$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/c663c90b-e593-3055-942d-de3ee4b404af.roa File: c663c90b-e593-3055-942d-de3ee4b404af.roa (raw, json) Hash identifier: nm7MPgGN5DtE1btQQQu0HaFLhEulM1VZannt168HX/o= Subject key identifier: F7:43:A5:96:0D:00:35:E7:CF:8C:AF:45:52:1F:8A:F5:C9:B5:BC:5E Certificate issuer: /CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b Certificate serial: 010D0C9F4328584B953DBE6058C1F6CB43540FC0 Authority key identifier: 30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/c663c90b-e593-3055-942d-de3ee4b404af.roa Signing time: Mon 20 Oct 2025 09:27:33 +0000 ROA not before: Mon 20 Oct 2025 09:27:33 +0000 ROA not after: Sun 18 Jan 2026 10:27:33 +0000 asID: 16589 IP address blocks: 68.232.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:3d:be:60:58:c1:f6:cb:43:54:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b Validity Not Before: Oct 20 09:27:33 2025 GMT Not After : Jan 18 10:27:33 2026 GMT Subject: CN=66bbf484-411f-420b-ba3d-a11255bc3113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:cf:6d:cc:80:5e:d3:65:d0:4b:9f:71:5c: c7:dc:ba:3a:04:4f:7d:20:70:a9:e7:9d:35:ca:d8: 95:19:7c:83:07:15:73:44:90:ba:a6:98:e2:28:ac: c2:69:89:4e:0d:07:a5:96:83:3a:c5:04:ed:19:48: 4c:35:46:25:d9:ce:5f:b6:ab:03:79:79:a9:51:86: 08:d3:53:89:d7:8d:9e:32:1e:e4:bf:c3:17:90:7f: 66:c9:75:63:55:8e:68:88:eb:22:20:c4:8d:d1:ef: 9a:5a:78:04:0b:3b:85:93:71:69:fb:1c:a5:5d:21: c4:0f:9a:3b:8b:64:cb:51:f7:a9:53:40:51:38:09: e6:1b:06:ce:25:5a:44:ac:78:eb:25:91:a2:f9:f9: 88:99:ed:30:64:2f:4f:7c:a1:97:c7:a2:6f:aa:bd: c6:0f:e2:3b:f7:47:1c:ed:dd:ca:bd:0c:64:a0:e8: 1b:fd:f8:f1:32:68:c8:9b:18:77:a6:41:69:c6:3a: 8f:91:fd:61:17:20:8d:31:62:58:03:34:3b:0a:ef: e1:85:4f:72:e5:12:2c:f3:2a:d7:aa:09:d9:9f:e2: b3:46:f7:d1:24:91:cf:fd:d1:90:01:9e:0d:22:51: 56:42:53:74:54:3c:2e:8a:d5:d6:fe:d3:13:b5:80: ea:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:43:A5:96:0D:00:35:E7:CF:8C:AF:45:52:1F:8A:F5:C9:B5:BC:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/c663c90b-e593-3055-942d-de3ee4b404af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl X509v3 Authority Key Identifier: keyid:30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer sbgp-ipAddrBlock: critical IPv4: 68.232.