$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa File: 892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa (raw, json) Hash identifier: WPVLYGE05ltv2eo40PK/Eo6CdczGP1DABm9RBRUVI3s= Subject key identifier: AC:03:14:6D:F9:F2:85:E6:97:8B:13:58:CC:88:45:F6:68:9F:66:8C Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584BA0D24E394851DF0964DCC40A Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 68.64.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:4e:39:48:51:df:09:64:dc:c4:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=8f275aa4-4ca9-4cb6-834b-5e5fbf1537c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:7f:6f:ef:0e:1f:0f:6b:71:38:fb:12:b7: 9e:8f:bd:47:97:e9:bd:ca:c6:fe:73:e9:2a:2f:22: 2e:91:01:86:0c:15:dc:66:c7:0d:77:47:fd:88:48: 37:e3:31:60:9f:95:cd:e8:2d:ca:88:05:b5:cb:79: 6b:a5:fb:ba:d6:e9:56:c9:bf:98:ce:32:a3:3f:b6: a8:f9:ca:3b:d3:fd:cf:12:d6:02:47:1d:0d:3a:03: 99:98:1a:ba:e5:5b:a3:11:61:df:a4:f6:de:e3:eb: 01:83:d5:fe:16:6b:a1:d0:f5:9d:e4:44:de:fb:c5: 34:82:f3:75:51:ae:d5:c9:37:93:a5:13:59:81:68: 96:16:10:a0:33:0b:f5:f0:c7:bb:c7:c2:27:42:fa: e5:6b:ee:eb:7a:bf:84:cf:f9:14:e9:b9:2f:2a:bc: a4:bc:a9:01:d4:37:6a:72:c6:04:5e:ea:0f:ac:40: dc:4e:c6:4b:19:bc:45:47:51:08:a3:84:c9:e0:f2: 03:54:8c:35:bf:b9:5a:0b:ee:a8:42:40:89:9d:48: c3:15:b5:51:84:e2:e6:f8:71:7c:92:85:3a:c1:12: f6:10:3b:e8:72:46:d5:b0:8a:c2:cd:cc:1b:da:ed: 56:a4:70:29:dc:72:6f:9c:39:bb:2b:b4:0d:c5:8d: d1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:03:14:6D:F9:F2:85:E6:97:8B:13:58:CC:88:45:F6:68:9F:66:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:46:0b:4c:b0:e4:a3:1a:91:10:0c:a9:4b:69:cb:24:1b:55: f3:c2:21:89:83:59:b6:31:cf:a4:b2:3a:5b:99:13:8e:32:4e: c1:cd:4a:d8:f3:1c:df:65:db:49:22:bf:ff:e9:5e:b0:f4:52: 72:f4:10:59:de:e4:42:52:15:21:8d:42:d6:67:75:a7:2c:5e: aa:58:9b:b3:ea:ad:ea:d1:cd:25:d4:3c:5e:0d:54:d8:11:5c: 16:4e:05:b2:d7:a4:5d:2c:df:ab:c8:24:98:1a:70:82:32:e7: d2:9d:2e:bd:eb:d4:bb:44:7f:9c:bb:3f:95:c3:da:55:d9:1e: 48:02:b2:95:89:94:b7:0d:c6:b2:49:6c:99:72:c7:cb:33:17: ce:9a:37:53:9f:5e:2e:1e:65:0c:7a:4a:86:79:8b:11:29:b8: 8a:81:73:71:90:ff:8b:34:bf:bf:ba:3f:52:fa:71:b8:bd:91: 00:0b:39:04:49:b2:4e:28:b0:0a:ee:6a:57:7f:fc:44:a5:b4: 2a:86:68:3a:5f:5a:9c:09:04:d3:21:46:9b:74:5a:8a:e1:26: 20:54:f1:42:0d:87:2e:c5:4f:e0:9e:6d:de:66:53:e3:96:e3: 0f:8d:eb:83:04:5f:fe:4d:c2:59:9c:88:a6:97:76:c9:b1:e8: bd:af:69:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0k45SFHfCWTcxAowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk OGYyNzVhYTQtNGNhOS00Y2I2LTgzNGItNWU1ZmJmMTUzN2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhx/b+8OHw9rcTj7Ereej71Hl+m9ysb+c+kq LyIukQGGDBXcZscNd0f9iEg34zFgn5XN6C3KiAW1y3lrpfu61ulWyb+YzjKjP7ao +co70/3PEtYCRx0NOgOZmBq65VujEWHfpPbe4+sBg9X+Fmuh0PWd5ETe+8U0gvN1 Ua7VyTeTpRNZgWiWFhCgMwv18Me7x8InQvrla+7rer+Ez/kU6bkvKrykvKkB1Ddq csYEXuoPrEDcTsZLGbxFR1EIo4TJ4PIDVIw1v7laC+6oQkCJnUjDFbVRhOLm+HF8 koU6wRL2EDvockbVsIrCzcwb2u1WpHAp3HJvnDm7K7QNxY3RtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwDFG358oXml4sTWMyIRfZon2aMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvODkyYzcxNTMtNmVmMS0z ZDkwLThhM2ItODFlZWM4ZWM4ODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhGC0yw5KMakRAMqUtpyyQbVfPCIYmDWbYxz6SyOluZE44yTsHNStjz HN9l20kiv//pXrD0UnL0EFne5EJSFSGNQtZndacsXqpYm7PqrerRzSXUPF4NVNgR XBZOBbLXpF0s36vIJJgacIIy59KdLr3r1LtEf5y7P5XD2lXZHkgCspWJlLcNxrJJ bJlyx8szF86aN1OfXi4eZQx6SoZ5ixEpuIqBc3GQ/4s0v7+6P1L6cbi9kQALOQRJ sk4osAruald//ESltCqGaDpfWpwJBNMhRpt0WorhJiBU8UINhy7FT+Cebd5mU+OW 4w+N64MEX/5NwlmciKaXdsmx6L2vaZI= -----END CERTIFICATE-----Generated at Mon Oct 27 12:02:41 2025 by rpki-client