$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ac83a659-5e45-34f3-9f76-21fb9045c8a4.roa File: ac83a659-5e45-34f3-9f76-21fb9045c8a4.roa (raw, json) Hash identifier: GYKVDJuT5mh6hiVeHs6AIZtVtqTp+mG7VT6tw1uLwsg= Subject key identifier: BA:09:9B:25:52:F7:19:F3:79:F6:2B:A6:AB:89:C4:E2:DA:9E:B7:38 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B8BE22A5A44C4A1A6CEAF3500 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ac83a659-5e45-34f3-9f76-21fb9045c8a4.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 203724 IP address blocks: 208.81.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:2a:5a:44:c4:a1:a6:ce:af:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=4aecfb2e-1da7-4635-8e81-a836a73e93c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:b9:36:4c:c9:cd:3d:40:42:c2:a1:55:1b: 60:40:87:33:fd:5f:89:bc:fb:b2:ce:e4:9c:b7:31: f8:61:f2:81:04:20:70:17:b4:a9:4a:83:3f:9e:93: 80:8b:08:78:47:a8:73:35:55:68:aa:66:89:df:76: a0:b7:73:28:63:94:fc:59:c5:a3:61:bd:d0:ea:32: 30:b7:2b:1e:31:b7:b9:87:5f:8e:e9:5f:7f:bd:47: fb:6d:2f:1e:0f:9c:d8:b2:c7:89:97:bc:e3:ae:2b: a9:f7:1d:0c:d1:43:e4:61:c4:8e:47:55:ae:68:0e: e5:13:5b:af:6c:39:3a:2a:d6:53:c4:13:32:73:46: 54:a2:97:ba:c1:d9:3f:af:2c:9a:e9:fc:8b:d3:f6: 95:56:fb:ca:e3:ad:e3:18:53:48:47:4c:c9:c9:da: 42:bb:cf:52:1b:11:73:67:e1:04:cd:15:88:ed:d3: 02:fd:6a:66:20:db:bd:55:32:e2:0a:50:de:5d:15: e4:19:a6:74:91:9e:13:c8:d8:ba:01:3c:c9:b1:cd: 2c:78:eb:d5:ea:e1:db:c7:9f:af:8a:e1:77:11:1a: 3a:3d:f4:0b:32:bc:d4:bc:df:49:41:0a:ce:ef:68: c1:fb:48:37:42:87:03:fa:aa:7a:09:d8:96:0f:f9: 09:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:09:9B:25:52:F7:19:F3:79:F6:2B:A6:AB:89:C4:E2:DA:9E:B7:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ac83a659-5e45-34f3-9f76-21fb9045c8a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 208.81.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ea:7f:10:7e:50:60:6f:9d:d5:4c:51:b6:30:2d:5d:bd:bb: 3b:2d:c2:d5:a2:f4:6f:78:81:87:7d:65:0b:57:db:46:cb:9b: b4:b8:65:9c:cc:08:08:ce:ab:07:3c:23:37:f5:e3:b8:46:11: 7e:b4:9a:09:97:75:ae:18:99:d0:a0:39:7c:80:f8:35:f9:a6: 83:ce:52:49:8f:d8:61:7a:bf:7e:55:31:a3:37:a9:c0:14:db: 86:5b:95:5e:13:87:88:ea:55:a7:f8:66:a2:5a:51:ff:d6:43: 93:0c:88:79:fc:3c:c1:2c:a7:1a:aa:92:5a:38:61:f2:7e:4c: 41:a2:07:62:0a:b3:5b:7b:ca:a1:fc:3e:e2:a3:f1:56:5a:c6: 6d:9b:24:df:e5:c8:52:77:b6:c1:d6:e3:bd:f1:a3:92:c1:ea: be:5d:39:b5:ae:c1:cf:a4:71:3f:bb:fa:6c:4d:d3:ff:34:90: 8c:da:9f:74:12:ad:30:37:76:8a:f1:1c:65:ee:1a:6a:63:2f: f5:c5:66:d0:e7:d1:2f:2f:74:47:0b:06:d6:51:40:93:8f:c9: fa:10:4a:dc:68:12:56:d7:00:51:71:4b:56:ee:24:6d:62:31: b2:2a:1c:eb:84:f9:67:24:ed:54:e2:1e:0f:5c:5a:80:68:61: 9b:e3:26:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4ipaRMShps6vNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NGFlY2ZiMmUtMWRhNy00NjM1LThlODEtYTgzNmE3M2U5M2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXS5NkzJzT1AQsKhVRtgQIcz/V+JvPuyzuSc tzH4YfKBBCBwF7SpSoM/npOAiwh4R6hzNVVoqmaJ33agt3MoY5T8WcWjYb3Q6jIw tyseMbe5h1+O6V9/vUf7bS8eD5zYsseJl7zjriup9x0M0UPkYcSOR1WuaA7lE1uv bDk6KtZTxBMyc0ZUope6wdk/ryya6fyL0/aVVvvK463jGFNIR0zJydpCu89SGxFz Z+EEzRWI7dMC/WpmINu9VTLiClDeXRXkGaZ0kZ4TyNi6ATzJsc0seOvV6uHbx5+v iuF3ERo6PfQLMrzUvN9JQQrO72jB+0g3QocD+qp6CdiWD/kJdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoJmyVS9xnzefYrpquJxOLanrc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYWM4M2E2NTktNWU0NS0z NGYzLTlmNzYtMjFmYjkwNDVjOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7qfxB+UGBvndVMUbYwLV29uzstwtWi9G94gYd9ZQtX20bLm7S4ZZzM CAjOqwc8Izf147hGEX60mgmXda4YmdCgOXyA+DX5poPOUkmP2GF6v35VMaM3qcAU 24ZblV4Th4jqVaf4ZqJaUf/WQ5MMiHn8PMEspxqqklo4YfJ+TEGiB2IKs1t7yqH8 PuKj8VZaxm2bJN/lyFJ3tsHW473xo5LB6r5dObWuwc+kcT+7+mxN0/80kIzan3QS rTA3dorxHGXuGmpjL/XFZtDn0S8vdEcLBtZRQJOPyfoQStxoElbXAFFxS1buJG1i MbIqHOuE+Wck7VTiHg9cWoBoYZvjJq8= -----END CERTIFICATE-----Generated at Wed Nov 5 06:24:09 2025 by rpki-client