$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/717ebdd6-4d0d-33db-ae05-66962b047c06.roa File: 717ebdd6-4d0d-33db-ae05-66962b047c06.roa (raw, json) Hash identifier: g4SPy7H3iPvkI57Z63lEfRwWF3HXLyGDKYvcm6Fuw5w= Subject key identifier: 49:30:83:10:BA:81:F9:EB:27:80:93:10:BA:DA:B9:BD:08:57:00:B7 Certificate issuer: /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218 Certificate serial: 010D0C9F4328584AFAB68294E9B5F2BBA79AE540 Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/717ebdd6-4d0d-33db-ae05-66962b047c06.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 200288 IP address blocks: 69.168.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:82:94:e9:b5:f2:bb:a7:9a:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218 Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=6ba9627d-e26b-4534-8ccf-e13d50978f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d8:80:be:08:2e:f6:76:91:4f:14:12:78:a1: 7c:1d:18:20:57:9a:1d:9e:68:c3:3b:44:db:60:9e: e9:a6:27:4c:de:87:53:9c:93:91:58:c9:5a:44:5c: 75:2b:ba:fa:5e:11:48:13:59:33:fe:0f:e6:35:67: e3:ad:3d:af:27:d0:f8:3e:10:15:bc:f5:06:b2:7f: d7:d9:a9:ec:74:43:5d:ee:af:bf:e4:34:de:9c:84: 5c:86:93:06:a6:39:74:0c:39:67:c8:aa:a1:d1:10: fa:c0:73:ae:a8:a1:d6:56:42:e7:d2:bc:c2:77:8d: 76:b4:77:02:f6:b0:95:48:6f:c0:69:6b:49:f0:68: e3:3a:2b:1e:89:e8:d9:8d:dc:d8:da:0e:2e:06:57: dc:77:38:3b:e6:2a:0a:fa:31:73:70:72:d8:ac:94: 30:c6:40:b1:dc:e9:05:dc:1d:12:22:c7:ec:63:07: 94:f1:59:28:28:14:5a:34:2d:9c:02:fd:1a:97:10: a5:af:62:b0:b5:e5:07:03:04:c9:20:06:81:62:ab: 87:ac:93:5c:f3:44:b3:bb:29:3a:d6:61:e4:d1:3f: 41:03:40:1d:55:9a:3f:01:95:64:a2:97:86:bd:02: 54:b2:e8:ce:de:21:70:51:14:50:c5:9a:ba:79:cf: 5c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:30:83:10:BA:81:F9:EB:27:80:93:10:BA:DA:B9:BD:08:57:00:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/717ebdd6-4d0d-33db-ae05-66962b047c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl X509v3 Authority Key Identifier: keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer sbgp-ipAddrBlock: critical IPv4: 69.168.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:07:91:b4:8a:0b:8c:52:1a:02:e0:a3:e4:fc:ed:3c:87:c4: fd:cb:f3:2c:0f:78:cc:0f:d7:85:c2:cc:ab:a0:71:3c:1b:05: 75:13:c7:d6:f8:3a:7c:f3:2b:9c:a2:a3:ae:69:43:a7:10:5a: 55:6d:7e:8f:41:52:3a:d0:7d:ac:3a:0d:4b:96:98:2d:ea:9b: 6a:ce:be:e3:c8:11:ea:0f:fe:a8:01:33:97:c1:8e:b5:fc:42: e2:3e:51:33:63:bd:bc:76:a6:b8:a3:08:6d:71:b5:e7:8e:04: ab:19:5a:f5:29:07:ee:03:ec:1e:96:93:b5:ca:25:aa:e8:05: c6:4c:17:6e:d2:eb:17:76:51:3a:e1:2b:01:3c:4a:b7:c7:e8: b3:6e:eb:17:46:96:01:f5:1b:30:fd:ca:9c:f2:6c:c9:d8:b1: 8c:84:d0:8e:07:df:ac:61:0e:9f:41:25:d7:c9:7c:3a:de:1b: 0a:a5:04:dc:4d:a8:0f:5c:b0:de:eb:d0:6f:35:a9:55:4d:0b: 9b:0a:85:c1:56:61:b5:32:1e:ff:b0:01:50:ab:43:b5:ab:6b: 1c:08:71:04:05:ed:c1:19:e9:85:26:57:92:26:00:df:26:73: 67:96:7b:25:a4:fb:bd:f5:ce:47:91:12:53:89:d0:27:d3:09: 6a:e9:f9:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6toKU6bXyu6ea5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMxMWQzNTgtNjliOS00Yzk2LWJmNDctZTNlZGQ1Y2Zm MjE4MB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk NmJhOTYyN2QtZTI2Yi00NTM0LThjY2YtZTEzZDUwOTc4ZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNiAvggu9naRTxQSeKF8HRggV5odnmjDO0Tb YJ7ppidM3odTnJORWMlaRFx1K7r6XhFIE1kz/g/mNWfjrT2vJ9D4PhAVvPUGsn/X 2ansdENd7q+/5DTenIRchpMGpjl0DDlnyKqh0RD6wHOuqKHWVkLn0rzCd412tHcC 9rCVSG/AaWtJ8GjjOiseiejZjdzY2g4uBlfcdzg75ioK+jFzcHLYrJQwxkCx3OkF 3B0SIsfsYweU8VkoKBRaNC2cAv0alxClr2KwteUHAwTJIAaBYquHrJNc80Szuyk6 1mHk0T9BA0AdVZo/AZVkopeGvQJUsujO3iFwURRQxZq6ec9cJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkwgxC6gfnrJ4CTELraub0IVwC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzEx ZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2VkZDVjZmYyMTgvNzE3ZWJkZDYtNGQwZC0z M2RiLWFlMDUtNjY5NjJiMDQ3YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWMxMWQzNTgtNjliOS00Yzk2LWJm NDctZTNlZGQ1Y2ZmMjE4L2VjMTFkMzU4LTY5YjktNGM5Ni1iZjQ3LWUzZWRkNWNm ZjIxOC5jcmwwHwYDVR0jBBgwFoAUoUAcC1VOMwu+PVO2Hd8acJrxAbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzExZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2Vk ZDVjZmYyMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARajuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQHkbSKC4xSGgLgo+T87TyHxP3L8ywPeMwP14XCzKugcTwbBXUTx9b4 OnzzK5yio65pQ6cQWlVtfo9BUjrQfaw6DUuWmC3qm2rOvuPIEeoP/qgBM5fBjrX8 QuI+UTNjvbx2prijCG1xteeOBKsZWvUpB+4D7B6Wk7XKJaroBcZMF27S6xd2UTrh KwE8SrfH6LNu6xdGlgH1GzD9ypzybMnYsYyE0I4H36xhDp9BJdfJfDreGwqlBNxN qA9csN7r0G81qVVNC5sKhcFWYbUyHv+wAVCrQ7WraxwIcQQF7cEZ6YUmV5ImAN8m c2eWeyWk+731zkeRElOJ0CfTCWrp+aM= -----END CERTIFICATE-----Generated at Wed Oct 29 10:48:33 2025 by rpki-client