$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/d3144be4-dbb0-30da-85fc-0254be5834d1.roa File: d3144be4-dbb0-30da-85fc-0254be5834d1.roa (raw, json) Hash identifier: y4rMlAP0u751hx+fLXaMjHd1vShCXCWgSchg65Tkkc8= Subject key identifier: 5B:31:EA:30:BE:0B:B2:99:02:43:D2:0C:BF:59:00:07:F5:39:DF:24 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584AF951415CA35FCB5F75C08E80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/d3144be4-dbb0-30da-85fc-0254be5834d1.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 31898 IP address blocks: 68.64.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:41:5c:a3:5f:cb:5f:75:c0:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=58264e8e-4547-40d1-8ece-65e185e1c2a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:96:66:9f:59:88:5c:39:ae:a5:da:7b:54:c5: 6b:7a:04:ca:cc:48:0f:04:d8:18:57:ce:73:e5:6a: 19:4d:ff:75:24:7e:3f:1c:f6:d9:e0:d6:72:f3:26: b1:f9:88:f8:e2:ea:82:12:f2:eb:0e:60:f9:9c:8a: bc:31:24:69:b2:86:ae:43:99:0a:3b:e9:73:74:fd: c2:de:be:31:5c:2b:c2:88:27:74:be:5a:d0:be:f9: 04:39:da:f6:02:fd:6e:fb:7e:46:5a:6e:ca:33:6a: d9:63:98:02:59:d8:21:81:07:a0:2a:03:96:18:65: ab:b1:09:63:2d:d4:06:ad:bf:a0:ac:67:77:ed:0b: 74:e2:0b:a0:8e:8a:f9:70:94:13:ac:4f:63:bd:18: d7:fc:a5:1d:d6:c1:e1:95:8f:b7:45:f7:c8:db:94: 8e:4f:35:a6:3b:4e:6d:23:7a:17:3d:33:74:5f:1f: 1c:83:65:e9:7e:c1:d7:cf:b3:48:91:32:e0:88:fb: f6:1b:42:90:e2:4d:cc:0a:0e:c1:1b:90:77:60:11: 5f:24:39:2c:10:94:a9:70:38:d0:4b:ac:99:3c:a1: b9:56:e0:98:45:2e:7c:08:f0:60:c7:ca:a3:99:b9: 69:5e:12:16:c6:46:3e:5b:d9:18:a9:ae:eb:59:f9: 34:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:31:EA:30:BE:0B:B2:99:02:43:D2:0C:BF:59:00:07:F5:39:DF:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/d3144be4-dbb0-30da-85fc-0254be5834d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:66:c9:d9:12:23:3a:53:e5:97:27:3b:d5:b7:48:b9:3f:b6: 30:9e:b5:16:75:05:82:13:89:c0:d1:6c:a8:51:c9:41:23:48: 69:0e:cb:ee:f6:83:d2:f0:2a:2d:a5:1d:e9:9c:64:41:9b:3d: 4d:10:5d:28:e4:c9:86:36:91:f0:7f:d2:f4:06:db:60:fc:e3: 12:e5:23:bd:41:1f:7a:eb:1a:59:dd:97:0e:89:ae:ce:12:92: 0c:a0:39:fa:d4:46:58:d3:73:17:06:8a:2b:c5:de:41:b6:a3: ec:ae:ed:6f:4c:0e:cd:92:7f:cc:a5:d6:17:d1:06:a4:c6:45: 99:3d:ea:dd:97:9c:56:22:e9:e7:8d:d9:7d:12:08:05:73:7b: 4b:6a:d0:68:83:4d:03:c8:cb:17:cb:d0:64:3c:ac:bc:ee:f0: b3:b0:29:7e:d7:bd:0e:2c:59:52:a7:57:a3:1c:b5:16:8f:fe: 8f:ec:5d:a5:e8:90:f0:58:d6:1a:09:fd:d6:4d:7f:d5:cb:f4: 4e:a9:4d:76:5c:97:4a:cd:61:93:6e:7d:a8:a0:47:fc:20:2c: 40:e6:bd:6f:93:46:8a:f3:d2:a5:d4:bb:4d:61:41:cc:ac:ef: 17:51:a0:ba:eb:1d:4a:20:08:a1:f2:f5:4a:08:4e:32:95:46: 1b:07:4c:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUFco1/LX3XAjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NTgyNjRlOGUtNDU0Ny00MGQxLThlY2UtNjVlMTg1ZTFjMmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpZmn1mIXDmupdp7VMVregTKzEgPBNgYV85z 5WoZTf91JH4/HPbZ4NZy8yax+Yj44uqCEvLrDmD5nIq8MSRpsoauQ5kKO+lzdP3C 3r4xXCvCiCd0vlrQvvkEOdr2Av1u+35GWm7KM2rZY5gCWdghgQegKgOWGGWrsQlj LdQGrb+grGd37Qt04gugjor5cJQTrE9jvRjX/KUd1sHhlY+3RffI25SOTzWmO05t I3oXPTN0Xx8cg2XpfsHXz7NIkTLgiPv2G0KQ4k3MCg7BG5B3YBFfJDksEJSpcDjQ S6yZPKG5VuCYRS58CPBgx8qjmblpXhIWxkY+W9kYqa7rWfk0uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsx6jC+C7KZAkPSDL9ZAAf1Od8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZDMxNDRiZTQtZGJiMC0z MGRhLTg1ZmMtMDI1NGJlNTgzNGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREAGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxmydkSIzpT5ZcnO9W3SLk/tjCetRZ1BYITicDRbKhRyUEjSGkOy+72 g9LwKi2lHemcZEGbPU0QXSjkyYY2kfB/0vQG22D84xLlI71BH3rrGlndlw6Jrs4S kgygOfrURljTcxcGiivF3kG2o+yu7W9MDs2Sf8yl1hfRBqTGRZk96t2XnFYi6eeN 2X0SCAVze0tq0GiDTQPIyxfL0GQ8rLzu8LOwKX7XvQ4sWVKnV6MctRaP/o/sXaXo kPBY1hoJ/dZNf9XL9E6pTXZcl0rNYZNufaigR/wgLEDmvW+TRorz0qXUu01hQcys 7xdRoLrrHUogCKHy9UoITjKVRhsHTOI= -----END CERTIFICATE-----Generated at Thu Sep 18 03:55:14 2025 by rpki-client