$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/24b6be5f-fd40-3f9c-8e6b-22433d4d72d2.roa File: 24b6be5f-fd40-3f9c-8e6b-22433d4d72d2.roa (raw, json) Hash identifier: /TktinwLHj/zneqd75pH1ixTmZuoVCJfK4LmUJq1rAE= Subject key identifier: E7:EC:DE:10:D3:53:79:25:12:73:76:D1:4D:31:76:49:50:78:32:86 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584B127165B8F84B605D95286180 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/24b6be5f-fd40-3f9c-8e6b-22433d4d72d2.roa Signing time: Wed 03 Sep 2025 13:00:41 +0000 ROA not before: Wed 03 Sep 2025 13:00:41 +0000 ROA not after: Tue 02 Dec 2025 14:00:41 +0000 asID: 397423 IP address blocks: 68.233.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:71:65:b8:f8:4b:60:5d:95:28:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 3 13:00:41 2025 GMT Not After : Dec 2 14:00:41 2025 GMT Subject: CN=cd2de991-a987-49ab-917b-13c083b5ca2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:a1:f4:a9:ac:74:c8:03:29:f5:f6:1d:a0: 3a:e7:ca:cd:2f:23:6a:11:7c:87:26:89:22:46:9d: e5:4d:5d:f2:de:98:9e:24:f1:ef:4a:c3:b8:7a:10: 7e:20:ff:29:83:23:66:ef:e9:17:61:cb:61:79:0b: 69:ed:7c:16:e1:66:3f:d8:d8:96:44:20:ca:9a:7e: 15:4d:db:66:d4:cb:e0:5e:e7:25:4a:50:91:44:a3: 92:3e:27:14:8d:45:8d:d9:f4:07:67:7b:ab:70:19: 94:02:64:25:21:16:e0:4e:7b:b9:f0:80:0b:00:80: df:dc:f9:ca:23:71:3b:c1:cc:b9:b4:fb:cc:5e:cc: 19:9e:37:5f:17:4e:57:fd:20:42:63:2d:15:0d:87: 2a:48:d7:94:cc:9d:0d:94:ed:50:ba:fe:d4:1a:32: f5:f6:33:f5:5d:a9:19:7e:77:a7:46:9c:db:52:61: a8:d0:6c:73:dc:b7:51:ea:a7:9e:0e:50:69:5d:d8: 83:c7:19:23:fe:ad:c6:44:13:66:35:f6:38:e5:3a: d1:0c:eb:26:9c:05:52:2f:eb:42:f5:2f:dd:e4:f5: 97:83:1e:7f:d9:c4:29:c0:42:0a:80:53:36:82:3f: b2:c0:22:5b:94:e6:63:5a:b3:59:16:63:b7:39:cd: dd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EC:DE:10:D3:53:79:25:12:73:76:D1:4D:31:76:49:50:78:32:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/24b6be5f-fd40-3f9c-8e6b-22433d4d72d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:cc:bb:16:39:10:10:21:e5:4a:15:68:80:51:27:51:6a:0e: d5:28:f9:5a:4f:e1:7a:3b:61:d7:2b:ee:4a:d2:ad:41:5c:33: 82:89:df:32:87:85:ec:f0:5e:14:07:2c:5d:05:98:53:f7:26: 7f:e9:d3:c9:8e:93:2c:60:90:4a:7f:c5:9e:77:df:6d:2d:f9: 91:f4:0c:ce:01:73:be:1a:d7:d4:15:aa:24:56:85:b2:be:52: fb:76:df:ab:7e:07:f1:7c:76:8e:f8:95:35:67:8b:fb:71:a0: a0:bc:30:3c:bc:c5:f8:c1:aa:13:50:2e:0c:5c:b4:18:18:d1: 23:18:fa:d7:f1:f9:9c:4a:0b:55:18:dd:f7:85:08:fb:ab:7c: c7:1c:c4:c4:55:e4:04:43:fb:ac:50:7b:ab:d9:1e:f3:e9:8d: b2:2f:c8:5b:cf:ab:31:80:48:c0:a2:7b:6f:cc:d3:6d:34:f2: 45:8b:ea:72:6d:78:6c:03:47:18:f6:f1:58:9a:9f:59:9c:3e: 41:a7:b2:eb:6c:20:ba:b0:f2:1c:17:53:d7:b9:98:9f:b1:0e: 22:5a:13:f7:a7:9e:6b:bb:42:55:b6:4d:e8:0c:5f:f5:26:81: 1f:00:f2:3a:8f:60:8e:07:ff:c3:2b:cc:0f:d4:dd:8a:d7:44: db:73:d4:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsScWW4+EtgXZUoYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk Y2QyZGU5OTEtYTk4Ny00OWFiLTkxN2ItMTNjMDgzYjVjYTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjSh9KmsdMgDKfX2HaA658rNLyNqEXyHJoki Rp3lTV3y3pieJPHvSsO4ehB+IP8pgyNm7+kXYctheQtp7XwW4WY/2NiWRCDKmn4V Tdtm1MvgXuclSlCRRKOSPicUjUWN2fQHZ3urcBmUAmQlIRbgTnu58IALAIDf3PnK I3E7wcy5tPvMXswZnjdfF05X/SBCYy0VDYcqSNeUzJ0NlO1Quv7UGjL19jP1XakZ fnenRpzbUmGo0Gxz3LdR6qeeDlBpXdiDxxkj/q3GRBNmNfY45TrRDOsmnAVSL+tC 9S/d5PWXgx5/2cQpwEIKgFM2gj+ywCJblOZjWrNZFmO3Oc3dMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfs3hDTU3klEnN20U0xdklQeDKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvMjRiNmJlNWYtZmQ0MC0z ZjljLThlNmItMjI0MzNkNGQ3MmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbMuxY5EBAh5UoVaIBRJ1FqDtUo+VpP4Xo7Ydcr7krSrUFcM4KJ3zKH hezwXhQHLF0FmFP3Jn/p08mOkyxgkEp/xZ53320t+ZH0DM4Bc74a19QVqiRWhbK+ Uvt236t+B/F8do74lTVni/txoKC8MDy8xfjBqhNQLgxctBgY0SMY+tfx+ZxKC1UY 3feFCPurfMccxMRV5ARD+6xQe6vZHvPpjbIvyFvPqzGASMCie2/M02008kWL6nJt eGwDRxj28Vian1mcPkGnsutsILqw8hwXU9e5mJ+xDiJaE/ennmu7QlW2TegMX/Um gR8A8jqPYI4H/8MrzA/U3YrXRNtz1Nk= -----END CERTIFICATE-----Generated at Sat Oct 11 17:35:01 2025 by rpki-client