$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/6b65c60e-c200-3d1a-a0ad-703f5efe65fb.roa File: 6b65c60e-c200-3d1a-a0ad-703f5efe65fb.roa (raw, json) Hash identifier: d+XCLvcDbVH0HGXLF6ic1GU9AkhhP3FAvsr8EvjlXiY= Subject key identifier: 5D:8C:3D:12:2E:A7:B8:F9:82:C6:48:C3:74:A0:44:15:62:42:C6:9B Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584BA39CF5487550DEEC44FC5B80 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/6b65c60e-c200-3d1a-a0ad-703f5efe65fb.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 192.184.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f5:48:75:50:de:ec:44:fc:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=2ba8ef1b-5877-414a-a7b5-5e87913acef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:7d:39:9f:c6:fb:4f:e8:31:05:0f:1a:65: d3:bd:32:e6:10:b9:9a:23:11:9a:90:b1:1f:f4:47: 4d:6c:ca:60:f9:a4:70:70:73:97:7f:db:f6:50:73: 4f:e6:10:33:fc:0d:51:f6:b4:66:f6:a6:b3:80:37: 96:d1:40:9e:34:14:11:4f:b5:9a:ac:95:54:9d:23: d2:8f:0d:ec:37:6e:8b:5d:b2:e9:bd:11:59:57:49: 30:41:84:6c:3b:dc:b2:eb:98:f6:73:a2:3f:08:be: fe:6e:91:c1:e0:ef:6e:12:e2:fb:f2:4f:4d:97:59: 2f:1a:af:32:61:e3:5a:6d:93:58:2e:49:95:61:1b: 0c:26:87:ab:fc:68:c9:83:28:5c:21:cd:f2:fa:4f: 36:27:09:36:be:b3:3b:11:cf:c8:11:d4:7d:cc:a5: da:c3:2c:7d:78:ed:b8:c1:ca:95:4c:73:75:90:56: 34:2f:8f:e2:e6:2f:c5:a4:19:37:57:05:12:2e:be: 71:09:cf:77:1f:64:90:ce:73:e3:e8:f1:0f:69:5d: c6:e0:4d:d0:2e:05:aa:f5:c7:28:74:e3:2a:23:ce: d0:e9:bd:c0:cc:56:42:64:d8:e7:d5:0d:8e:c7:c0: bd:0e:b4:ea:ed:a9:92:6f:c4:b8:e6:d1:26:0e:df: 6c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8C:3D:12:2E:A7:B8:F9:82:C6:48:C3:74:A0:44:15:62:42:C6:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/6b65c60e-c200-3d1a-a0ad-703f5efe65fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d9:5c:03:66:9c:4f:99:f0:ff:b3:e3:b9:3e:57:15:d7:6a: ef:ee:e1:6c:0d:ea:4b:8a:3a:94:1f:13:94:d7:fb:ca:11:b1: c4:19:fa:9e:e1:f3:14:68:37:ef:f9:18:31:98:d0:9c:6d:58: 43:a4:b2:5d:fe:2a:d7:bd:36:1d:2b:ba:95:ce:f5:be:4b:6e: d8:76:ae:79:34:1a:3d:26:31:50:5f:9c:7b:4b:e8:c7:95:03: a6:80:cb:a6:91:be:72:e2:d5:03:cd:92:a7:a1:01:a6:01:3a: 03:ae:81:b4:0a:42:32:12:a1:08:5d:10:5e:55:c6:76:94:f9: 53:0a:4a:79:05:ad:f8:67:c9:c5:fe:68:5a:68:ad:c6:a0:a3: 0a:a1:57:1f:d9:70:d9:ea:b7:b8:22:cb:db:f9:55:61:7b:a8: 4c:54:3a:45:14:0b:6e:78:ec:8a:7b:df:59:d1:73:12:6f:78: b3:ad:a9:f5:ee:44:fe:c8:25:b5:c4:cb:42:f7:a6:db:42:c4: 6c:b0:99:52:17:09:f8:20:6c:4d:c8:c3:17:f3:25:88:72:ad: ab:27:6a:5e:70:ce:c3:7b:6f:85:11:8d:ad:f5:9f:0f:e8:d9: e7:36:f4:cc:b8:0b:59:11:94:a5:4f:d8:1c:b2:6d:70:ca:c6: 2d:c6:56:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPVIdVDe7ET8W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MmJhOGVmMWItNTg3Ny00MTRhLWE3YjUtNWU4NzkxM2FjZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaR9OZ/G+0/oMQUPGmXTvTLmELmaIxGakLEf 9EdNbMpg+aRwcHOXf9v2UHNP5hAz/A1R9rRm9qazgDeW0UCeNBQRT7WarJVUnSPS jw3sN26LXbLpvRFZV0kwQYRsO9yy65j2c6I/CL7+bpHB4O9uEuL78k9Nl1kvGq8y YeNabZNYLkmVYRsMJoer/GjJgyhcIc3y+k82Jwk2vrM7Ec/IEdR9zKXawyx9eO24 wcqVTHN1kFY0L4/i5i/FpBk3VwUSLr5xCc93H2SQznPj6PEPaV3G4E3QLgWq9cco dOMqI87Q6b3AzFZCZNjn1Q2Ox8C9DrTq7amSb8S45tEmDt9s8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2MPRIup7j5gsZIw3SgRBViQsabMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvNmI2NWM2MGUtYzIwMC0z ZDFhLWEwYWQtNzAzZjVlZmU2NWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3ZXANmnE+Z8P+z47k+VxXXau/u4WwN6kuKOpQfE5TX+8oRscQZ+p7h 8xRoN+/5GDGY0JxtWEOksl3+Kte9Nh0rupXO9b5Lbth2rnk0Gj0mMVBfnHtL6MeV A6aAy6aRvnLi1QPNkqehAaYBOgOugbQKQjISoQhdEF5VxnaU+VMKSnkFrfhnycX+ aFporcagowqhVx/ZcNnqt7giy9v5VWF7qExUOkUUC2547Ip731nRcxJveLOtqfXu RP7IJbXEy0L3pttCxGywmVIXCfggbE3IwxfzJYhyrasnal5wzsN7b4URja31nw/o 2ec29My4C1kRlKVP2ByybXDKxi3GVnE= -----END CERTIFICATE-----Generated at Wed Nov 5 00:33:29 2025 by rpki-client