$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa File: 8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa (raw, json) Hash identifier: ihXiaDyuKQB6jAPe7AA4uVerocJfjA8sIBwdHqSgLUI= Subject key identifier: 3F:F2:B8:B8:73:54:2F:4E:E6:24:70:D1:D7:E9:18:65:9B:03:15:E7 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584BBA1045D983EE353A750EEF80 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 21663 IP address blocks: 68.71.224.0/24 maxlen: 24 68.71.225.0/24 maxlen: 24 68.71.226.0/24 maxlen: 24 68.71.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:45:d9:83:ee:35:3a:75:0e:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=20ddf94b-6a7e-4691-981b-952f52076740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:bc:47:3a:47:a7:c3:07:2a:d1:dd:fd:a7: 66:05:f5:88:16:fb:82:38:72:63:f2:41:8b:f2:de: 81:1a:98:b0:a3:1f:dd:57:33:c1:eb:15:b6:64:b6: cc:66:be:f4:e0:be:a4:0f:fd:2f:7e:42:e5:02:f0: 92:00:1f:1d:7e:fc:4d:48:3c:87:c0:62:51:f8:b8: 04:30:6a:e3:48:71:15:58:7e:9d:02:64:f7:52:aa: 10:03:e0:2f:51:40:b8:de:ba:15:b2:af:dd:a8:79: 44:73:10:59:04:6c:19:9b:6d:7e:2b:2c:a7:43:30: 11:0b:ae:5d:f4:f9:ba:09:39:0d:dd:88:54:e6:59: 6f:e0:9d:9a:57:ea:c5:66:52:fa:67:b4:17:3a:43: 21:97:d1:8f:38:a5:8f:bf:e8:8b:9e:39:95:6f:17: 4f:db:bd:1c:a3:25:8f:ab:1e:f2:f6:e4:4f:c5:5c: 82:f4:8b:86:1c:f5:59:6a:ab:0c:01:75:d4:5d:0b: 6c:b7:fa:0c:98:14:2d:7a:d8:12:4c:a3:f7:cc:8d: 7a:ba:98:b4:d3:b7:29:48:b4:5c:3b:24:68:04:08: 91:81:2a:a0:c6:16:12:fb:8c:31:53:5f:54:c1:e9: cf:7d:0f:cb:61:4a:ae:e2:99:93:86:17:8a:61:7c: 2c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F2:B8:B8:73:54:2F:4E:E6:24:70:D1:D7:E9:18:65:9B:03:15:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:60:3b:c0:0c:7c:d0:f4:f7:45:ee:9c:45:8b:8c:2a:40:81: 41:51:6d:0f:a4:dd:f5:b0:d1:e2:af:c3:53:77:89:93:7d:d1: 29:8a:a0:6d:b2:fa:57:a8:84:78:e9:aa:7d:50:ad:bf:36:35: ab:1d:b3:25:90:b7:46:39:2a:74:f3:9e:d5:e7:01:9a:7a:19: 1f:7a:53:82:c4:71:70:f8:f0:90:1d:8b:4f:a7:1a:8e:57:cc: d8:44:94:ca:8e:9a:05:75:dc:6d:50:8b:2c:4e:06:d0:16:62: 3f:34:f3:28:fb:2f:d6:98:16:45:93:ed:cb:6e:c4:c0:7f:03: 18:df:12:61:2d:31:4f:5e:62:b0:52:06:2f:e7:57:a6:8b:47: ff:bc:8d:59:29:4e:14:e9:1a:4f:37:50:f7:34:91:d3:d4:0b: b0:32:cc:36:37:3d:d4:dc:18:74:03:82:c6:0b:8c:43:f2:ae: f1:1a:d5:8e:09:60:c3:31:05:d4:c1:b1:b8:af:53:7c:d9:bd: 04:f0:16:df:4f:2a:28:c4:ed:13:05:c7:c7:64:53:fc:5f:d8: 38:d1:16:5e:1d:8f:0c:b3:23:cf:13:62:78:be:52:bf:d1:5b: 80:8b:f3:71:5a:4d:db:f5:bd:bb:ca:81:bc:a4:99:bb:aa:ec: 6e:f7:49:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEXZg+41OnUO74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk MjBkZGY5NGItNmE3ZS00NjkxLTk4MWItOTUyZjUyMDc2NzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvO8RzpHp8MHKtHd/admBfWIFvuCOHJj8kGL 8t6BGpiwox/dVzPB6xW2ZLbMZr704L6kD/0vfkLlAvCSAB8dfvxNSDyHwGJR+LgE MGrjSHEVWH6dAmT3UqoQA+AvUUC43roVsq/dqHlEcxBZBGwZm21+KyynQzARC65d 9Pm6CTkN3YhU5llv4J2aV+rFZlL6Z7QXOkMhl9GPOKWPv+iLnjmVbxdP270coyWP qx7y9uRPxVyC9IuGHPVZaqsMAXXUXQtst/oMmBQtetgSTKP3zI16upi007cpSLRc OyRoBAiRgSqgxhYS+4wxU19UwenPfQ/LYUqu4pmThheKYXwssQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/yuLhzVC9O5iRw0dfpGGWbAxXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvOGMwM2E2N2YtYjBhNy0z YzhhLTljYWItZDI3MjAyZWEwZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9gO8AMfND090XunEWLjCpAgUFRbQ+k3fWw0eKvw1N3iZN90SmKoG2y +leohHjpqn1Qrb82NasdsyWQt0Y5KnTzntXnAZp6GR96U4LEcXD48JAdi0+nGo5X zNhElMqOmgV13G1QiyxOBtAWYj808yj7L9aYFkWT7ctuxMB/AxjfEmEtMU9eYrBS Bi/nV6aLR/+8jVkpThTpGk83UPc0kdPUC7AyzDY3PdTcGHQDgsYLjEPyrvEa1Y4J YMMxBdTBsbivU3zZvQTwFt9PKijE7RMFx8dkU/xf2DjRFl4djwyzI88TYni+Ur/R W4CL83FaTdv1vbvKgbykmbuq7G73SSQ= -----END CERTIFICATE-----Generated at Wed Nov 5 15:09:28 2025 by rpki-client