$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa File: 09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa (raw, json) Hash identifier: KQ2vLt0usgwc26uRVJLDTwIXuBRidWVBXpP9U38SubA= Subject key identifier: 2F:20:F7:B3:50:EC:E1:E9:12:57:FF:EA:C3:23:8C:23:1C:27:88:FC Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584B0B76AF98B06E6456F5ABEB00 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 394285 IP address blocks: 68.68.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:af:98:b0:6e:64:56:f5:ab:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=307e2001-b55d-4cc8-a9f8-ffa976525f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8a:53:f3:de:9f:3c:92:90:b2:82:27:88:23: f1:5f:f0:d7:a1:33:1f:ea:6d:db:f5:84:25:53:b9: 69:f5:15:9d:23:2e:b6:5e:05:a8:93:55:ac:f5:f9: a1:d9:17:d4:3c:ae:29:57:f4:54:fc:d0:11:2f:8a: d3:3c:29:1e:45:9f:55:a7:15:45:8a:bc:9a:b5:ff: 52:1d:1d:00:bf:c6:0b:3c:84:04:4b:9d:dd:0a:0c: 74:cc:8d:5a:b6:68:1b:be:4e:23:31:b1:79:e6:c7: 17:82:80:88:45:53:ee:ca:c7:bc:a7:47:bb:1d:f2: eb:b9:4d:f5:51:35:c0:ef:9d:fc:7c:54:99:79:f5: 74:5c:53:98:76:74:76:06:4d:3e:c2:2b:71:ca:96: 51:cb:28:30:b1:57:2a:f8:f4:31:c5:30:67:0f:23: 1a:e2:0c:2a:bd:4e:c9:f2:d7:f8:20:f7:3f:c3:d4: af:a6:8b:5e:f7:24:6a:1e:6c:9d:b2:57:51:b3:9a: 20:45:8b:81:3d:33:2d:d9:18:ca:1e:9e:f9:56:ad: 27:2b:47:bf:a3:da:00:c1:b9:16:cc:ee:bb:f2:45: b1:5c:28:ee:5a:6d:71:f1:69:f1:88:53:be:ce:ca: 45:0d:c6:11:34:85:cc:75:b8:92:d6:23:3f:47:a5: a0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:20:F7:B3:50:EC:E1:E9:12:57:FF:EA:C3:23:8C:23:1C:27:88:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 68.68.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:d6:56:23:7f:58:6b:d2:d8:c1:05:00:aa:24:b0:f5:01:66: b7:d7:94:58:49:a8:44:12:b3:1f:4a:49:7b:0b:47:0a:3d:56: 90:02:f0:46:ee:a4:e5:5b:39:37:85:50:c8:a0:c0:90:c8:6a: 98:43:36:16:87:ee:60:5d:ea:5d:da:d2:25:10:20:ce:fd:f9: fb:e3:5a:a5:64:9a:83:da:37:3d:7a:e0:74:fc:b4:a2:13:5a: 91:16:99:38:84:cb:7b:c9:56:5f:4d:f1:da:c7:05:87:b2:a6: 93:26:ef:ca:34:c1:3c:09:ea:f1:56:e1:a7:64:5a:f0:78:21: 2d:1b:83:c8:25:fd:58:38:ab:dd:89:a1:72:2e:37:b6:be:ef: 0f:71:07:ae:8d:cb:59:5f:04:9a:ae:ce:7b:7a:75:e4:7d:39: dd:d9:5a:db:7d:4c:f7:82:2d:5b:cf:ff:f8:e0:50:68:48:f5: c5:47:56:af:c2:ec:50:c0:0f:2d:00:6a:8e:f2:d4:8f:1f:02: d4:f2:8f:53:31:a2:93:bd:e9:ad:57:57:78:3a:fd:b9:db:ad: 15:74:02:ad:8c:12:86:d6:b7:e9:89:99:d8:11:14:fc:bb:cb: f2:9b:ca:2a:53:21:ab:9d:b9:4b:6a:36:04:b9:93:ea:f8:9f: 2d:82:ce:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdq+YsG5kVvWr6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MzA3ZTIwMDEtYjU1ZC00Y2M4LWE5ZjgtZmZhOTc2NTI1ZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IpT896fPJKQsoIniCPxX/DXoTMf6m3b9YQl U7lp9RWdIy62XgWok1Ws9fmh2RfUPK4pV/RU/NARL4rTPCkeRZ9VpxVFiryatf9S HR0Av8YLPIQES53dCgx0zI1atmgbvk4jMbF55scXgoCIRVPuyse8p0e7HfLruU31 UTXA7538fFSZefV0XFOYdnR2Bk0+witxypZRyygwsVcq+PQxxTBnDyMa4gwqvU7J 8tf4IPc/w9Svpote9yRqHmydsldRs5ogRYuBPTMt2RjKHp75Vq0nK0e/o9oAwbkW zO678kWxXCjuWm1x8WnxiFO+zspFDcYRNIXMdbiS1iM/R6WgYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8g97NQ7OHpElf/6sMjjCMcJ4j8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMDlhYWYyY2QtM2E2OS0z MjFmLTlkYTEtZjgzZDcyZDlhNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInWViN/WGvS2MEFAKoksPUBZrfXlFhJqEQSsx9KSXsLRwo9VpAC8Ebu pOVbOTeFUMigwJDIaphDNhaH7mBd6l3a0iUQIM79+fvjWqVkmoPaNz164HT8tKIT WpEWmTiEy3vJVl9N8drHBYeyppMm78o0wTwJ6vFW4adkWvB4IS0bg8gl/Vg4q92J oXIuN7a+7w9xB66Ny1lfBJquznt6deR9Od3ZWtt9TPeCLVvP//jgUGhI9cVHVq/C 7FDADy0Aao7y1I8fAtTyj1MxopO96a1XV3g6/bnbrRV0Aq2MEobWt+mJmdgRFPy7 y/KbyipTIauduUtqNgS5k+r4ny2Czr8= -----END CERTIFICATE-----Generated at Fri Sep 19 11:01:28 2025 by rpki-client