$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa File: bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa (raw, json) Hash identifier: 542mRcW1NbfYZTmLkKQyZ8dmBejyOPSSwjJE3qp8r9w= Subject key identifier: CA:E4:15:0C:4B:7D:98:D0:83:2F:81:A1:5D:3A:24:50:D8:14:BA:A4 Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F4328584BACF008AD7E9F98289F4BC180 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa Signing time: Tue 28 Oct 2025 21:10:09 +0000 ROA not before: Tue 28 Oct 2025 21:10:09 +0000 ROA not after: Mon 26 Jan 2026 22:10:09 +0000 asID: 22987 IP address blocks: 68.209.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ac:f0:08:ad:7e:9f:98:28:9f:4b:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Oct 28 21:10:09 2025 GMT Not After : Jan 26 22:10:09 2026 GMT Subject: CN=2ba9ca2b-71fe-4010-9107-75c44aa6e374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:39:ea:ea:4d:48:44:c6:c6:be:e8:52:ee:f9: a9:6b:70:40:11:42:5e:04:a1:4b:09:8a:45:ea:ff: 3e:c5:a2:a6:3e:05:0e:23:2c:ae:1a:fd:07:08:24: e5:6f:66:78:56:83:54:74:23:08:66:e7:98:6e:d0: f9:2d:e8:6a:54:41:5e:05:bd:1d:5a:97:31:2f:17: 3d:eb:b3:67:5d:ab:db:a2:96:a1:92:8e:9b:04:b7: 2f:ab:8d:aa:75:29:44:53:c4:b8:17:c0:f5:ed:f1: af:88:5f:8a:a9:01:f0:74:a1:46:22:14:a2:17:ba: 34:17:06:7d:07:24:9d:d4:a4:4f:bc:6b:a2:62:fb: 62:72:d0:0f:f4:68:f8:1e:bf:24:a5:fa:cb:ae:37: 3e:29:cd:5e:b2:8b:34:0f:2f:c6:3b:05:60:b4:40: 86:6d:8a:66:ca:d4:f1:c5:b6:11:08:d1:d2:b4:bc: 28:c1:29:36:cd:b4:4d:d3:29:61:6d:04:50:71:34: d9:ec:55:ef:93:bc:f1:a9:61:03:c9:19:08:1c:09: 21:db:8a:12:30:84:b7:aa:eb:36:f7:90:62:53:15: e0:6b:cb:6f:41:be:65:ba:23:9a:d0:c2:48:1f:c6: da:73:a3:fc:e4:7c:5a:48:b1:50:0f:04:07:ed:5b: c6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E4:15:0C:4B:7D:98:D0:83:2F:81:A1:5D:3A:24:50:D8:14:BA:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv4: 68.209.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d1:8e:aa:8c:36:b8:82:f7:4e:46:cd:d8:68:17:a2:93:0f: d6:56:ba:87:cb:ae:2b:df:c4:47:b0:cf:7b:08:8c:ba:bf:45: 3e:7a:df:ab:be:07:56:0e:8d:6c:c9:d2:ad:f7:8f:4c:70:af: dc:6c:22:b4:e7:91:a5:25:bd:ab:17:55:2b:0c:62:7e:ce:55: e1:48:3e:b6:c2:e9:28:81:10:c3:3d:5f:ee:c3:eb:37:d7:32: 4c:9d:94:e3:ae:3a:ac:99:63:83:b8:46:19:d9:61:85:83:ab: 5e:9a:00:47:a0:e1:93:ed:9f:f1:0e:0b:c2:34:dc:1f:60:45: 3e:f5:ad:72:08:8f:27:bf:85:70:0e:f8:9a:74:91:d0:f3:47: a3:a3:97:23:29:03:c1:8e:eb:75:76:3d:22:33:50:e0:1a:5c: 16:b5:f8:0f:46:6f:d5:43:b8:41:e7:f4:c8:49:3e:29:4d:dc: 40:a2:1a:66:30:41:7b:18:da:de:f4:d3:f3:0f:d6:3c:7f:5f: ca:dc:59:b5:5f:e6:30:bc:fa:42:d5:30:f1:40:ba:d3:1f:89: f5:f8:97:c6:b8:a5:04:88:14:ec:1e:b1:a1:ca:c8:6c:5a:c3: b6:ea:14:c4:f5:e9:ed:21:f0:e4:db:14:a7:eb:30:bd:a3:97: a7:c5:78:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEus8Aitfp+YKJ9LwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI1MTAyODIxMTAwOVoXDTI2MDEyNjIyMTAwOVowLzEtMCsGA1UEAxMk MmJhOWNhMmItNzFmZS00MDEwLTkxMDctNzVjNDRhYTZlMzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDnq6k1IRMbGvuhS7vmpa3BAEUJeBKFLCYpF 6v8+xaKmPgUOIyyuGv0HCCTlb2Z4VoNUdCMIZueYbtD5LehqVEFeBb0dWpcxLxc9 67NnXavbopahko6bBLcvq42qdSlEU8S4F8D17fGviF+KqQHwdKFGIhSiF7o0FwZ9 BySd1KRPvGuiYvtictAP9Gj4Hr8kpfrLrjc+Kc1esos0Dy/GOwVgtECGbYpmytTx xbYRCNHStLwowSk2zbRN0ylhbQRQcTTZ7FXvk7zxqWEDyRkIHAkh24oSMIS3qus2 95BiUxXga8tvQb5luiOa0MJIH8bac6P85HxaSLFQDwQH7VvGiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrkFQxLfZjQgy+BoV06JFDYFLqkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvYmY4MzRmMTktMTRjOC0z NGYyLWJmOTUtYjM3OTdiZDk2ZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRNGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDRjqqMNriC905GzdhoF6KTD9ZWuofLrivfxEewz3sIjLq/RT5636u+ B1YOjWzJ0q33j0xwr9xsIrTnkaUlvasXVSsMYn7OVeFIPrbC6SiBEMM9X+7D6zfX MkydlOOuOqyZY4O4RhnZYYWDq16aAEeg4ZPtn/EOC8I03B9gRT71rXIIjye/hXAO +Jp0kdDzR6OjlyMpA8GO63V2PSIzUOAaXBa1+A9Gb9VDuEHn9MhJPilN3ECiGmYw QXsY2t700/MP1jx/X8rcWbVf5jC8+kLVMPFAutMfifX4l8a4pQSIFOwesaHKyGxa w7bqFMT16e0h8OTbFKfrML2jl6fFePM= -----END CERTIFICATE-----Generated at Mon Nov 3 21:18:45 2025 by rpki-client