$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/6b6ff68f-d399-3bcd-9efc-3909a2e9367d.roa File: 6b6ff68f-d399-3bcd-9efc-3909a2e9367d.roa (raw, json) Hash identifier: UG05HPpsq7i53TRNmD3ou81sPRbos0HyyCVeyK35t8g= Subject key identifier: C3:69:BE:B0:D4:55:2A:10:A3:79:0C:D0:38:D0:AF:ED:AB:F3:61:17 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584B9F6CDA19F522AFE2167D4DB8 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/6b6ff68f-d399-3bcd-9efc-3909a2e9367d.roa Signing time: Fri 24 Oct 2025 01:00:30 +0000 ROA not before: Fri 24 Oct 2025 01:00:30 +0000 ROA not after: Thu 22 Jan 2026 02:00:30 +0000 asID: 63023 IP address blocks: 167.17.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:6c:da:19:f5:22:af:e2:16:7d:4d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Oct 24 01:00:30 2025 GMT Not After : Jan 22 02:00:30 2026 GMT Subject: CN=69c60460-96eb-4be8-b4b9-c20e99289bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6c:e6:f8:9f:39:13:0f:23:4b:5b:1d:4c:42: 0a:86:8d:2d:f4:15:cc:b7:c3:bd:53:d3:b8:29:bc: 41:21:09:86:92:2f:65:8f:cf:a2:f7:d0:b8:30:e6: 1e:62:bb:a6:3e:e0:a3:b5:a0:70:98:97:33:6e:cc: 69:4b:9b:09:c5:29:94:0e:32:07:3d:46:a9:bf:5f: 65:0c:3d:93:73:2d:ca:c9:1c:4e:8e:50:53:6f:ec: 3d:1f:12:c9:88:99:1f:11:2b:fe:5a:47:dc:f9:17: 5c:8f:08:f2:f5:15:3f:f6:80:bb:5d:1d:1d:8c:94: 9e:ba:c1:ae:e7:32:bd:f0:2f:10:ea:21:40:8d:a8: 43:20:9a:d7:26:01:48:8e:de:b2:d3:d2:40:bf:3c: 38:b2:fa:ac:9f:e0:bc:6b:4f:60:80:d8:58:cc:f2: 95:6a:da:3f:25:a0:e4:80:f8:ef:cd:3e:79:68:79: 4a:7f:3a:19:b7:a8:51:4a:0e:ec:0d:8f:f0:cc:f6: 5f:eb:7e:77:2f:ea:50:20:a6:6b:09:2b:42:f1:27: 93:ea:f9:20:00:d5:8b:10:e0:0a:1f:45:07:0b:93: 55:e7:44:5a:2e:6f:13:e6:16:73:a4:6e:50:ac:24: 50:e3:a2:81:0e:5a:bd:77:dd:5a:d2:ef:5d:d1:a6: 36:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:69:BE:B0:D4:55:2A:10:A3:79:0C:D0:38:D0:AF:ED:AB:F3:61:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/6b6ff68f-d399-3bcd-9efc-3909a2e9367d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:f0:70:ff:1f:2b:25:47:3b:33:5d:be:1c:78:ce:bd:0b:6f: bc:91:2c:7e:5f:52:a4:7b:25:fc:8c:d0:e6:f0:13:3c:a3:e8: 63:3f:39:6e:2a:4d:5d:92:86:53:8c:27:3a:c4:b8:be:eb:d5: 06:0c:ff:d2:d6:18:59:9f:d4:32:b2:97:0c:c3:34:3a:55:1a: 34:55:d5:50:d7:91:9f:a9:b9:14:87:9a:a6:a2:b0:b9:10:f5: 70:da:6e:b3:92:ca:d5:25:8a:4b:e7:38:da:78:8a:9f:02:22: 5e:65:46:fd:60:e0:cb:e8:74:de:37:b2:74:0f:b8:4e:0f:f5: ec:bd:0f:13:59:14:25:e6:ff:df:88:c6:ba:50:27:14:8c:60: 07:35:07:d0:71:6c:46:a4:38:02:99:7e:5a:30:5d:76:f4:3f: 61:97:2a:8f:b2:6a:70:75:25:6a:4b:66:10:14:2c:69:7b:fc: 85:40:a6:26:11:e0:55:67:6f:59:80:21:f1:7d:fc:59:b5:4a: 82:bd:ce:39:6a:bd:5c:c0:5a:ea:55:37:c8:21:5e:20:7f:95: 7c:30:69:42:89:ae:6b:57:7f:1e:e1:0c:d0:38:d8:ef:ba:be: 32:06:32:00:5a:53:8b:03:d0:e4:93:e5:46:6a:e9:26:49:ec: dd:d3:ff:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEufbNoZ9SKv4hZ9TbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI1MTAyNDAxMDAzMFoXDTI2MDEyMjAyMDAzMFowLzEtMCsGA1UEAxMk NjljNjA0NjAtOTZlYi00YmU4LWI0YjktYzIwZTk5Mjg5YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2zm+J85Ew8jS1sdTEIKho0t9BXMt8O9U9O4 KbxBIQmGki9lj8+i99C4MOYeYrumPuCjtaBwmJczbsxpS5sJxSmUDjIHPUapv19l DD2Tcy3KyRxOjlBTb+w9HxLJiJkfESv+Wkfc+Rdcjwjy9RU/9oC7XR0djJSeusGu 5zK98C8Q6iFAjahDIJrXJgFIjt6y09JAvzw4svqsn+C8a09ggNhYzPKVato/JaDk gPjvzT55aHlKfzoZt6hRSg7sDY/wzPZf6353L+pQIKZrCStC8SeT6vkgANWLEOAK H0UHC5NV50RaLm8T5hZzpG5QrCRQ46KBDlq9d91a0u9d0aY2XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNpvrDUVSoQo3kM0DjQr+2r82EXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvNmI2ZmY2OGYtZDM5OS0z YmNkLTllZmMtMzkwOWEyZTkzNjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3wcP8fKyVHOzNdvhx4zr0Lb7yRLH5fUqR7JfyM0ObwEzyj6GM/OW4q TV2ShlOMJzrEuL7r1QYM/9LWGFmf1DKylwzDNDpVGjRV1VDXkZ+puRSHmqaisLkQ 9XDabrOSytUlikvnONp4ip8CIl5lRv1g4MvodN43snQPuE4P9ey9DxNZFCXm/9+I xrpQJxSMYAc1B9BxbEakOAKZflowXXb0P2GXKo+yanB1JWpLZhAULGl7/IVApiYR 4FVnb1mAIfF9/Fm1SoK9zjlqvVzAWupVN8ghXiB/lXwwaUKJrmtXfx7hDNA42O+6 vjIGMgBaU4sD0OST5UZq6SZJ7N3T/9c= -----END CERTIFICATE-----Generated at Fri Oct 24 14:51:25 2025 by rpki-client