$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/5fc905ea-be88-34f6-8d80-4b3374b3b378.roa File: 5fc905ea-be88-34f6-8d80-4b3374b3b378.roa (raw, json) Hash identifier: D7fPWB3qZYCRxLd630fZCLiFYrJXGkbdGrnUylDYU7U= Subject key identifier: C7:C2:E0:02:B9:AB:B6:D9:9B:0F:C2:1F:B1:A2:C2:D5:41:D5:4E:38 Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Certificate serial: 010D0C9F4328584BA39D24134ADC9C2B67259100 Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/5fc905ea-be88-34f6-8d80-4b3374b3b378.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 4809 IP address blocks: 69.163.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:24:13:4a:dc:9c:2b:67:25:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=11a848ad-1a93-46be-8c68-29506f5633a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:0e:2a:83:56:4b:d6:9b:83:cb:21:1f:ad: 48:a4:d7:79:1a:23:35:6c:fd:69:75:83:10:13:d5: 88:2e:ed:d7:22:cd:0a:5a:bf:95:0e:88:35:2e:db: 5e:52:e2:ab:00:3e:ac:57:04:c1:9a:5c:23:69:a7: 4e:c1:56:b3:eb:c9:73:b9:42:59:c1:7e:51:e6:75: 1f:d7:b0:bd:4f:a3:fe:aa:b0:c4:0c:a3:ab:14:7c: a2:5c:99:24:79:a9:35:72:58:d8:a7:bb:81:2a:05: b2:30:07:ea:29:a4:64:7d:21:da:48:2e:5a:c2:53: 54:41:97:11:09:1f:c4:af:46:86:1b:3f:ce:15:c0: 4f:ff:34:d2:e8:a6:f4:26:3a:9f:45:35:38:45:60: 93:31:50:e9:4a:7d:65:bc:0a:12:0a:63:a1:cb:76: af:49:8b:93:dd:a4:0f:e9:1b:65:51:9b:84:7a:e0: 8e:e3:43:51:d4:b6:49:ad:06:5b:15:fb:4d:1a:eb: 92:7a:21:23:26:f8:26:2a:a5:a2:1e:c5:85:04:30: b9:bc:f6:78:10:a1:2e:fe:46:73:1f:45:8d:87:10: 07:1e:fa:d9:34:6a:72:ce:fc:06:03:75:f7:7c:35: f9:e9:d4:d9:06:39:a3:8e:e5:c3:83:3e:e7:17:d7: ce:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C2:E0:02:B9:AB:B6:D9:9B:0F:C2:1F:B1:A2:C2:D5:41:D5:4E:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/5fc905ea-be88-34f6-8d80-4b3374b3b378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl X509v3 Authority Key Identifier: keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer sbgp-ipAddrBlock: critical IPv4: 69.163.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ee:33:c0:0e:f4:e0:c8:9c:66:a4:44:ae:2e:a1:16:86:63: ef:54:36:0c:da:3a:1f:73:25:cf:8b:74:09:e0:50:17:dc:0e: a3:c3:da:6f:d2:3f:6c:2e:6a:84:89:c7:ec:21:48:76:c2:aa: b2:b3:56:83:a7:24:12:0d:c5:51:15:83:1b:05:0e:5e:d5:29: 13:80:d7:fd:1b:48:59:5e:1d:71:ff:01:06:e8:94:58:37:7a: 23:dd:12:16:65:bf:14:59:a3:57:e8:36:f5:bd:f3:59:a2:19: c3:9b:7a:8d:0b:38:d8:c7:6e:87:ed:6a:73:39:17:54:3e:3e: 18:da:d2:d9:4e:c8:a6:54:6f:b3:22:d8:c7:56:e3:c3:34:41: 76:5f:9e:0f:ef:b8:e0:1a:0d:97:b5:26:e1:70:aa:2a:3a:16: 64:2a:03:30:7f:05:e7:f5:44:eb:ae:63:71:39:a6:54:fa:d0: d5:66:ef:1a:bc:36:a7:43:85:48:1d:2a:fa:32:cb:b5:35:89: d1:81:5f:3f:df:02:8b:5b:fc:0e:bd:e1:ff:d8:48:78:33:be: 55:12:ac:a9:dd:55:a2:df:2d:d0:46:2b:94:a0:86:1e:28:d8: 74:23:3c:07:5d:ad:2c:25:fd:c1:86:16:98:37:74:cd:2d:f3: f0:5a:1a:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSQTStycK2clkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl Y2FmMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MTFhODQ4YWQtMWE5My00NmJlLThjNjgtMjk1MDZmNTYzM2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUkOKoNWS9abg8shH61IpNd5GiM1bP1pdYMQ E9WILu3XIs0KWr+VDog1LtteUuKrAD6sVwTBmlwjaadOwVaz68lzuUJZwX5R5nUf 17C9T6P+qrDEDKOrFHyiXJkkeak1cljYp7uBKgWyMAfqKaRkfSHaSC5awlNUQZcR CR/Er0aGGz/OFcBP/zTS6Kb0JjqfRTU4RWCTMVDpSn1lvAoSCmOhy3avSYuT3aQP 6RtlUZuEeuCO40NR1LZJrQZbFftNGuuSeiEjJvgmKqWiHsWFBDC5vPZ4EKEu/kZz H0WNhxAHHvrZNGpyzvwGA3X3fDX56dTZBjmjjuXDgz7nF9fOWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfC4AK5q7bZmw/CH7GiwtVB1U44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvNWZjOTA1ZWEtYmU4OC0z NGY2LThkODAtNGIzMzc0YjNiMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5 NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4 ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1 ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARaN7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/uM8AO9ODInGakRK4uoRaGY+9UNgzaOh9zJc+LdAngUBfcDqPD2m/S P2wuaoSJx+whSHbCqrKzVoOnJBINxVEVgxsFDl7VKROA1/0bSFleHXH/AQbolFg3 eiPdEhZlvxRZo1foNvW981miGcObeo0LONjHboftanM5F1Q+Phja0tlOyKZUb7Mi 2MdW48M0QXZfng/vuOAaDZe1JuFwqio6FmQqAzB/Bef1ROuuY3E5plT60NVm7xq8 NqdDhUgdKvoyy7U1idGBXz/fAotb/A694f/YSHgzvlUSrKndVaLfLdBGK5Sghh4o 2HQjPAddrSwl/cGGFpg3dM0t8/BaGjc= -----END CERTIFICATE-----Generated at Wed Nov 5 02:32:20 2025 by rpki-client