$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989/d91f3da0-2452-3539-93fa-a235b907b699.roa File: d91f3da0-2452-3539-93fa-a235b907b699.roa (raw, json) Hash identifier: WEx9OdwuEomwejIBqYv+M7AD3N1d82xgAtxIacEdI0U= Subject key identifier: 4F:9A:4E:A2:9D:C1:5B:6D:DE:20:54:D4:E2:3B:6E:B7:05:30:92:F7 Certificate issuer: /CN=a76266ac-94ff-42fd-8d98-3392ccde7989 Certificate serial: 010D0C9F4328584BB88D22D19F50624717D09F00 Authority key identifier: A7:93:92:CE:0F:C3:4C:83:6D:FE:92:65:B1:57:4F:8F:20:0B:16:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989/d91f3da0-2452-3539-93fa-a235b907b699.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 26241 IP address blocks: 69.4.64.0/20 maxlen: 24 104.218.108.0/22 maxlen: 24 209.97.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989/a76266ac-94ff-42fd-8d98-3392ccde7989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989/a76266ac-94ff-42fd-8d98-3392ccde7989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:22:d1:9f:50:62:47:17:d0:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76266ac-94ff-42fd-8d98-3392ccde7989 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=00bb8588-5736-483f-9c7b-bc089be14982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a4:1f:6f:43:07:49:c5:4b:63:26:68:6d:3e: 18:9b:38:00:d8:22:9b:a0:58:ae:aa:d2:c6:fa:2c: 6b:7f:d4:17:eb:df:d2:b8:60:69:a3:07:b1:17:7b: b0:6d:73:8e:b2:fa:93:6d:67:b6:e4:0d:c2:ae:9a: b0:15:e0:cc:0d:a9:11:b3:99:76:55:69:76:0e:6e: 2b:3e:d3:a2:af:00:f7:9a:e7:d5:cd:aa:68:b9:63: 4c:27:0a:dd:ef:0c:bf:c1:8c:14:ce:ff:ce:96:c0: ca:be:bb:51:6b:2b:66:e8:36:b0:d7:d4:f6:ca:09: 40:9c:c1:96:36:d1:b4:eb:0f:d7:68:f7:98:ce:58: 90:59:b9:e2:df:7f:12:35:5d:83:47:74:b7:20:12: 2a:fb:fd:d9:78:a9:4e:32:34:33:06:0b:36:90:9c: de:88:10:2a:df:29:70:04:76:e1:be:91:88:d7:f6: 1e:8d:04:38:c2:b4:27:54:14:70:12:2e:e4:7c:c0: 4d:e4:31:d5:bf:7c:79:06:3e:9e:f3:4d:20:4a:5c: a2:39:1e:78:f5:a1:17:36:65:18:e9:5d:e4:21:6c: f5:55:dd:15:c6:c5:e7:52:05:29:bc:ea:f1:b9:98: 90:c0:85:9e:e9:b7:b9:d7:3e:24:b5:73:3b:ab:85: e8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9A:4E:A2:9D:C1:5B:6D:DE:20:54:D4:E2:3B:6E:B7:05:30:92:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989/d91f3da0-2452-3539-93fa-a235b907b699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989/a76266ac-94ff-42fd-8d98-3392ccde7989.crl X509v3 Authority Key Identifier: keyid:A7:93:92:CE:0F:C3:4C:83:6D:FE:92:65:B1:57:4F:8F:20:0B:16:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989.cer sbgp-ipAddrBlock: critical IPv4: 69.4.64.0/20 104.218.108.0/22 209.97.