$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa File: 34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa (raw, json) Hash identifier: Uc0pTH8T1t5LzyCx+8ws9j4gL58wsSUh7fK5SowaCyw= Subject key identifier: 46:6D:AA:85:AE:59:5F:90:A5:4A:88:1B:4B:25:FE:82:E1:CE:33:52 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584BA0D2455255721D40B8A63880 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 21766 IP address blocks: 69.8.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:45:52:55:72:1d:40:b8:a6:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=d73d619f-9c53-42df-b72c-245df1b0debd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:57:ec:64:7d:d9:b0:27:af:91:c3:f2:bc: 6a:d6:3a:bc:11:d7:f2:c2:10:0f:c6:b2:29:36:ee: ec:20:c2:78:41:b6:2c:92:c6:7d:9b:7d:55:54:94: ac:34:fd:8f:19:11:2d:b2:ff:15:c9:a0:98:28:74: e1:2f:d8:c0:29:6a:5f:32:ae:49:56:28:b6:5e:bf: 8c:67:75:2c:d9:ef:0f:54:ff:a3:b1:01:00:67:0b: 2f:f4:2e:41:8f:e0:66:90:b5:40:57:91:40:d3:72: b3:46:89:40:df:ed:96:a0:ce:cf:88:93:7c:e4:58: fb:ad:59:e7:30:aa:86:ec:71:cd:29:e7:7a:3d:14: 5a:80:1b:68:b5:24:15:3d:9d:9d:69:65:1c:61:a6: 36:4e:ad:f9:40:78:b2:1e:ed:a5:48:76:19:e2:d7: 04:ac:fe:1c:95:13:3d:37:c7:0e:16:87:de:25:88: 61:14:9d:a7:f1:aa:93:1e:c8:7e:64:da:55:43:04: f4:9a:4a:7e:a2:b4:11:8f:cf:b5:cb:81:a5:3e:f3: 45:4a:a8:8a:64:eb:e7:b5:30:7b:57:4b:fb:a8:cd: 84:02:d8:b3:93:53:90:7d:6f:ef:2e:30:82:4c:78: 9f:6f:65:81:22:8a:95:79:fd:8e:13:15:79:e4:94: db:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6D:AA:85:AE:59:5F:90:A5:4A:88:1B:4B:25:FE:82:E1:CE:33:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 69.8.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:2f:a8:dd:48:13:0c:31:2b:c8:2f:33:bc:21:3d:2e:ed:b9: 88:15:be:e9:56:f6:2d:fd:4a:cf:97:8f:e8:03:d4:12:e3:63: dd:21:63:c0:49:33:e3:d9:70:cb:2d:f7:80:e2:e3:66:33:30: a4:fc:bb:57:c2:10:59:be:b3:4b:c9:49:eb:29:d9:cb:9e:21: 5a:9e:22:ba:2a:09:50:e4:5a:3b:53:47:e0:49:2d:ed:b1:ec: 6e:57:a5:80:45:31:17:a7:54:f9:32:ae:0a:07:d6:a4:c0:cc: 28:74:0e:59:a3:2e:30:bf:29:24:11:db:dc:e2:76:6c:6d:19: c7:f0:d3:d9:95:26:0e:af:ce:9b:6d:db:07:f1:3f:9e:64:d0: d4:ea:f0:8e:b9:66:2c:60:36:f6:be:17:db:fe:72:c9:ce:9a: 45:6a:d2:f8:45:c1:ba:06:26:91:fe:e5:55:92:ee:44:fa:57: b2:24:15:d0:6a:d2:ea:82:2c:94:a7:88:58:e4:17:25:d5:0c: ae:ce:f4:7a:4b:6e:00:c7:02:f0:11:54:65:52:d1:01:bd:5a: 4b:0e:41:f0:be:b4:18:78:ec:86:4f:d1:56:04:d0:8d:9a:a9: 03:b5:95:2a:34:47:f1:ac:ab:53:e7:4a:81:3f:49:5a:38:33: 50:5a:e4:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kVSVXIdQLimOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZDczZDYxOWYtOWM1My00MmRmLWI3MmMtMjQ1ZGYxYjBkZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOFX7GR92bAnr5HD8rxq1jq8EdfywhAPxrIp Nu7sIMJ4QbYsksZ9m31VVJSsNP2PGREtsv8VyaCYKHThL9jAKWpfMq5JVii2Xr+M Z3Us2e8PVP+jsQEAZwsv9C5Bj+BmkLVAV5FA03KzRolA3+2WoM7PiJN85Fj7rVnn MKqG7HHNKed6PRRagBtotSQVPZ2daWUcYaY2Tq35QHiyHu2lSHYZ4tcErP4clRM9 N8cOFofeJYhhFJ2n8aqTHsh+ZNpVQwT0mkp+orQRj8+1y4GlPvNFSqiKZOvntTB7 V0v7qM2EAtizk1OQfW/vLjCCTHifb2WBIoqVef2OExV55JTbOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZtqoWuWV+QpUqIG0sl/oLhzjNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvMzRiNzQ0MGYtZmE5ZC0z ZjQwLTljODctZjRlNzQ4NGM1Mjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERQigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkvqN1IEwwxK8gvM7whPS7tuYgVvulW9i39Ss+Xj+gD1BLjY90hY8BJ M+PZcMst94Di42YzMKT8u1fCEFm+s0vJSesp2cueIVqeIroqCVDkWjtTR+BJLe2x 7G5XpYBFMRenVPkyrgoH1qTAzCh0DlmjLjC/KSQR29zidmxtGcfw09mVJg6vzptt 2wfxP55k0NTq8I65ZixgNva+F9v+csnOmkVq0vhFwboGJpH+5VWS7kT6V7IkFdBq 0uqCLJSniFjkFyXVDK7O9HpLbgDHAvARVGVS0QG9WksOQfC+tBh47IZP0VYE0I2a qQO1lSo0R/Gsq1PnSoE/SVo4M1Ba5GE= -----END CERTIFICATE-----Generated at Wed Nov 5 21:10:01 2025 by rpki-client