$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa File: 94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa (raw, json) Hash identifier: +4Vq6c6fN0A/XNv6XppffMwfZqS+8UiLUU3oqjkkWE0= Subject key identifier: B5:B3:6F:0A:8C:B4:4E:52:7C:15:4B:16:87:3C:8C:2D:AD:1F:14:C3 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584B0746BDF38638433AA29CAD00 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 62563 IP address blocks: 68.233.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:bd:f3:86:38:43:3a:a2:9c:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=e827c47d-05b5-4f37-82f2-128f7ab7446b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:e2:76:a6:03:ba:f3:ed:e8:d7:0f:33:5a: a7:e3:67:29:27:6d:bb:7f:a8:1f:f3:55:50:16:19: 57:e1:cf:f1:dc:d2:ea:a8:2d:b1:c3:5c:42:ed:30: 44:e4:48:46:05:75:43:98:f5:85:f4:ec:ad:69:7b: 05:c2:3c:f4:76:1d:a6:bb:e5:07:9b:f0:4c:78:17: ed:3a:80:b2:fa:ce:bc:05:7a:7f:55:6b:1c:f5:4b: 36:1f:5a:0b:4d:27:a8:88:08:62:4b:ff:31:44:3e: 02:0e:d1:df:4d:7b:2c:5e:9d:bd:bb:ce:f3:20:a2: 11:91:26:75:26:1c:fe:9b:b1:4f:41:bb:ca:0b:67: 56:19:43:73:30:f0:28:b4:b6:43:6e:e4:1f:a7:51: 16:3b:85:5d:f1:4c:16:e5:0c:0e:7a:9f:aa:8b:83: 35:c8:7f:b1:b4:27:2e:48:d4:30:ad:28:8b:1c:7c: 52:bd:f1:8f:0e:ba:62:4e:ba:5a:3f:fb:7d:52:20: be:52:33:21:5e:8f:f4:29:5d:70:ef:ad:44:60:33: 47:40:d6:4f:b3:2e:93:3e:7f:69:5a:5e:df:1c:16: 75:c2:31:fd:a3:cd:04:92:f0:a2:08:07:e6:f4:b4: b3:17:13:fc:00:ba:2d:1d:b0:53:6b:2c:fd:ce:b8: 5e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B3:6F:0A:8C:B4:4E:52:7C:15:4B:16:87:3C:8C:2D:AD:1F:14:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:de:81:4f:89:4f:d0:a1:4c:ac:a9:b2:ff:30:49:14:a3:fc: bc:a2:d0:3b:c5:9f:89:46:e7:e5:0d:94:52:7e:32:32:54:3b: 68:ec:c1:c4:8f:b1:65:d2:11:f9:40:96:95:d7:c7:67:1f:c9: 8b:05:21:aa:bc:0d:cb:1d:d4:7c:98:bf:9b:f8:53:49:b9:12: c1:0f:60:4c:f6:40:c2:eb:46:b3:1d:8c:0a:b0:16:45:bd:45: 51:fb:b0:9d:dd:44:06:f4:18:50:eb:57:17:09:56:bc:05:f3: 31:1d:10:71:98:60:5a:31:de:95:fe:4c:a0:1c:94:a2:55:9b: 0c:15:86:ea:27:3c:b7:6c:e2:93:44:39:1b:d6:71:c1:ad:53: ee:86:9f:a0:ca:6f:fe:3f:ba:a5:7d:6c:fa:24:cc:3f:61:d2: 1a:c4:bc:b7:1f:63:49:ee:e0:ab:1e:66:1e:c1:e0:a3:0b:6e: 08:0c:61:e0:55:0a:a0:13:9b:94:a5:79:2a:cf:40:12:19:d6: c9:8e:a4:e6:5a:ca:53:5c:fa:0d:78:cb:41:a0:50:70:d7:25: 4e:10:2d:c2:57:0b:38:84:66:4e:d5:ce:78:46:93:08:b3:87: 4a:1f:3d:b0:fc:b9:a3:4b:10:bc:17:47:3b:f0:06:3b:b1:95: 38:1e:fe:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRr3zhjhDOqKcrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ZTgyN2M0N2QtMDViNS00ZjM3LTgyZjItMTI4ZjdhYjc0NDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgLidqYDuvPt6NcPM1qn42cpJ227f6gf81VQ FhlX4c/x3NLqqC2xw1xC7TBE5EhGBXVDmPWF9OytaXsFwjz0dh2mu+UHm/BMeBft OoCy+s68BXp/VWsc9Us2H1oLTSeoiAhiS/8xRD4CDtHfTXssXp29u87zIKIRkSZ1 Jhz+m7FPQbvKC2dWGUNzMPAotLZDbuQfp1EWO4Vd8UwW5QwOep+qi4M1yH+xtCcu SNQwrSiLHHxSvfGPDrpiTrpaP/t9UiC+UjMhXo/0KV1w761EYDNHQNZPsy6TPn9p Wl7fHBZ1wjH9o80EkvCiCAfm9LSzFxP8ALotHbBTayz9zrhe/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWzbwqMtE5SfBVLFoc8jC2tHxTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvOTRjNDAzZTEtNWQ3ZS0z MTYyLThhYTktOGQ4MjE3NGRmZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJregU+JT9ChTKypsv8wSRSj/Lyi0DvFn4lG5+UNlFJ+MjJUO2jswcSP sWXSEflAlpXXx2cfyYsFIaq8Dcsd1HyYv5v4U0m5EsEPYEz2QMLrRrMdjAqwFkW9 RVH7sJ3dRAb0GFDrVxcJVrwF8zEdEHGYYFox3pX+TKAclKJVmwwVhuonPLds4pNE ORvWccGtU+6Gn6DKb/4/uqV9bPokzD9h0hrEvLcfY0nu4KseZh7B4KMLbggMYeBV CqATm5SleSrPQBIZ1smOpOZaylNc+g14y0GgUHDXJU4QLcJXCziEZk7VznhGkwiz h0ofPbD8uaNLELwXRzvwBjuxlTge/o8= -----END CERTIFICATE-----Generated at Sat Oct 11 17:39:26 2025 by rpki-client