$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/0f3c0c37-c4b1-33fc-b3a0-d8f592ac27c0.roa File: 0f3c0c37-c4b1-33fc-b3a0-d8f592ac27c0.roa (raw, json) Hash identifier: viD+IBtiSVmadA6NfQw4gem6T/yCJBUgC9D7w9rLLbc= Subject key identifier: 66:C0:DF:CD:7E:7F:8E:94:00:41:F4:21:5E:18:B7:14:5E:3E:BC:6D Certificate issuer: /CN=e9769409-4db3-443e-9837-3afd4dca595d Certificate serial: 010D0C9F4328584B9E07930E5B6156C1E876E440 Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/0f3c0c37-c4b1-33fc-b3a0-d8f592ac27c0.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 23316 IP address blocks: 68.170.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:93:0e:5b:61:56:c1:e8:76:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=968bdbd4-89c5-4519-9dc6-974c19c022d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:bf:a2:d3:bf:11:95:ec:ec:15:1a:03:fa: 1c:67:aa:60:58:23:67:12:a7:3e:4e:8e:19:e4:2a: 1a:03:02:4f:86:cb:71:86:de:ac:e2:21:6d:f5:79: f4:04:3a:57:28:db:2d:76:9b:6b:11:d5:7e:1f:31: 41:02:eb:af:fc:40:ca:5a:11:82:92:f1:e7:33:63: f4:11:9e:16:d3:eb:7d:ea:d5:3b:5b:e5:5f:57:bd: 1b:80:0a:05:4a:20:a8:27:c4:32:00:0a:e6:4b:8e: 94:7c:20:d1:68:83:7d:60:38:ee:9f:04:62:f7:e7: 72:4b:b1:4e:4b:0e:5c:bb:c8:ce:62:17:c3:f1:64: 04:00:ca:dd:9d:0c:a4:0a:91:6d:7b:05:55:b4:42: fa:46:8f:69:86:44:87:cf:9c:b2:08:b9:20:1c:89: 22:e3:67:e8:93:30:59:55:da:2c:d7:00:79:b6:b0: 4b:f0:5e:aa:56:03:20:58:3f:5e:7a:1f:37:e2:1c: 9a:d3:a0:f3:17:21:ae:6f:bc:2a:e4:5d:54:37:ea: 10:9a:a9:cf:a8:5f:1f:8b:99:28:fc:da:ec:7b:93: ac:49:db:f9:1d:8d:7a:51:61:48:ee:45:c3:ba:b9: d3:63:61:4b:b8:c3:aa:f7:ef:ce:c9:c8:7a:b3:b0: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C0:DF:CD:7E:7F:8E:94:00:41:F4:21:5E:18:B7:14:5E:3E:BC:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/0f3c0c37-c4b1-33fc-b3a0-d8f592ac27c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl X509v3 Authority Key Identifier: keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer sbgp-ipAddrBlock: critical IPv4: 68.170.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e2:7a:e0:0c:6b:1f:6a:21:b1:28:51:93:db:ab:c6:2a:56: 33:72:f0:e0:87:92:1f:96:aa:97:1f:6b:36:4e:f9:27:09:c3: 21:d2:0d:fb:8c:8e:58:4f:10:c1:d0:ef:d9:88:a1:4a:09:fe: 25:38:7f:05:e8:dc:00:22:cc:04:df:5f:1f:0b:76:c9:70:2a: 87:f4:bd:20:36:6c:00:11:7d:6d:b2:cc:e1:f6:c2:f5:5d:8b: 6c:34:66:a3:6f:9d:15:af:7d:fb:01:51:5b:44:69:81:bf:d1: 30:db:a2:05:9b:4a:4c:66:bd:cb:71:3e:04:e3:fd:8e:76:b8: ed:dc:02:fc:4a:b7:ec:47:c2:2b:bb:b1:40:6c:52:f5:bd:db: a9:a4:a9:2c:92:74:92:6f:f0:42:4b:68:4b:24:cb:4d:41:3b: 0e:b0:56:c3:b9:60:8c:76:d9:da:20:2a:4d:98:57:53:59:cc: c3:7b:5d:69:7a:aa:b3:21:66:11:91:fb:48:0b:49:9c:19:65: 8b:1b:5a:86:68:bd:cc:bb:5f:7d:be:93:b2:8d:74:91:78:e3: e1:e5:95:c1:0c:4c:23:44:f7:21:a7:80:07:0e:4a:6f:95:c4: 06:45:5f:43:c7:28:02:6d:1e:56:6b:13:85:a4:0a:32:ac:8e: 31:2c:b8:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5MOW2FWweh25EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1 OTVkMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk OTY4YmRiZDQtODljNS00NTE5LTlkYzYtOTc0YzE5YzAyMmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUy/otO/EZXs7BUaA/ocZ6pgWCNnEqc+To4Z 5CoaAwJPhstxht6s4iFt9Xn0BDpXKNstdptrEdV+HzFBAuuv/EDKWhGCkvHnM2P0 EZ4W0+t96tU7W+VfV70bgAoFSiCoJ8QyAArmS46UfCDRaIN9YDjunwRi9+dyS7FO Sw5cu8jOYhfD8WQEAMrdnQykCpFtewVVtEL6Ro9phkSHz5yyCLkgHIki42fokzBZ Vdos1wB5trBL8F6qVgMgWD9eeh834hya06DzFyGub7wq5F1UN+oQmqnPqF8fi5ko /Nrse5OsSdv5HY16UWFI7kXDurnTY2FLuMOq9+/Oych6s7AgXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbA381+f46UAEH0IV4YtxRePrxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2 OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvMGYzYzBjMzctYzRiMS0z M2ZjLWIzYTAtZDhmNTkyYWMyN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4 MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7ieuAMax9qIbEoUZPbq8YqVjNy8OCHkh+WqpcfazZO+ScJwyHSDfuM jlhPEMHQ79mIoUoJ/iU4fwXo3AAizATfXx8LdslwKof0vSA2bAARfW2yzOH2wvVd i2w0ZqNvnRWvffsBUVtEaYG/0TDbogWbSkxmvctxPgTj/Y52uO3cAvxKt+xHwiu7 sUBsUvW926mkqSySdJJv8EJLaEsky01BOw6wVsO5YIx22dogKk2YV1NZzMN7XWl6 qrMhZhGR+0gLSZwZZYsbWoZovcy7X32+k7KNdJF44+HllcEMTCNE9yGngAcOSm+V xAZFX0PHKAJtHlZrE4WkCjKsjjEsuPo= -----END CERTIFICATE-----Generated at Wed Oct 29 11:07:17 2025 by rpki-client