$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa File: 84b980dc-1b89-371a-8343-16c5dac99a40.roa (raw, json) Hash identifier: gxTuQzPWcyKO5jxN3VBk53puUCNvnIOyP2E19S3BD7I= Subject key identifier: 2A:EE:F6:55:E0:DC:CD:F2:ED:32:11:27:A4:25:8D:77:8F:61:66:FE Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F4328584BA0D252C86DDB973029127F30 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 58580 IP address blocks: 168.245.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:52:c8:6d:db:97:30:29:12:7f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=f9d28496-a925-430d-98af-6f61a4dbad8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ba:90:30:14:74:36:01:b5:2c:e5:25:ff:25: 75:36:c9:a1:b4:9e:df:60:e5:9a:42:2d:58:19:9b: c4:72:b0:62:7c:5f:d6:a5:38:30:2d:6c:88:28:f6: e4:22:08:64:c9:a7:68:db:0a:45:73:f9:d5:37:20: 65:ae:93:c4:0e:77:48:0f:1b:20:cf:5f:ec:82:80: 17:21:59:59:78:42:36:ce:cf:32:33:f3:90:69:d7: 5d:71:46:b1:f5:7b:3c:6f:c9:de:c4:cd:ab:b5:f9: 27:ab:50:4f:00:f1:a5:37:97:c7:00:f1:46:e1:f5: 0a:7c:5d:a8:2b:be:7f:a8:24:4a:2e:a9:9f:cf:4b: 09:2a:00:7f:3d:3f:ff:57:ca:1c:e8:f3:70:4b:0b: 07:e2:82:0f:85:9d:95:87:ad:95:27:02:03:0c:b2: d9:76:ed:20:35:c7:04:e1:93:3e:d0:8f:d2:37:4a: bc:8c:4a:9f:c3:2d:fe:1b:0d:76:04:a4:23:9b:2d: 51:56:66:8d:a5:df:6d:a2:95:a2:28:68:6f:87:ac: 76:6d:ca:65:72:21:ff:a4:87:bd:10:0a:5a:e3:61: 91:ab:37:45:07:5c:e1:2a:ac:35:d4:d1:a3:1e:f5: 49:43:c9:40:33:f7:c0:6c:cf:d3:60:86:0c:8d:24: 79:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EE:F6:55:E0:DC:CD:F2:ED:32:11:27:A4:25:8D:77:8F:61:66:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 168.245.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:98:8b:f6:f4:3d:fc:cf:ce:8a:3f:b3:b4:ec:01:22:17:1f: 07:ef:62:cd:81:9d:e7:65:b9:d9:4b:38:f5:d8:29:7e:14:4f: c6:05:ad:cc:7f:8f:9f:63:e8:81:0c:91:00:c4:7a:0a:b8:90: 9e:f6:22:3e:c0:2a:2c:30:2d:67:b4:99:c5:1e:62:50:a9:fb: 59:63:60:05:6e:30:e6:a1:0c:77:23:85:a6:ab:d7:ac:60:11: a2:f3:34:a2:4d:f4:27:fe:fc:15:81:dc:0a:23:2f:31:e2:20: b8:8d:88:f5:56:4b:04:04:53:1a:40:d8:39:e3:e1:1c:8e:95: 93:0a:1f:35:e0:a9:32:5c:5d:51:b3:ee:45:a3:00:eb:c7:9f: e1:0a:b2:8a:4e:35:aa:e0:50:0e:cc:8f:77:27:a1:cc:3e:70: 52:08:74:4c:82:92:ca:bb:9b:ef:75:54:95:67:0d:35:6b:b0: b2:d2:e5:c2:a6:9c:9c:49:08:bd:87:fd:1f:1e:00:f8:5b:d8: e0:06:36:50:6a:ea:09:1a:14:a0:fc:b2:1f:76:8b:9f:4d:b7: 82:a8:20:60:75:7e:63:18:90:5d:38:04:99:56:9f:52:ea:8c: 50:26:31:9e:23:bd:4a:11:ea:66:12:33:66:6a:8e:dc:cd:d5: bd:1e:64:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lLIbduXMCkSfzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZjlkMjg0OTYtYTkyNS00MzBkLTk4YWYtNmY2MWE0ZGJhZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLqQMBR0NgG1LOUl/yV1NsmhtJ7fYOWaQi1Y GZvEcrBifF/WpTgwLWyIKPbkIghkyado2wpFc/nVNyBlrpPEDndIDxsgz1/sgoAX IVlZeEI2zs8yM/OQadddcUax9Xs8b8nexM2rtfknq1BPAPGlN5fHAPFG4fUKfF2o K75/qCRKLqmfz0sJKgB/PT//V8oc6PNwSwsH4oIPhZ2Vh62VJwIDDLLZdu0gNccE 4ZM+0I/SN0q8jEqfwy3+Gw12BKQjmy1RVmaNpd9topWiKGhvh6x2bcplciH/pIe9 EApa42GRqzdFB1zhKqw11NGjHvVJQ8lAM/fAbM/TYIYMjSR5qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCru9lXg3M3y7TIRJ6QljXePYWb+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvODRiOTgwZGMtMWI4OS0z NzFhLTgzNDMtMTZjNWRhYzk5YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqPXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKYi/b0PfzPzoo/s7TsASIXHwfvYs2BnedludlLOPXYKX4UT8YFrcx/ j59j6IEMkQDEegq4kJ72Ij7AKiwwLWe0mcUeYlCp+1ljYAVuMOahDHcjhaar16xg EaLzNKJN9Cf+/BWB3AojLzHiILiNiPVWSwQEUxpA2Dnj4RyOlZMKHzXgqTJcXVGz 7kWjAOvHn+EKsopONargUA7Mj3cnocw+cFIIdEyCksq7m+91VJVnDTVrsLLS5cKm nJxJCL2H/R8eAPhb2OAGNlBq6gkaFKD8sh92i59Nt4KoIGB1fmMYkF04BJlWn1Lq jFAmMZ4jvUoR6mYSM2ZqjtzN1b0eZIY= -----END CERTIFICATE-----Generated at Wed Nov 5 02:02:44 2025 by rpki-client