$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa File: 829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa (raw, json) Hash identifier: 7zTAsgMwEydZ+03AdUyEfs5aZX6MA2e9dXoBC84drFY= Subject key identifier: FE:EE:AF:28:39:01:D5:77:B5:92:4F:CD:A7:E8:25:37:C4:9B:24:E9 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584BBA1046056783EB00EB4586C0 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 68.71.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:46:05:67:83:eb:00:eb:45:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=254dc4c0-9a01-4245-b329-ab7f11e3fe8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:55:11:5a:2e:00:dc:6d:a4:48:57:88:2b:56: 23:a7:c4:6c:10:cd:1c:fe:23:fc:68:a9:e9:e4:94: cf:94:d4:f0:e4:e0:3f:dd:e3:8f:f5:06:c8:38:6d: 72:ff:97:3a:e0:bb:88:64:46:ca:64:b8:93:ed:9e: fe:d5:d6:00:c2:e7:1c:1e:b2:55:cc:73:c1:1c:4a: 93:dc:4f:dd:00:e9:48:42:31:18:7a:c5:db:45:b7: b7:7f:29:0c:3c:b1:96:dc:12:74:04:43:f1:3a:fb: 55:e3:a9:a4:25:8a:f9:48:78:e8:33:37:0a:ef:9c: 7a:10:3b:c6:c2:53:2c:ef:5a:55:f4:3c:8f:d9:81: c1:1e:59:84:ed:d7:3b:60:f1:d3:80:38:80:35:fb: 8d:45:2e:b8:7a:85:36:f8:cf:be:0e:bb:9f:00:9a: a4:04:9f:9f:d0:1f:63:a6:08:0e:a1:36:8d:ca:2d: 62:58:8f:af:95:4f:64:1b:13:46:04:c7:a8:c0:85: 98:3b:4a:3a:10:6a:c8:10:37:90:05:d5:67:af:c9: a6:4c:a4:2c:21:55:7f:18:c7:86:fa:63:61:37:57: 9a:49:db:a9:f6:1c:21:2a:de:7d:73:1c:4a:54:be: 91:20:2e:44:62:cb:b5:f5:23:38:3a:f3:89:57:ce: 11:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EE:AF:28:39:01:D5:77:B5:92:4F:CD:A7:E8:25:37:C4:9B:24:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:3c:95:ce:4f:57:2a:a3:4c:e5:f0:40:7f:30:f1:2d:a2:b2: e8:d5:66:6c:39:54:a4:7d:11:0d:b9:c7:b8:08:0c:33:c3:c9: 01:61:0b:ec:db:e7:0d:41:cb:a9:72:93:d4:d6:49:ef:74:44: d1:9b:17:21:e8:17:12:a1:24:3a:48:fe:f5:d3:58:b1:c1:17: 86:c1:6e:62:83:bb:57:3a:d2:ca:8c:6c:6f:5c:fe:f3:49:73: 71:5a:b2:b5:a2:01:06:52:ff:95:2b:ae:3b:7f:21:b8:7d:89: b6:ff:30:2e:f4:62:4e:79:df:bb:2a:48:bc:01:f4:33:e4:ab: ea:cc:07:1d:a0:cc:90:20:16:e7:bb:82:1d:62:cb:04:0a:69: 95:a1:22:f9:63:2b:f0:7e:71:66:e4:75:18:45:23:32:75:e2: 90:5f:ff:7f:71:f3:cd:36:3a:a1:47:57:7d:50:8f:eb:42:f5: b0:a1:6b:ef:4b:ab:ee:3d:43:a0:3f:91:7a:40:a1:e5:87:e9: 2a:e4:2e:b3:5d:ee:f8:71:df:fe:11:c5:bc:07:bc:8c:f9:d1: 82:7b:1f:65:c4:e9:25:af:3b:b5:05:d0:f6:d0:de:e5:96:5e: d8:82:5d:7f:f1:a8:af:44:f2:22:92:1b:33:e7:aa:59:12:ce: 9a:d0:9b:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEYFZ4PrAOtFhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk MjU0ZGM0YzAtOWEwMS00MjQ1LWIzMjktYWI3ZjExZTNmZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVURWi4A3G2kSFeIK1Yjp8RsEM0c/iP8aKnp 5JTPlNTw5OA/3eOP9QbIOG1y/5c64LuIZEbKZLiT7Z7+1dYAwuccHrJVzHPBHEqT 3E/dAOlIQjEYesXbRbe3fykMPLGW3BJ0BEPxOvtV46mkJYr5SHjoMzcK75x6EDvG wlMs71pV9DyP2YHBHlmE7dc7YPHTgDiANfuNRS64eoU2+M++DrufAJqkBJ+f0B9j pggOoTaNyi1iWI+vlU9kGxNGBMeowIWYO0o6EGrIEDeQBdVnr8mmTKQsIVV/GMeG +mNhN1eaSdup9hwhKt59cxxKVL6RIC5EYsu19SM4OvOJV84RlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7uryg5AdV3tZJPzafoJTfEmyTpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvODI5ZWEwN2QtOWRiZS0z NmZkLWI0YWEtYzdiMzgwMzRmMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB48lc5PVyqjTOXwQH8w8S2isujVZmw5VKR9EQ25x7gIDDPDyQFhC+zb 5w1By6lyk9TWSe90RNGbFyHoFxKhJDpI/vXTWLHBF4bBbmKDu1c60sqMbG9c/vNJ c3FasrWiAQZS/5Urrjt/Ibh9ibb/MC70Yk5537sqSLwB9DPkq+rMBx2gzJAgFue7 gh1iywQKaZWhIvljK/B+cWbkdRhFIzJ14pBf/39x8802OqFHV31Qj+tC9bCha+9L q+49Q6A/kXpAoeWH6SrkLrNd7vhx3/4RxbwHvIz50YJ7H2XE6SWvO7UF0PbQ3uWW XtiCXX/xqK9E8iKSGzPnqlkSzprQm8c= -----END CERTIFICATE-----Generated at Wed Nov 5 11:08:13 2025 by rpki-client