ce:94:17:5b:77:0f:a9:b1:b1:11:fd: 2c:44:b5:3c:ab:70:d9:2d:5a:1c:77:c3:5b:9a:e5:a3:33:06: db:d0:67:54:f7:d8:dc:38:31:a6:91:26:48:c9:8c:50:85:a9: 0a:26:96:c8:dc:0d:af:5d:50:9b:aa:21:66:8c:19:f6:da:80: e2:af:0d:3b:1f:c9:23:f6:b1:91:8d:cb:2b:ec:06:e9:5a:bb: 96:0d:9b:4d:3c:bb:e5:b2:a4:0a:eb:c5:9f:31:9b:ba:21:7f: cf:69:3e:08:dc:65:48:14:4f:56:3e:13:23:e0:db:6b:44:2f: 1b:0e:4e:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IS2w/41TIcs3nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTkzYTZmNmItNzQ1NS00NTY5LTliM2ItZDg1YmNiYzM1YjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsNUpvTfTc15eyHdzYCHCWlNHn0WNlOdUjn5 IjEsKBdTMKtbLknCmDeZaLg472gJQeccO8vrbrRUtWMDAKxeTdBsa35w21/6CbJM CiZ7l3CKogIwDaPGDf2XY2eEaRkvPtiDbRb5WzHzPo8Q+DwFvKu7xHA1tfFiu4Yz oJ034JLSrj/DqImRR5X9AsLsvKC/zHsrlWhu0ePhwkSANGUlo7q+k3F7zv9Eveye lpy+0QYOvzU5VKineZ3iEs1PCIn054r/VdcakQs25+s28/FzZdhgngNwk5dtgB/Z hCe+/aPo9zwDGJx++fH4uNKnM3VsO6bChjfYA/j0P7PTg9FPvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCU+FwDk/sC8oe5GHBBh/8d+3y+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvZjZjOWRmMjktM2I0My0z ZmFkLWIwNmEtNjE5YmJiNDdiNzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDREH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB64+ZQ/6DJ5D5/4u8SOqqjhiC1QYRrrkajxShVn00FztopVmeioTGqL m4Ky2vC+YCKSo2a3PGXgx1bBngPMOTu6PopvzEB15N3kb9dInkXZoMHDSharezLI d+WWC1zgxuYVcZBHLaNoM8D8ReaEuJMpXRyaYKT+v+frEjvB7h9q5H915u3OlBdb dw+psbER/SxEtTyrcNktWhx3w1ua5aMzBtvQZ1T32Nw4MaaRJkjJjFCFqQomlsjc Da9dUJuqIWaMGfbagOKvDTsfySP2sZGNyyvsBulau5YNm008u+WypArrxZ8xm7oh f89pPgjcZUgUT1Y+EyPg22tELxsOTkE= -----END CERTIFICATE-----Generated at Sun Oct 19 22:08:05 2025 by rpki-client