$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1007617e-6ebf-3839-9dbe-b1c5dc35fded.roa File: 1007617e-6ebf-3839-9dbe-b1c5dc35fded.roa (raw, json) Hash identifier: s5n33VqQBldACpnARe9syBmKFYbU/rE1fltyMuhbv+4= Subject key identifier: 5F:87:BB:2B:91:54:F7:E0:AC:D1:82:0F:65:D5:F9:3D:9A:76:A0:9C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BBE4064A6FD81F74E11F66900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1007617e-6ebf-3839-9dbe-b1c5dc35fded.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 68.233.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:64:a6:fd:81:f7:4e:11:f6:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=3d6c9243-e01c-4d4f-bace-f353f06604bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:83:f5:db:10:88:c2:b8:80:85:a2:9c:0c: 32:cc:01:62:5d:fe:3f:42:4f:93:26:89:34:d0:00: 8b:4f:52:3d:0d:08:63:10:a7:dd:d6:d6:b7:e7:53: 1a:bf:ce:b1:4f:09:b5:de:22:39:ea:05:39:12:e9: ba:a7:c9:71:ac:cf:33:0c:37:02:b4:f2:02:c9:da: cb:4c:40:54:c0:1f:b5:86:ea:7c:a0:49:dd:3e:34: 35:4d:ad:01:ca:b5:2b:dd:88:36:2a:8b:26:15:85: ab:01:df:11:2c:45:1c:ef:08:04:4c:20:09:f6:32: bb:06:55:13:4f:9e:62:26:e5:4f:a3:50:f2:19:d3: f9:4e:b0:e4:7f:7d:de:b4:80:bd:9e:b8:2f:22:c3: c7:b1:9f:22:85:16:ab:73:c3:46:40:bb:47:47:93: c7:fb:c1:92:41:0c:e1:a6:04:7f:09:3a:5c:ad:05: 44:d4:fb:5f:c4:a6:08:29:15:98:f5:67:86:7b:0d: 90:61:4a:5f:36:9d:00:3b:d4:0d:25:82:b5:b9:07: 05:eb:9f:6f:fe:cf:3d:4d:57:dc:52:22:d2:46:35: 6d:fa:17:b9:72:46:67:c9:c5:45:2e:79:aa:8f:1b: 4b:4f:1e:fe:05:e0:c9:1d:37:9f:b2:77:e5:3f:cb: 74:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:87:BB:2B:91:54:F7:E0:AC:D1:82:0F:65:D5:F9:3D:9A:76:A0:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1007617e-6ebf-3839-9dbe-b1c5dc35fded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 68.233.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ce:6b:1a:d8:76:e5:49:52:94:a6:77:19:1d:8f:96:8a:e2: d3:f4:36:7a:9d:30:1d:d1:ed:b7:65:58:c1:c6:19:77:c9:88: a4:17:db:7d:61:5f:03:36:95:75:38:af:aa:3a:e4:d9:b8:08: cf:f1:0b:27:ea:15:c0:e4:bf:aa:7f:fc:ca:98:0b:95:9f:18: ae:d1:a3:32:bf:f1:6a:5b:85:da:53:36:a8:34:50:ca:2b:d9: 8e:c3:d2:89:17:f5:1b:7a:e9:bb:33:4f:48:e6:a8:a3:d2:a9: 2b:6b:e4:45:e2:14:b4:e7:88:0c:30:dc:17:55:27:67:81:3f: 07:43:fa:60:93:6c:9d:17:ef:42:6e:de:80:79:68:f5:67:4b: 9e:cd:c5:23:dc:56:22:6a:87:16:ee:f3:a5:dd:af:10:03:b2: 6a:80:24:b2:eb:d9:79:1f:14:8a:86:ff:c9:4c:bb:88:e9:28: 32:fe:50:0a:13:2c:b2:c4:ef:cd:31:91:51:6d:41:c1:43:78: f2:22:fe:f8:90:59:5a:00:47:d0:c3:97:01:9b:b9:29:30:29: 2f:b6:97:93:6f:49:d6:0e:ff:f5:c1:6c:f7:bd:eb:c8:33:f7: 86:3a:8d:9d:de:09:99:25:f4:3e:f2:84:fd:e1:56:56:47:29: 3a:b5:92:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QGSm/YH3ThH2aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk M2Q2YzkyNDMtZTAxYy00ZDRmLWJhY2UtZjM1M2YwNjYwNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0+D9dsQiMK4gIWinAwyzAFiXf4/Qk+TJok0 0ACLT1I9DQhjEKfd1ta351Mav86xTwm13iI56gU5Eum6p8lxrM8zDDcCtPICydrL TEBUwB+1hup8oEndPjQ1Ta0ByrUr3Yg2KosmFYWrAd8RLEUc7wgETCAJ9jK7BlUT T55iJuVPo1DyGdP5TrDkf33etIC9nrgvIsPHsZ8ihRarc8NGQLtHR5PH+8GSQQzh pgR/CTpcrQVE1PtfxKYIKRWY9WeGew2QYUpfNp0AO9QNJYK1uQcF659v/s89TVfc UiLSRjVt+he5ckZnycVFLnmqjxtLTx7+BeDJHTefsnflP8t0DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+HuyuRVPfgrNGCD2XV+T2adqCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTAwNzYxN2UtNmViZi0z ODM5LTlkYmUtYjFjNWRjMzVmZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEROlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbOaxrYduVJUpSmdxkdj5aK4tP0NnqdMB3R7bdlWMHGGXfJiKQX231h XwM2lXU4r6o65Nm4CM/xCyfqFcDkv6p//MqYC5WfGK7RozK/8WpbhdpTNqg0UMor 2Y7D0okX9Rt66bszT0jmqKPSqStr5EXiFLTniAww3BdVJ2eBPwdD+mCTbJ0X70Ju 3oB5aPVnS57NxSPcViJqhxbu86XdrxADsmqAJLLr2XkfFIqG/8lMu4jpKDL+UAoT LLLE780xkVFtQcFDePIi/viQWVoAR9DDlwGbuSkwKS+2l5NvSdYO//XBbPe968gz 94Y6jZ3eCZkl9D7yhP3hVlZHKTq1kp0= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:48 2025 by rpki-client