$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa File: bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa (raw, json) Hash identifier: UmF9pRaLeHhphgpuvZtfbhZxqjhapmC80a4Hj5NDoJY= Subject key identifier: C1:64:D1:EF:63:53:72:98:52:2D:E7:C4:F6:A5:D7:15:B5:14:66:B5 Certificate issuer: /CN=aac421ae-305b-4a29-aacc-176ba3fca213 Certificate serial: 010D0C9F4328584BA39D0EDD9CC04F2A20015180 Authority key identifier: 5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 168.100.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:0e:dd:9c:c0:4f:2a:20:01:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac421ae-305b-4a29-aacc-176ba3fca213 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=69c4ca7e-7905-414f-b923-ed24c1d15fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:0a:da:c7:d8:be:26:a2:44:6b:e8:33:b1: b7:7d:3d:e3:9a:b3:67:21:9a:4a:24:f9:bd:38:66: ea:ec:74:c7:ec:50:94:55:de:9c:e1:eb:79:69:73: 2c:97:12:21:06:4a:f3:b2:e6:a4:eb:32:5f:22:25: df:69:73:1b:11:3d:52:73:7b:d2:f1:c4:12:7f:98: 3a:d3:85:37:77:8f:c6:11:d9:4b:d2:7e:3a:79:1d: 35:a9:69:72:2e:cc:e7:fd:2d:ff:16:de:f3:41:30: 01:67:1e:ff:55:dc:9b:25:14:c4:05:ea:a8:02:a5: 3f:6f:42:28:c6:10:79:67:04:d5:ad:2e:5f:7f:4c: f1:ea:00:3a:fd:54:7f:e5:cb:43:46:0a:13:1d:a4: c3:c4:90:12:ce:11:08:04:47:75:3c:90:84:b3:6d: db:84:16:3f:cc:c5:ae:2e:00:32:6e:f3:89:34:d1: 32:a9:28:97:4c:e6:c3:0d:76:7f:cb:66:9d:cb:f6: 69:96:bf:a4:9a:a2:0a:2f:a0:4f:04:fa:83:43:20: e2:1f:96:d0:af:9e:ea:ba:f5:18:3a:5c:0f:27:4a: 3d:c0:41:0a:83:c1:9a:27:03:42:fe:9a:97:d7:dd: 6d:98:44:6c:8c:dc:9e:0f:8e:7e:ff:52:4c:99:9d: d6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:64:D1:EF:63:53:72:98:52:2D:E7:C4:F6:A5:D7:15:B5:14:66:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl X509v3 Authority Key Identifier: keyid:5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer sbgp-ipAddrBlock: critical IPv4: 168.100.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4c:6a:52:08:e7:2f:c1:a0:e6:af:da:b3:51:14:dd:16:bc: ed:b1:05:90:e7:b9:ba:61:0f:37:ff:32:38:80:45:bf:83:f5: d8:16:d4:ea:ef:02:85:89:31:50:49:be:a3:65:04:4b:e1:9a: 09:2c:c0:cd:6a:5d:96:42:60:f9:f0:f9:52:00:22:a2:b0:97: 1d:03:bc:23:ae:a5:6e:a8:9f:3f:b1:84:93:47:0f:a7:bb:ed: 6a:2a:52:64:7a:82:42:20:2b:3e:fd:97:69:61:84:a8:b3:c1: af:9d:bf:42:fb:44:4e:9c:d2:f8:f9:0d:2a:41:13:b1:e4:ea: 9e:21:68:b3:3a:a8:04:c4:69:a6:d8:ce:a7:be:83:60:e6:bb: df:be:79:bd:1d:72:f7:2a:d5:a4:25:9d:8c:eb:51:b2:66:50: 10:5a:01:04:d3:ff:1b:aa:e6:9d:b0:29:57:b9:eb:de:64:69: ea:94:40:02:03:da:84:e2:7c:b2:db:ee:8c:5f:7b:32:bd:67: d0:25:31:76:dc:f0:c6:66:51:40:eb:b4:fd:8b:9a:ae:03:f9: e4:6e:b1:2a:c6:db:56:6c:fb:03:0c:3a:02:a4:9f:d0:25:9d: 58:ff:ce:9d:af:ac:35:79:0f:49:5d:d2:5f:1a:8e:67:d9:87: 32:b1:42:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQ7dnMBPKiABUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNDIxYWUtMzA1Yi00YTI5LWFhY2MtMTc2YmEzZmNh MjEzMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NjljNGNhN2UtNzkwNS00MTRmLWI5MjMtZWQyNGMxZDE1ZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVMK2sfYviaiRGvoM7G3fT3jmrNnIZpKJPm9 OGbq7HTH7FCUVd6c4et5aXMslxIhBkrzsuak6zJfIiXfaXMbET1Sc3vS8cQSf5g6 04U3d4/GEdlL0n46eR01qWlyLszn/S3/Ft7zQTABZx7/VdybJRTEBeqoAqU/b0Io xhB5ZwTVrS5ff0zx6gA6/VR/5ctDRgoTHaTDxJASzhEIBEd1PJCEs23bhBY/zMWu LgAybvOJNNEyqSiXTObDDXZ/y2ady/Zplr+kmqIKL6BPBPqDQyDiH5bQr57quvUY OlwPJ0o9wEEKg8GaJwNC/pqX191tmERsjNyeD45+/1JMmZ3WHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFk0e9jU3KYUi3nxPal1xW1FGa1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0 MjFhZS0zMDViLTRhMjktYWFjYy0xNzZiYTNmY2EyMTMvYmVjOGEyYzYtYzg3NC0z YjdjLTgwZmEtMDIzMzEyYTJjM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFjNDIxYWUtMzA1Yi00YTI5LWFh Y2MtMTc2YmEzZmNhMjEzL2FhYzQyMWFlLTMwNWItNGEyOS1hYWNjLTE3NmJhM2Zj YTIxMy5jcmwwHwYDVR0jBBgwFoAUXPhSV2pX13aToH/2eTD0JVpyHogwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0MjFhZS0zMDViLTRhMjktYWFjYy0xNzZi YTNmY2EyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFMalII5y/BoOav2rNRFN0WvO2xBZDnubphDzf/MjiARb+D9dgW1Orv AoWJMVBJvqNlBEvhmgkswM1qXZZCYPnw+VIAIqKwlx0DvCOupW6onz+xhJNHD6e7 7WoqUmR6gkIgKz79l2lhhKizwa+dv0L7RE6c0vj5DSpBE7Hk6p4haLM6qATEaabY zqe+g2Dmu9++eb0dcvcq1aQlnYzrUbJmUBBaAQTT/xuq5p2wKVe5695kaeqUQAID 2oTifLLb7oxfezK9Z9AlMXbc8MZmUUDrtP2Lmq4D+eRusSrG21Zs+wMMOgKkn9Al nVj/zp2vrDV5D0ld0l8ajmfZhzKxQlA= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:20 2025 by rpki-client