$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/9208bdf5-d639-308d-9352-7b93ba2bc9db.roa File: 9208bdf5-d639-308d-9352-7b93ba2bc9db.roa (raw, json) Hash identifier: Uhm39timuFi6y3gxI6TS+k+KGf6V/6F/APv2iFIvPcs= Subject key identifier: 7F:39:C7:00:41:C0:4B:41:D9:C9:0F:BB:80:66:2D:69:09:50:8F:0B Certificate issuer: /CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81 Certificate serial: 010D0C9F4328584B609C8DBFF5F40B25E3712480 Authority key identifier: BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/9208bdf5-d639-308d-9352-7b93ba2bc9db.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 3580 IP address blocks: 68.234.48.0/20 maxlen: 32 216.220.80.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:8d:bf:f5:f4:0b:25:e3:71:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=c8d979ba-4c00-4761-82fb-7821818030d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:05:0c:93:ef:f3:85:55:4c:16:b1:20:53:f2: f6:fa:38:b1:ac:cc:2d:1c:ec:ea:ff:1e:c9:3f:88: 76:37:7a:13:91:44:3e:85:04:33:78:3b:ad:a9:62: 3e:d8:df:8c:6e:a8:1a:54:04:b9:68:90:2e:16:f0: 96:b1:cf:f1:78:11:de:7e:99:ed:ca:45:05:d6:76: ca:09:a7:4b:bc:cc:4d:57:e9:13:bd:8d:ad:dc:a0: 19:0b:17:52:f8:3d:bc:42:10:18:90:e1:0b:6b:0a: 9b:45:61:83:77:cf:51:5f:96:40:31:b1:20:93:ee: f7:b6:be:9a:e3:bd:da:1f:ba:1c:fb:8f:b7:2e:75: 86:30:7d:35:c1:82:85:e7:ba:9a:ee:b7:3d:d7:f6: f5:b2:0f:9a:f3:ba:cf:82:8b:a1:3e:de:17:2c:20: d6:7c:dd:b4:c0:6c:64:a9:97:d4:6d:8a:cf:ee:17: cb:29:40:72:a0:4c:9c:0e:5c:7d:d7:1c:0b:cb:64: 33:03:09:29:eb:8e:66:80:b2:6c:1c:28:a8:82:dc: 52:10:5d:07:e2:db:9c:d6:03:39:81:e9:48:3c:91: 81:87:25:fe:42:e3:4b:50:80:fc:7e:85:3a:8a:50: bd:12:8a:c9:d7:f6:53:31:9e:20:e0:f2:10:82:11: 9a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:39:C7:00:41:C0:4B:41:D9:C9:0F:BB:80:66:2D:69:09:50:8F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/9208bdf5-d639-308d-9352-7b93ba2bc9db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl X509v3 Authority Key Identifier: keyid:BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer sbgp-ipAddrBlock: critical IPv4: 68.234.48.0/20 216.220.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:08:00:4a:80:43:98:40:2f:ba:1e:7a:52:a4:7f:a6:8c:cc: c2:fe:20:e7:e3:8c:9d:87:54:0a:b8:ee:c0:82:cb:cf:87:21: c0:a9:a3:e8:9d:2d:26:68:df:c2:0e:f2:19:f0:04:5b:58:9c: 8f:a5:9d:c4:3e:0b:e0:8b:b1:6a:0a:f9:33:1b:c3:e1:dc:a1: 5c:b5:92:6a:0c:3f:52:84:cf:ad:c7:b5:d6:81:68:03:b0:2d: f0:f6:70:78:3d:9d:2a:54:69:95:4b:80:42:2e:13:72:bb:24: 3b:bf:92:32:28:bf:4b:08:78:5a:e9:b0:4f:be:4f:ec:71:53: 79:57:64:77:cc:07:14:31:fa:71:86:31:9c:79:fe:80:50:fa: d9:7e:f4:3d:30:db:2e:ef:73:a2:23:ae:f1:85:17:f5:9e:b3: 77:19:6c:c5:83:b2:99:89:d5:24:67:23:54:87:58:5f:44:81: ab:f8:a4:51:c9:ff:94:1b:c5:a5:16:49:0c:7a:5a:59:c4:1a: ba:94:bf:cf:63:9a:32:ff:b1:70:3f:0c:f3:98:7a:48:ca:14: c5:9d:30:c5:06:03:f5:10:c5:19:fc:de:e5:a6:2e:40:25:11: 3a:d0:e7:51:0e:53:27:45:ac:66:72:d1:5d:49:d2:46:3b:44: 6b:fd:58:d1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtgnI2/9fQLJeNxJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNjI3NTgtYjNkNi00ZDNkLWEzZTUtM2NlNjFiYWY5 YzgxMB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk YzhkOTc5YmEtNGMwMC00NzYxLTgyZmItNzgyMTgxODAzMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQUMk+/zhVVMFrEgU/L2+jixrMwtHOzq/x7J P4h2N3oTkUQ+hQQzeDutqWI+2N+MbqgaVAS5aJAuFvCWsc/xeBHefpntykUF1nbK CadLvMxNV+kTvY2t3KAZCxdS+D28QhAYkOELawqbRWGDd89RX5ZAMbEgk+73tr6a 473aH7oc+4+3LnWGMH01wYKF57qa7rc91/b1sg+a87rPgouhPt4XLCDWfN20wGxk qZfUbYrP7hfLKUByoEycDlx91xwLy2QzAwkp645mgLJsHCiogtxSEF0H4tuc1gM5 gelIPJGBhyX+QuNLUID8foU6ilC9EorJ1/ZTMZ4g4PIQghGavwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFH85xwBBwEtB2ckPu4BmLWkJUI8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmE2 Mjc1OC1iM2Q2LTRkM2QtYTNlNS0zY2U2MWJhZjljODEvOTIwOGJkZjUtZDYzOS0z MDhkLTkzNTItN2I5M2JhMmJjOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZhNjI3NTgtYjNkNi00ZDNkLWEz ZTUtM2NlNjFiYWY5YzgxL2FmYTYyNzU4LWIzZDYtNGQzZC1hM2U1LTNjZTYxYmFm OWM4MS5jcmwwHwYDVR0jBBgwFoAUu0kEYIzjyKOONgsMxSsza5gXIs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmE2Mjc1OC1iM2Q2LTRkM2QtYTNlNS0zY2U2 MWJhZjljODEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEROowAwQE 2NxQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGYIAEqAQ5hAL7oeelKkf6aMzML+IOfjjJ2HVAq47sCCy8+H IcCpo+idLSZo38IO8hnwBFtYnI+lncQ+C+CLsWoK+TMbw+HcoVy1kmoMP1KEz63H tdaBaAOwLfD2cHg9nSpUaZVLgEIuE3K7JDu/kjIov0sIeFrpsE++T+xxU3lXZHfM BxQx+nGGMZx5/oBQ+tl+9D0w2y7vc6IjrvGFF/Wes3cZbMWDspmJ1SRnI1SHWF9E gav4pFHJ/5QbxaUWSQx6WlnEGrqUv89jmjL/sXA/DPOYekjKFMWdMMUGA/UQxRn8 3uWmLkAlETrQ51EOUydFrGZy0V1J0kY7RGv9WNE= -----END CERTIFICATE-----Generated at Wed Nov 5 08:26:05 2025 by rpki-client