$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/22535747-b884-373e-ae7d-c116ccd3f089.roa File: 22535747-b884-373e-ae7d-c116ccd3f089.roa (raw, json) Hash identifier: cIC8vsXQyiLOo2qCZcEqIYZi4B1xCfpPRYF65Q505zE= Subject key identifier: AC:E2:2E:88:2F:E8:3F:8B:E5:75:78:F0:C4:05:77:0F:F9:37:3F:E4 Certificate issuer: /CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Certificate serial: 010D0C9F4328584BA5023E593F50841515D38380 Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/22535747-b884-373e-ae7d-c116ccd3f089.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 20115 IP address blocks: 68.170.0.0/24 maxlen: 24 68.170.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:3e:59:3f:50:84:15:15:d3:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=931ce63a-09a2-481c-bc81-5cfdba3d0aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5e:f1:1f:cf:19:2c:98:93:43:89:48:25:39: 14:e9:c0:70:b8:0c:ea:37:42:40:ef:11:56:b2:c6: 5c:11:ca:86:7f:31:b5:64:6c:0c:60:3a:37:9c:91: 96:bd:02:0c:7b:07:7f:f8:02:01:a7:4e:a3:ca:95: eb:c7:d1:01:cc:ea:c3:d3:d3:d3:24:10:2c:a7:08: ca:ed:2b:56:35:41:0b:0b:43:c5:67:19:8d:bc:19: 58:8c:bf:4c:4d:e7:a9:79:00:af:67:34:35:e2:6c: 62:0f:97:dc:15:47:a8:0b:2b:d0:d8:24:10:bb:14: 94:d8:d4:74:a6:84:9b:04:7e:11:51:74:33:e6:e4: ba:9a:a5:4f:4d:12:55:24:23:ca:0a:ee:d1:0f:57: 32:c1:36:f9:80:c3:b1:ee:79:e4:87:80:58:1d:ef: 5d:b5:0c:60:1f:64:a2:d2:5c:64:2f:6f:91:5d:08: e5:50:8a:79:98:48:2d:24:e9:0c:c5:fe:d0:1d:ce: 1b:d7:59:56:f3:ce:13:0f:39:76:bb:9a:9f:1f:3f: 19:62:86:eb:6e:82:65:9d:39:31:f8:ea:11:13:32: 09:a7:75:54:c3:09:0e:9c:ad:78:22:fb:39:45:9c: 0a:7f:32:11:7c:22:86:14:e7:19:09:1b:4f:35:f0: 76:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E2:2E:88:2F:E8:3F:8B:E5:75:78:F0:C4:05:77:0F:F9:37:3F:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/22535747-b884-373e-ae7d-c116ccd3f089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl X509v3 Authority Key Identifier: keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer sbgp-ipAddrBlock: critical IPv4: 68.170.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d2:de:d2:14:99:3e:8f:a6:d1:28:d9:6a:37:28:5d:d8:8f: 0a:98:2b:9c:03:05:90:57:7f:02:1d:2b:89:e3:1a:67:a2:cd: c1:7f:8f:63:79:72:78:a2:3e:ee:69:39:f1:5f:4f:23:2a:f4: 6e:6e:ba:9f:5c:1b:3b:d3:3c:3f:66:27:f1:97:f5:92:b2:f4: 72:6e:5d:8f:c6:48:89:ec:6a:a5:11:27:0a:82:2e:7f:9f:8a: 67:f0:f5:f9:fd:4b:22:ae:e9:32:79:96:3c:2d:6c:dd:62:6d: 9a:62:95:24:bc:8e:18:a5:70:e4:3f:0e:86:4a:38:30:ce:bf: 7f:bb:8f:cb:05:fa:ce:84:37:6f:92:04:45:a1:85:5c:23:fd: 68:90:db:ec:d0:95:1f:c8:61:88:20:99:c9:44:11:1c:cb:e9: 68:12:4a:2d:b2:b5:97:45:dd:a0:ce:f1:95:5d:bf:7e:82:c9: f7:87:9b:b9:28:24:f8:ea:8d:52:53:e9:4c:77:5b:59:81:39: 7c:95:de:22:04:de:83:ae:ba:59:47:d2:1d:8c:a0:88:6e:6b: 0e:16:92:28:aa:0d:60:8a:16:ff:68:91:e4:07:fb:6c:d7:21: 7d:8f:e1:0f:d5:0c:00:30:21:6c:ae:1f:d0:19:e0:c1:23:b6: 07:c1:b0:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAj5ZP1CEFRXTg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1NTRlOWYtYTNiMC00NzRmLWI3MjgtNGY5NTlhYTM1 NDQ5MB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk OTMxY2U2M2EtMDlhMi00ODFjLWJjODEtNWNmZGJhM2QwYWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF7xH88ZLJiTQ4lIJTkU6cBwuAzqN0JA7xFW ssZcEcqGfzG1ZGwMYDo3nJGWvQIMewd/+AIBp06jypXrx9EBzOrD09PTJBAspwjK 7StWNUELC0PFZxmNvBlYjL9MTeepeQCvZzQ14mxiD5fcFUeoCyvQ2CQQuxSU2NR0 poSbBH4RUXQz5uS6mqVPTRJVJCPKCu7RD1cywTb5gMOx7nnkh4BYHe9dtQxgH2Si 0lxkL2+RXQjlUIp5mEgtJOkMxf7QHc4b11lW884TDzl2u5qfHz8ZYobrboJlnTkx +OoREzIJp3VUwwkOnK14Ivs5RZwKfzIRfCKGFOcZCRtPNfB2ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKziLogv6D+L5XV48MQFdw/5Nz/kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1 NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1OWFhMzU0NDkvMjI1MzU3NDctYjg4NC0z NzNlLWFlN2QtYzExNmNjZDNmMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzc1NTRlOWYtYTNiMC00NzRmLWI3 MjgtNGY5NTlhYTM1NDQ5L2M3NTU0ZTlmLWEzYjAtNDc0Zi1iNzI4LTRmOTU5YWEz NTQ0OS5jcmwwHwYDVR0jBBgwFoAUli7MQkEJ9CB4PLADz1sQrKOP3gcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1 OWFhMzU0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDS3tIUmT6PptEo2Wo3KF3YjwqYK5wDBZBXfwIdK4njGmeizcF/j2N5 cniiPu5pOfFfTyMq9G5uup9cGzvTPD9mJ/GX9ZKy9HJuXY/GSInsaqURJwqCLn+f imfw9fn9SyKu6TJ5ljwtbN1ibZpilSS8jhilcOQ/DoZKODDOv3+7j8sF+s6EN2+S BEWhhVwj/WiQ2+zQlR/IYYggmclEERzL6WgSSi2ytZdF3aDO8ZVdv36CyfeHm7ko JPjqjVJT6Ux3W1mBOXyV3iIE3oOuullH0h2MoIhuaw4WkiiqDWCKFv9okeQH+2zX IX2P4Q/VDAAwIWyuH9AZ4MEjtgfBsCM= -----END CERTIFICATE-----Generated at Wed Nov 5 03:06:15 2025 by rpki-client