$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/cef865ee-b2f3-3257-b04e-8d7011350c02.roa File: cef865ee-b2f3-3257-b04e-8d7011350c02.roa (raw, json) Hash identifier: RhO/WGoTuB97xKh2x8Wuxj4eHCCHW8aEYJMAJZyrJc4= Subject key identifier: BC:01:D2:DB:46:6A:D1:91:D5:D5:4D:CA:3D:52:A3:D7:E3:5C:5A:47 Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c Certificate serial: 010D0C9F4328584BB88D10FAF6E9F08C20CEC7E0 Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/cef865ee-b2f3-3257-b04e-8d7011350c02.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 23059 IP address blocks: 68.142.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:10:fa:f6:e9:f0:8c:20:ce:c7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=ee4450b3-280b-427b-ab9e-2e202fca480d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:f7:e4:a0:ba:8b:9f:a8:cd:83:39:57:d6: 56:53:dd:c6:45:3c:d9:94:77:86:6f:41:c1:5f:6a: d2:71:5d:07:4a:31:4c:53:8c:21:19:49:88:d3:87: 90:b8:94:2e:dc:26:96:55:fe:ed:90:60:e2:2d:39: 38:6c:e3:8c:a4:bc:fa:c8:79:d9:c0:89:f5:6e:1a: 9f:36:71:ee:55:45:44:d8:b4:20:32:b3:8d:92:f1: e8:f3:2d:61:38:82:70:2a:11:ed:0f:c8:15:78:b5: c1:6a:ae:75:22:b7:33:05:c7:6b:b4:68:c4:c4:af: 11:8b:aa:5e:bd:bf:1e:b3:e0:d3:d9:40:28:45:9f: f0:b3:10:b2:c1:0e:f4:75:61:83:8b:f5:83:e7:29: 6f:04:c3:88:42:84:c6:52:60:72:d1:63:aa:cd:96: c5:7d:c0:01:a8:5a:46:9f:d1:65:99:6e:85:03:ee: 45:bc:ba:b0:ec:89:71:0b:68:85:2b:0a:99:19:98: 6c:99:5a:d0:be:e2:d1:55:43:23:af:a8:9e:27:f2: 64:7e:bf:6a:4a:14:ef:ae:6b:ac:76:99:b3:9b:59: 7e:03:62:b8:7f:5f:7c:e6:93:36:79:13:19:ae:8d: 65:15:3a:21:33:4c:26:52:e6:06:70:bb:50:36:2e: 48:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:01:D2:DB:46:6A:D1:91:D5:D5:4D:CA:3D:52:A3:D7:E3:5C:5A:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/cef865ee-b2f3-3257-b04e-8d7011350c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl X509v3 Authority Key Identifier: keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer sbgp-ipAddrBlock: critical IPv4: 68.142.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:40:7d:76:ec:f0:82:02:fc:11:41:ea:44:a9:0f:d1:20:a1: b5:30:92:13:93:85:6f:85:15:4c:2f:cf:d8:38:12:ed:ad:7b: cb:31:bf:d1:8e:7b:8f:f7:36:27:1f:ff:63:49:f2:97:5a:db: fb:3c:31:b9:8c:74:db:fb:7a:0e:82:e5:b8:3d:5e:ef:f9:6a: 4c:c3:f4:5f:f7:99:8d:15:8c:1a:5e:12:cb:a0:23:7c:28:fd: f9:9a:b6:68:8c:d4:6a:20:8c:f7:48:ee:67:b2:d8:00:a4:43: b9:be:07:22:e8:6b:52:64:ce:31:a5:02:b6:fb:67:8c:70:51: 54:6d:88:17:3a:e0:57:82:94:16:2a:d7:98:de:9c:07:a6:38: f7:ac:17:d9:1e:e6:65:02:1a:31:cd:53:3e:59:5a:0b:de:ef: 4f:24:1b:93:7b:bc:07:51:db:c9:ab:80:83:b2:e2:7e:3c:fd: b7:26:e5:73:a0:60:16:9e:da:fd:1a:27:4e:30:6d:fc:de:de: 88:b9:b1:24:bd:18:b1:7b:00:5e:f3:c6:62:92:ed:6d:58:fc: e2:5b:a6:38:9e:0d:38:66:aa:6b:54:68:c4:2d:01:c2:44:e2: 5b:93:34:cd:ec:b7:55:aa:96:d1:0e:05:94:3c:df:7a:40:85: bc:57:fd:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRD69unwjCDOx+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw MDdjMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZWU0NDUwYjMtMjgwYi00MjdiLWFiOWUtMmUyMDJmY2E0ODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGP35KC6i5+ozYM5V9ZWU93GRTzZlHeGb0HB X2rScV0HSjFMU4whGUmI04eQuJQu3CaWVf7tkGDiLTk4bOOMpLz6yHnZwIn1bhqf NnHuVUVE2LQgMrONkvHo8y1hOIJwKhHtD8gVeLXBaq51IrczBcdrtGjExK8Ri6pe vb8es+DT2UAoRZ/wsxCywQ70dWGDi/WD5ylvBMOIQoTGUmBy0WOqzZbFfcABqFpG n9FlmW6FA+5FvLqw7IlxC2iFKwqZGZhsmVrQvuLRVUMjr6ieJ/Jkfr9qShTvrmus dpmzm1l+A2K4f1985pM2eRMZro1lFTohM0wmUuYGcLtQNi5IUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwB0ttGatGR1dVNyj1So9fjXFpHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2 OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvY2VmODY1ZWUtYjJmMy0z MjU3LWIwNGUtOGQ3MDExMzUwYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0 ZjFmZDAwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARI5lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5AfXbs8IIC/BFB6kSpD9EgobUwkhOThW+FFUwvz9g4Eu2te8sxv9GO e4/3Nicf/2NJ8pda2/s8MbmMdNv7eg6C5bg9Xu/5akzD9F/3mY0VjBpeEsugI3wo /fmatmiM1GogjPdI7mey2ACkQ7m+ByLoa1JkzjGlArb7Z4xwUVRtiBc64FeClBYq 15jenAemOPesF9ke5mUCGjHNUz5ZWgve708kG5N7vAdR28mrgIOy4n48/bcm5XOg YBae2v0aJ04wbfze3oi5sSS9GLF7AF7zxmKS7W1Y/OJbpjieDThmqmtUaMQtAcJE 4luTNM3st1WqltEOBZQ833pAhbxX/bE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:36:16 2025 by rpki-client