$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/93db8749-21a8-3ed7-b681-b51e2692f9ec.roa File: 93db8749-21a8-3ed7-b681-b51e2692f9ec.roa (raw, json) Hash identifier: OFHRJzCUefahoqoUfEekRHfMbHBnTcLrYSu6lKdYyVs= Subject key identifier: DF:0A:C4:8A:42:1F:51:6A:58:41:82:A8:DA:34:E2:54:A0:61:82:1E Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B5141BE4E2B3C0B43EFF80400 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/93db8749-21a8-3ed7-b681-b51e2692f9ec.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 68.64.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:be:4e:2b:3c:0b:43:ef:f8:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=dba81654-8fd8-4323-9ec8-242a8488cd56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:c2:54:70:64:0f:64:24:2f:b8:f8:e0:51: a6:bf:15:35:0c:59:df:b4:4b:ff:1b:eb:ee:80:e4: 17:a2:0a:7a:fe:b8:f9:15:19:0f:b2:c7:e6:b6:b8: a7:dc:9b:88:3a:b3:2a:ec:f4:07:6a:a5:6b:93:d2: ab:7b:c5:a6:b6:45:44:c2:ba:61:d4:41:e9:56:9d: f6:39:1f:3d:2e:a4:d3:26:e9:d2:31:b9:00:ac:92: 70:22:67:93:1b:5c:58:16:89:49:5b:c1:53:b6:18: 0c:69:f2:86:f6:49:ad:72:8a:6c:aa:f7:bd:8a:ed: 58:7a:b6:b0:93:9e:cc:6e:13:2c:b0:1e:e7:bf:18: 17:05:0f:77:23:55:e3:0f:8e:5b:02:4f:44:76:77: e3:fd:65:f9:78:bf:06:b8:15:ba:c2:fa:78:0b:e3: 25:28:fc:2b:c3:66:77:e0:7d:f1:c9:38:d6:4e:3b: 00:2b:a9:88:ec:9a:43:17:82:02:cf:7e:3f:80:3a: 2d:d4:62:fe:39:29:08:9d:a0:bc:1a:a4:64:fb:94: a0:33:cf:12:b9:52:46:ee:e0:db:c9:69:18:e3:15: 45:97:2c:d1:b2:30:00:f8:6a:c2:eb:79:9c:db:1d: 3d:4a:7e:a1:ff:24:ee:c3:dd:7b:f9:01:7f:0f:77: 2d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0A:C4:8A:42:1F:51:6A:58:41:82:A8:DA:34:E2:54:A0:61:82:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/93db8749-21a8-3ed7-b681-b51e2692f9ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:7f:99:71:b7:85:7a:16:59:2f:04:13:b8:9a:f3:48:b7:b7: ba:d6:41:a3:d4:01:4a:8d:a6:eb:68:2a:70:bb:f6:87:24:8f: aa:cc:e1:48:58:66:a4:ac:cf:66:34:d5:27:9b:a2:1d:ab:11: 2e:b8:72:84:41:7d:28:0b:3e:ae:d2:40:4a:5c:a5:1c:cb:f6: 04:29:85:13:40:30:b5:ad:62:c0:1a:e2:dc:94:27:59:8a:d0: e7:f0:fe:80:66:72:6f:2a:da:d5:12:e5:ad:3d:29:80:bf:29: 6f:99:52:ea:57:23:2a:81:1f:85:2e:6f:ad:fa:3a:75:9c:fd: 4b:1d:4b:7b:ef:29:31:ec:e5:db:66:49:20:21:31:1b:b4:52: 3e:6a:b8:e6:ed:ec:9d:a6:1d:f4:6c:b5:7d:11:a5:44:56:33: 9d:1d:82:68:45:59:59:c5:17:d6:9a:80:e3:37:01:18:96:0f: af:3f:48:85:95:2c:7a:83:19:32:2d:a6:af:31:af:15:27:5d: 33:93:e8:54:51:30:c4:91:c2:fc:1c:6c:b3:04:f0:8a:e8:e1: d7:16:89:cb:24:ea:f2:f9:23:ea:bb:5b:a9:a8:6a:3f:90:15: 70:94:94:50:e6:a5:bd:0c:a0:49:df:9d:06:90:06:10:12:cb: d3:82:54:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQb5OKzwLQ+/4BAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk ZGJhODE2NTQtOGZkOC00MzIzLTllYzgtMjQyYTg0ODhjZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvjCVHBkD2QkL7j44FGmvxU1DFnftEv/G+vu gOQXogp6/rj5FRkPssfmtrin3JuIOrMq7PQHaqVrk9Kre8WmtkVEwrph1EHpVp32 OR89LqTTJunSMbkArJJwImeTG1xYFolJW8FTthgMafKG9kmtcopsqve9iu1Yeraw k57MbhMssB7nvxgXBQ93I1XjD45bAk9Ednfj/WX5eL8GuBW6wvp4C+MlKPwrw2Z3 4H3xyTjWTjsAK6mI7JpDF4ICz34/gDot1GL+OSkInaC8GqRk+5SgM88SuVJG7uDb yWkY4xVFlyzRsjAA+GrC63mc2x09Sn6h/yTuw917+QF/D3ctSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8KxIpCH1FqWEGCqNo04lSgYYIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOTNkYjg3NDktMjFhOC0z ZWQ3LWI2ODEtYjUxZTI2OTJmOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZ/mXG3hXoWWS8EE7ia80i3t7rWQaPUAUqNputoKnC79ockj6rM4UhY ZqSsz2Y01Seboh2rES64coRBfSgLPq7SQEpcpRzL9gQphRNAMLWtYsAa4tyUJ1mK 0Ofw/oBmcm8q2tUS5a09KYC/KW+ZUupXIyqBH4Uub636OnWc/UsdS3vvKTHs5dtm SSAhMRu0Uj5quObt7J2mHfRstX0RpURWM50dgmhFWVnFF9aagOM3ARiWD68/SIWV LHqDGTItpq8xrxUnXTOT6FRRMMSRwvwcbLME8Iro4dcWicsk6vL5I+q7W6moaj+Q FXCUlFDmpb0MoEnfnQaQBhASy9OCVFc= -----END CERTIFICATE-----Generated at Wed Oct 8 21:35:56 2025 by rpki-client