$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/687029d7-b5e0-3fff-a306-88a32b338e0c.roa File: 687029d7-b5e0-3fff-a306-88a32b338e0c.roa (raw, json) Hash identifier: kKh9qE6iCvvT8tIgAnM/Q5hDg539eehdXtlhCi4bFG0= Subject key identifier: 2E:A6:BC:50:FC:65:D0:98:0F:68:D9:25:49:05:5B:57:D6:02:75:84 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584BB88D0D6879875753E8BBE400 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/687029d7-b5e0-3fff-a306-88a32b338e0c.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 36445 IP address blocks: 198.232.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:0d:68:79:87:57:53:e8:bb:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=22a8dcb4-1a46-4389-9314-349add542a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:71:4f:e0:57:93:57:9d:bb:f0:42:68:e4: f7:06:6f:e1:e7:fd:9a:d7:1e:39:1b:71:f9:37:0f: 0f:15:28:81:c0:04:de:c0:54:96:e5:d7:98:70:14: 50:05:35:07:70:60:b1:52:aa:06:58:e6:9d:bf:60: da:83:86:e6:77:f2:4d:3f:0b:e3:92:2c:6f:85:a1: 8d:35:f0:18:86:bd:a9:f7:3b:70:20:36:96:91:20: 0d:de:67:de:48:00:82:29:d0:6d:d2:37:42:9f:a7: bc:1a:d3:bb:33:64:b0:38:55:e4:35:93:1c:bb:0a: 40:8c:4e:6d:f5:48:8e:4c:53:6b:b6:3f:47:30:49: 52:e1:9b:dd:bc:7b:7a:04:3f:da:67:73:bf:5d:2e: 7f:2e:8c:cb:7b:81:77:83:97:db:b4:df:a9:ef:0f: 6f:74:43:46:38:ba:d6:77:fb:28:84:46:2c:9c:d0: 3c:1b:c1:2c:7a:ac:e3:85:09:8b:ba:a0:0c:9c:58: 69:39:3e:8d:13:7e:92:f6:0b:50:8d:7b:11:2c:9a: e7:d5:19:db:b3:87:f0:eb:2b:d4:00:aa:36:65:5c: 2b:8b:1c:6a:93:7d:e7:42:99:b2:d2:98:39:cf:71: 49:48:2d:b9:e3:24:5e:c9:14:37:7a:75:81:43:32: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A6:BC:50:FC:65:D0:98:0F:68:D9:25:49:05:5B:57:D6:02:75:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/687029d7-b5e0-3fff-a306-88a32b338e0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 198.232.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:71:c3:9e:35:06:3c:b3:7f:0d:2d:ff:b7:c6:6e:8f:ff:c8: ef:db:ce:ae:c1:2f:02:ba:da:0a:1a:94:ac:96:c0:6e:5a:ee: ee:bf:32:53:50:1d:d1:f5:de:5f:4a:ef:37:6f:c3:97:19:0f: 5e:d6:2d:77:22:65:6d:6b:b9:20:bc:dc:79:35:7d:98:b8:b5: 10:18:df:bd:25:ea:22:09:10:8f:5d:07:01:88:f4:70:75:b8: 17:3e:6e:dc:12:dd:d3:4d:34:eb:bf:54:67:ed:47:26:83:a6: 3a:e8:b4:88:d1:ff:4d:03:93:da:67:d0:3d:6c:4f:ff:e1:4b: 9a:17:ab:fa:5b:b0:49:80:84:f7:0b:0f:19:18:80:2b:a4:a2: 12:3c:e9:48:4d:23:f2:be:0d:05:53:8f:ac:cf:f4:6e:b4:18: b4:ca:5e:b5:1f:9f:0d:92:ae:95:4c:d7:66:eb:30:3e:52:04: e4:5d:eb:a3:68:99:e6:9b:1f:80:2b:68:6a:b3:45:8a:77:2c: 2f:c2:11:e7:f0:66:ba:d1:20:0f:45:a9:20:aa:d4:62:7e:fc: f7:c1:6e:a7:92:9c:a8:39:92:f9:a9:df:aa:97:5c:b1:a2:47: 8c:6d:35:d3:cf:90:cf:a3:02:52:f6:bd:de:59:8b:a0:35:1c: 98:04:8e:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jQ1oeYdXU+i75AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MjJhOGRjYjQtMWE0Ni00Mzg5LTkzMTQtMzQ5YWRkNTQyYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6pxT+BXk1edu/BCaOT3Bm/h5/2a1x45G3H5 Nw8PFSiBwATewFSW5deYcBRQBTUHcGCxUqoGWOadv2Dag4bmd/JNPwvjkixvhaGN NfAYhr2p9ztwIDaWkSAN3mfeSACCKdBt0jdCn6e8GtO7M2SwOFXkNZMcuwpAjE5t 9UiOTFNrtj9HMElS4ZvdvHt6BD/aZ3O/XS5/LozLe4F3g5fbtN+p7w9vdENGOLrW d/sohEYsnNA8G8EseqzjhQmLuqAMnFhpOT6NE36S9gtQjXsRLJrn1Rnbs4fw6yvU AKo2ZVwrixxqk33nQpmy0pg5z3FJSC254yReyRQ3enWBQzJKuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6mvFD8ZdCYD2jZJUkFW1fWAnWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvNjg3MDI5ZDctYjVlMC0z ZmZmLWEzMDYtODhhMzJiMzM4ZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxujWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNxw541Bjyzfw0t/7fGbo//yO/bzq7BLwK62goalKyWwG5a7u6/MlNQ HdH13l9K7zdvw5cZD17WLXciZW1ruSC83Hk1fZi4tRAY370l6iIJEI9dBwGI9HB1 uBc+btwS3dNNNOu/VGftRyaDpjrotIjR/00Dk9pn0D1sT//hS5oXq/pbsEmAhPcL DxkYgCukohI86UhNI/K+DQVTj6zP9G60GLTKXrUfnw2SrpVM12brMD5SBORd66No meabH4AraGqzRYp3LC/CEefwZrrRIA9FqSCq1GJ+/PfBbqeSnKg5kvmp36qXXLGi R4xtNdPPkM+jAlL2vd5Zi6A1HJgEjo0= -----END CERTIFICATE-----Generated at Wed Nov 5 14:54:46 2025 by rpki-client