$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa File: cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa (raw, json) Hash identifier: UeCVcT5NMYQo4jJW8lw6oHcNlOBRA8nnnKMTO6j+Ywk= Subject key identifier: B9:C5:BD:99:98:44:F0:DD:95:34:9A:A0:01:9C:AF:7C:E4:A2:9D:67 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584AE891304252C1CD3C8ED041C0 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 1239 IP address blocks: 68.24.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:30:42:52:c1:cd:3c:8e:d0:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=1032fdd5-f777-4290-83e5-09462404d452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f9:f6:4b:9a:5c:bd:d4:d6:4b:fb:22:83:cc: 9f:88:9d:1e:e9:be:d6:ef:e7:43:97:d2:30:5f:c5: 4d:b6:ba:ff:c7:fe:8c:37:84:fa:4c:38:72:4b:03: 8e:9b:83:3b:58:5b:75:db:57:8e:d5:20:ee:b6:22: 49:a8:2a:9b:49:f1:9b:81:fa:13:3e:94:c5:f2:53: bc:6e:4e:5d:7f:5c:a7:72:be:6f:b4:a5:fd:e2:fc: 0e:9b:b7:4d:2f:a2:a2:d2:eb:76:02:59:88:1c:d4: 9e:25:7a:1e:d2:1e:7d:25:51:9c:f4:81:0e:ab:95: 2d:79:61:10:23:f6:48:3c:03:46:2c:6f:f0:62:79: 30:8b:87:18:c8:5e:a3:56:fb:06:f8:0e:c1:80:9f: c9:7a:bc:ce:92:0a:a0:f8:5b:5e:79:df:c3:b5:37: 2a:e7:28:4a:1a:da:a0:5a:59:16:04:94:56:45:09: 71:97:7c:c1:58:2f:4b:28:50:a0:9a:85:20:dd:2e: 4d:ce:27:3a:55:11:b3:59:61:41:ce:20:81:12:82: 32:c9:7d:4f:b4:55:96:40:bb:aa:bd:65:0a:3a:40: 18:33:0d:43:c4:5d:65:c1:8c:ff:a6:f9:40:67:49: 55:8d:82:19:99:3d:d8:31:f5:27:79:a0:13:e4:74: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C5:BD:99:98:44:F0:DD:95:34:9A:A0:01:9C:AF:7C:E4:A2:9D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 68.24.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption fa:3a:8d:a7:49:e1:ae:57:e7:1c:48:15:a9:f3:75:c3:c8:80: b8:9e:c7:49:13:a5:15:03:b1:eb:1b:3d:d9:8f:62:aa:3f:30: 75:ad:95:34:ca:b0:a7:2b:21:0e:d0:fd:ad:d7:64:75:2c:f8: e3:cb:80:11:96:fd:4a:20:00:cf:b9:d8:bc:69:5d:61:cb:7e: af:f0:5c:bf:a8:2f:0c:30:ca:ce:98:c3:13:32:aa:cc:9c:34: 53:c1:f4:1f:6e:6f:ea:27:49:2c:2a:04:97:4e:23:02:ca:a0: c2:96:f5:81:80:06:bc:39:d5:21:e5:e8:4b:99:77:44:6c:96: e2:c9:15:39:8d:bd:b2:11:b3:d8:d5:3b:35:d6:5a:79:b7:99: 0c:40:61:3b:74:04:c2:fa:07:3c:bf:ef:54:e3:98:f0:ac:31: 5b:4e:4a:52:f0:17:b2:ab:9b:c4:3f:a8:ae:fe:e1:0b:22:23: 3e:5d:d3:fe:19:11:8f:1c:96:3e:58:f3:cd:d6:6a:11:07:32: 63:65:63:78:60:3b:16:94:d5:48:0c:4e:3d:7b:1e:5e:7d:5f: 3f:a9:df:3f:c4:5d:7b:81:34:1c:59:32:1c:6d:e6:dd:fd:56: 4b:c4:f3:9d:28:0a:dc:9e:e2:67:f4:90:3f:54:fa:6c:48:76: cd:be:79:71 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErokTBCUsHNPI7QQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk MTAzMmZkZDUtZjc3Ny00MjkwLTgzZTUtMDk0NjI0MDRkNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Pn2S5pcvdTWS/sig8yfiJ0e6b7W7+dDl9Iw X8VNtrr/x/6MN4T6TDhySwOOm4M7WFt121eO1SDutiJJqCqbSfGbgfoTPpTF8lO8 bk5df1yncr5vtKX94vwOm7dNL6Ki0ut2AlmIHNSeJXoe0h59JVGc9IEOq5UteWEQ I/ZIPANGLG/wYnkwi4cYyF6jVvsG+A7BgJ/JerzOkgqg+Fteed/DtTcq5yhKGtqg WlkWBJRWRQlxl3zBWC9LKFCgmoUg3S5Nzic6VRGzWWFBziCBEoIyyX1PtFWWQLuq vWUKOkAYMw1DxF1lwYz/pvlAZ0lVjYIZmT3YMfUneaAT5HSJkwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLnFvZmYRPDdlTSaoAGcr3zkop1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvY2IzZWM0YzAtNjZjMy0z NjI1LWFlM2EtMzZhMWFjMzU2Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDRBgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEA+jqNp0nhrlfnHEgVqfN1w8iAuJ7HSROlFQOx6xs92Y9iqj8wda2VNMqw pyshDtD9rddkdSz448uAEZb9SiAAz7nYvGldYct+r/Bcv6gvDDDKzpjDEzKqzJw0 U8H0H25v6idJLCoEl04jAsqgwpb1gYAGvDnVIeXoS5l3RGyW4skVOY29shGz2NU7 NdZaebeZDEBhO3QEwvoHPL/vVOOY8KwxW05KUvAXsqubxD+orv7hCyIjPl3T/hkR jxyWPljzzdZqEQcyY2VjeGA7FpTVSAxOPXseXn1fP6nfP8Rde4E0HFkyHG3m3f1W S8TznSgK3J7iZ/SQP1T6bEh2zb55cQ== -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:18 2025 by rpki-client