$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/cb124f99-25af-3ef5-a396-091c35660f3f.roa File: cb124f99-25af-3ef5-a396-091c35660f3f.roa (raw, json) Hash identifier: IuW1mXvEOeeLxUth8oyo3qQF8ZkFjLysRQh3GoC0zkc= Subject key identifier: AC:9E:0E:86:CA:D1:CE:5D:92:88:0C:29:6D:E2:5E:47:65:DF:58:00 Certificate issuer: /CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b Certificate serial: 010D0C9F4328584BB7862F3D9F6BF987F4E54F00 Authority key identifier: 30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/cb124f99-25af-3ef5-a396-091c35660f3f.roa Signing time: Sat 01 Nov 2025 16:11:00 +0000 ROA not before: Sat 01 Nov 2025 16:11:00 +0000 ROA not after: Fri 30 Jan 2026 17:11:00 +0000 asID: 5650 IP address blocks: 68.232.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:86:2f:3d:9f:6b:f9:87:f4:e5:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b Validity Not Before: Nov 1 16:11:00 2025 GMT Not After : Jan 30 17:11:00 2026 GMT Subject: CN=a309fc72-800c-4f96-b5e3-06eae6ca3959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a9:d9:ec:d9:0c:82:78:fa:27:05:2a:7d:03: 1e:a6:34:91:bc:bf:5c:d0:bd:32:25:de:2b:06:f0: 1b:07:b2:35:b6:94:22:ef:d1:9d:14:5f:ed:b8:79: ae:46:68:d6:58:8d:d6:bc:5c:9a:f5:8d:30:5f:8f: 45:37:d4:96:29:9c:9a:f6:8a:74:03:6c:fa:b2:f2: 03:ba:9e:11:89:ff:03:b6:e1:50:7c:ab:83:60:1f: c0:35:b6:1f:aa:58:bb:7d:9d:f4:10:ff:f0:b9:4a: c8:8e:2f:e3:ac:43:2d:92:43:c7:37:46:6a:a6:82: 2e:a4:f4:04:3a:62:11:52:31:04:28:27:06:12:d2: d7:49:24:07:8f:28:66:e6:60:06:98:42:6b:1a:f8: 90:16:93:3d:98:2a:ee:81:13:64:40:b7:a1:89:5a: de:7a:af:97:00:84:4d:9d:84:f0:ee:68:a0:d5:67: a1:87:10:b9:e2:33:4a:31:58:8a:f2:0c:2d:cb:04: ac:b3:01:09:b6:ef:16:67:eb:6b:f1:cc:db:90:bf: ad:03:bb:19:4f:eb:ab:3c:1e:23:06:6a:5b:92:54: 42:50:c8:76:44:54:57:70:1f:23:4f:e1:54:17:dd: d2:71:f0:39:8b:d3:8b:09:1a:d3:a7:74:68:68:0e: 00:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9E:0E:86:CA:D1:CE:5D:92:88:0C:29:6D:E2:5E:47:65:DF:58:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/cb124f99-25af-3ef5-a396-091c35660f3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl X509v3 Authority Key Identifier: keyid:30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer sbgp-ipAddrBlock: critical IPv4: 68.232.