$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/b0219dec-4d15-370a-af72-f5dd0679b13a.roa File: b0219dec-4d15-370a-af72-f5dd0679b13a.roa (raw, json) Hash identifier: BazQvFByUmDjuNzapVFoYsnwCF+ASAHEF0zkEDVuts0= Subject key identifier: 26:14:5E:DA:4A:D1:FE:A3:05:99:BC:A3:7C:9F:DF:68:3C:FD:83:29 Certificate issuer: /CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7 Certificate serial: 010D0C9F4328584BD1CB06C86BD8CC9993FEFE00 Authority key identifier: B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/b0219dec-4d15-370a-af72-f5dd0679b13a.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 20388 IP address blocks: 68.70.123.0/24 maxlen: 24 148.59.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:cb:06:c8:6b:d8:cc:99:93:fe:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7 Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=86e12ad0-b892-4a3b-8dee-cd22389ac90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:49:bd:27:95:af:cb:be:0b:5d:d4:96:c3: 84:29:95:90:30:2b:9f:ec:c3:34:0b:29:05:70:41: ec:d7:5b:ae:aa:c2:12:59:b6:94:a6:36:3b:1c:ae: b1:1e:5b:de:21:e5:03:e9:c0:3c:74:0a:ef:15:45: 0a:fb:10:76:33:f4:2f:7b:79:45:a9:66:82:39:9f: 6c:71:13:69:5a:52:a6:df:cb:b0:8a:44:38:33:f4: c7:6f:01:50:86:ea:b8:aa:de:73:4e:a0:d8:5e:f9: 82:eb:41:23:7a:24:01:01:2b:a4:fd:10:d8:1c:01: a1:3d:ea:3b:fa:bd:a7:40:10:ba:3a:dc:59:9b:5c: 8e:a4:4c:34:33:9c:8d:e2:6a:ca:11:8e:82:b0:cf: 89:ab:d7:cc:df:ef:07:a1:8b:7a:81:c4:c1:33:e6: dc:5a:77:2d:3a:54:e3:25:a7:ec:f0:68:5b:5a:e3: 1a:c4:c5:72:66:5f:0e:94:09:13:98:50:ce:f5:f6: 30:fc:ca:ac:49:51:01:5f:c4:89:0c:ca:40:69:b1: f9:ef:ca:59:80:b0:29:62:9f:6d:f7:4e:52:56:58: 9e:88:b6:d2:df:a6:6c:ad:32:dd:31:83:fe:cb:f9: cd:31:54:a9:7e:b7:1f:6b:67:95:9e:e9:05:db:b6: 8c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:14:5E:DA:4A:D1:FE:A3:05:99:BC:A3:7C:9F:DF:68:3C:FD:83:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/b0219dec-4d15-370a-af72-f5dd0679b13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl X509v3 Authority Key Identifier: keyid:B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer sbgp-ipAddrBlock: critical IPv4: 68.70.123.0/24 148.59.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:37:11:3f:a7:1e:b9:0d:3e:a5:77:dc:8d:4e:65:49:2d:7c: 74:ba:04:75:ac:68:fa:24:50:12:33:55:62:39:48:07:01:99: 2a:55:c8:f4:64:c2:60:63:a3:81:f8:32:94:9e:48:a0:75:ef: 5b:7b:e7:e4:4d:17:31:a8:a1:d3:0d:df:09:f2:90:00:af:f9: f9:3a:e2:36:df:12:1c:ba:b8:59:dc:67:0f:4e:a5:dc:82:4f: 5c:31:b4:4c:0c:06:0f:f9:c6:f1:d8:fd:48:e9:e8:bc:e7:c3: cc:74:f8:d3:39:24:70:c2:e0:0c:e1:bb:a9:bd:6e:f3:7b:e4: a8:50:88:49:d3:61:f8:74:05:b1:8b:57:f0:c1:9d:e6:75:4b: 82:5f:45:2d:81:b9:8a:1b:ed:e8:f2:58:c8:b5:61:7d:93:92: f4:96:33:96:74:53:b6:37:7e:62:3a:15:e0:b0:f6:e7:fa:09: 19:69:da:67:6f:e5:15:14:cf:d7:6c:16:5d:63:a8:b4:4c:17: 8a:a1:13:c4:80:77:41:4e:f2:81:2d:e7:24:bf:9b:75:b3:a7: a9:5e:1a:b9:74:c0:d3:b8:de:b3:de:4b:a2:69:de:4b:73:c5: 05:d2:9f:1d:56:19:8b:e2:65:2e:41:73:61:9e:97:0d:a4:25: 4b:1f:b0:f6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvRywbIa9jMmZP+/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4ZmI0YzQtMGJjZS00NDM5LWFjNzAtMTJiMWFiN2Mz ZGQ3MB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk ODZlMTJhZDAtYjg5Mi00YTNiLThkZWUtY2QyMjM4OWFjOTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1ZJvSeVr8u+C13UlsOEKZWQMCuf7MM0CykF cEHs11uuqsISWbaUpjY7HK6xHlveIeUD6cA8dArvFUUK+xB2M/Qve3lFqWaCOZ9s cRNpWlKm38uwikQ4M/THbwFQhuq4qt5zTqDYXvmC60EjeiQBASuk/RDYHAGhPeo7 +r2nQBC6OtxZm1yOpEw0M5yN4mrKEY6CsM+Jq9fM3+8HoYt6gcTBM+bcWnctOlTj Jafs8GhbWuMaxMVyZl8OlAkTmFDO9fYw/MqsSVEBX8SJDMpAabH578pZgLApYp9t 905SVlieiLbS36ZsrTLdMYP+y/nNMVSpfrcfa2eVnukF27aMwwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCYUXtpK0f6jBZm8o3yf32g8/YMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZThm YjRjNC0wYmNlLTQ0MzktYWM3MC0xMmIxYWI3YzNkZDcvYjAyMTlkZWMtNGQxNS0z NzBhLWFmNzItZjVkZDA2NzliMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGU4ZmI0YzQtMGJjZS00NDM5LWFj NzAtMTJiMWFiN2MzZGQ3L2RlOGZiNGM0LTBiY2UtNDQzOS1hYzcwLTEyYjFhYjdj M2RkNy5jcmwwHwYDVR0jBBgwFoAUsFydYYfgTD3CaLN8uM5RmYyIqDMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZThmYjRjNC0wYmNlLTQ0MzktYWM3MC0xMmIx YWI3YzNkZDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAREZ7AwQA lDuUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIw3ET+nHrkNPqV33I1OZUktfHS6BHWsaPokUBIzVWI5SAcB mSpVyPRkwmBjo4H4MpSeSKB171t75+RNFzGoodMN3wnykACv+fk64jbfEhy6uFnc Zw9OpdyCT1wxtEwMBg/5xvHY/Ujp6Lznw8x0+NM5JHDC4Azhu6m9bvN75KhQiEnT Yfh0BbGLV/DBneZ1S4JfRS2BuYob7ejyWMi1YX2TkvSWM5Z0U7Y3fmI6FeCw9uf6 CRlp2mdv5RUUz9dsFl1jqLRMF4qhE8SAd0FO8oEt5yS/m3Wzp6leGrl0wNO43rPe S6Jp3ktzxQXSnx1WGYviZS5Bc2Gelw2kJUsfsPY= -----END CERTIFICATE-----Generated at Sun Nov 16 22:09:49 2025 by rpki-client