$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa File: 4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa (raw, json) Hash identifier: Eq1JAAKS9WtZVFyNU645oEiFQtQ3uf9rABsrXGvGxWA= Subject key identifier: EC:CC:A5:E2:44:D2:D4:4D:79:BE:4E:17:E9:12:33:F3:6F:AF:76:67 Certificate issuer: /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c Certificate serial: 010D0C9F4328584BA39D0C9A18FE8281D4EBCF00 Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 11269 IP address blocks: 69.17.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:0c:9a:18:fe:82:81:d4:eb:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=79c85173-6570-471f-9ec5-04e792952b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:58:94:9e:5a:fb:5e:e6:09:81:09:3d:cc: 44:59:a5:7e:d4:55:03:c8:37:d0:06:32:47:be:63: f3:92:fd:d6:30:19:3f:c9:3d:b9:c6:9d:a0:e0:d1: 49:3d:4f:67:53:95:da:4b:52:f2:5a:93:fd:04:44: 72:68:10:59:2e:db:49:df:16:6c:62:b9:a2:1b:c7: 28:e6:db:30:d9:8e:be:ff:6f:0a:ed:0e:9d:91:b8: 5f:3c:fd:57:7e:ac:fd:ae:cf:44:e1:dc:ba:53:bf: ea:80:d5:cc:8d:0f:0f:ef:03:5e:d6:fe:d9:e6:5b: 6e:85:e8:f4:e8:db:4d:e6:75:11:f9:bd:07:8d:55: c2:18:63:60:4b:db:d0:61:cd:15:fd:0a:ae:71:c8: 09:e5:35:59:e0:4c:ba:0d:84:75:ad:c5:4d:03:af: a9:65:f9:56:44:6c:c7:a9:5c:e1:d4:d7:48:e3:46: 7d:30:c6:ad:c1:65:29:64:2d:29:6e:e5:d2:a5:6f: 04:5a:39:7b:71:ac:86:9f:6e:60:80:83:60:f6:5a: 65:fa:3d:12:ed:a8:59:a6:db:c0:11:8c:33:8c:d3: 10:60:56:f2:60:b2:be:9b:97:b4:c7:cd:3c:14:42: ab:0b:f5:9b:75:b4:28:0d:b0:4c:7b:36:da:04:fc: 99:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CC:A5:E2:44:D2:D4:4D:79:BE:4E:17:E9:12:33:F3:6F:AF:76:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl X509v3 Authority Key Identifier: keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer sbgp-ipAddrBlock: critical IPv4: 69.17.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:37:f7:92:1b:e3:8b:c4:2c:9e:c8:27:4a:53:f3:2d:02:fb: bc:dd:07:ab:4f:44:0b:4f:8b:3b:19:88:c3:3c:28:5c:a0:45: 4e:b5:b0:da:ef:e4:02:88:62:8a:53:81:4d:3e:67:e4:9e:0e: 7d:d0:1e:56:5a:53:35:9e:7c:3c:4d:55:3d:07:2a:b7:9a:bb: c5:46:a5:0d:c0:28:c7:5d:61:e7:d0:98:7e:33:b5:4f:87:b9: a9:40:61:21:35:e4:69:68:0d:05:e1:fd:90:24:4b:b2:8e:3c: 1d:ec:1d:5e:59:b6:18:a9:2f:94:02:49:23:44:74:04:22:69: e6:9e:d6:0f:95:79:34:15:36:eb:69:62:dd:25:37:6b:78:98: ad:56:70:b9:be:8f:33:74:8c:14:7c:14:b6:e2:3a:c4:32:23: 5e:7b:34:1e:60:05:30:30:75:87:1f:49:fb:b7:a0:48:e1:2e: 86:51:99:cd:ab:35:d8:1d:58:20:eb:74:b7:cd:d8:cd:25:20: b2:cd:1f:44:39:6f:ba:07:7e:52:8e:d1:48:1d:bb:52:e1:23: 89:67:8a:01:92:e7:cb:88:4d:29:4a:bb:31:34:1f:a0:74:4e: fc:cf:86:7d:03:4f:02:f4:b4:2a:2c:98:c6:63:1f:7b:86:e4: 70:f2:6e:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQyaGP6CgdTrzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2MjRjYmItYmExOS00N2E2LWI1YWMtZDA3NDcxNDk3 MTRjMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NzljODUxNzMtNjU3MC00NzFmLTllYzUtMDRlNzkyOTUyYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgBYlJ5a+17mCYEJPcxEWaV+1FUDyDfQBjJH vmPzkv3WMBk/yT25xp2g4NFJPU9nU5XaS1LyWpP9BERyaBBZLttJ3xZsYrmiG8co 5tsw2Y6+/28K7Q6dkbhfPP1Xfqz9rs9E4dy6U7/qgNXMjQ8P7wNe1v7Z5ltuhej0 6NtN5nUR+b0HjVXCGGNgS9vQYc0V/QquccgJ5TVZ4Ey6DYR1rcVNA6+pZflWRGzH qVzh1NdI40Z9MMatwWUpZC0pbuXSpW8EWjl7cayGn25ggINg9lpl+j0S7ahZptvA EYwzjNMQYFbyYLK+m5e0x808FEKrC/WbdbQoDbBMezbaBPyZNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzMpeJE0tRNeb5OF+kSM/Nvr3ZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODYy NGNiYi1iYTE5LTQ3YTYtYjVhYy1kMDc0NzE0OTcxNGMvNGIxMDE3ODktODBmMi0z OTJhLTlmNzYtM2ExYmY0ZjRkYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2MjRjYmItYmExOS00N2E2LWI1 YWMtZDA3NDcxNDk3MTRjL2I4NjI0Y2JiLWJhMTktNDdhNi1iNWFjLWQwNzQ3MTQ5 NzE0Yy5jcmwwHwYDVR0jBBgwFoAUcWpaIe5mK5wQZ/DiOAd4yxKMjKcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODYyNGNiYi1iYTE5LTQ3YTYtYjVhYy1kMDc0 NzE0OTcxNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARRHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE395Ib44vELJ7IJ0pT8y0C+7zdB6tPRAtPizsZiMM8KFygRU61sNrv 5AKIYopTgU0+Z+SeDn3QHlZaUzWefDxNVT0HKreau8VGpQ3AKMddYefQmH4ztU+H ualAYSE15GloDQXh/ZAkS7KOPB3sHV5ZthipL5QCSSNEdAQiaeae1g+VeTQVNutp Yt0lN2t4mK1WcLm+jzN0jBR8FLbiOsQyI157NB5gBTAwdYcfSfu3oEjhLoZRmc2r NdgdWCDrdLfN2M0lILLNH0Q5b7oHflKO0Ugdu1LhI4lnigGS58uITSlKuzE0H6B0 TvzPhn0DTwL0tCosmMZjH3uG5HDybgQ= -----END CERTIFICATE-----Generated at Wed Nov 5 14:43:14 2025 by rpki-client