$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/dfdbfc18-aa98-3225-abfe-7e62127b7000.roa File: dfdbfc18-aa98-3225-abfe-7e62127b7000.roa (raw, json) Hash identifier: cj8PXnFaGFQfok50rfjgPQ+W1ZOgLNaCqiuxI8q8RxI= Subject key identifier: E8:68:FF:48:E5:A3:02:B3:33:D3:A5:31:8A:BD:63:87:01:65:C9:EB Certificate issuer: /CN=68e8d38b-0b87-495a-96cc-346ddf0d5802 Certificate serial: 010D0C9F4328584B3C65EB03E5A30F6EDF282740 Authority key identifier: BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/dfdbfc18-aa98-3225-abfe-7e62127b7000.roa Signing time: Thu 18 Sep 2025 13:41:33 +0000 ROA not before: Thu 18 Sep 2025 13:41:33 +0000 ROA not after: Wed 17 Dec 2025 14:41:33 +0000 asID: 401990 IP address blocks: 23.145.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:65:eb:03:e5:a3:0f:6e:df:28:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e8d38b-0b87-495a-96cc-346ddf0d5802 Validity Not Before: Sep 18 13:41:33 2025 GMT Not After : Dec 17 14:41:33 2025 GMT Subject: CN=6fecff5f-ae90-405f-b3ea-c6970932b991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ed:da:69:9d:c7:85:e1:bf:1a:74:74:76:6e: 5f:20:19:97:18:a7:fc:ee:2a:e3:73:b0:b6:e4:48: 52:6b:53:5d:53:70:23:28:ce:11:e2:ec:8f:27:21: 01:b4:22:ff:0d:57:8c:dd:4d:5d:13:36:da:27:5c: e8:b5:5d:e4:64:41:22:5b:27:1e:90:d1:46:7a:25: 0b:04:c9:1e:86:6d:41:85:34:34:bf:ae:ea:69:81: 5b:93:d7:7f:61:0d:a6:e6:7e:a3:a5:7f:a9:7b:9f: 5e:56:13:96:05:f1:5c:09:20:90:4f:6f:ae:7d:67: f2:5a:9d:94:1b:97:f7:cc:1d:0d:c1:99:91:73:8d: 96:87:60:1c:11:a9:c8:ae:1d:5b:14:d6:9e:4b:ad: 67:9e:1c:cd:7b:b4:48:e4:8d:85:7a:b3:1f:4b:49: b2:f2:04:bf:0e:eb:69:a8:fe:13:3f:1a:48:68:59: e1:79:a6:72:b0:83:4e:70:ca:19:33:b5:e7:b1:f5: e7:2a:ab:d2:45:7a:40:f8:a8:b7:79:3d:84:e7:21: 80:2b:cf:9d:57:c3:ab:c3:34:91:05:de:62:89:7d: 1e:ba:d0:d3:96:9d:f8:b3:96:9d:e3:92:40:cd:f4: 03:cc:ec:7e:e1:cf:b1:d4:9c:df:73:e9:a0:b5:5e: ba:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:68:FF:48:E5:A3:02:B3:33:D3:A5:31:8A:BD:63:87:01:65:C9:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/dfdbfc18-aa98-3225-abfe-7e62127b7000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl X509v3 Authority Key Identifier: keyid:BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer sbgp-ipAddrBlock: critical IPv4: 23.145.