$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/c8629013-8b6c-35e2-b517-c9085ddd8d98.roa File: c8629013-8b6c-35e2-b517-c9085ddd8d98.roa (raw, json) Hash identifier: BwzUTPuyLdZWhC6VlQDyonyH/ImAHatck7duugCnVnI= Subject key identifier: 88:3C:B6:52:37:84:E3:24:19:B4:89:B4:F1:47:AB:BF:27:28:39:B0 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584B13D6B711E6E26912E1D834C0 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/c8629013-8b6c-35e2-b517-c9085ddd8d98.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 13737 IP address blocks: 68.233.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:b7:11:e6:e2:69:12:e1:d8:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=2493752a-7ad5-4279-8735-42122b23a317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a7:87:cd:77:d5:f2:9d:b4:59:af:31:47:20: 42:5f:bd:95:f5:01:7b:d6:f4:9e:11:c7:ee:43:6c: 29:1c:c1:ee:18:e0:1b:eb:61:5c:5a:42:f6:86:88: fa:5a:69:dd:fb:7b:f8:93:d0:69:11:46:94:f3:58: c5:ab:a4:8f:e9:f6:e5:99:92:59:3a:7b:04:20:f9: fb:ea:ad:75:cf:ea:ed:9a:b0:bc:c8:59:e1:56:4b: a2:79:00:32:55:fd:60:c5:96:a9:0d:f8:59:4a:cf: 45:a0:04:0f:25:0e:60:a0:35:22:9a:a8:b7:41:cc: b1:a6:b5:01:90:6a:e6:bb:26:7e:fc:63:1a:b6:3e: b9:c7:95:c6:f0:ec:8c:0b:eb:dc:b9:55:cb:8d:d2: 6e:b9:0d:aa:1c:ef:2d:3f:9a:d5:17:a8:80:c8:0c: 4f:10:80:11:e4:12:d5:ef:1d:c2:d4:72:fa:cd:f5: cb:b3:0f:0c:48:58:c6:41:c4:87:49:a5:28:56:2b: b1:bd:2b:97:8e:33:5e:22:ac:0c:ca:df:4e:4f:66: 38:d7:cf:d1:f3:28:02:55:ca:be:84:ad:49:5b:61: fb:a7:17:43:89:38:20:e9:a9:5f:3a:e6:5c:63:63: 06:12:9f:3c:3d:80:f4:a1:2b:77:db:41:84:b2:ab: 54:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3C:B6:52:37:84:E3:24:19:B4:89:B4:F1:47:AB:BF:27:28:39:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/c8629013-8b6c-35e2-b517-c9085ddd8d98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:3c:f0:d5:38:56:45:15:36:20:8f:ad:43:c1:cb:a0:a3:2f: 5c:d7:52:c9:5d:b8:a0:73:2c:15:cd:1b:30:05:34:04:b1:37: e3:8c:47:0d:4c:cf:74:e2:a4:e2:b7:3b:0d:cd:34:a8:c1:39: f9:25:1e:27:de:74:ba:b8:2c:72:bf:df:6f:00:a7:d4:bd:34: 54:07:dc:64:8d:aa:bf:6b:d6:b6:e0:1d:db:f5:e4:d4:a3:90: e7:31:05:df:e6:04:9d:20:e7:f4:aa:64:2b:b5:cb:9e:44:1c: 95:c4:4b:39:b6:90:f9:3f:5e:07:40:8d:55:de:6b:97:c1:b7: de:b7:6f:e4:43:ef:6b:f6:0a:63:dc:ea:77:f8:fb:59:cb:1b: f6:e2:91:49:f4:8f:d3:44:78:9d:5c:ca:d0:05:a6:3b:1a:17: 85:77:0e:28:73:d3:a1:a5:31:bc:b6:f0:35:ee:93:43:f0:ca: 46:da:9a:20:4b:c2:a3:fc:d3:a5:16:21:80:dd:c7:d6:50:f0: 50:d7:66:79:38:2d:49:21:40:24:87:3a:e2:52:38:01:dc:09: 41:9f:5b:ea:1d:d2:27:34:47:99:bf:62:18:94:70:61:6f:51: d3:2b:e4:fb:a6:c5:cb:52:9e:5b:88:d2:19:af:66:56:32:a6: b4:9e:70:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1rcR5uJpEuHYNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MjQ5Mzc1MmEtN2FkNS00Mjc5LTg3MzUtNDIxMjJiMjNhMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKeHzXfV8p20Wa8xRyBCX72V9QF71vSeEcfu Q2wpHMHuGOAb62FcWkL2hoj6Wmnd+3v4k9BpEUaU81jFq6SP6fblmZJZOnsEIPn7 6q11z+rtmrC8yFnhVkuieQAyVf1gxZapDfhZSs9FoAQPJQ5goDUimqi3QcyxprUB kGrmuyZ+/GMatj65x5XG8OyMC+vcuVXLjdJuuQ2qHO8tP5rVF6iAyAxPEIAR5BLV 7x3C1HL6zfXLsw8MSFjGQcSHSaUoViuxvSuXjjNeIqwMyt9OT2Y418/R8ygCVcq+ hK1JW2H7pxdDiTgg6alfOuZcY2MGEp88PYD0oSt320GEsqtUYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIg8tlI3hOMkGbSJtPFHq78nKDmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYzg2MjkwMTMtOGI2Yy0z NWUyLWI1MTctYzkwODVkZGQ4ZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAw88NU4VkUVNiCPrUPBy6CjL1zXUslduKBzLBXNGzAFNASxN+OMRw1M z3TipOK3Ow3NNKjBOfklHifedLq4LHK/328Ap9S9NFQH3GSNqr9r1rbgHdv15NSj kOcxBd/mBJ0g5/SqZCu1y55EHJXESzm2kPk/XgdAjVXea5fBt963b+RD72v2CmPc 6nf4+1nLG/bikUn0j9NEeJ1cytAFpjsaF4V3Dihz06GlMby28DXuk0PwykbamiBL wqP806UWIYDdx9ZQ8FDXZnk4LUkhQCSHOuJSOAHcCUGfW+od0ic0R5m/YhiUcGFv UdMr5PumxctSnluI0hmvZlYyprSecOk= -----END CERTIFICATE-----Generated at Wed Sep 10 03:11:24 2025 by rpki-client