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:9a:24:13:06:58:81:4b:0f:f5:61:58:65:8c:11:94:e6:28: cc:02:28:d1:3b:9d:13:2e:ae:7a:35:10:ec:35:25:5e:d1:84: f4:fb:1e:6c:c6:50:ee:e9:9d:f6:f8:ea:de:93:f3:3b:d0:5a: a5:8b:f1:45:08:07:bc:76:6d:b1:72:64:19:1d:5d:b0:16:e3: 51:05:82:ee:85:fe:b9:91:9b:29:62:ec:6d:1f:2a:59:87:fc: da:6f:23:dc:72:79:8b:91:77:14:ad:0c:5a:6a:dd:ba:cf:6c: 61:30:df:24:b5:40:82:9f:04:69:f9:10:d1:96:77:a3:e3:53: 0e:7a:d8:c3:2f:6c:70:06:16:6a:d2:ee:1d:0f:09:21:19:ef: d1:0d:23:a0:fc:ac:74:53:15:28:d5:2c:56:79:e0:f7:9a:fc: 25:62:d6:c1:67:94:1f:7d:df:ee:56:ec:5e:7c:ce:f0:df:4a: d0:36:69:bd:d1:b4:24:f9:52:bd:18:17:9b:b6:3c:5c:58:0b: 16:6e:d3:29:14:a2:de:1f:68:5c:b6:31:e0:36:ca:22:aa:75: ad:52:eb:b8:c9:ef:59:01:00:5f:b8:7a:4e:98:57:7f:3d:5b: 2f:54:99:26:b8:b2:60:31:fa:49:f3:bf:3b:90:a8:e1:25:48: 60:8c:57:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVPb5gWMH2y0NUD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI3ODA0NWYtODIxZi00Y2U0LTk1ZTktYzA2ZGVjOGEx YTdiMB4XDTI1MTAyMDA5MjczM1oXDTI2MDExODEwMjczM1owLzEtMCsGA1UEAxMk NjZiYmY0ODQtNDExZi00MjBiLWJhM2QtYTExMjU1YmMzMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS3PbcyAXtNl0EufcVzH3Lo6BE99IHCp5501 ytiVGXyDBxVzRJC6ppjiKKzCaYlODQelloM6xQTtGUhMNUYl2c5ftqsDeXmpUYYI 01OJ142eMh7kv8MXkH9myXVjVY5oiOsiIMSN0e+aWngECzuFk3Fp+xylXSHED5o7 i2TLUfepU0BROAnmGwbOJVpErHjrJZGi+fmIme0wZC9PfKGXx6Jvqr3GD+I790cc 7d3KvQxkoOgb/fjxMmjImxh3pkFpxjqPkf1hFyCNMWJYAzQ7Cu/hhU9y5RIs8yrX qgnZn+KzRvfRJJHP/dGQAZ4NIlFWQlN0VDwuitXW/tMTtYDq3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdDpZYNADXnz4yvRVIfivXJtbxeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80Yjc4 MDQ1Zi04MjFmLTRjZTQtOTVlOS1jMDZkZWM4YTFhN2IvYzY2M2M5MGItZTU5My0z MDU1LTk0MmQtZGUzZWU0YjQwNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGI3ODA0NWYtODIxZi00Y2U0LTk1 ZTktYzA2ZGVjOGExYTdiLzRiNzgwNDVmLTgyMWYtNGNlNC05NWU5LWMwNmRlYzhh MWE3Yi5jcmwwHwYDVR0jBBgwFoAUMEpb9U4yCX8ZpybnCWh/reNjqhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80Yjc4MDQ1Zi04MjFmLTRjZTQtOTVlOS1jMDZk ZWM4YTFhN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqaJBMGWIFLD/VhWGWMEZTmKMwCKNE7nRMurno1EOw1JV7RhPT7HmzG UO7pnfb46t6T8zvQWqWL8UUIB7x2bbFyZBkdXbAW41EFgu6F/rmRmyli7G0fKlmH /NpvI9xyeYuRdxStDFpq3brPbGEw3yS1QIKfBGn5ENGWd6PjUw562MMvbHAGFmrS 7h0PCSEZ79ENI6D8rHRTFSjVLFZ54Pea/CVi1sFnlB993+5W7F58zvDfStA2ab3R tCT5Ur0YF5u2PFxYCxZu0ykUot4faFy2MeA2yiKqda1S67jJ71kBAF+4ek6YV389 Wy9UmSa4smAx+knzvzuQqOElSGCMVwk= -----END CERTIFICATE-----Generated at Fri Oct 24 17:48:35 2025 by rpki-client