$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/386f3d43-61a6-36ca-8495-42bbad0a0247.roa File: 386f3d43-61a6-36ca-8495-42bbad0a0247.roa (raw, json) Hash identifier: tKY+bMvL7u/Hb6gEQ5qOXTXsNc5FRD6pcpX7ByWIIbc= Subject key identifier: B6:A1:86:C3:13:58:E7:A7:74:A3:38:6E:BA:D6:2B:EF:9F:1C:26:56 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584B970CCD1D257456A82B044B80 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/386f3d43-61a6-36ca-8495-42bbad0a0247.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 395793 IP address blocks: 68.64.133.0/24 maxlen: 24 68.64.142.0/24 maxlen: 24 68.64.154.0/24 maxlen: 24 68.64.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:cd:1d:25:74:56:a8:2b:04:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=81f73a27-2c83-4151-9be0-ec037fd33677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:85:4d:00:02:89:4a:2e:1f:34:ac:53:3b:c8: 35:a0:b7:f9:f2:4d:58:df:0d:29:03:30:87:da:d7: bd:28:37:d5:35:8b:7a:0b:54:ca:78:86:3d:35:55: 2d:31:9a:fc:32:0b:c6:90:67:bd:1a:0d:f9:bd:50: 42:52:59:71:39:d1:a8:cb:49:f3:32:df:66:c4:20: a7:91:f3:83:d9:c1:b2:c5:e2:00:f0:51:2f:57:43: b6:a3:7e:05:90:d9:02:68:5a:f4:b2:75:23:8b:02: 96:92:b6:e2:81:b1:74:0e:24:d7:55:8e:c6:6b:f3: c5:11:4c:00:eb:8c:75:3b:7e:6f:8f:5d:ef:01:dd: 0b:4f:40:c4:27:38:7f:30:3a:5e:9b:50:b3:95:1f: fc:39:44:d6:26:62:2f:7d:79:77:bc:6f:31:b1:37: de:7d:a4:5a:4b:c7:c8:ff:43:ee:cc:e4:1f:8a:c3: 31:12:27:22:37:c6:e9:5d:9c:35:d5:e0:bd:ec:a2: c0:2a:36:a2:d1:23:fc:bb:3a:ec:9f:c7:43:b8:f8: c5:6e:f9:df:ab:00:16:05:c4:f2:aa:a4:11:18:9f: 04:fc:6b:9c:bf:61:17:84:88:d0:29:7d:57:81:b3: cd:4d:bd:48:c2:1f:ec:00:b1:1c:ca:e1:41:82:51: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A1:86:C3:13:58:E7:A7:74:A3:38:6E:BA:D6:2B:EF:9F:1C:26:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/386f3d43-61a6-36ca-8495-42bbad0a0247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 68.64.133.0/24 68.64.142.0/24 68.64.154.0/24 68.64.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d3:66:73:90:f4:8e:d4:1e:62:a5:6a:6c:2a:02:6a:13:2e: 42:80:0d:83:ca:a1:99:d1:d6:60:ca:72:1a:e7:dc:c7:d4:86: 0f:8a:3a:23:c6:81:fe:16:20:26:83:14:a7:e4:45:c5:54:26: c3:2c:f1:1c:21:dc:14:86:a6:7e:66:6a:f1:3e:38:db:cc:95: 08:b2:e3:6d:9f:49:89:c5:64:78:11:b8:b5:ab:87:8e:7d:ee: 84:7e:7a:b3:57:63:70:9e:33:73:d8:d4:ae:08:59:4a:0e:ba: 30:f3:03:10:f1:13:75:3d:59:57:80:87:db:6d:b7:b0:84:09: 2d:50:71:fc:c5:63:e5:f9:86:a7:96:ee:09:c8:41:6e:38:c1: 00:58:45:ef:f0:50:6e:15:3b:9f:6f:df:0e:ea:31:be:a9:63: 43:a6:06:56:69:87:6a:90:56:5c:0c:b5:c8:27:49:10:92:09: 87:b9:f4:bf:12:80:0f:92:23:23:2b:5a:a0:27:2e:06:cb:ba: 3d:19:dd:95:f6:1d:96:d9:a1:5d:a2:51:7e:eb:34:09:cd:61: 62:f8:78:85:91:62:ba:ed:2a:b2:33:7b:c2:47:7a:37:5b:90: 70:6a:3f:ea:f4:48:14:12:66:12:00:14:4a:0f:0a:21:04:1e: 15:10:60:15 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEuXDM0dJXRWqCsES4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ODFmNzNhMjctMmM4My00MTUxLTliZTAtZWMwMzdmZDMzNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4VNAAKJSi4fNKxTO8g1oLf58k1Y3w0pAzCH 2te9KDfVNYt6C1TKeIY9NVUtMZr8MgvGkGe9Gg35vVBCUllxOdGoy0nzMt9mxCCn kfOD2cGyxeIA8FEvV0O2o34FkNkCaFr0snUjiwKWkrbigbF0DiTXVY7Ga/PFEUwA 64x1O35vj13vAd0LT0DEJzh/MDpem1CzlR/8OUTWJmIvfXl3vG8xsTfefaRaS8fI /0PuzOQfisMxEiciN8bpXZw11eC97KLAKjai0SP8uzrsn8dDuPjFbvnfqwAWBcTy qqQRGJ8E/Gucv2EXhIjQKX1XgbPNTb1Iwh/sALEcyuFBglFk0wIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFLahhsMTWOendKM4brrWK++fHCZWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvMzg2ZjNkNDMtNjFhNi0z NmNhLTg0OTUtNDJiYmFkMGEwMjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQARECFAwQA RECOAwQARECaAwQAREC/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGjTZnOQ9I7UHmKlamwqAmoTLkKADYPK oZnR1mDKchrn3MfUhg+KOiPGgf4WICaDFKfkRcVUJsMs8Rwh3BSGpn5mavE+ONvM lQiy422fSYnFZHgRuLWrh4597oR+erNXY3CeM3PY1K4IWUoOujDzAxDxE3U9WVeA h9ttt7CECS1QcfzFY+X5hqeW7gnIQW44wQBYRe/wUG4VO59v3w7qMb6pY0OmBlZp h2qQVlwMtcgnSRCSCYe59L8SgA+SIyMrWqAnLgbLuj0Z3ZX2HZbZoV2iUX7rNAnN YWL4eIWRYrrtKrIze8JHejdbkHBqP+r0SBQSZhIAFEoPCiEEHhUQYBU= -----END CERTIFICATE-----Generated at Tue Oct 28 17:00:52 2025 by rpki-client