$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bde921f9-630d-3469-bec3-ac3de6d723b6.roa File: bde921f9-630d-3469-bec3-ac3de6d723b6.roa (raw, json) Hash identifier: HIoxMTWr+3tKg8wj4AlXCtH1gaLwZDPaM7y5GciRVcg= Subject key identifier: CB:08:70:1E:D5:B2:A9:06:4E:A7:09:43:13:95:5A:5D:88:B0:11:B3 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584B4E77139419F4CBB2A9060480 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bde921f9-630d-3469-bec3-ac3de6d723b6.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 11990 IP address blocks: 68.233.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:13:94:19:f4:cb:b2:a9:06:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=83a82538-2069-4d50-8cb1-82b32e612dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:51:c1:da:8d:4e:23:58:b0:8d:d9:d2:1e:8d: 6e:27:75:da:78:f5:79:69:90:a0:80:98:29:04:a1: 8a:79:18:10:d4:5e:bc:e2:d2:72:88:d1:fa:98:5f: 0d:23:8e:a4:d7:ec:2c:d7:85:ba:b6:d7:f0:54:71: 6a:e2:73:bf:2a:4a:dc:f4:98:fa:f9:b1:63:fb:8c: e9:36:4d:48:47:c3:50:43:9a:dd:19:6e:dc:42:05: 2e:b3:c0:61:4f:92:cd:94:16:bd:65:5b:f6:c5:b0: d6:28:41:2d:3a:a8:58:01:c7:92:1b:70:47:ee:1b: 36:44:f3:2a:48:97:5e:7a:08:01:b2:8e:b5:50:1d: b4:03:85:ef:9e:bd:9c:3d:d5:46:8f:cb:fd:3a:26: 87:e8:be:b6:f2:66:eb:85:e6:42:41:1e:c1:db:8a: f8:4b:fb:a3:ba:45:71:05:3a:7f:5f:f7:5c:93:50: 8c:9f:63:0d:2d:94:96:06:4a:d3:91:e0:6b:78:71: 45:7b:cc:33:90:06:d2:87:b6:c7:0e:df:5c:84:2f: 30:3b:61:96:a0:55:60:d8:4f:4e:0b:71:ca:f2:5b: 12:65:13:69:7e:76:77:85:8d:5a:49:e2:89:56:72: 0f:63:6d:8a:65:8a:90:2c:2c:fb:5f:8c:33:8f:3e: c4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:08:70:1E:D5:B2:A9:06:4E:A7:09:43:13:95:5A:5D:88:B0:11:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bde921f9-630d-3469-bec3-ac3de6d723b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:98:df:98:41:c5:b8:d1:f5:2a:f5:f4:6a:2f:a7:55:4f:08: 57:b3:f0:7e:b7:b4:72:68:2b:a3:f4:47:ef:1a:28:18:f4:49: 93:c3:2f:a0:87:52:55:87:32:a9:66:b4:68:63:be:be:1a:99: d2:f2:6e:3b:6f:16:f9:af:4a:be:6c:31:1f:76:c9:05:0f:69: 0b:42:cb:2b:c3:71:7e:a7:46:69:27:31:e3:5e:f4:93:de:58: 0d:3b:81:8e:b9:6a:c0:af:49:a9:02:93:7b:d9:8a:70:cb:11: 5f:bf:ff:0f:10:13:ef:2d:de:13:6b:7d:d3:60:da:1f:2d:96: fd:82:bc:d6:36:37:5d:3f:2b:79:e2:27:7b:23:77:07:d5:6a: d6:6d:77:89:84:2e:66:07:aa:3b:61:4c:cc:d7:37:95:aa:ae: 10:9e:c1:12:1d:ee:e9:d8:98:8e:2a:d7:bf:59:22:36:86:14: 27:f0:f0:7e:c3:fa:9b:01:f9:d0:76:25:da:32:5c:7f:41:d4: 42:46:3a:df:c5:19:0e:35:b5:cc:a3:f8:ee:c5:04:1f:97:21: 07:1f:59:4d:31:45:02:d4:34:a7:92:ce:61:21:40:5a:d8:b7: 9f:84:1b:cb:4d:d4:5f:35:24:d1:2f:ac:0e:46:9b:56:8c:4a: 20:4b:0f:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxOUGfTLsqkGBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ODNhODI1MzgtMjA2OS00ZDUwLThjYjEtODJiMzJlNjEyZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1HB2o1OI1iwjdnSHo1uJ3XaePV5aZCggJgp BKGKeRgQ1F684tJyiNH6mF8NI46k1+ws14W6ttfwVHFq4nO/Kkrc9Jj6+bFj+4zp Nk1IR8NQQ5rdGW7cQgUus8BhT5LNlBa9ZVv2xbDWKEEtOqhYAceSG3BH7hs2RPMq SJdeeggBso61UB20A4Xvnr2cPdVGj8v9OiaH6L628mbrheZCQR7B24r4S/ujukVx BTp/X/dck1CMn2MNLZSWBkrTkeBreHFFe8wzkAbSh7bHDt9chC8wO2GWoFVg2E9O C3HK8lsSZRNpfnZ3hY1aSeKJVnIPY22KZYqQLCz7X4wzjz7EhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsIcB7VsqkGTqcJQxOVWl2IsBGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYmRlOTIxZjktNjMwZC0z NDY5LWJlYzMtYWMzZGU2ZDcyM2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeY35hBxbjR9Sr19Govp1VPCFez8H63tHJoK6P0R+8aKBj0SZPDL6CH UlWHMqlmtGhjvr4amdLybjtvFvmvSr5sMR92yQUPaQtCyyvDcX6nRmknMeNe9JPe WA07gY65asCvSakCk3vZinDLEV+//w8QE+8t3hNrfdNg2h8tlv2CvNY2N10/K3ni J3sjdwfVatZtd4mELmYHqjthTMzXN5WqrhCewRId7unYmI4q179ZIjaGFCfw8H7D +psB+dB2JdoyXH9B1EJGOt/FGQ41tcyj+O7FBB+XIQcfWU0xRQLUNKeSzmEhQFrY t5+EG8tN1F81JNEvrA5Gm1aMSiBLDws= -----END CERTIFICATE-----Generated at Sat Oct 11 11:42:50 2025 by rpki-client