$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/cb0f0e55-9b05-37a6-8b37-f974d6bc1cea.roa File: cb0f0e55-9b05-37a6-8b37-f974d6bc1cea.roa (raw, json) Hash identifier: A0cmP88lKEHTkPUy2L1eQvbIjYOD7z+oPvzVOn6zOcc= Subject key identifier: 9C:3E:91:94:C7:8C:94:BD:13:0A:D5:10:58:8A:D1:1E:2A:DF:38:07 Certificate issuer: /CN=515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d Certificate serial: 010D0C9F4328584AD93666694E63E1344FB7FC80 Authority key identifier: 54:05:9B:E9:C5:4F:4D:A3:1C:AD:F9:79:AB:E7:ED:6E:63:A9:C6:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/cb0f0e55-9b05-37a6-8b37-f974d6bc1cea.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 399445 IP address blocks: 68.69.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:66:69:4e:63:e1:34:4f:b7:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=1eb5609e-412c-4544-af54-c987b5b2300d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f0:77:e5:08:42:2e:ae:99:3a:fe:89:f2:23: d6:4b:3f:1f:98:ae:7b:2f:a2:56:ed:8a:e0:82:b4: 9b:1b:14:a0:9e:a7:99:07:e4:48:0f:6b:11:9b:89: 02:73:90:c3:b5:d1:38:93:8a:19:02:7e:ee:4d:54: 26:d4:05:18:55:a7:38:50:cb:66:c6:17:2d:5f:7e: e5:bf:6f:3d:76:4a:c9:82:40:f6:60:27:b7:97:c0: 5b:ce:34:5f:76:7e:eb:0d:c9:35:4b:f4:88:d2:59: 14:bf:77:ca:f4:d6:fe:74:18:90:b2:ee:5a:de:48: 18:14:e4:90:17:b3:f0:d9:6d:e9:3b:f5:c4:58:7f: de:dd:89:6d:8d:3e:82:b7:dc:2d:41:64:bf:4f:c4: 52:4d:0a:3c:4b:3e:34:cb:f1:55:86:aa:03:8b:0b: 7a:e6:b8:7a:96:92:30:e2:f0:62:b9:f2:5a:b3:6e: 3e:e6:61:52:5f:3d:61:67:a2:a6:d5:98:70:a7:b0: 3c:f5:5c:a5:c4:31:e0:a2:7d:23:10:a9:82:7b:87: 3b:2f:7a:e1:b2:8b:5f:00:3c:06:2e:08:e6:0d:12: e7:a7:d0:cb:6c:04:7c:ab:64:01:00:56:f5:b4:3e: 06:cf:c9:78:92:c9:27:ea:da:dc:d7:42:eb:37:c9: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3E:91:94:C7:8C:94:BD:13:0A:D5:10:58:8A:D1:1E:2A:DF:38:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/cb0f0e55-9b05-37a6-8b37-f974d6bc1cea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.crl X509v3 Authority Key Identifier: keyid:54:05:9B:E9:C5:4F:4D:A3:1C:AD:F9:79:AB:E7:ED:6E:63:A9:C6:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.cer sbgp-ipAddrBlock: critical IPv4: 68.69.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5b:62:38:7b:67:c9:7c:b3:23:d0:c1:c5:ab:1b:53:1a:4e: 88:63:d2:b0:60:d6:0a:60:e6:fc:a3:23:2a:ac:2f:8a:f1:cb: 0c:cd:93:dc:e7:30:d0:f1:3c:7b:47:e5:0f:ca:91:35:d8:28: 17:ab:3f:e0:1d:08:af:e4:bb:e7:75:f3:e1:14:03:3c:64:bb: 4e:c5:af:52:b6:6a:bb:14:b1:5a:a1:66:92:08:9e:be:96:37: 8f:f4:39:41:bd:79:9b:28:1a:1b:a9:f3:e1:75:ec:88:0a:f6: a0:a7:ae:1b:5c:c4:35:7f:a9:f7:c4:95:35:9f:cf:50:c6:48: 28:51:b2:88:c1:9b:43:2e:df:b1:e9:ea:ef:60:af:d8:82:69: 87:d3:ee:dc:e7:47:a7:1e:13:d1:80:1e:56:05:72:7b:f9:c9: 18:79:7c:7e:7d:d4:18:0f:c6:a5:6b:c8:d7:25:2a:ad:e9:e2: 0f:05:6c:0c:4f:15:80:f6:4d:4d:5d:16:90:fd:6b:5c:e8:1e: 81:76:01:b1:e8:f5:3e:5d:43:cb:46:dd:b5:13:17:c9:38:9e: e0:f9:8c:8a:90:32:57:be:ce:5c:b9:c4:3f:8a:ca:bf:99:42: 7d:d3:bb:8a:0b:3f:cc:ea:98:7d:5c:0a:62:1b:0f:66:4e:5e: 4d:a0:22:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNmZpTmPhNE+3/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE1Y2QzY2YtNGM0Ny00MTJlLThjM2QtYzliYTRmYTBm YjZkMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MWViNTYwOWUtNDEyYy00NTQ0LWFmNTQtYzk4N2I1YjIzMDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/B35QhCLq6ZOv6J8iPWSz8fmK57L6JW7Yrg grSbGxSgnqeZB+RID2sRm4kCc5DDtdE4k4oZAn7uTVQm1AUYVac4UMtmxhctX37l v289dkrJgkD2YCe3l8BbzjRfdn7rDck1S/SI0lkUv3fK9Nb+dBiQsu5a3kgYFOSQ F7Pw2W3pO/XEWH/e3YltjT6Ct9wtQWS/T8RSTQo8Sz40y/FVhqoDiwt65rh6lpIw 4vBiufJas24+5mFSXz1hZ6Km1Zhwp7A89VylxDHgon0jEKmCe4c7L3rhsotfADwG LgjmDRLnp9DLbAR8q2QBAFb1tD4Gz8l4kskn6trc10LrN8lVlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJw+kZTHjJS9EwrVEFiK0R4q3zgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81MTVj ZDNjZi00YzQ3LTQxMmUtOGMzZC1jOWJhNGZhMGZiNmQvY2IwZjBlNTUtOWIwNS0z N2E2LThiMzctZjk3NGQ2YmMxY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTE1Y2QzY2YtNGM0Ny00MTJlLThj M2QtYzliYTRmYTBmYjZkLzUxNWNkM2NmLTRjNDctNDEyZS04YzNkLWM5YmE0ZmEw ZmI2ZC5jcmwwHwYDVR0jBBgwFoAUVAWb6cVPTaMcrfl5q+ftbmOpxlQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81MTVjZDNjZi00YzQ3LTQxMmUtOGMzZC1jOWJh NGZhMGZiNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdbYjh7Z8l8syPQwcWrG1MaTohj0rBg1gpg5vyjIyqsL4rxywzNk9zn MNDxPHtH5Q/KkTXYKBerP+AdCK/ku+d18+EUAzxku07Fr1K2arsUsVqhZpIInr6W N4/0OUG9eZsoGhup8+F17IgK9qCnrhtcxDV/qffElTWfz1DGSChRsojBm0Mu37Hp 6u9gr9iCaYfT7tznR6ceE9GAHlYFcnv5yRh5fH591BgPxqVryNclKq3p4g8FbAxP FYD2TU1dFpD9a1zoHoF2AbHo9T5dQ8tG3bUTF8k4nuD5jIqQMle+zly5xD+Kyr+Z Qn3Tu4oLP8zqmH1cCmIbD2ZOXk2gIr0= -----END CERTIFICATE-----Generated at Sun Oct 26 20:40:52 2025 by rpki-client