$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/864d2064-093d-302b-a8f7-e6d5c44327c5.roa File: 864d2064-093d-302b-a8f7-e6d5c44327c5.roa (raw, json) Hash identifier: /pSMAduA50PptLXAoht4HwDfYvnyiaJrUpXaVlrthEQ= Subject key identifier: 79:87:B3:9A:F9:39:D6:ED:6C:43:CC:AD:56:8E:74:09:0E:5E:3D:D4 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584BA0D242D2118E0F0F9051E36C Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/864d2064-093d-302b-a8f7-e6d5c44327c5.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 20001 IP address blocks: 68.182.208.0/22 maxlen: 22 68.182.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:42:d2:11:8e:0f:0f:90:51:e3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=2b535088-c4ac-443e-b18e-5da6172bd113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1f:cf:9e:5e:ca:59:4b:4f:20:76:e2:92:3d: 9b:a9:6c:d8:fd:a0:c7:b4:be:88:92:3f:f9:24:d8: 71:d0:37:85:74:6f:d7:6d:75:f0:0b:bc:a1:58:93: 04:74:eb:72:ca:ae:f1:12:d7:21:61:0b:c3:92:f6: 0b:37:1d:31:a9:6e:15:48:a6:cc:81:4f:df:00:5f: 2d:34:c3:92:e0:27:48:0f:ab:f7:b9:5e:f9:b6:18: 80:71:38:2c:73:f2:4f:b9:04:e6:95:0a:e9:c9:63: f1:ad:10:51:b7:f7:b8:ea:87:9a:81:00:7d:e5:7a: 25:76:6d:7e:b1:42:5f:9a:1b:47:b4:23:30:7b:a1: 1c:f2:11:8a:e0:ec:e7:c5:cd:b4:3a:88:13:31:76: 5d:63:8a:6f:a1:5c:12:62:bc:fb:94:d6:40:4a:b2: 06:86:9d:27:ce:b8:83:23:8a:4a:6a:0c:e1:eb:fc: ea:19:a9:6e:25:1d:61:a3:42:a3:96:93:61:d4:ac: be:55:38:1f:a2:99:b3:06:f1:23:f7:ca:c1:37:89: bb:91:67:ac:75:a6:0b:5b:4d:ba:6e:d2:3f:c3:d4: 45:2b:8e:85:37:c4:90:39:c4:57:9a:5c:dd:17:6d: 2b:5f:95:53:ed:95:61:ba:b7:28:d0:bd:00:52:6f: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:87:B3:9A:F9:39:D6:ED:6C:43:CC:AD:56:8E:74:09:0E:5E:3D:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/864d2064-093d-302b-a8f7-e6d5c44327c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.208.0/22 68.182.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:de:36:3a:59:89:be:1c:27:76:c6:d4:d1:29:7a:5b:f8:41: 34:db:ed:0c:f0:36:e1:8b:27:82:1d:36:51:24:83:27:5d:86: 06:56:78:a3:43:81:1e:c7:d0:85:fa:3a:e3:44:a0:0b:94:36: 9b:68:ea:7f:17:39:30:d4:80:b4:6f:2d:6c:01:71:07:32:ad: 91:55:a8:23:16:da:62:53:ea:9f:a9:8a:15:6e:4f:d6:13:fe: c8:7f:e6:88:88:8e:af:67:15:24:16:09:b4:bf:2e:f6:af:18: 2c:13:5e:fb:4d:29:d0:46:1c:44:5d:ee:cb:e1:1d:0b:40:d1: c7:94:6d:e4:cf:85:86:11:35:1b:12:6b:2a:05:4d:bb:6b:89: d4:a4:56:c7:68:cb:94:4e:a6:e6:43:0b:f3:2d:2c:6d:3f:ec: d1:c7:32:01:e9:2c:03:a4:14:17:18:92:0a:ab:ae:4a:32:ec: 0c:fc:d9:08:ef:92:a8:3c:38:3b:4e:69:53:b7:43:9c:c9:1c: b0:c8:e4:5a:2e:04:98:80:70:ea:32:9d:60:c2:92:3d:4f:e3: 64:8a:fe:31:18:57:1a:22:e3:e8:df:dd:a5:4e:6b:67:0a:e7: 47:af:18:f0:01:ba:5e:68:f4:af:f6:28:24:42:7c:e8:79:27: e4:84:ec:71 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEug0kLSEY4PD5BR42wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MmI1MzUwODgtYzRhYy00NDNlLWIxOGUtNWRhNjE3MmJkMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx/Pnl7KWUtPIHbikj2bqWzY/aDHtL6Ikj/5 JNhx0DeFdG/XbXXwC7yhWJMEdOtyyq7xEtchYQvDkvYLNx0xqW4VSKbMgU/fAF8t NMOS4CdID6v3uV75thiAcTgsc/JPuQTmlQrpyWPxrRBRt/e46oeagQB95Xoldm1+ sUJfmhtHtCMwe6Ec8hGK4Oznxc20OogTMXZdY4pvoVwSYrz7lNZASrIGhp0nzriD I4pKagzh6/zqGaluJR1ho0KjlpNh1Ky+VTgfopmzBvEj98rBN4m7kWesdaYLW026 btI/w9RFK46FN8SQOcRXmlzdF20rX5VT7ZVhurco0L0AUm+WcwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHmHs5r5OdbtbEPMrVaOdAkOXj3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODY0ZDIwNjQtMDkzZC0z MDJiLWE4ZjctZTZkNWM0NDMyN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCRLbQAwQC RLbYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKbeNjpZib4cJ3bG1NEpelv4QTTb7QzwNuGLJ4IdNlEkgydd hgZWeKNDgR7H0IX6OuNEoAuUNpto6n8XOTDUgLRvLWwBcQcyrZFVqCMW2mJT6p+p ihVuT9YT/sh/5oiIjq9nFSQWCbS/LvavGCwTXvtNKdBGHERd7svhHQtA0ceUbeTP hYYRNRsSayoFTbtridSkVsdoy5ROpuZDC/MtLG0/7NHHMgHpLAOkFBcYkgqrrkoy 7Az82Qjvkqg8ODtOaVO3Q5zJHLDI5FouBJiAcOoynWDCkj1P42SK/jEYVxoi4+jf 3aVOa2cK50evGPABul5o9K/2KCRCfOh5J+SE7HE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:33:54 2025 by rpki-client