$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa File: 8f41887f-e02f-3b1f-9011-a36a71b35c82.roa (raw, json) Hash identifier: PHHAIuyttA8vD47nTdKMym93SBb5DNs/yuGX6v1QIZA= Subject key identifier: 8F:B5:C7:E4:F0:58:02:93:B9:2C:85:D5:62:02:02:58:97:27:F1:6E Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F4328584BA0D24995013811C15032C500 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 58580 IP address blocks: 199.101.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:49:95:01:38:11:c1:50:32:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=981ba356-184a-422a-ab06-82a43972fd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cb:96:59:ee:d9:20:b2:34:3e:77:33:b6:6b: 9b:81:b2:f6:8f:47:d5:12:5a:4c:c3:df:dd:16:b7: 87:1a:c8:df:9d:6a:b5:7f:fe:9b:5f:b5:27:27:aa: 78:0c:fb:31:ea:49:a4:a8:c7:f3:00:e2:7c:d1:fe: 43:29:4a:92:04:ba:2e:26:89:67:bc:9b:a4:11:8c: 5f:de:19:8f:9c:75:ac:db:38:3d:2e:a6:96:cb:6a: 04:14:4a:c0:cd:a0:e4:19:03:05:d1:96:8f:59:62: d8:e4:33:1b:b4:12:cc:35:94:37:23:57:9c:4a:10: 07:fc:af:7f:d6:bd:93:d3:1e:1e:20:16:c1:f3:f9: cb:07:33:94:c9:3f:ee:e9:6a:51:ce:33:3b:b8:59: 5c:7f:0c:52:2d:9d:2b:08:1d:35:8f:91:13:1e:57: 63:ed:40:0b:ac:59:b7:06:43:ac:fe:02:1e:1b:c8: df:c9:6c:e5:89:83:d0:62:9b:fb:f3:11:47:5e:8e: 86:e6:30:ee:d8:3f:87:a3:b6:48:2e:13:29:8a:0e: 33:34:b2:d5:3a:6d:b3:14:09:b4:da:1d:49:c1:85: 4d:0a:b2:13:c4:81:3f:5d:29:90:0a:77:c8:d1:7b: e9:2c:36:d5:4b:63:ac:86:40:3b:25:8e:ac:dd:d5: 32:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B5:C7:E4:F0:58:02:93:B9:2C:85:D5:62:02:02:58:97:27:F1:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 199.101.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:73:cb:fd:14:ec:65:0c:45:06:fc:03:4d:93:25:d5:55:7f: 1e:f4:cd:fa:05:f5:47:e7:00:79:4f:66:99:27:25:d8:38:6e: e4:5b:c2:02:f0:35:a2:2a:66:ac:f3:96:af:82:e5:96:6d:2c: 73:fe:57:2d:81:d2:15:d5:9f:8c:50:c6:ad:17:15:15:3f:53: 81:bc:b2:b4:86:1e:fc:6b:09:69:af:a7:40:5f:99:d2:e0:52: 82:33:38:61:6a:37:8f:4b:a7:c0:91:e0:a9:59:eb:c2:63:6e: 05:2e:4a:0f:eb:57:b8:c3:8f:82:cd:d9:a4:f0:ac:51:c1:47: dc:28:25:8a:62:38:b5:b3:18:3f:a4:72:5f:e0:10:49:1b:5d: cc:ad:ed:76:08:74:84:33:4d:06:40:94:0f:dc:c2:d5:77:05: 78:b3:13:1c:0f:2e:a8:53:e2:82:73:3b:c3:da:c3:9f:74:1b: 98:88:34:f2:74:6e:6d:52:86:89:6f:b4:e2:64:8f:f4:d1:0e: f6:1a:39:67:d1:6d:7d:ec:3c:31:6a:c0:28:06:9e:11:10:3d: 59:7b:61:16:45:a4:d8:c3:9e:f8:ba:6f:ca:19:63:28:33:a6: cd:6f:d9:1f:65:7f:29:51:5b:eb:0d:04:53:06:73:8e:d8:b0: c5:1c:b3:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kmVATgRwVAyxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk OTgxYmEzNTYtMTg0YS00MjJhLWFiMDYtODJhNDM5NzJmZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMuWWe7ZILI0PncztmubgbL2j0fVElpMw9/d FreHGsjfnWq1f/6bX7UnJ6p4DPsx6kmkqMfzAOJ80f5DKUqSBLouJolnvJukEYxf 3hmPnHWs2zg9LqaWy2oEFErAzaDkGQMF0ZaPWWLY5DMbtBLMNZQ3I1ecShAH/K9/ 1r2T0x4eIBbB8/nLBzOUyT/u6WpRzjM7uFlcfwxSLZ0rCB01j5ETHldj7UALrFm3 BkOs/gIeG8jfyWzliYPQYpv78xFHXo6G5jDu2D+Ho7ZILhMpig4zNLLVOm2zFAm0 2h1JwYVNCrITxIE/XSmQCnfI0XvpLDbVS2OshkA7JY6s3dUyFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+1x+TwWAKTuSyF1WICAliXJ/FuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvOGY0MTg4N2YtZTAyZi0z YjFmLTkwMTEtYTM2YTcxYjM1YzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2VsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5zy/0U7GUMRQb8A02TJdVVfx70zfoF9UfnAHlPZpknJdg4buRbwgLw NaIqZqzzlq+C5ZZtLHP+Vy2B0hXVn4xQxq0XFRU/U4G8srSGHvxrCWmvp0BfmdLg UoIzOGFqN49Lp8CR4KlZ68JjbgUuSg/rV7jDj4LN2aTwrFHBR9woJYpiOLWzGD+k cl/gEEkbXcyt7XYIdIQzTQZAlA/cwtV3BXizExwPLqhT4oJzO8Paw590G5iINPJ0 bm1SholvtOJkj/TRDvYaOWfRbX3sPDFqwCgGnhEQPVl7YRZFpNjDnvi6b8oZYygz ps1v2R9lfylRW+sNBFMGc47YsMUcs18= -----END CERTIFICATE-----Generated at Wed Nov 5 01:35:09 2025 by rpki-client