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:d3:5d:45:3a:dc:c7:9b:58:08:b7:da:d0:f5:ea:ea:36:da: a8:93:83:8b:f2:f1:5c:85:79:db:ba:94:e1:40:bf:31:53:0a: 55:85:79:c3:77:c9:d8:69:18:e3:70:4e:c7:58:63:a7:25:d3: 99:f7:25:9d:03:82:ce:bd:25:ce:ec:0c:17:3b:07:24:02:83: 1b:4a:b0:49:26:10:69:39:0a:ac:60:c4:a2:50:ac:92:2b:d4: 18:d6:5c:64:cc:ac:0a:3c:23:b6:ad:8c:58:a5:a2:bf:2b:77: d9:75:9d:d4:06:78:f1:fe:fd:e8:80:1b:2b:7e:2f:34:de:d7: 96:84:f9:9b:bf:84:00:e3:47:5e:3c:aa:9a:20:70:a7:77:93: ba:a8:b2:0c:7c:44:09:8b:97:bc:fc:b8:43:91:b0:f6:81:cd: 0f:1e:ee:5f:67:0d:95:b0:90:d2:2d:0c:2d:79:ab:5e:32:ec: 1e:9f:4e:5c:68:02:1d:d6:c5:4f:62:95:07:1d:55:a7:65:01: aa:48:98:60:2d:31:e2:13:bf:b4:f6:5f:fc:4e:e1:ae:1f:fa: 29:8d:55:d5:73:0c:d6:73:d6:9d:de:4b:36:47:c0:94:60:77: 2c:65:f1:da:de:51:5b:b5:99:c4:ba:b8:65:f8:64:cc:da:4c: 97:4d:aa:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8ZesD5aMPbt8oJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhlOGQzOGItMGI4Ny00OTVhLTk2Y2MtMzQ2ZGRmMGQ1 ODAyMB4XDTI1MDkxODEzNDEzM1oXDTI1MTIxNzE0NDEzM1owLzEtMCsGA1UEAxMk NmZlY2ZmNWYtYWU5MC00MDVmLWIzZWEtYzY5NzA5MzJiOTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO3aaZ3HheG/GnR0dm5fIBmXGKf87irjc7C2 5EhSa1NdU3AjKM4R4uyPJyEBtCL/DVeM3U1dEzbaJ1zotV3kZEEiWycekNFGeiUL BMkehm1BhTQ0v67qaYFbk9d/YQ2m5n6jpX+pe59eVhOWBfFcCSCQT2+ufWfyWp2U G5f3zB0NwZmRc42Wh2AcEanIrh1bFNaeS61nnhzNe7RI5I2FerMfS0my8gS/Dutp qP4TPxpIaFnheaZysINOcMoZM7XnsfXnKqvSRXpA+Ki3eT2E5yGAK8+dV8OrwzSR Bd5iiX0eutDTlp34s5ad45JAzfQDzOx+4c+x1Jzfc+mgtV66wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOho/0jlowKzM9OlMYq9Y4cBZcnrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82OGU4 ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZkZGYwZDU4MDIvZGZkYmZjMTgtYWE5OC0z MjI1LWFiZmUtN2U2MjEyN2I3MDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjhlOGQzOGItMGI4Ny00OTVhLTk2 Y2MtMzQ2ZGRmMGQ1ODAyLzY4ZThkMzhiLTBiODctNDk1YS05NmNjLTM0NmRkZjBk NTgwMi5jcmwwHwYDVR0jBBgwFoAUvYEso06SVZbNE7XZXK6S4E0ZZwQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82OGU4ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZk ZGYwZDU4MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5HEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLTXUU63MebWAi32tD16uo22qiTg4vy8VyFedu6lOFAvzFTClWFecN3 ydhpGONwTsdYY6cl05n3JZ0Dgs69Jc7sDBc7ByQCgxtKsEkmEGk5CqxgxKJQrJIr 1BjWXGTMrAo8I7atjFilor8rd9l1ndQGePH+/eiAGyt+LzTe15aE+Zu/hADjR148 qpogcKd3k7qosgx8RAmLl7z8uEORsPaBzQ8e7l9nDZWwkNItDC15q14y7B6fTlxo Ah3WxU9ilQcdVadlAapImGAtMeITv7T2X/xO4a4f+imNVdVzDNZz1p3eSzZHwJRg dyxl8dreUVu1mcS6uGX4ZMzaTJdNqiw= -----END CERTIFICATE-----Generated at Wed Nov 5 17:11:46 2025 by rpki-client