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d5:5e:86:ad:5d:96:c2:25:f3:25:20:34:17:68:3e:7a:51: a2:96:a2:c2:5f:26:80:01:89:c5:f0:79:66:d2:2d:b6:04:13: de:5b:6c:ac:03:08:9c:41:18:26:ec:aa:ba:03:53:9f:45:74: 30:3d:e4:85:3f:17:21:f3:de:fc:3e:a3:ef:68:53:ae:1c:ee: 8e:dd:d1:cc:e2:a1:ec:9d:dd:5e:dd:40:13:24:52:93:01:34: d8:ee:aa:0f:03:81:fc:21:fc:a3:21:6b:06:4b:28:a0:f3:b2: 19:76:63:40:5e:4f:81:80:7c:b7:cd:09:e2:11:10:55:8a:a0: a4:42:ed:a4:c8:f4:f1:c6:ae:87:11:6e:f8:18:b1:1f:8a:1e: 1b:6a:86:4b:2d:10:5b:2b:3c:33:47:c1:38:09:62:a6:18:4f: 0d:33:08:54:cc:d1:11:c2:db:5f:37:9a:43:c1:66:04:0e:a9: fd:5f:49:93:e5:04:6d:7f:34:25:e2:55:c5:16:95:32:1e:60: 1a:bf:75:8e:a5:67:60:4e:d0:34:ae:08:5a:3a:b8:e1:0b:68: f9:89:54:1e:3d:4a:ed:b2:c6:4d:c5:a9:1a:f4:e3:3e:6c:89: 34:bb:b1:49:38:d6:23:b1:d7:f8:38:8f:75:7a:d2:58:2f:db: c4:61:63:4d -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEu4jSLRn1BiRxfQnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc2MjY2YWMtOTRmZi00MmZkLThkOTgtMzM5MmNjZGU3 OTg5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDBiYjg1ODgtNTczNi00ODNmLTljN2ItYmMwODliZTE0OTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaQfb0MHScVLYyZobT4YmzgA2CKboFiuqtLG +ixrf9QX69/SuGBpowexF3uwbXOOsvqTbWe25A3CrpqwFeDMDakRs5l2VWl2Dm4r PtOirwD3mufVzapouWNMJwrd7wy/wYwUzv/OlsDKvrtRaytm6Daw19T2yglAnMGW NtG06w/XaPeYzliQWbni338SNV2DR3S3IBIq+/3ZeKlOMjQzBgs2kJzeiBAq3ylw BHbhvpGI1/YejQQ4wrQnVBRwEi7kfMBN5DHVv3x5Bj6e800gSlyiOR549aEXNmUY 6V3kIWz1Vd0VxsXnUgUpvOrxuZiQwIWe6be51z4ktXM7q4XoXQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFE+aTqKdwVtt3iBU1OI7brcFMJL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNzYy NjZhYy05NGZmLTQyZmQtOGQ5OC0zMzkyY2NkZTc5ODkvZDkxZjNkYTAtMjQ1Mi0z NTM5LTkzZmEtYTIzNWI5MDdiNjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTc2MjY2YWMtOTRmZi00MmZkLThk OTgtMzM5MmNjZGU3OTg5L2E3NjI2NmFjLTk0ZmYtNDJmZC04ZDk4LTMzOTJjY2Rl Nzk4OS5jcmwwHwYDVR0jBBgwFoAUp5OSzg/DTINt/pJlsVdPjyALFmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNzYyNjZhYy05NGZmLTQyZmQtOGQ5OC0zMzky Y2NkZTc5ODkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQERQRAAwQC aNpsAwQE0WHwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAnVXoatXZbCJfMlIDQXaD56UaKWosJfJoABicXw eWbSLbYEE95bbKwDCJxBGCbsqroDU59FdDA95IU/FyHz3vw+o+9oU64c7o7d0czi oeyd3V7dQBMkUpMBNNjuqg8Dgfwh/KMhawZLKKDzshl2Y0BeT4GAfLfNCeIREFWK oKRC7aTI9PHGrocRbvgYsR+KHhtqhkstEFsrPDNHwTgJYqYYTw0zCFTM0RHC2183 mkPBZgQOqf1fSZPlBG1/NCXiVcUWlTIeYBq/dY6lZ2BO0DSuCFo6uOELaPmJVB49 Su2yxk3FqRr04z5siTS7sUk41iOx1/g4j3V60lgv28RhY00= -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:13 2025 by rpki-client