$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f2ab85e-02ef-3896-8c69-9fc85acdcc7e.roa File: 8f2ab85e-02ef-3896-8c69-9fc85acdcc7e.roa (raw, json) Hash identifier: AmUznFHsCl1Y24EHNSfdI5Zy4qa+XQdtxvUg291jZX0= Subject key identifier: 90:D1:04:12:57:0E:D9:B2:FA:94:BC:01:F3:23:7F:8B:F2:00:AE:79 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BBE406498E50BBE3084B1D400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f2ab85e-02ef-3896-8c69-9fc85acdcc7e.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 68.233.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:64:98:e5:0b:be:30:84:b1:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=9d42997e-4c26-4c1d-8b68-96888e9abca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e1:c4:a7:21:82:2e:ef:dd:c7:7a:c0:11:65: 51:32:58:24:f6:ac:2f:80:5e:f7:7c:17:7d:7f:6b: a4:55:ea:01:6a:21:34:d7:e8:e5:3c:2e:28:06:05: b2:39:8b:fd:3d:ad:cc:b6:e1:5b:dd:48:d4:6d:63: ba:e8:03:fa:32:5f:e0:18:22:54:15:cb:23:96:c7: 53:c5:1e:4b:31:33:e9:fe:c2:f7:47:4b:82:74:6d: 69:72:fe:b4:d3:c3:a6:fb:51:37:cb:0e:6f:a6:dc: f4:48:6d:58:19:e7:bd:3d:a2:09:bc:89:64:23:4e: c6:39:f2:c3:47:5c:2e:b9:1b:15:7a:47:f3:17:01: 91:e3:3b:04:11:74:41:b1:d8:b3:64:16:fb:e3:19: 15:c8:bb:2d:b1:8d:a4:fb:bd:7b:94:e2:93:f9:9c: dc:d7:2d:f5:40:fd:c4:9a:e0:ad:03:65:0b:95:38: 70:2a:76:3d:7f:ed:e6:a6:b4:4e:d9:83:23:17:19: 3d:13:9c:d8:ee:5a:e1:e6:47:07:43:8d:db:44:b9: 9c:e0:f6:07:c1:40:49:0c:66:23:de:5f:cc:48:4c: 98:7c:c9:43:91:4f:3c:cd:5a:5c:42:06:52:70:a0: 0f:f9:c4:1d:6d:ff:ce:a3:d9:8a:4c:d6:c2:fa:cd: ab:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D1:04:12:57:0E:D9:B2:FA:94:BC:01:F3:23:7F:8B:F2:00:AE:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f2ab85e-02ef-3896-8c69-9fc85acdcc7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 68.233.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:43:2b:03:d8:2b:3d:b7:46:75:5e:1f:16:8a:70:d8:1a:ff: 6a:81:f6:91:8b:d7:a5:8f:bd:d0:dd:b1:15:db:ea:5f:28:49: 27:e9:25:ca:fc:c2:b2:41:83:45:2e:60:3b:68:30:b4:82:c5: af:a7:51:1c:f8:88:93:1c:d7:d4:d5:b2:db:4a:2b:72:f7:60: d5:d1:e5:66:65:aa:09:10:b1:cf:31:73:2b:77:fc:2f:72:ea: 53:9d:41:5f:01:c0:ae:f6:76:29:a1:98:2f:61:94:56:a2:a2: 4e:23:73:8f:b5:f5:15:28:a7:19:fc:c7:db:35:5c:46:b6:fe: 4d:49:53:68:af:8e:0a:5f:fc:83:6c:fc:75:19:f2:31:c0:fb: dd:a8:59:1a:a6:b7:cc:7a:19:b8:4d:15:64:03:2f:68:1f:64: 02:21:6c:26:dc:3c:1e:7b:01:3e:75:63:63:bd:2a:28:5a:d0: c7:c9:2c:cf:ee:f5:e5:8b:27:f8:6a:dd:95:19:7e:16:01:76: 35:1a:44:f0:5d:69:f6:a8:02:09:68:e9:52:17:e2:cf:52:a7: 34:f6:2a:a4:06:37:38:c2:a8:d4:bd:8d:23:0c:a8:67:d5:ac: 97:9f:5e:c6:f5:75:77:03:38:65:bd:f3:60:db:eb:01:a2:1f: e6:cd:42:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QGSY5Qu+MISx1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk OWQ0Mjk5N2UtNGMyNi00YzFkLThiNjgtOTY4ODhlOWFiY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuHEpyGCLu/dx3rAEWVRMlgk9qwvgF73fBd9 f2ukVeoBaiE01+jlPC4oBgWyOYv9Pa3MtuFb3UjUbWO66AP6Ml/gGCJUFcsjlsdT xR5LMTPp/sL3R0uCdG1pcv6008Om+1E3yw5vptz0SG1YGee9PaIJvIlkI07GOfLD R1wuuRsVekfzFwGR4zsEEXRBsdizZBb74xkVyLstsY2k+717lOKT+Zzc1y31QP3E muCtA2ULlThwKnY9f+3mprRO2YMjFxk9E5zY7lrh5kcHQ43bRLmc4PYHwUBJDGYj 3l/MSEyYfMlDkU88zVpcQgZScKAP+cQdbf/Oo9mKTNbC+s2rrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDRBBJXDtmy+pS8AfMjf4vyAK55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGYyYWI4NWUtMDJlZi0z ODk2LThjNjktOWZjODVhY2RjYzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZDKwPYKz23RnVeHxaKcNga/2qB9pGL16WPvdDdsRXb6l8oSSfpJcr8 wrJBg0UuYDtoMLSCxa+nURz4iJMc19TVsttKK3L3YNXR5WZlqgkQsc8xcyt3/C9y 6lOdQV8BwK72dimhmC9hlFaiok4jc4+19RUopxn8x9s1XEa2/k1JU2ivjgpf/INs /HUZ8jHA+92oWRqmt8x6GbhNFWQDL2gfZAIhbCbcPB57AT51Y2O9Kiha0MfJLM/u 9eWLJ/hq3ZUZfhYBdjUaRPBdafaoAglo6VIX4s9SpzT2KqQGNzjCqNS9jSMMqGfV rJefXsb1dXcDOGW982Db6wGiH+bNQjw= -----END CERTIFICATE-----Generated at Wed Nov 5 08:51:06 2025 by rpki-client