$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0c0f1667-bdd4-3810-ab75-9771278ab789.roa File: 0c0f1667-bdd4-3810-ab75-9771278ab789.roa (raw, json) Hash identifier: YdjCrXx0elFB9DrSKOj48jwi7cvivC1c6xGeQV35QRE= Subject key identifier: DF:9B:14:6C:0B:0F:BF:BD:D2:9D:70:98:E3:E3:49:40:59:B8:5F:2D Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584AF951414809C87C0D03F3B200 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0c0f1667-bdd4-3810-ab75-9771278ab789.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 31898 IP address blocks: 68.64.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:41:48:09:c8:7c:0d:03:f3:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=6d68bd34-d549-43e2-9318-8b429569d4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9e:55:09:d4:9a:e3:b5:7d:63:96:33:ed:f9: 69:f6:9e:eb:22:fc:51:2e:d5:fc:ca:9d:4c:ff:d6: 41:d1:54:e4:74:37:db:a3:cf:08:98:65:4f:21:ae: 76:75:6d:29:e2:4e:3f:72:b7:d7:f8:f0:a8:70:db: 3f:20:00:a7:3d:9f:86:0b:98:87:ed:58:24:ba:32: a2:d9:50:b4:91:aa:49:85:25:ef:2d:76:32:18:19: a0:51:58:80:f5:06:4a:fd:07:9d:f9:d4:90:da:36: a3:e6:1f:c9:04:46:73:fe:93:49:90:ee:d6:bb:83: 51:c6:85:ab:1c:51:df:f6:3f:6a:5d:72:e5:73:a1: a1:6d:5f:42:87:33:f5:f5:b6:59:aa:b5:54:2a:c9: de:45:b1:a2:fd:19:80:7e:d2:cf:6a:5e:fe:e2:7c: 80:d3:12:bb:5c:1c:d0:86:7b:98:93:c8:5a:08:e0: 25:d3:f0:59:5b:b7:41:9c:dc:a3:2d:33:32:dd:81: 3a:aa:72:25:04:f2:5d:5b:9d:b0:f3:1a:50:cf:da: 9a:d5:eb:bf:af:69:4b:94:7b:32:3b:8a:f2:cf:8b: 3b:52:89:44:fe:3d:33:ca:86:de:e2:74:ae:a8:5b: 3b:66:5d:a2:4e:9a:b6:80:b6:29:31:17:26:2c:c9: 94:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9B:14:6C:0B:0F:BF:BD:D2:9D:70:98:E3:E3:49:40:59:B8:5F:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0c0f1667-bdd4-3810-ab75-9771278ab789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:f1:5b:e6:be:17:90:59:82:57:d9:42:13:f1:56:57:18:c5: e3:53:88:cb:1b:a2:be:34:fb:96:b5:d4:26:b6:f4:ea:d4:87: 6f:f2:ff:a0:14:4a:d9:81:17:09:37:4c:cc:ad:c1:37:94:e4: 2e:ae:19:44:0d:39:1b:33:88:fb:3e:9f:fc:2b:63:23:e9:38: 41:1d:4b:d8:ee:1d:7e:08:bf:e1:46:25:f7:75:4d:ee:97:19: 89:5d:fc:41:1e:e2:10:9d:5a:49:6d:f1:a4:85:e4:d9:9d:67: 88:16:eb:4a:fd:20:70:9a:c6:47:6e:af:f0:35:90:6f:82:c7: 73:1d:2c:b7:b2:b8:7d:74:32:71:5d:b6:91:9e:ca:40:b9:a5: da:5c:b9:71:98:b6:9d:dd:87:25:eb:42:d1:0c:f0:01:92:89: 54:eb:99:8b:a8:34:6c:3e:9b:e7:e3:9e:3f:96:c6:4f:12:82: f6:be:1b:ec:d4:8d:15:a2:1f:fb:51:92:04:22:21:80:40:c2: 57:76:8c:05:6b:ad:51:59:2f:9f:d1:7b:c3:26:6b:44:4d:ba: d3:47:d1:68:a1:ec:75:fa:06:1a:ac:ef:52:f0:ad:3c:be:c7: 5e:72:02:14:ec:0f:85:70:3b:7f:e3:78:7e:38:04:21:0c:94: f3:f2:71:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUFICch8DQPzsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NmQ2OGJkMzQtZDU0OS00M2UyLTkzMTgtOGI0Mjk1NjlkNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ5VCdSa47V9Y5Yz7flp9p7rIvxRLtX8yp1M /9ZB0VTkdDfbo88ImGVPIa52dW0p4k4/crfX+PCocNs/IACnPZ+GC5iH7VgkujKi 2VC0kapJhSXvLXYyGBmgUViA9QZK/Qed+dSQ2jaj5h/JBEZz/pNJkO7Wu4NRxoWr HFHf9j9qXXLlc6GhbV9ChzP19bZZqrVUKsneRbGi/RmAftLPal7+4nyA0xK7XBzQ hnuYk8haCOAl0/BZW7dBnNyjLTMy3YE6qnIlBPJdW52w8xpQz9qa1eu/r2lLlHsy O4ryz4s7UolE/j0zyobe4nSuqFs7Zl2iTpq2gLYpMRcmLMmUQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+bFGwLD7+90p1wmOPjSUBZuF8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMGMwZjE2NjctYmRkNC0z ODEwLWFiNzUtOTc3MTI3OGFiNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMrxW+a+F5BZglfZQhPxVlcYxeNTiMsbor40+5a11Ca29OrUh2/y/6AU StmBFwk3TMytwTeU5C6uGUQNORsziPs+n/wrYyPpOEEdS9juHX4Iv+FGJfd1Te6X GYld/EEe4hCdWklt8aSF5NmdZ4gW60r9IHCaxkdur/A1kG+Cx3MdLLeyuH10MnFd tpGeykC5pdpcuXGYtp3dhyXrQtEM8AGSiVTrmYuoNGw+m+fjnj+Wxk8Sgva+G+zU jRWiH/tRkgQiIYBAwld2jAVrrVFZL5/Re8Mma0RNutNH0Wih7HX6Bhqs71LwrTy+ x15yAhTsD4VwO3/jeH44BCEMlPPycb0= -----END CERTIFICATE-----Generated at Thu Sep 18 03:57:13 2025 by rpki-client