$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/524b77c2-e79e-3a16-a843-947a161df571.roa File: 524b77c2-e79e-3a16-a843-947a161df571.roa (raw, json) Hash identifier: +iPWOsQxFdrFr0+EMLXnpqTos2F7iGoLLwudLoJSQDQ= Subject key identifier: C6:52:CB:C9:C5:97:B8:A6:B9:FC:29:29:6E:54:5C:3A:60:55:59:5E Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584B28C6E3EEB2BCF31C979C7D80 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/524b77c2-e79e-3a16-a843-947a161df571.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 13737 IP address blocks: 68.233.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:e3:ee:b2:bc:f3:1c:97:9c:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=52f3bd95-d7b1-4894-9549-2ee2517cd363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:47:99:e9:c0:cc:78:e4:e8:22:98:7b:a4: 91:4c:df:82:d0:87:f8:f4:e8:7b:0b:52:30:59:60: 86:bf:7e:c0:16:f5:54:cf:de:38:20:41:e6:9c:ff: b1:59:6e:c8:6c:8d:d3:c7:e1:8a:76:58:6d:30:8e: 03:d4:b8:16:f7:ce:57:94:e8:37:c2:19:d4:e0:29: a5:2d:bf:28:d0:41:29:bd:6b:43:e2:bb:7b:b0:92: b9:fe:43:a6:32:62:ce:84:b4:ea:5b:5b:62:74:f1: dd:c4:34:74:89:d8:11:45:81:76:5b:ad:a0:e6:ab: ba:a3:93:0a:2b:e5:13:41:43:0a:25:46:23:3d:1f: 54:cb:8e:95:91:9b:9f:ca:72:de:69:0b:26:3c:68: 70:39:24:0d:96:03:f3:f3:63:45:d8:70:a3:3f:aa: fe:ab:96:47:94:e1:ec:73:41:d2:cf:5d:9b:fe:5d: 58:8f:e0:3a:13:f5:87:d3:d9:c7:da:2b:f1:6f:30: 9d:2a:f8:a5:a6:da:68:90:38:a6:28:c5:4a:73:ac: 90:1c:1a:52:8b:c5:70:68:0e:06:65:dc:83:cf:4a: d1:22:39:50:59:6e:00:e2:11:ce:ea:3f:6a:98:6a: c2:ac:a4:3a:48:e7:bf:e2:76:65:17:b6:3d:1c:35: 29:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:52:CB:C9:C5:97:B8:A6:B9:FC:29:29:6E:54:5C:3A:60:55:59:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/524b77c2-e79e-3a16-a843-947a161df571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:bb:99:c9:d3:69:83:bc:8b:50:93:05:98:8d:ae:08:c5:97: 0b:97:1c:67:39:37:b3:6f:69:b3:35:6c:a0:e3:60:f3:19:c3: a2:83:b9:99:2e:75:64:c2:d6:96:8d:79:d5:bf:79:1e:ad:00: f8:36:bd:15:f2:7f:ba:26:6a:3d:1e:df:0a:f7:cf:c6:fd:17: 2a:db:f4:e3:96:24:da:02:65:68:42:24:a5:8a:8a:16:73:40: 9d:59:82:e2:0c:6b:09:91:c9:a8:6c:d4:f0:6e:7d:36:f1:87: 2d:30:46:82:32:29:c7:f6:e9:74:1d:6c:df:3d:c5:38:cb:d4: 95:50:20:9b:39:d1:8d:31:5f:d5:8a:0d:66:cd:23:26:23:fb: d1:cc:94:d1:0f:5a:76:c0:12:0f:6e:41:a8:dd:e1:08:db:7d: 28:f6:eb:1c:e5:c0:43:a4:0b:40:a7:14:ed:e4:40:24:d4:12: 7b:6d:f7:51:be:bc:eb:4d:bc:38:54:54:d7:08:89:66:02:7f: 5a:aa:0a:c7:90:e3:4d:35:fc:be:55:99:94:23:df:6e:be:20: 7c:df:9b:22:bc:95:40:be:87:96:f3:f7:04:b4:3c:d4:58:c6: f7:7b:22:9a:a7:8b:cf:a0:44:34:41:1b:54:93:6e:c1:87:f7: d1:13:b6:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxuPusrzzHJecfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk NTJmM2JkOTUtZDdiMS00ODk0LTk1NDktMmVlMjUxN2NkMzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkChHmenAzHjk6CKYe6SRTN+C0If49Oh7C1Iw WWCGv37AFvVUz944IEHmnP+xWW7IbI3Tx+GKdlhtMI4D1LgW985XlOg3whnU4Cml Lb8o0EEpvWtD4rt7sJK5/kOmMmLOhLTqW1tidPHdxDR0idgRRYF2W62g5qu6o5MK K+UTQUMKJUYjPR9Uy46VkZufynLeaQsmPGhwOSQNlgPz82NF2HCjP6r+q5ZHlOHs c0HSz12b/l1Yj+A6E/WH09nH2ivxbzCdKvilptpokDimKMVKc6yQHBpSi8VwaA4G ZdyDz0rRIjlQWW4A4hHO6j9qmGrCrKQ6SOe/4nZlF7Y9HDUpRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZSy8nFl7imufwpKW5UXDpgVVleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvNTI0Yjc3YzItZTc5ZS0z YTE2LWE4NDMtOTQ3YTE2MWRmNTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu7mcnTaYO8i1CTBZiNrgjFlwuXHGc5N7NvabM1bKDjYPMZw6KDuZku dWTC1paNedW/eR6tAPg2vRXyf7omaj0e3wr3z8b9Fyrb9OOWJNoCZWhCJKWKihZz QJ1ZguIMawmRyahs1PBufTbxhy0wRoIyKcf26XQdbN89xTjL1JVQIJs50Y0xX9WK DWbNIyYj+9HMlNEPWnbAEg9uQajd4QjbfSj26xzlwEOkC0CnFO3kQCTUEntt91G+ vOtNvDhUVNcIiWYCf1qqCseQ4001/L5VmZQj326+IHzfmyK8lUC+h5bz9wS0PNRY xvd7Ipqni8+gRDRBG1STbsGH99ETtto= -----END CERTIFICATE-----Generated at Sat Oct 11 17:39:26 2025 by rpki-client