$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/68f886e6-3ee4-396a-852d-a801badb904f.roa File: 68f886e6-3ee4-396a-852d-a801badb904f.roa (raw, json) Hash identifier: 7VPMKrWj7GacT6aqHAg1OLvfrKAv0Bm9pNC/Y1tWmZI= Subject key identifier: 52:39:B8:DD:96:AB:E0:F0:46:A9:22:C2:EA:BD:BF:45:C7:92:5E:53 Certificate issuer: /CN=324a8cbd-4953-435c-bace-07af1279e9bc Certificate serial: 010D0C9F4328584B0A116E020DCD0CE69B1ADC80 Authority key identifier: B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/68f886e6-3ee4-396a-852d-a801badb904f.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 398025 IP address blocks: 143.109.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:6e:02:0d:cd:0c:e6:9b:1a:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324a8cbd-4953-435c-bace-07af1279e9bc Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=afce2720-f79d-4d9a-9e4f-df1a66362392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:da:22:ac:d1:33:10:ba:10:1a:f9:bb:3c:7d: d8:1a:f4:62:7c:b2:82:ac:3f:f6:c4:c0:c0:c5:ca: 4d:38:7a:40:33:4d:70:24:ef:1c:ee:fc:c5:02:b0: e1:1c:28:73:ec:02:cf:8b:a6:21:42:ee:28:a5:cc: 90:fa:4e:f8:d0:9f:88:7c:c5:cc:29:c8:0f:db:e7: 0a:47:7e:01:c7:e8:c9:f2:7d:64:4e:76:01:64:18: d6:22:66:83:8e:83:b5:df:d6:70:90:a4:a3:04:37: 62:0e:a0:e2:2b:ea:52:da:17:7d:e8:ad:3e:1b:40: 20:ad:b7:3f:52:be:2e:84:3b:25:82:bb:3b:5c:21: 82:53:bb:d4:fb:49:10:f0:80:3e:83:8a:3e:b2:b2: 2a:21:14:f0:1f:07:3d:9f:16:60:3a:f5:d1:7b:36: c7:f6:08:e4:8e:2f:c1:8c:c8:3e:b6:60:01:55:64: 34:38:a9:66:4b:22:c1:c5:08:72:ea:51:44:88:29: 0b:0e:f1:c4:9f:89:92:54:b9:8c:9d:d9:cd:ea:22: 39:c2:77:44:4e:e9:c7:1b:e0:12:a0:6f:f9:2c:2b: d2:14:2c:f1:d5:b2:d1:5d:b8:5e:eb:c3:14:85:00: 7e:d1:bd:43:3d:d3:8d:5d:9c:a3:bc:f3:bd:74:93: ea:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:39:B8:DD:96:AB:E0:F0:46:A9:22:C2:EA:BD:BF:45:C7:92:5E:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/68f886e6-3ee4-396a-852d-a801badb904f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl X509v3 Authority Key Identifier: keyid:B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer sbgp-ipAddrBlock: critical IPv4: 143.109.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:bf:54:ba:2a:e2:0c:40:a4:c3:78:f6:5a:47:3f:c1:53:96: a9:31:b3:bc:6f:48:53:d8:b2:c4:c0:d1:aa:8e:58:dd:ef:4d: 67:a6:96:5b:74:dd:67:d4:5d:cf:b3:bb:91:56:64:02:40:a0: 61:2e:15:7a:79:a3:48:40:37:5a:90:c6:4a:a6:b7:8c:3b:3a: 48:d1:3c:df:51:50:e8:22:f6:73:a6:30:b5:db:2b:26:38:92: fc:78:21:8f:4f:de:3d:94:e1:ef:a2:7d:17:9a:4f:96:64:a8: 9c:cc:80:1c:81:4f:24:e9:0b:be:41:bc:01:35:b3:43:5f:d4: 25:11:cc:28:3f:e8:9a:b1:d1:68:80:54:ad:9b:ec:52:7e:a2: 0c:b5:3a:5c:cf:35:9b:cd:5c:b1:4e:42:75:ac:4c:19:94:53: 95:68:8b:30:e6:c4:69:17:36:a0:4e:38:9e:51:3b:6f:ec:17: 10:5d:ed:d4:6e:9a:19:e5:ca:06:48:b7:f1:40:17:22:dd:32: e7:7a:e5:d1:c4:04:39:b0:2e:0c:49:ed:ce:58:5e:18:7f:7a: 4c:8c:79:2c:e4:89:9d:19:1f:b2:e1:54:ff:44:2c:9f:e2:28: 9b:55:fb:9b:20:36:27:04:8e:13:f5:f4:e0:b5:b6:8e:65:01: d6:ac:f9:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEW4CDc0M5psa3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YThjYmQtNDk1My00MzVjLWJhY2UtMDdhZjEyNzll OWJjMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YWZjZTI3MjAtZjc5ZC00ZDlhLTllNGYtZGYxYTY2MzYyMzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztoirNEzELoQGvm7PH3YGvRifLKCrD/2xMDA xcpNOHpAM01wJO8c7vzFArDhHChz7ALPi6YhQu4opcyQ+k740J+IfMXMKcgP2+cK R34Bx+jJ8n1kTnYBZBjWImaDjoO139ZwkKSjBDdiDqDiK+pS2hd96K0+G0Agrbc/ Ur4uhDslgrs7XCGCU7vU+0kQ8IA+g4o+srIqIRTwHwc9nxZgOvXRezbH9gjkji/B jMg+tmABVWQ0OKlmSyLBxQhy6lFEiCkLDvHEn4mSVLmMndnN6iI5wndETunHG+AS oG/5LCvSFCzx1bLRXbhe68MUhQB+0b1DPdONXZyjvPO9dJPqnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFI5uN2Wq+DwRqkiwuq9v0XHkl5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjRh OGNiZC00OTUzLTQzNWMtYmFjZS0wN2FmMTI3OWU5YmMvNjhmODg2ZTYtM2VlNC0z OTZhLTg1MmQtYTgwMWJhZGI5MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzI0YThjYmQtNDk1My00MzVjLWJh Y2UtMDdhZjEyNzllOWJjLzMyNGE4Y2JkLTQ5NTMtNDM1Yy1iYWNlLTA3YWYxMjc5 ZTliYy5jcmwwHwYDVR0jBBgwFoAUuVGNYC2HPrBfCSgipzOWxkslPtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjRhOGNiZC00OTUzLTQzNWMtYmFjZS0wN2Fm MTI3OWU5YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFj20AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABy/VLoq4gxApMN49lpHP8FTlqkxs7xvSFPYssTA0aqOWN3vTWemllt0 3WfUXc+zu5FWZAJAoGEuFXp5o0hAN1qQxkqmt4w7OkjRPN9RUOgi9nOmMLXbKyY4 kvx4IY9P3j2U4e+ifReaT5ZkqJzMgByBTyTpC75BvAE1s0Nf1CURzCg/6Jqx0WiA VK2b7FJ+ogy1OlzPNZvNXLFOQnWsTBmUU5VoizDmxGkXNqBOOJ5RO2/sFxBd7dRu mhnlygZIt/FAFyLdMud65dHEBDmwLgxJ7c5YXhh/ekyMeSzkiZ0ZH7LhVP9ELJ/i KJtV+5sgNicEjhP19OC1to5lAdas+aA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:56:23 2025 by rpki-client