$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4de974c0-a88b-3292-9f16-0430edcbd00d.roa File: 4de974c0-a88b-3292-9f16-0430edcbd00d.roa (raw, json) Hash identifier: Uq7q1idBnr5SUwDl+Kifoy6U5BYl4lWsuOGOQIeOQEs= Subject key identifier: B0:F5:8C:56:2B:79:D3:4F:88:BC:50:15:5E:E3:D9:A0:CB:EF:31:7E Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584BCD9B1180FC9D96DECD239940 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4de974c0-a88b-3292-9f16-0430edcbd00d.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 14618 IP address blocks: 68.71.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:11:80:fc:9d:96:de:cd:23:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=fcbaa8d9-de99-43fb-92bd-1580d28fc118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:eb:20:a6:3e:bd:8f:7b:27:ae:d0:ab:ab:6a: dc:b1:cf:03:1a:86:8a:ff:62:a7:34:5f:19:2f:5a: 77:b5:14:d2:68:d1:21:8e:55:e4:fe:2b:aa:22:a2: 9b:a2:d5:ea:03:fb:7f:ac:e8:d0:16:b4:3f:1f:ad: e6:84:c0:b8:a7:04:53:f1:85:27:49:94:63:77:74: e3:a1:38:ee:d0:60:6b:36:2f:31:82:eb:b9:7d:ba: 12:9b:35:75:4d:1c:79:76:b7:00:7a:60:9f:fd:5e: f6:c8:5e:00:d6:2b:d4:1b:84:c6:ab:9a:27:9d:4f: e8:de:6e:44:90:9c:30:75:71:39:85:83:d2:6b:d7: bd:f7:cd:96:47:03:2e:a0:5e:4f:1d:f3:42:84:0f: ab:47:3c:01:6c:7c:d9:49:3d:c5:55:d2:62:67:45: a2:19:d5:35:de:b3:55:7f:60:46:2d:98:00:f3:17: b6:8e:47:c9:39:88:4a:a7:17:19:02:1c:d3:4e:73: bc:c3:38:21:3a:16:65:c1:32:81:5b:3e:d5:e0:71: fc:38:bc:ae:dc:a7:5f:08:25:eb:67:3d:2d:29:d6: 92:8c:85:71:c3:6f:19:7e:b7:96:cc:27:06:30:3f: 97:1d:36:61:d2:b3:16:b0:05:58:2e:f8:4e:15:e9: 44:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F5:8C:56:2B:79:D3:4F:88:BC:50:15:5E:E3:D9:A0:CB:EF:31:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4de974c0-a88b-3292-9f16-0430edcbd00d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2d:89:30:e6:b0:d3:31:37:83:de:1c:9f:9d:89:de:0a:10: 44:e2:ec:e8:66:10:bc:c3:3a:4a:81:b5:c6:83:28:85:e3:44: 25:24:c0:0a:8d:8d:7d:0c:8d:27:ad:01:7c:0b:69:5c:09:ad: 16:a5:35:24:cd:1c:61:0c:4e:b7:55:6d:8a:33:0d:ff:40:03: 40:b6:29:83:97:22:17:af:89:80:98:99:cd:e3:68:54:ff:74: a4:2d:fc:13:33:87:9e:64:1f:9d:36:94:37:9f:ed:3a:02:7d: fa:27:30:0f:98:b0:89:a7:c0:ff:23:6e:a1:28:0e:ca:61:84: 9e:2e:50:00:5d:9d:13:f3:96:24:e5:df:7b:42:ca:3e:84:13: f2:36:34:07:6c:e4:9b:63:2c:e2:2c:88:0d:68:a4:73:d7:03: f4:92:aa:aa:03:d2:5c:a3:19:09:59:22:8b:7a:df:97:aa:e2: 5f:3d:18:b3:98:a0:af:8b:87:ea:5d:01:1e:4b:fa:59:92:9c: 74:da:0b:90:9c:1c:cd:51:09:c4:3b:46:9a:da:d4:33:3c:f8: b5:14:55:93:f3:37:f2:82:bd:5a:a9:ce:69:34:29:0b:38:2f: d0:1c:33:d8:25:e0:72:54:44:34:34:5b:64:8e:14:78:22:c1: 9a:31:fa:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxGA/J2W3s0jmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZmNiYWE4ZDktZGU5OS00M2ZiLTkyYmQtMTU4MGQyOGZjMTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmesgpj69j3snrtCrq2rcsc8DGoaK/2KnNF8Z L1p3tRTSaNEhjlXk/iuqIqKbotXqA/t/rOjQFrQ/H63mhMC4pwRT8YUnSZRjd3Tj oTju0GBrNi8xguu5fboSmzV1TRx5drcAemCf/V72yF4A1ivUG4TGq5onnU/o3m5E kJwwdXE5hYPSa9e9982WRwMuoF5PHfNChA+rRzwBbHzZST3FVdJiZ0WiGdU13rNV f2BGLZgA8xe2jkfJOYhKpxcZAhzTTnO8wzghOhZlwTKBWz7V4HH8OLyu3KdfCCXr Zz0tKdaSjIVxw28ZfreWzCcGMD+XHTZh0rMWsAVYLvhOFelEXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLD1jFYredNPiLxQFV7j2aDL7zF+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvNGRlOTc0YzAtYTg4Yi0z MjkyLTlmMTYtMDQzMGVkY2JkMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0tiTDmsNMxN4PeHJ+did4KEETi7OhmELzDOkqBtcaDKIXjRCUkwAqN jX0MjSetAXwLaVwJrRalNSTNHGEMTrdVbYozDf9AA0C2KYOXIheviYCYmc3jaFT/ dKQt/BMzh55kH502lDef7ToCffonMA+YsImnwP8jbqEoDsphhJ4uUABdnRPzliTl 33tCyj6EE/I2NAds5JtjLOIsiA1opHPXA/SSqqoD0lyjGQlZIot635eq4l89GLOY oK+Lh+pdAR5L+lmSnHTaC5CcHM1RCcQ7Rpra1DM8+LUUVZPzN/KCvVqpzmk0KQs4 L9AcM9gl4HJURDQ0W2SOFHgiwZox+gc= -----END CERTIFICATE-----Generated at Sun Nov 16 22:10:28 2025 by rpki-client