$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/9c434eac-9e5d-3b3a-83d9-18e31edd161b.roa File: 9c434eac-9e5d-3b3a-83d9-18e31edd161b.roa (raw, json) Hash identifier: +bp03CUlct/IdBnTzPBqYhK2w1EI/N1x/w6KBwvn6Tg= Subject key identifier: C3:D5:F2:1B:D9:60:B8:E2:FF:2D:28:38:39:DB:5E:E8:54:E8:85:25 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584BA7CCE48B3984878AA53CC4C0 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/9c434eac-9e5d-3b3a-83d9-18e31edd161b.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 22709 IP address blocks: 68.67.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:e4:8b:39:84:87:8a:a5:3c:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=949e2f0f-955d-4cb8-9432-865702ef550b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4e:7a:a6:3f:e0:4a:2e:35:4e:e3:4e:29:ba: 84:22:eb:a3:b6:ce:aa:d9:9e:e5:a7:00:33:23:e3: b5:79:49:cd:ac:3a:52:1c:ad:d1:f4:58:43:7f:54: ce:29:8c:23:63:17:66:36:e3:cd:ee:a6:42:7c:b2: 05:a1:4d:8c:8f:38:7f:99:a7:7f:c5:98:c2:78:55: ec:1a:a6:d3:c6:22:28:c5:69:4c:d1:c1:ac:7c:d3: 54:1a:63:dc:f6:3f:3d:8a:5e:c7:f9:f6:a9:e1:4f: b1:d9:d2:bb:8f:1a:73:3c:1e:e7:20:41:11:0b:37: 37:85:c2:75:da:93:72:ae:02:f2:a4:29:a5:40:52: 6f:c2:41:a3:3d:1f:af:87:60:7d:ff:a2:07:aa:04: a5:18:44:bf:e5:36:41:bf:39:5c:a0:8a:81:f2:89: 35:c8:ab:ec:fd:5a:52:fa:4f:c8:80:7f:ce:6c:dc: e3:35:91:ee:56:4c:dc:05:78:0a:0e:45:dc:25:70: d7:9d:1e:bb:ca:92:4a:2a:0a:d1:71:32:5e:7e:23: a1:80:71:bb:22:56:c0:d1:66:f9:59:e6:73:e7:90: ab:b5:87:52:5c:8f:fc:13:6a:8d:7b:da:ea:06:19: b9:a3:41:8a:f1:9a:0d:db:7a:05:8f:58:f0:8a:ec: 41:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D5:F2:1B:D9:60:B8:E2:FF:2D:28:38:39:DB:5E:E8:54:E8:85:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/9c434eac-9e5d-3b3a-83d9-18e31edd161b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 68.67.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:6d:69:81:b0:93:96:a8:38:05:cb:8b:7c:91:9d:44:14:2d: 66:fc:d9:4e:a0:87:9a:d0:cd:48:b9:5b:a0:c4:51:ed:3a:68: da:c7:20:42:85:46:6a:1c:33:c3:ef:ff:6a:87:2f:90:aa:9f: 75:fd:f8:f4:e9:bb:0f:cf:b9:2c:2f:ed:8a:30:b3:ce:1d:5a: 34:85:58:85:ec:ae:83:29:43:3b:cd:9c:7d:c0:ce:30:ad:9c: b4:34:d7:f8:2d:0a:3c:eb:03:f9:5d:aa:65:e9:fc:48:4f:fb: b3:42:b1:c2:de:1c:d5:ae:2e:12:10:d3:88:b6:ba:7a:87:b0: 4e:a0:34:1d:b5:44:e5:33:9f:c6:bc:2c:f9:09:a4:aa:79:7a: ce:b7:43:ba:fd:a7:12:7a:78:ea:08:36:f8:8f:5d:e0:a5:c0: 1e:d6:c1:b4:4e:b5:97:a6:5d:a9:05:dd:ed:00:0b:a8:7e:60: 1f:c5:07:97:23:d9:59:64:53:24:3d:5d:b3:4d:84:9a:94:77: b2:ac:e7:04:c6:b3:55:f1:31:42:86:11:3e:53:93:41:97:d7: 38:ba:c7:99:fe:2d:03:c0:4e:c1:7c:2c:39:94:e3:98:bd:71: 22:c2:fb:5f:3d:ba:c9:85:a9:f5:01:df:82:b6:20:52:5c:53: 01:7c:6c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOSLOYSHiqU8xMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk OTQ5ZTJmMGYtOTU1ZC00Y2I4LTk0MzItODY1NzAyZWY1NTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU56pj/gSi41TuNOKbqEIuujts6q2Z7lpwAz I+O1eUnNrDpSHK3R9FhDf1TOKYwjYxdmNuPN7qZCfLIFoU2Mjzh/mad/xZjCeFXs GqbTxiIoxWlM0cGsfNNUGmPc9j89il7H+fap4U+x2dK7jxpzPB7nIEERCzc3hcJ1 2pNyrgLypCmlQFJvwkGjPR+vh2B9/6IHqgSlGES/5TZBvzlcoIqB8ok1yKvs/VpS +k/IgH/ObNzjNZHuVkzcBXgKDkXcJXDXnR67ypJKKgrRcTJefiOhgHG7IlbA0Wb5 WeZz55CrtYdSXI/8E2qNe9rqBhm5o0GK8ZoN23oFj1jwiuxBEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPV8hvZYLji/y0oODnbXuhU6IUlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvOWM0MzRlYWMtOWU1ZC0z YjNhLTgzZDktMThlMzFlZGQxNjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5taYGwk5aoOAXLi3yRnUQULWb82U6gh5rQzUi5W6DEUe06aNrHIEKF RmocM8Pv/2qHL5Cqn3X9+PTpuw/PuSwv7Yows84dWjSFWIXsroMpQzvNnH3AzjCt nLQ01/gtCjzrA/ldqmXp/EhP+7NCscLeHNWuLhIQ04i2unqHsE6gNB21ROUzn8a8 LPkJpKp5es63Q7r9pxJ6eOoINviPXeClwB7WwbROtZemXakF3e0AC6h+YB/FB5cj 2VlkUyQ9XbNNhJqUd7Ks5wTGs1XxMUKGET5Tk0GX1zi6x5n+LQPATsF8LDmU45i9 cSLC+189usmFqfUB34K2IFJcUwF8bFc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:13:32 2025 by rpki-client