$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/43fc3f5d-7da6-3394-990c-e086579daa0f.roa File: 43fc3f5d-7da6-3394-990c-e086579daa0f.roa (raw, json) Hash identifier: qpP0JnNfccC8G8PjuQormJbu+0mC9SHZFuEnmMcG9K8= Subject key identifier: A7:64:4A:A7:8B:38:B8:B6:2E:D3:BA:2D:FD:78:55:A0:C5:8F:5F:D9 Certificate issuer: /CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Certificate serial: 010D0C9F4328584BABFD08426563E6E3068F2980 Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/43fc3f5d-7da6-3394-990c-e086579daa0f.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 29909 IP address blocks: 208.74.60.0/22 maxlen: 22 208.74.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:08:42:65:63:e6:e3:06:8f:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=ce50fb8f-f7c2-463a-8879-c56fbc78a2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f6:94:43:8a:5e:2d:c1:31:dd:f7:f5:91:1a: ed:6a:4c:9b:fd:be:ef:38:d6:8d:d0:ba:da:b9:1f: 13:a6:69:da:63:44:c3:12:d5:2d:13:d1:65:84:c4: 72:fd:c7:1b:a5:84:bc:fe:bb:a2:93:02:0c:fd:53: 84:f4:a3:f7:55:2c:42:7a:ff:d0:fc:b6:27:f7:44: 47:a9:e0:e1:58:b2:0d:39:46:46:4c:5e:1c:60:75: 65:0c:a3:d2:04:71:8a:9c:ad:7b:74:fd:55:cb:73: d8:a2:a1:9f:00:ee:bc:5e:eb:2d:ef:51:b3:b9:7c: 0a:0e:23:67:02:0c:1c:0f:8e:bb:c3:f0:04:f8:6c: 2c:09:a8:74:d1:e1:08:2f:4a:aa:ca:11:44:18:14: b5:20:dc:99:18:30:82:a4:be:6a:92:8a:e9:cd:b5: 71:34:fa:71:89:98:f9:94:da:73:c5:69:66:07:d9: d8:17:08:7f:4d:bf:fd:b2:ad:fb:a0:eb:9b:b7:34: 5a:91:38:63:97:6c:9c:c9:13:31:ec:78:d3:54:3c: 22:0d:70:26:bd:7e:ba:66:f3:c7:22:b5:26:c8:21: 19:d4:b4:1f:7e:32:a9:ae:28:90:fe:5d:57:78:de: 99:65:d7:82:d4:6d:c5:f5:25:55:d6:87:6d:61:d4: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:64:4A:A7:8B:38:B8:B6:2E:D3:BA:2D:FD:78:55:A0:C5:8F:5F:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/43fc3f5d-7da6-3394-990c-e086579daa0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl X509v3 Authority Key Identifier: keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer sbgp-ipAddrBlock: critical IPv4: 208.74.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:7c:1e:85:ae:a6:cd:76:92:67:35:72:d3:aa:b4:f6:45:a9: df:f2:58:be:24:70:72:6c:62:c0:e5:ea:4c:8a:20:00:d5:a4: 24:f6:1e:c5:b5:69:da:99:3e:e9:b9:e8:15:3a:f6:ab:18:d2: 6a:58:61:ef:63:76:38:02:d1:2c:c4:43:b8:c1:61:2c:b7:02: de:78:11:17:4c:0a:83:32:cc:06:53:34:63:ce:bc:61:66:4c: 4d:65:83:c7:5e:cf:6a:ab:61:2c:08:67:bb:24:22:7f:b4:c1: d8:c2:77:76:f9:41:90:23:35:d0:22:3c:a1:c3:08:f0:a3:5a: c4:ed:3b:8c:cf:b4:3c:67:58:41:b2:6f:54:fb:0d:7a:30:23: f7:0a:3f:98:59:8a:56:33:72:61:29:cf:9b:56:99:3d:65:36: b2:8b:3f:8c:6a:11:53:32:3c:2a:d9:e2:24:fd:c4:31:e9:96: ff:cf:3a:e2:cb:09:c6:8b:0f:79:a3:84:cd:53:5b:5a:e1:52: 4e:5c:ef:34:61:e7:a7:0d:7c:f1:b6:2a:6f:67:f2:6e:32:d2: f0:81:7e:96:de:52:6f:75:10:ee:64:5b:bc:cb:9a:5f:15:b6: 09:68:ac:1b:fd:db:bd:a9:c8:23:14:df:70:74:58:47:38:29: 68:fa:8e:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QhCZWPm4waPKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyNWRkYTYtMGRmNy00YzM1LWFmNjUtNGJiNjljZjcx MDUzMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk Y2U1MGZiOGYtZjdjMi00NjNhLTg4NzktYzU2ZmJjNzhhMmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvaUQ4peLcEx3ff1kRrtakyb/b7vONaN0Lra uR8TpmnaY0TDEtUtE9FlhMRy/ccbpYS8/ruikwIM/VOE9KP3VSxCev/Q/LYn90RH qeDhWLINOUZGTF4cYHVlDKPSBHGKnK17dP1Vy3PYoqGfAO68Xust71GzuXwKDiNn AgwcD467w/AE+GwsCah00eEIL0qqyhFEGBS1INyZGDCCpL5qkorpzbVxNPpxiZj5 lNpzxWlmB9nYFwh/Tb/9sq37oOubtzRakThjl2ycyRMx7HjTVDwiDXAmvX66ZvPH IrUmyCEZ1LQffjKpriiQ/l1XeN6ZZdeC1G3F9SVV1odtYdSbkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdkSqeLOLi2LtO6Lf14VaDFj1/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1 ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2OWNmNzEwNTMvNDNmYzNmNWQtN2RhNi0z Mzk0LTk5MGMtZTA4NjU3OWRhYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTgyNWRkYTYtMGRmNy00YzM1LWFm NjUtNGJiNjljZjcxMDUzLzk4MjVkZGE2LTBkZjctNGMzNS1hZjY1LTRiYjY5Y2Y3 MTA1My5jcmwwHwYDVR0jBBgwFoAUD1Z9CXLtC8kPPAwfMwEEOGva3FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2 OWNmNzEwNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Eo8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKF8HoWups12kmc1ctOqtPZFqd/yWL4kcHJsYsDl6kyKIADVpCT2HsW1 adqZPum56BU69qsY0mpYYe9jdjgC0SzEQ7jBYSy3At54ERdMCoMyzAZTNGPOvGFm TE1lg8dez2qrYSwIZ7skIn+0wdjCd3b5QZAjNdAiPKHDCPCjWsTtO4zPtDxnWEGy b1T7DXowI/cKP5hZilYzcmEpz5tWmT1lNrKLP4xqEVMyPCrZ4iT9xDHplv/POuLL CcaLD3mjhM1TW1rhUk5c7zRh56cNfPG2Km9n8m4y0vCBfpbeUm91EO5kW7zLml8V tglorBv9272pyCMU33B0WEc4KWj6jp0= -----END CERTIFICATE-----Generated at Mon Nov 3 07:19:38 2025 by rpki-client