$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/5af5fa8c-d984-310e-bef5-1e266ad32547.roa File: 5af5fa8c-d984-310e-bef5-1e266ad32547.roa (raw, json) Hash identifier: KJMY5hWKzm4ll9bpw/PZ3DgHJ5CfNwlsd+Knz/12iRY= Subject key identifier: 86:FF:12:58:61:10:C8:74:32:4A:DD:26:0F:C5:04:57:41:C8:E4:8D Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584BBCDAE4A6FC24A868E4AE03E0 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/5af5fa8c-d984-310e-bef5-1e266ad32547.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 23316 IP address blocks: 67.201.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:e4:a6:fc:24:a8:68:e4:ae:03:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=2ae22501-ffa6-4cc2-b8b5-5beb680119b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c8:39:af:12:59:e0:c1:59:c0:09:a9:ea:d0: 00:ba:85:bf:00:cb:9f:2f:e9:76:84:eb:9d:a3:3a: f5:76:17:69:cd:df:e3:4b:9c:a2:0d:5c:a7:e2:37: 57:78:dd:d7:7f:9d:2b:d5:5b:35:14:aa:1b:3b:80: 28:0d:70:a2:28:3b:5b:cf:f7:c5:01:40:2b:f9:20: 0a:24:85:ea:08:46:04:9c:1e:fb:a4:68:aa:be:a7: 1e:58:19:80:3b:c5:2a:af:4e:c2:1c:82:d4:96:bf: 41:e6:41:16:66:4e:cb:a4:52:59:ef:f5:31:c1:e0: 10:0d:cb:fa:76:6d:f6:ec:e4:63:d1:c5:4e:29:2f: 7f:57:62:da:04:30:81:4a:92:a2:9d:dd:20:82:9f: d7:db:27:6e:e1:80:1b:ae:52:ea:b4:06:6e:60:97: 97:27:dd:ef:7b:08:6c:a5:84:8a:0b:a1:a2:e6:54: b3:53:53:42:0b:75:ec:ed:9e:5b:db:30:7c:ed:06: 90:51:2b:01:a5:d6:08:d6:b5:37:4b:5e:82:9a:29: 54:d5:2a:a9:4b:d0:0c:54:84:3c:d4:43:f7:d1:ff: 34:8d:c9:25:a8:c9:99:4d:ec:61:19:c1:dc:49:0e: a5:04:a6:7b:c8:41:99:24:09:1e:09:77:8f:32:c4: 19:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FF:12:58:61:10:C8:74:32:4A:DD:26:0F:C5:04:57:41:C8:E4:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/5af5fa8c-d984-310e-bef5-1e266ad32547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 67.201.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ac:77:aa:8e:13:c6:67:c4:17:1e:1e:7d:dc:1b:89:1b:f9: fe:c5:e4:37:4c:92:70:b3:34:49:53:ce:43:3f:59:0f:a2:16: 2e:12:d8:09:d3:9e:a1:96:dd:b6:9f:7a:f3:24:e3:9f:a2:c7: c9:cb:ab:2f:fe:63:ff:6a:6b:16:de:8d:ec:89:f5:74:ce:bd: d3:94:b6:25:52:36:0a:40:ba:a1:51:29:b1:e2:8d:f5:c3:af: de:32:b6:c2:11:6a:f9:d2:c6:d5:d5:44:e9:5d:82:43:15:20: 77:9f:42:07:bd:af:33:ec:f6:7b:27:03:31:1a:a7:54:60:ba: c4:21:67:06:ef:a8:ef:68:14:ae:d7:cb:ab:34:cd:4b:9e:97: 2c:ff:13:a1:da:1c:38:6a:c5:fe:1f:19:a0:14:87:8e:0f:b2: 92:72:37:1f:81:57:2d:20:9f:9a:1b:29:ac:eb:9c:a3:18:c5: 75:03:64:8a:54:de:37:92:5b:0c:74:67:dd:38:b4:a6:cb:1a: 12:a4:db:e8:c9:a9:86:4a:b4:58:ae:18:99:ff:f8:a1:24:ed: 94:1f:27:d9:b6:5d:f2:f9:85:22:f6:bd:fe:15:33:11:48:3a: 6d:85:97:f9:33:3f:2d:7a:fc:46:1c:83:22:4c:aa:3d:98:80: 12:ff:be:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu82uSm/CSoaOSuA+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk MmFlMjI1MDEtZmZhNi00Y2MyLWI4YjUtNWJlYjY4MDExOWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsg5rxJZ4MFZwAmp6tAAuoW/AMufL+l2hOud ozr1dhdpzd/jS5yiDVyn4jdXeN3Xf50r1Vs1FKobO4AoDXCiKDtbz/fFAUAr+SAK JIXqCEYEnB77pGiqvqceWBmAO8Uqr07CHILUlr9B5kEWZk7LpFJZ7/UxweAQDcv6 dm327ORj0cVOKS9/V2LaBDCBSpKind0ggp/X2ydu4YAbrlLqtAZuYJeXJ93vewhs pYSKC6Gi5lSzU1NCC3Xs7Z5b2zB87QaQUSsBpdYI1rU3S16CmilU1SqpS9AMVIQ8 1EP30f80jcklqMmZTexhGcHcSQ6lBKZ7yEGZJAkeCXePMsQZSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIb/ElhhEMh0MkrdJg/FBFdByOSNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvNWFmNWZhOGMtZDk4NC0z MTBlLWJlZjUtMWUyNjZhZDMyNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ8kIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGsd6qOE8ZnxBceHn3cG4kb+f7F5DdMknCzNElTzkM/WQ+iFi4S2AnT nqGW3bafevMk45+ix8nLqy/+Y/9qaxbejeyJ9XTOvdOUtiVSNgpAuqFRKbHijfXD r94ytsIRavnSxtXVROldgkMVIHefQge9rzPs9nsnAzEap1RgusQhZwbvqO9oFK7X y6s0zUuelyz/E6HaHDhqxf4fGaAUh44PspJyNx+BVy0gn5obKazrnKMYxXUDZIpU 3jeSWwx0Z904tKbLGhKk2+jJqYZKtFiuGJn/+KEk7ZQfJ9m2XfL5hSL2vf4VMxFI Om2Fl/kzPy16/EYcgyJMqj2YgBL/vgA= -----END CERTIFICATE-----Generated at Wed Nov 5 22:14:48 2025 by rpki-client