$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68125722-c619-3d95-9f85-ce112d2cc7ae.roa File: 68125722-c619-3d95-9f85-ce112d2cc7ae.roa (raw, json) Hash identifier: 8VxpEZ+4dtpYgfgq1AMApVilM+9H/bo5uqgwlcg/sdI= Subject key identifier: 4D:76:CE:8A:05:4D:E7:52:C8:AF:55:03:F2:7E:90:77:B3:B4:5E:89 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD183D1548C3CFC2304C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68125722-c619-3d95-9f85-ce112d2cc7ae.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 72.246.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:18:3d:15:48:c3:cf:c2:30:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=6a683af1-a4b6-4872-b7e5-eb69c00428a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:45:e9:b8:ea:84:b7:66:76:bb:b3:63:59:86: f5:72:d3:72:bc:ef:c5:db:62:99:df:b5:71:49:af: 80:8b:53:c0:a1:cb:6a:8c:50:19:cd:f4:e4:c8:99: 26:10:93:3c:a4:ee:b0:3d:c7:7e:dd:f7:67:23:68: 63:9c:a3:9a:68:00:7b:55:e1:7c:dc:bd:6c:f6:ab: 8c:96:5e:c5:4f:71:0c:2d:97:61:01:4e:37:f3:27: e5:ce:ff:88:de:68:78:26:a4:d9:ef:2d:1a:ad:22: a0:0a:fd:56:7a:d7:a5:17:6a:5e:26:af:83:b1:41: 21:9c:22:32:c7:00:13:a1:04:3a:29:2f:4d:f9:17: 53:6c:73:89:89:17:4f:11:ed:e0:29:4a:38:ea:8b: b6:e2:a3:aa:00:3a:ab:78:7c:ee:e2:df:ff:74:ae: 83:48:9f:0b:93:db:f0:ba:10:63:89:f3:46:b8:f7: 3d:fb:ed:33:de:7a:7b:1a:42:b3:e6:6a:03:ae:08: 86:6a:1f:05:ea:63:16:ab:fb:0b:70:6e:6d:fa:1d: e4:e7:54:5a:78:f3:5e:e3:ce:f0:69:8a:a7:05:7f: ae:22:b4:f7:9a:03:c5:d8:12:09:dc:da:f8:61:d2: d5:ca:12:a4:20:a2:20:b1:03:45:b5:69:2d:fc:5e: 86:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:76:CE:8A:05:4D:E7:52:C8:AF:55:03:F2:7E:90:77:B3:B4:5E:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68125722-c619-3d95-9f85-ce112d2cc7ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a5:05:69:ab:85:bb:66:94:65:17:0d:42:4c:ec:e1:da:5b: 71:21:18:c1:96:c4:d6:5d:dd:bc:2c:98:85:8e:a8:73:a1:61: 8a:b9:1c:14:cb:b6:c9:7b:44:5b:f4:f3:cf:2a:2c:fd:30:59: e7:24:4f:bc:bd:07:16:22:ba:70:9a:b1:71:95:e4:6d:3f:c8: 55:fa:a2:9a:a1:84:9d:ca:0b:60:c9:33:ed:06:99:55:0c:e9: 25:13:3f:52:8d:64:22:ad:ee:c2:94:9e:ca:de:26:8b:bd:8c: 19:f6:e9:1e:e3:bc:d5:d3:4b:f4:0d:7f:ab:44:92:5c:1d:62: 11:b6:d1:f6:7f:15:34:e7:c2:3d:2f:cd:90:ba:e9:de:29:f5: 26:0c:d6:dc:51:b5:a1:db:84:e1:56:9a:fd:44:01:fc:16:93: 93:63:76:a1:0c:a5:29:50:e0:4a:50:93:c8:ca:f3:2b:8b:cb: 0a:d2:8b:53:88:10:4a:27:33:fd:66:96:3c:3a:70:50:a6:1d: 05:d8:83:52:70:e7:04:1f:1b:67:ca:99:1c:1a:8a:2f:81:78: 14:5d:ee:37:e3:3b:12:8b:08:34:98:41:68:d0:f8:3f:d3:33: 77:87:d3:12:07:14:87:da:a8:4c:89:24:02:5d:21:ae:8b:ba: a7:bc:7f:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Rg9FUjDz8IwTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NmE2ODNhZjEtYTRiNi00ODcyLWI3ZTUtZWI2OWMwMDQyOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEXpuOqEt2Z2u7NjWYb1ctNyvO/F22KZ37Vx Sa+Ai1PAoctqjFAZzfTkyJkmEJM8pO6wPcd+3fdnI2hjnKOaaAB7VeF83L1s9quM ll7FT3EMLZdhAU438yflzv+I3mh4JqTZ7y0arSKgCv1WetelF2peJq+DsUEhnCIy xwAToQQ6KS9N+RdTbHOJiRdPEe3gKUo46ou24qOqADqreHzu4t//dK6DSJ8Lk9vw uhBjifNGuPc9++0z3np7GkKz5moDrgiGah8F6mMWq/sLcG5t+h3k51RaePNe487w aYqnBX+uIrT3mgPF2BIJ3Nr4YdLVyhKkIKIgsQNFtWkt/F6G5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE12zooFTedSyK9VA/J+kHeztF6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjgxMjU3MjItYzYxOS0z ZDk1LTlmODUtY2UxMTJkMmNjN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGlBWmrhbtmlGUXDUJM7OHaW3EhGMGWxNZd3bwsmIWOqHOhYYq5HBTL tsl7RFv0888qLP0wWeckT7y9BxYiunCasXGV5G0/yFX6opqhhJ3KC2DJM+0GmVUM 6SUTP1KNZCKt7sKUnsreJou9jBn26R7jvNXTS/QNf6tEklwdYhG20fZ/FTTnwj0v zZC66d4p9SYM1txRtaHbhOFWmv1EAfwWk5NjdqEMpSlQ4EpQk8jK8yuLywrSi1OI EEonM/1mljw6cFCmHQXYg1Jw5wQfG2fKmRwaii+BeBRd7jfjOxKLCDSYQWjQ+D/T M3eH0xIHFIfaqEyJJAJdIa6Luqe8fzI= -----END CERTIFICATE-----Generated at Tue Nov 4 20:59:13 2025 by rpki-client