$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/886d27bf-cb97-3238-8156-8de94bc20e4a.roa File: 886d27bf-cb97-3238-8156-8de94bc20e4a.roa (raw, json) Hash identifier: 7FwnsyNFDO/PuAFjApbQ05KCrQDoSDbR7dd8EtgJJcE= Subject key identifier: 24:EE:35:CD:83:69:8E:E8:1D:1F:43:94:68:AA:B1:2A:76:BC:48:A7 Certificate issuer: /CN=aac421ae-305b-4a29-aacc-176ba3fca213 Certificate serial: 010D0C9F4328584BA39D0EA992C93799D30B1B00 Authority key identifier: 5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/886d27bf-cb97-3238-8156-8de94bc20e4a.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 168.100.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:0e:a9:92:c9:37:99:d3:0b:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac421ae-305b-4a29-aacc-176ba3fca213 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=ce791887-2e1e-44bc-9101-d17467e96011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:40:f8:6e:91:fa:4e:19:66:7c:cf:d3:f2:5b: d0:f0:75:c5:36:0c:3a:3f:2b:fd:43:1c:13:b9:34: 29:6f:8f:81:1d:44:8e:c3:40:66:06:ed:ca:0d:d9: 63:0e:a9:27:ac:90:2e:a0:41:c8:a0:09:64:0b:a0: 54:3e:cc:77:8a:8b:c6:99:17:cd:ca:86:8a:e4:b4: 04:b0:9c:ce:f0:c6:d0:f6:9e:38:85:8c:91:49:78: 00:66:93:94:ab:91:89:be:bf:1a:2a:4c:c7:43:7e: 21:4a:c3:d2:ea:16:a9:1f:85:b6:e4:34:41:27:7c: 19:26:53:89:69:f0:79:18:70:02:6c:cd:ac:5a:ad: ea:52:fb:61:1f:e3:9b:8c:e5:79:82:0d:22:b0:33: 5f:b7:c2:87:ea:b7:1f:03:f0:e7:94:f6:09:da:39: 70:1e:5a:a6:0c:e1:37:0f:a9:d9:ae:fb:31:bf:77: f7:73:4f:62:3f:4f:34:f5:13:b1:f9:f6:e0:dd:ba: 1c:00:b1:50:e2:77:0a:51:ac:09:a7:3e:87:39:91: ff:d9:f2:31:ad:0d:fa:01:a2:ac:0f:96:e1:bd:1f: e6:d6:d2:c4:98:4b:b9:c2:cf:f1:a2:da:45:90:00: 46:18:78:b6:d2:92:e1:4e:f8:31:51:61:db:a4:43: 7f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EE:35:CD:83:69:8E:E8:1D:1F:43:94:68:AA:B1:2A:76:BC:48:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/886d27bf-cb97-3238-8156-8de94bc20e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl X509v3 Authority Key Identifier: keyid:5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer sbgp-ipAddrBlock: critical IPv4: 168.100.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:16:c5:55:06:34:0b:8a:e8:fa:78:cf:e2:4e:0d:8d:5d:8d: 45:a5:40:b3:31:86:e7:ec:9e:04:73:3a:bb:b9:8f:c6:ba:17: 92:e2:2b:d0:80:ad:d2:ba:46:6a:3b:a1:9b:9d:6f:a6:5d:ba: ed:7f:c2:ff:4c:5b:1e:c7:7d:39:91:d0:b0:fb:38:a2:10:d9: a3:d4:d8:3d:ed:a6:01:d8:00:e5:20:e3:bc:83:ea:a2:75:6c: de:02:38:51:2a:12:81:82:a4:c7:cf:32:6d:69:fe:36:63:1c: c2:3d:2f:fc:52:44:65:b5:d6:12:ce:68:2e:98:5e:76:d4:d7: 18:16:ba:2d:0f:ef:7d:d7:bd:ac:d1:bb:88:b2:40:e9:7b:96: a6:4d:c4:6f:8c:81:18:93:72:37:b1:15:e0:87:64:3a:61:75: ca:36:49:b7:16:e1:00:d4:da:cc:fb:1d:a2:df:a9:03:aa:4c: 9f:a4:41:b4:78:0a:70:1d:35:6a:ad:1c:2f:de:78:d5:d3:cb: 7a:4e:41:81:29:01:f7:a6:a1:89:51:4e:7c:1e:e3:4c:bd:1f: 85:c2:25:fe:c3:04:82:11:d1:c1:d7:6f:64:26:80:1d:68:90: 55:f6:db:3a:fa:90:41:e6:d0:d7:99:af:13:27:fd:81:61:3e: 50:c1:8f:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQ6pksk3mdMLGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNDIxYWUtMzA1Yi00YTI5LWFhY2MtMTc2YmEzZmNh MjEzMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Y2U3OTE4ODctMmUxZS00NGJjLTkxMDEtZDE3NDY3ZTk2MDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0D4bpH6ThlmfM/T8lvQ8HXFNgw6Pyv9QxwT uTQpb4+BHUSOw0BmBu3KDdljDqknrJAuoEHIoAlkC6BUPsx3iovGmRfNyoaK5LQE sJzO8MbQ9p44hYyRSXgAZpOUq5GJvr8aKkzHQ34hSsPS6hapH4W25DRBJ3wZJlOJ afB5GHACbM2sWq3qUvthH+ObjOV5gg0isDNft8KH6rcfA/DnlPYJ2jlwHlqmDOE3 D6nZrvsxv3f3c09iP0809ROx+fbg3bocALFQ4ncKUawJpz6HOZH/2fIxrQ36AaKs D5bhvR/m1tLEmEu5ws/xotpFkABGGHi20pLhTvgxUWHbpEN/zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTuNc2DaY7oHR9DlGiqsSp2vEinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0 MjFhZS0zMDViLTRhMjktYWFjYy0xNzZiYTNmY2EyMTMvODg2ZDI3YmYtY2I5Ny0z MjM4LTgxNTYtOGRlOTRiYzIwZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFjNDIxYWUtMzA1Yi00YTI5LWFh Y2MtMTc2YmEzZmNhMjEzL2FhYzQyMWFlLTMwNWItNGEyOS1hYWNjLTE3NmJhM2Zj YTIxMy5jcmwwHwYDVR0jBBgwFoAUXPhSV2pX13aToH/2eTD0JVpyHogwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0MjFhZS0zMDViLTRhMjktYWFjYy0xNzZi YTNmY2EyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwWxVUGNAuK6Pp4z+JODY1djUWlQLMxhufsngRzOru5j8a6F5LiK9CA rdK6Rmo7oZudb6Zduu1/wv9MWx7HfTmR0LD7OKIQ2aPU2D3tpgHYAOUg47yD6qJ1 bN4COFEqEoGCpMfPMm1p/jZjHMI9L/xSRGW11hLOaC6YXnbU1xgWui0P733XvazR u4iyQOl7lqZNxG+MgRiTcjexFeCHZDphdco2SbcW4QDU2sz7HaLfqQOqTJ+kQbR4 CnAdNWqtHC/eeNXTy3pOQYEpAfemoYlRTnwe40y9H4XCJf7DBIIR0cHXb2QmgB1o kFX22zr6kEHm0NeZrxMn/YFhPlDBj6s= -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:34 2025 by rpki-client