$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/890756c8-89bc-3860-9d7e-6e5218522bfe.roa File: 890756c8-89bc-3860-9d7e-6e5218522bfe.roa (raw, json) Hash identifier: 9ZOrmRXuuQLFzUXr78TFZ/8HOA4bntgcRhxXJJaluxM= Subject key identifier: 95:BB:62:F0:47:97:72:BB:73:51:F1:09:AE:C3:B1:22:D5:7C:BF:12 Certificate issuer: /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Certificate serial: 010D0C9F4328584B89176F3D7087D66752C37E00 Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/890756c8-89bc-3860-9d7e-6e5218522bfe.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 397444 IP address blocks: 208.68.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:6f:3d:70:87:d6:67:52:c3:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=f624beed-eadd-4cf9-8590-ffa77da14c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ec:95:ae:13:38:c9:d4:6d:a1:7b:d2:0f:46: b0:e5:20:11:1b:76:31:1c:6e:f9:9c:cd:74:c7:0f: 08:41:96:a0:5b:04:63:c0:13:93:1c:08:16:40:64: 7a:ea:ed:99:29:55:ae:e3:83:31:bd:12:93:99:d2: 5b:85:89:ba:a1:4a:06:8c:5f:af:87:35:86:5a:2b: d1:82:11:74:89:0a:46:b1:d1:5a:21:a7:6b:c9:6f: 01:a4:bb:47:63:88:ed:05:89:2b:dc:c2:a7:62:69: 88:a3:cf:43:a5:78:f6:0e:bf:75:8c:c5:81:d8:3b: 20:fe:25:e7:a8:52:09:6e:85:55:f1:e2:9f:03:be: cf:92:86:fc:81:f7:f2:f2:9f:1a:f5:50:21:69:5a: 32:64:07:be:66:90:d2:d9:57:63:b3:ff:a8:4c:d8: 2f:27:d3:0d:fa:2c:76:c4:47:51:18:53:ff:d4:01: ae:fb:63:81:1c:99:44:87:9a:7a:5f:0a:03:b8:bc: 11:67:4d:08:7a:52:78:0b:10:d4:2e:2e:c2:73:a8: 2f:7f:7f:ed:40:0d:ea:85:d3:04:51:4b:15:20:e1: 2e:2c:d0:0f:c0:75:1a:32:a2:1f:e8:55:5e:87:8c: a1:7d:da:91:c8:53:e2:99:c5:8a:59:3d:3d:ff:25: e7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BB:62:F0:47:97:72:BB:73:51:F1:09:AE:C3:B1:22:D5:7C:BF:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/890756c8-89bc-3860-9d7e-6e5218522bfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl X509v3 Authority Key Identifier: keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer sbgp-ipAddrBlock: critical IPv4: 208.68.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2d:85:f5:6c:b7:23:6e:5c:7f:ee:e5:f4:9f:e0:76:f0:7d: 82:fd:5e:80:64:6b:23:da:4e:89:c8:b1:d9:de:6b:c1:4b:62: 85:4e:1f:f1:90:89:ed:ae:f7:bd:70:f7:06:a5:8b:c0:c1:5d: 5d:5c:95:cb:eb:f7:86:86:65:13:76:e5:5f:11:dc:cf:bb:8a: e8:5e:b6:b3:52:20:69:b2:0e:45:a0:15:d2:e7:4e:dc:8a:e2: f4:5a:04:56:7d:cc:44:c5:ff:9a:31:91:98:53:14:08:9d:da: 76:f2:58:1f:c6:9a:f5:af:b6:2d:e2:13:a4:e8:5e:38:eb:14: d1:99:2a:f3:b1:0a:77:c7:52:d1:67:f5:25:bf:41:a7:33:31: 17:93:b8:8b:a5:f0:17:3d:2d:94:d9:46:58:31:b2:a7:ad:ba: b1:96:97:10:51:fa:e1:48:e1:f4:10:03:59:d8:bf:b9:c9:71: a7:c1:b3:5f:86:f7:99:2d:12:09:5e:7b:7d:2a:b7:d8:68:29: 6d:d2:37:31:e3:36:ca:d6:e4:3f:3d:9b:7c:b1:50:2e:ad:f8: 53:c4:0f:3f:1b:f7:9a:67:80:d4:9d:c4:b6:ba:da:80:b8:69: 14:74:9f:cf:29:da:71:b8:b3:77:54:14:61:f4:71:6f:cd:4f: 33:63:b9:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF289cIfWZ1LDfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmMGI0ODQtOTRkMi00OTBmLThhNjgtZDc1ODhkMWYz NjgzMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ZjYyNGJlZWQtZWFkZC00Y2Y5LTg1OTAtZmZhNzdkYTE0YzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uyVrhM4ydRtoXvSD0aw5SARG3YxHG75nM10 xw8IQZagWwRjwBOTHAgWQGR66u2ZKVWu44MxvRKTmdJbhYm6oUoGjF+vhzWGWivR ghF0iQpGsdFaIadryW8BpLtHY4jtBYkr3MKnYmmIo89DpXj2Dr91jMWB2Dsg/iXn qFIJboVV8eKfA77Pkob8gffy8p8a9VAhaVoyZAe+ZpDS2Vdjs/+oTNgvJ9MN+ix2 xEdRGFP/1AGu+2OBHJlEh5p6XwoDuLwRZ00IelJ4CxDULi7Cc6gvf3/tQA3qhdME UUsVIOEuLNAPwHUaMqIf6FVeh4yhfdqRyFPimcWKWT09/yXnQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJW7YvBHl3K7c1HxCa7DsSLVfL8SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82YmYw YjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4OGQxZjM2ODMvODkwNzU2YzgtODliYy0z ODYwLTlkN2UtNmU1MjE4NTIyYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmJmMGI0ODQtOTRkMi00OTBmLThh NjgtZDc1ODhkMWYzNjgzLzZiZjBiNDg0LTk0ZDItNDkwZi04YTY4LWQ3NTg4ZDFm MzY4My5jcmwwHwYDVR0jBBgwFoAULH8ekiqWuUwTXutcOEV3l0rGXlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82YmYwYjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4 OGQxZjM2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkthfVstyNuXH/u5fSf4HbwfYL9XoBkayPaTonIsdnea8FLYoVOH/GQ ie2u971w9wali8DBXV1clcvr94aGZRN25V8R3M+7iuhetrNSIGmyDkWgFdLnTtyK 4vRaBFZ9zETF/5oxkZhTFAid2nbyWB/GmvWvti3iE6ToXjjrFNGZKvOxCnfHUtFn 9SW/QaczMReTuIul8Bc9LZTZRlgxsqeturGWlxBR+uFI4fQQA1nYv7nJcafBs1+G 95ktEglee30qt9hoKW3SNzHjNsrW5D89m3yxUC6t+FPEDz8b95pngNSdxLa62oC4 aRR0n88p2nG4s3dUFGH0cW/NTzNjuV8= -----END CERTIFICATE-----Generated at Thu Oct 16 14:29:32 2025 by rpki-client