$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/699b8c0d-b668-3aa7-93f5-0b36e116f993.roa File: 699b8c0d-b668-3aa7-93f5-0b36e116f993.roa (raw, json) Hash identifier: Ho31jl32NUVSYe+Wi31DkOSSOASfOrTBT1foLom8fbU= Subject key identifier: 99:0D:53:DE:8C:57:24:0F:A6:F2:4E:1D:E5:B2:F0:05:49:E1:32:59 Certificate issuer: /CN=3b0b4e45-c916-48be-ae0d-b57b80a30cdc Certificate serial: 010D0C9F4328584B99D78AC961F1C0049F9D4CC0 Authority key identifier: CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/699b8c0d-b668-3aa7-93f5-0b36e116f993.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 399612 IP address blocks: 68.68.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8a:c9:61:f1:c0:04:9f:9d:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0b4e45-c916-48be-ae0d-b57b80a30cdc Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=572b19c7-1e50-4fa8-9057-23a52e30a83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:af:08:45:66:03:50:72:69:66:64:1d:61:ac: c8:a0:96:1a:6b:e0:90:a7:96:8d:6c:6b:e2:c8:54: d8:f8:f7:e8:6a:e1:05:41:00:a6:0a:fb:e6:4c:c5: 1c:22:9c:b5:f7:40:ba:7e:f5:a5:1a:3b:ee:af:a1: c2:e1:ce:71:83:2c:db:ba:01:af:d5:e1:13:fe:90: 32:f7:29:c8:de:a5:e5:93:27:7a:07:8b:47:a9:49: c6:8b:f1:f0:3a:a2:ad:0e:52:bf:c8:2a:a2:2e:d1: 1d:1c:a1:7d:f1:59:c1:47:e5:b9:30:39:24:5b:1a: 4b:10:2c:4b:39:15:af:3b:c9:71:bf:1a:d4:f6:59: 9e:6c:bc:bf:f5:39:1f:4d:44:54:fa:7d:07:a8:2f: 4b:89:b7:b5:06:b8:ef:e2:ef:fd:61:c6:d7:4f:c1: 11:26:fb:dc:62:25:76:bf:17:cc:2d:7c:74:11:24: 0a:18:a0:69:fa:10:71:8d:02:c0:19:0c:2f:e3:34: ba:be:c5:39:db:87:08:66:fe:90:af:d7:b0:da:ab: 90:23:8b:ed:ba:80:51:70:eb:93:c3:a8:19:76:eb: 7a:20:56:d5:8f:02:35:a8:16:20:3d:16:e7:36:96: 97:a4:29:ef:c1:d8:f9:5f:b6:0e:46:95:3e:bd:ff: 3a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0D:53:DE:8C:57:24:0F:A6:F2:4E:1D:E5:B2:F0:05:49:E1:32:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/699b8c0d-b668-3aa7-93f5-0b36e116f993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.crl X509v3 Authority Key Identifier: keyid:CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer sbgp-ipAddrBlock: critical IPv4: 68.68.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:90:65:c3:67:94:5d:a8:97:c8:b9:78:92:de:df:55:cd:ab: fe:4d:55:4f:8f:63:09:f9:5e:9e:72:35:65:bb:85:9e:6d:54: 92:ec:4e:2b:2a:e6:82:1a:d5:5d:52:a2:7b:ea:40:50:0d:a2: df:d1:9f:de:47:81:a7:da:5a:83:d2:18:fc:76:6b:cf:80:ac: b2:11:fd:2d:d0:ae:8f:25:db:be:05:00:90:fe:e2:9b:9e:8e: 2d:0c:22:84:7e:4f:3a:66:7d:02:b5:2b:53:13:06:e2:78:39: 61:7d:b7:29:29:87:c3:52:32:df:e1:96:89:1f:bb:4f:c9:03: d0:92:37:72:d1:93:39:d8:6f:f8:4f:ff:21:df:cb:e4:9b:a0: f5:43:27:a5:43:dd:fb:26:5a:8e:6d:71:6e:5a:63:bf:7d:ed: 6f:5e:22:2c:7f:e4:f6:f0:b0:cf:e8:ca:64:5d:33:0c:ff:a5: fe:e7:41:e2:e6:e8:9b:88:10:d8:ac:40:3b:0b:5d:1f:92:de: f3:b3:7e:34:75:2e:1e:63:42:ca:b7:80:d2:f6:82:cb:59:ee: 3b:4c:c3:e4:f0:d1:b0:09:53:33:78:71:2c:82:82:17:df:86: 8d:4c:31:95:28:ac:91:02:15:ac:09:f6:cd:37:10:f9:2c:d4: a0:af:66:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14rJYfHABJ+dTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IwYjRlNDUtYzkxNi00OGJlLWFlMGQtYjU3YjgwYTMw Y2RjMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NTcyYjE5YzctMWU1MC00ZmE4LTkwNTctMjNhNTJlMzBhODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq8IRWYDUHJpZmQdYazIoJYaa+CQp5aNbGvi yFTY+PfoauEFQQCmCvvmTMUcIpy190C6fvWlGjvur6HC4c5xgyzbugGv1eET/pAy 9ynI3qXlkyd6B4tHqUnGi/HwOqKtDlK/yCqiLtEdHKF98VnBR+W5MDkkWxpLECxL ORWvO8lxvxrU9lmebLy/9TkfTURU+n0HqC9Libe1Brjv4u/9YcbXT8ERJvvcYiV2 vxfMLXx0ESQKGKBp+hBxjQLAGQwv4zS6vsU524cIZv6Qr9ew2quQI4vtuoBRcOuT w6gZdut6IFbVjwI1qBYgPRbnNpaXpCnvwdj5X7YORpU+vf861QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkNU96MVyQPpvJOHeWy8AVJ4TJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYjBi NGU0NS1jOTE2LTQ4YmUtYWUwZC1iNTdiODBhMzBjZGMvNjk5YjhjMGQtYjY2OC0z YWE3LTkzZjUtMGIzNmUxMTZmOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2IwYjRlNDUtYzkxNi00OGJlLWFl MGQtYjU3YjgwYTMwY2RjLzNiMGI0ZTQ1LWM5MTYtNDhiZS1hZTBkLWI1N2I4MGEz MGNkYy5jcmwwHwYDVR0jBBgwFoAUzfAOS/H7tTntP3qUPNdKK8IO9xYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYjBiNGU0NS1jOTE2LTQ4YmUtYWUwZC1iNTdi ODBhMzBjZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARETdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuQZcNnlF2ol8i5eJLe31XNq/5NVU+PYwn5Xp5yNWW7hZ5tVJLsTisq 5oIa1V1SonvqQFANot/Rn95HgafaWoPSGPx2a8+ArLIR/S3Qro8l274FAJD+4pue ji0MIoR+TzpmfQK1K1MTBuJ4OWF9tykph8NSMt/hlokfu0/JA9CSN3LRkznYb/hP /yHfy+SboPVDJ6VD3fsmWo5tcW5aY7997W9eIix/5PbwsM/oymRdMwz/pf7nQeLm 6JuIENisQDsLXR+S3vOzfjR1Lh5jQsq3gNL2gstZ7jtMw+Tw0bAJUzN4cSyCghff ho1MMZUorJECFawJ9s03EPks1KCvZr4= -----END CERTIFICATE-----Generated at Sat Nov 1 16:36:47 2025 by rpki-client