$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa File: fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa (raw, json) Hash identifier: 2el3SGlB3Hg6VPezhNCWOVszPGK850n/eUcJ8qZOEcc= Subject key identifier: 71:30:09:30:C1:B6:93:73:02:CE:90:F5:01:CA:F0:9F:DE:48:85:C8 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584B0B76AF87DDCCB3B9B42B6600 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 394285 IP address blocks: 68.68.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:af:87:dd:cc:b3:b9:b4:2b:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=e0f086de-7424-4b7c-8b9a-fc2a6c5a3c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4b:d2:a3:f4:d1:2a:87:ef:ea:4b:25:06:67: 9a:f4:21:31:b6:f2:c6:4b:2b:21:34:51:f1:30:58: cd:7a:77:a2:43:1a:22:a8:53:2e:b5:71:48:54:58: f6:b1:5c:15:0a:da:77:3e:93:a8:c8:25:66:78:71: 5e:45:f9:18:c9:b3:8b:d1:ed:87:fa:b1:14:b7:be: e3:f2:3d:e7:88:1c:92:84:b8:17:bf:77:18:a2:cd: 1b:1c:a6:7e:25:e7:63:bb:7b:c0:51:92:a3:33:20: d1:95:91:31:4e:4c:1b:5c:50:53:51:79:85:9f:4b: b5:49:a2:d9:10:32:4d:48:6e:d2:79:1d:09:63:24: f0:fe:52:98:6f:99:70:50:90:fa:61:de:dc:c6:97: bc:c9:af:ea:b7:7c:8d:e3:fe:22:eb:5a:da:d6:f6: 1c:44:6a:ed:0b:cf:0a:96:28:3b:cc:3c:63:f9:c2: 57:ae:29:a1:64:f5:37:e0:57:5e:4c:9f:ac:68:e7: b4:95:80:8b:5b:a0:1f:a6:48:8f:c5:f9:d6:32:42: 56:e7:47:32:c5:eb:a1:3b:e6:6f:9f:6b:76:d3:15: 4b:b4:13:cf:dc:31:b4:a4:23:9d:7f:49:3a:92:93: 30:a7:66:74:41:27:3e:55:1a:39:7c:03:30:74:b8: fc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:30:09:30:C1:B6:93:73:02:CE:90:F5:01:CA:F0:9F:DE:48:85:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 68.68.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:82:a7:b9:b2:af:d2:3d:be:94:1b:08:7b:d4:ed:f8:f5:14: cf:cf:e1:ec:25:4c:7e:56:bb:06:56:cc:3d:c8:37:68:03:80: d7:0b:9d:6e:a2:87:e5:ec:2c:9f:9f:93:66:c0:cc:0e:77:9a: 87:bc:93:34:cb:44:84:df:79:d0:d3:73:73:01:a0:46:dc:8c: 4c:00:1c:3a:f9:51:d9:52:a7:d4:13:32:9d:a0:fc:3a:1a:79: 3c:9b:13:cf:7a:2c:7b:ee:41:bc:81:4e:d6:b9:1b:8c:f7:46: 72:3c:3b:d1:a0:85:1a:e2:31:ba:d4:a1:3c:a0:70:30:43:02: ad:85:9b:0f:00:7e:1c:0a:af:6b:a2:31:e0:39:d5:12:6c:9a: 91:d2:f0:2b:6f:1d:ba:b7:9b:c0:0e:38:f1:4a:fa:09:67:24: 67:50:18:45:62:91:b4:17:b8:3e:f3:e8:b6:b7:6b:88:af:c5: ca:dd:20:20:f2:a6:5e:0e:a7:0c:b7:59:2b:a1:94:ac:dc:49: f6:fc:10:51:d1:3b:af:ff:e4:28:3e:b3:47:eb:8c:5a:1a:57: 01:b9:d0:20:41:77:61:03:5f:d3:78:49:48:2f:e9:40:a9:25: e2:e5:45:dc:7b:b9:d4:64:6b:ce:20:72:20:58:de:4d:ff:78: 21:38:48:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdq+H3cyzubQrZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZTBmMDg2ZGUtNzQyNC00YjdjLThiOWEtZmMyYTZjNWEzYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkvSo/TRKofv6kslBmea9CExtvLGSyshNFHx MFjNeneiQxoiqFMutXFIVFj2sVwVCtp3PpOoyCVmeHFeRfkYybOL0e2H+rEUt77j 8j3niByShLgXv3cYos0bHKZ+Jedju3vAUZKjMyDRlZExTkwbXFBTUXmFn0u1SaLZ EDJNSG7SeR0JYyTw/lKYb5lwUJD6Yd7cxpe8ya/qt3yN4/4i61ra1vYcRGrtC88K lig7zDxj+cJXrimhZPU34FdeTJ+saOe0lYCLW6AfpkiPxfnWMkJW50cyxeuhO+Zv n2t20xVLtBPP3DG0pCOdf0k6kpMwp2Z0QSc+VRo5fAMwdLj8AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEwCTDBtpNzAs6Q9QHK8J/eSIXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvZmRlMzQxMDctZjNiYi0z MDc2LWJjYWMtNGZiZmM4OGJjZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRESYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmCp7myr9I9vpQbCHvU7fj1FM/P4ewlTH5WuwZWzD3IN2gDgNcLnW6i h+XsLJ+fk2bAzA53moe8kzTLRITfedDTc3MBoEbcjEwAHDr5UdlSp9QTMp2g/Doa eTybE896LHvuQbyBTta5G4z3RnI8O9GghRriMbrUoTygcDBDAq2Fmw8AfhwKr2ui MeA51RJsmpHS8CtvHbq3m8AOOPFK+glnJGdQGEVikbQXuD7z6La3a4ivxcrdICDy pl4Opwy3WSuhlKzcSfb8EFHRO6//5Cg+s0frjFoaVwG50CBBd2EDX9N4SUgv6UCp JeLlRdx7udRka84gciBY3k3/eCE4SNw= -----END CERTIFICATE-----Generated at Fri Sep 19 15:53:42 2025 by rpki-client