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c3:00:da:19:2a:91:91:c1:b7:15:0a:34:06:26:9b:bf:9c: 2c:c0:fe:ab:95:e2:39:ab:e6:a7:76:af:7e:2c:c1:e7:87:1f: a4:6c:4f:90:06:01:7f:2c:be:2a:8d:d4:ba:80:f0:b8:1c:65: 7d:23:fb:e0:e6:44:27:7e:bb:7e:b8:e2:22:79:e6:fa:65:22: 53:e6:9c:5b:7e:34:22:4a:0a:e0:2f:48:a0:8f:8e:bc:b5:92: 8b:69:6e:00:2b:ae:fa:83:10:39:cc:f7:79:4b:6c:fd:b9:a8: 95:08:fd:59:86:24:5f:8c:99:59:00:c8:f0:61:93:de:70:31: a4:08:3f:6d:78:86:8c:d7:cd:37:03:e4:dc:78:eb:79:40:cb: a5:9d:bd:7d:b1:76:3d:59:a2:be:f6:9f:c6:2c:15:c3:d9:11: de:46:9d:a9:9e:32:fb:9a:e4:4c:95:c0:9c:d7:24:16:53:a5: 47:9d:ec:2f:d5:9f:e7:c0:86:fe:cc:aa:54:5c:c2:ae:a9:10: 90:8f:1f:39:c4:c8:77:f3:52:41:2e:37:d1:09:a3:03:c0:ed: ad:50:9a:bd:be:3d:33:a2:9d:1f:9f:9a:e8:08:8b:9c:df:46: 41:09:c2:6a:3a:9a:6e:4a:61:0a:98:38:23:6a:03:c6:f8:a2: 0e:a5:3a:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3hi89n2v5h/TlTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI3ODA0NWYtODIxZi00Y2U0LTk1ZTktYzA2ZGVjOGEx YTdiMB4XDTI1MTEwMTE2MTEwMFoXDTI2MDEzMDE3MTEwMFowLzEtMCsGA1UEAxMk YTMwOWZjNzItODAwYy00Zjk2LWI1ZTMtMDZlYWU2Y2EzOTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6nZ7NkMgnj6JwUqfQMepjSRvL9c0L0yJd4r BvAbB7I1tpQi79GdFF/tuHmuRmjWWI3WvFya9Y0wX49FN9SWKZya9op0A2z6svID up4Rif8DtuFQfKuDYB/ANbYfqli7fZ30EP/wuUrIji/jrEMtkkPHN0ZqpoIupPQE OmIRUjEEKCcGEtLXSSQHjyhm5mAGmEJrGviQFpM9mCrugRNkQLehiVreeq+XAIRN nYTw7mig1WehhxC54jNKMViK8gwtywSsswEJtu8WZ+tr8czbkL+tA7sZT+urPB4j BmpbklRCUMh2RFRXcB8jT+FUF93ScfA5i9OLCRrTp3RoaA4AKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyeDobK0c5dkogMKW3iXkdl31gAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80Yjc4 MDQ1Zi04MjFmLTRjZTQtOTVlOS1jMDZkZWM4YTFhN2IvY2IxMjRmOTktMjVhZi0z ZWY1LWEzOTYtMDkxYzM1NjYwZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGI3ODA0NWYtODIxZi00Y2U0LTk1 ZTktYzA2ZGVjOGExYTdiLzRiNzgwNDVmLTgyMWYtNGNlNC05NWU5LWMwNmRlYzhh MWE3Yi5jcmwwHwYDVR0jBBgwFoAUMEpb9U4yCX8ZpybnCWh/reNjqhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80Yjc4MDQ1Zi04MjFmLTRjZTQtOTVlOS1jMDZk ZWM4YTFhN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTDANoZKpGRwbcVCjQGJpu/nCzA/quV4jmr5qd2r34sweeHH6RsT5AG AX8sviqN1LqA8LgcZX0j++DmRCd+u3644iJ55vplIlPmnFt+NCJKCuAvSKCPjry1 kotpbgArrvqDEDnM93lLbP25qJUI/VmGJF+MmVkAyPBhk95wMaQIP214hozXzTcD 5Nx463lAy6WdvX2xdj1Zor72n8YsFcPZEd5GnameMvua5EyVwJzXJBZTpUed7C/V n+fAhv7MqlRcwq6pEJCPHznEyHfzUkEuN9EJowPA7a1Qmr2+PTOinR+fmugIi5zf RkEJwmo6mm5KYQqYOCNqA8b4og6lOvs= -----END CERTIFICATE-----Generated at Wed Nov 5 02:16:08 2025 by rpki-client