$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/79809976-9df9-3d91-b7e8-6a3afaeac18d.roa File: 79809976-9df9-3d91-b7e8-6a3afaeac18d.roa (raw, json) Hash identifier: IS9r58JNYKO1v9a3CXpg4dlVfkdLrdufjehjwa2ceMI= Subject key identifier: 20:AF:6A:6F:CA:B5:96:80:5D:75:09:CF:E1:D1:19:10:C1:51:95:97 Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F4328584BBA10330FF50A30F36CDBCC20 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/79809976-9df9-3d91-b7e8-6a3afaeac18d.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 13649 IP address blocks: 168.245.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:33:0f:f5:0a:30:f3:6c:db:cc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=ae3000dc-3a2a-4cd3-8cfe-da3225c4d682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fd:83:2a:d9:7c:d4:74:8d:61:00:a4:3b:23: 6c:69:5b:cb:0d:d0:f8:23:3b:f4:be:8f:da:0a:bf: 45:d0:9c:56:d2:7d:bc:76:5f:97:46:d9:51:b4:a8: 67:c1:fe:b8:0f:46:c5:3c:89:03:a3:1d:74:16:57: 32:6c:d3:5e:52:8e:fb:62:62:2c:76:70:61:19:9e: 1f:ce:56:1b:f0:1f:a6:b4:13:b4:ba:b2:81:4e:e6: fd:4d:ec:aa:ef:a5:fa:72:9f:26:4d:ed:c0:43:7c: c3:3d:32:53:18:ba:3a:3a:74:5d:55:50:ba:db:00: 5a:79:43:3c:48:18:97:2d:88:7a:6c:98:87:17:35: 3f:37:ac:c1:12:b7:34:a8:cb:7b:ce:25:9f:c1:24: 04:11:d0:43:fc:c2:27:67:bf:f8:4c:49:61:cc:44: 5c:99:66:e4:0f:2d:89:2c:67:dd:39:2c:d5:be:01: 83:9c:b7:13:29:de:87:97:c4:83:78:a8:8a:79:9b: d7:b1:1f:04:19:a5:f1:05:8d:42:a0:b3:4f:ae:af: 9d:e1:03:ba:3d:ca:b2:89:c8:78:f9:04:26:fb:47: cd:04:df:d9:f0:b3:3f:68:62:98:e8:e1:e2:e6:f6: e6:3a:d1:65:dc:74:26:de:92:18:9e:7a:66:ca:f2: 3d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AF:6A:6F:CA:B5:96:80:5D:75:09:CF:E1:D1:19:10:C1:51:95:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/79809976-9df9-3d91-b7e8-6a3afaeac18d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 168.245.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5c:cd:e3:c4:50:75:06:54:d4:9d:a9:b2:55:c9:80:a8:05: 17:c8:b0:d1:10:4c:aa:22:5f:67:fe:ef:a7:a9:ab:c9:dc:54: ec:6a:d1:a7:8c:d6:f9:b8:9e:20:77:be:ae:c0:50:1d:16:46: 8b:b6:8b:96:31:1c:19:76:a4:91:39:b4:62:0e:40:bf:8f:53: 0e:69:40:a3:cd:9f:f6:87:d3:83:e7:0e:28:39:0a:52:7c:91: a4:28:fa:52:43:c5:14:18:0a:83:8a:de:57:24:05:88:36:01: de:ca:9b:dd:08:6b:2d:e9:dd:3b:39:92:f2:18:c6:dd:8d:3f: 57:7e:1c:3d:6a:f9:54:bc:5b:36:db:96:22:af:62:2a:65:b1: 5e:57:37:dd:3b:c3:fd:4c:f8:8c:5f:d2:ee:85:91:18:cc:82: 03:d4:64:0b:35:3e:af:ef:28:ed:a6:d0:3c:59:03:10:7c:bc: 96:6b:c3:e4:69:74:71:cb:6c:8d:b4:eb:96:a7:8c:7c:35:56: e0:ef:b4:cf:5f:a9:af:ee:e1:86:a4:78:e4:71:c7:c7:18:f5: d8:c5:84:71:8d:e5:23:ac:e7:9d:ec:ee:fb:b9:4f:ed:c3:49: 0d:dd:dc:f2:ce:3c:33:e6:ba:f9:c1:35:d1:62:cd:71:a8:c1: ba:72:04:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EDMP9Qow82zbzCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk YWUzMDAwZGMtM2EyYS00Y2QzLThjZmUtZGEzMjI1YzRkNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf2DKtl81HSNYQCkOyNsaVvLDdD4Izv0vo/a Cr9F0JxW0n28dl+XRtlRtKhnwf64D0bFPIkDox10FlcybNNeUo77YmIsdnBhGZ4f zlYb8B+mtBO0urKBTub9Teyq76X6cp8mTe3AQ3zDPTJTGLo6OnRdVVC62wBaeUM8 SBiXLYh6bJiHFzU/N6zBErc0qMt7ziWfwSQEEdBD/MInZ7/4TElhzERcmWbkDy2J LGfdOSzVvgGDnLcTKd6Hl8SDeKiKeZvXsR8EGaXxBY1CoLNPrq+d4QO6Pcqyich4 +QQm+0fNBN/Z8LM/aGKY6OHi5vbmOtFl3HQm3pIYnnpmyvI9uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCvam/KtZaAXXUJz+HRGRDBUZWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvNzk4MDk5NzYtOWRmOS0z ZDkxLWI3ZTgtNmEzYWZhZWFjMThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqPXKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVczePEUHUGVNSdqbJVyYCoBRfIsNEQTKoiX2f+76epq8ncVOxq0aeM 1vm4niB3vq7AUB0WRou2i5YxHBl2pJE5tGIOQL+PUw5pQKPNn/aH04PnDig5ClJ8 kaQo+lJDxRQYCoOK3lckBYg2Ad7Km90Iay3p3Ts5kvIYxt2NP1d+HD1q+VS8Wzbb liKvYiplsV5XN907w/1M+Ixf0u6FkRjMggPUZAs1Pq/vKO2m0DxZAxB8vJZrw+Rp dHHLbI2065anjHw1VuDvtM9fqa/u4YakeORxx8cY9djFhHGN5SOs553s7vu5T+3D SQ3d3PLOPDPmuvnBNdFizXGowbpyBAw= -----END CERTIFICATE-----Generated at Wed Nov 5 09:21:44 2025 by rpki-client