$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/44d3296f-f871-3a49-84e8-6fe6bbdf8be3.roa File: 44d3296f-f871-3a49-84e8-6fe6bbdf8be3.roa (raw, json) Hash identifier: ninyDctFaZh09VDzFWfC+Pqrd45g12zfdx9b5Z+fy+U= Subject key identifier: 39:CB:93:D5:97:28:0C:B5:99:05:BD:65:07:D5:1C:66:A1:4F:C0:73 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B5F377774943A0029DEE6B380 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/44d3296f-f871-3a49-84e8-6fe6bbdf8be3.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 3257 IP address blocks: 68.68.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:77:74:94:3a:00:29:de:e6:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=29643ce4-7481-409c-b951-009d490f6485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c4:7c:aa:57:25:a5:4e:67:5f:f6:0c:b4:c1: 04:4b:0a:46:c9:2a:ca:77:d7:42:18:b6:61:f1:b1: 60:45:8a:07:6c:4c:88:bd:be:a1:11:93:d6:3e:00: 55:a8:3b:53:1b:c4:19:db:ea:e9:d1:f3:b0:37:9a: 2f:18:7e:d2:fe:4b:7d:26:51:15:82:24:d2:d8:ba: 7d:90:e5:4f:20:55:6b:96:29:3f:0c:03:12:0d:c0: 22:3b:15:af:15:fe:3d:e0:0f:7d:88:ee:7a:32:66: 30:c1:28:3b:d2:70:10:fd:e5:eb:90:1b:a8:ff:fc: dc:44:c3:a2:f9:3a:a4:ba:ae:23:67:e3:9d:4f:89: 94:9d:1f:af:3f:1a:3a:65:ad:8e:a3:3d:56:3b:07: c4:6b:c8:d6:f5:17:4c:f3:d6:6c:b1:e5:2d:c5:b5: 64:82:43:88:91:c0:28:3e:71:1d:68:d7:8d:7e:2c: 2f:bc:3a:83:78:fa:ab:16:ec:2a:1c:ba:3e:5a:a2: ca:a4:a3:cf:29:7a:01:78:39:b2:52:64:78:9a:39: f5:5f:17:70:d4:74:48:9b:f4:97:94:45:49:49:44: b2:ab:50:6c:1b:a0:77:34:7b:b1:de:c5:42:50:9a: 78:7a:53:ed:22:22:51:aa:fa:fa:b5:04:12:62:2f: 59:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CB:93:D5:97:28:0C:B5:99:05:BD:65:07:D5:1C:66:A1:4F:C0:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/44d3296f-f871-3a49-84e8-6fe6bbdf8be3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 68.68.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:58:7f:c1:e1:16:dd:d3:de:0f:c9:f4:17:0d:cc:c9:c8:86: 1b:74:a6:fc:63:6e:3b:55:6f:6e:4a:3f:8a:cc:d6:c4:3c:b8: ff:6e:fa:a5:a6:7f:cd:3a:9f:da:f3:8c:44:85:a8:5f:62:c0: 0f:a5:b2:10:df:97:19:bc:b8:cf:39:77:b6:5d:26:5e:98:98: 0a:b2:75:51:d2:cd:c9:4f:76:6b:c3:88:7b:29:14:18:59:b0: b5:ca:96:c1:d5:ec:a8:9e:07:32:83:cf:93:6a:12:c4:36:d3: 23:45:c6:70:44:12:c6:98:44:ab:cc:3d:48:c2:89:5b:3a:bd: 58:51:20:21:1e:2f:0b:4a:30:a6:1d:1a:b6:66:f3:a5:6f:b8: 0f:7f:80:5d:52:c8:c7:9a:3e:4b:c4:7a:85:66:fc:83:62:17: c3:71:cc:33:16:90:f1:d0:20:57:b2:34:8d:63:3c:85:e6:86: c8:d6:2f:0b:e9:37:56:84:0c:a0:ed:77:b6:1a:77:81:f6:11: 4d:52:a2:53:0a:8a:0d:64:b5:03:df:e1:50:b0:d9:42:ed:1a: 11:1c:a5:26:c9:f6:01:06:2e:8b:fc:32:d1:8c:24:0f:b2:44: 72:94:ad:7b:7f:0e:92:37:28:76:1a:48:cc:ef:3b:96:9a:5b: 0a:b0:1c:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3d0lDoAKd7ms4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk Mjk2NDNjZTQtNzQ4MS00MDljLWI5NTEtMDA5ZDQ5MGY2NDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsR8qlclpU5nX/YMtMEESwpGySrKd9dCGLZh 8bFgRYoHbEyIvb6hEZPWPgBVqDtTG8QZ2+rp0fOwN5ovGH7S/kt9JlEVgiTS2Lp9 kOVPIFVrlik/DAMSDcAiOxWvFf494A99iO56MmYwwSg70nAQ/eXrkBuo//zcRMOi +Tqkuq4jZ+OdT4mUnR+vPxo6Za2Ooz1WOwfEa8jW9RdM89ZsseUtxbVkgkOIkcAo PnEdaNeNfiwvvDqDePqrFuwqHLo+WqLKpKPPKXoBeDmyUmR4mjn1Xxdw1HRIm/SX lEVJSUSyq1BsG6B3NHux3sVCUJp4elPtIiJRqvr6tQQSYi9Z3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnLk9WXKAy1mQW9ZQfVHGahT8BzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDRkMzI5NmYtZjg3MS0z YTQ5LTg0ZTgtNmZlNmJiZGY4YmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpYf8HhFt3T3g/J9BcNzMnIhht0pvxjbjtVb25KP4rM1sQ8uP9u+qWm f806n9rzjESFqF9iwA+lshDflxm8uM85d7ZdJl6YmAqydVHSzclPdmvDiHspFBhZ sLXKlsHV7KieBzKDz5NqEsQ20yNFxnBEEsaYRKvMPUjCiVs6vVhRICEeLwtKMKYd GrZm86VvuA9/gF1SyMeaPkvEeoVm/INiF8NxzDMWkPHQIFeyNI1jPIXmhsjWLwvp N1aEDKDtd7Yad4H2EU1SolMKig1ktQPf4VCw2ULtGhEcpSbJ9gEGLov8MtGMJA+y RHKUrXt/DpI3KHYaSMzvO5aaWwqwHAk= -----END CERTIFICATE-----Generated at Sat Oct 11 13:30:02 2025 by rpki-client