$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e1f7e68b-1f50-33e8-a45b-9c9b266621ea.roa File: e1f7e68b-1f50-33e8-a45b-9c9b266621ea.roa (raw, json) Hash identifier: icBHBRJ6NxZelfMBCbgY6bzKuMXcXOSFVaIK1q51v9Y= Subject key identifier: 31:24:30:2E:16:4C:21:99:C8:E9:96:AF:0A:DC:5C:F3:1A:A8:C3:6C Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B4D11DCF69B54D1CF10D20030 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e1f7e68b-1f50-33e8-a45b-9c9b266621ea.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 15049 IP address blocks: 68.70.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:dc:f6:9b:54:d1:cf:10:d2:00:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=7010b213-4456-48f0-a907-69d16c95c183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bb:f2:f8:9c:96:57:a4:f5:c0:81:39:4f:80: 8f:a8:de:11:de:a2:b4:15:09:2d:e3:41:65:1d:7c: 41:f3:7d:30:b4:2b:5d:1b:ed:33:45:d7:c6:c1:da: 86:fb:7b:12:cd:18:2b:d4:f5:e0:05:46:7b:0d:57: 99:08:fe:fe:00:e5:5a:95:f7:1a:3d:3e:39:95:9c: 89:a0:27:c5:6d:00:f9:5a:ed:fa:dc:e4:98:69:c9: a3:86:90:02:40:21:82:d1:f0:6e:14:db:2e:6b:64: eb:f8:99:85:5f:83:e2:72:a9:09:ce:46:c8:ed:13: a1:ca:a1:c0:b6:43:6f:cd:90:f4:8c:ab:78:53:28: 8b:43:8b:93:56:56:b7:9a:c4:8a:58:99:3a:fe:d3: 28:e8:69:65:5a:a2:c7:e1:35:f8:eb:2a:37:fa:97: 0b:38:2d:a3:ae:8a:8a:bb:21:2c:96:71:8c:e1:5b: 46:f3:86:d9:ce:b7:d9:32:7c:39:20:3b:72:7b:42: 9c:5c:93:62:49:36:1b:ed:c0:19:08:44:f9:b8:b1: 95:5a:ad:4f:4e:8c:0c:47:71:42:30:c0:d6:a6:56: d5:13:07:10:b9:69:0f:b7:13:a5:17:80:8d:70:6b: 02:f1:35:e8:5f:40:3d:ca:d7:9d:b9:ce:23:22:d9: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:24:30:2E:16:4C:21:99:C8:E9:96:AF:0A:DC:5C:F3:1A:A8:C3:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e1f7e68b-1f50-33e8-a45b-9c9b266621ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 68.70.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:5a:9c:ec:b4:2a:84:0e:3b:86:f8:82:73:a3:6c:06:0e:63: f9:a8:aa:5d:fd:81:ee:6c:3d:9e:01:92:91:d3:f2:9d:cf:c5: 75:ca:b0:00:32:85:8e:0e:db:07:6e:00:06:8d:86:66:4d:49: d3:31:88:19:2e:14:e8:1f:43:99:52:e7:58:f0:ae:c1:8c:ba: 11:9f:b7:35:a8:24:3c:3a:f8:f6:4e:34:a5:47:7f:ff:61:2b: a6:7c:95:7b:5b:8a:7f:74:73:fd:94:71:7d:28:d3:13:24:cb: a6:31:72:5c:84:d4:76:fb:81:ec:9c:b9:5b:2d:83:de:e4:2d: aa:15:d6:cf:f3:4c:d9:31:15:c3:5e:94:5e:9a:ba:b9:62:75: 00:47:df:50:70:84:f4:77:8d:38:09:b1:2c:9b:6c:22:c7:82: 7c:2c:2a:db:85:10:3f:a1:1f:24:f6:44:25:53:7c:a6:fa:7e: 91:24:3f:fb:d1:c5:5e:d9:ea:67:d4:80:3b:d5:f8:3f:14:c6: 3c:ad:49:ed:ba:be:db:a7:e6:9d:48:fc:b9:a5:5a:13:a0:a5: e3:aa:54:78:66:83:9f:a9:d8:6a:a9:c2:b0:43:a9:77:3c:19: c4:30:0f:57:7e:5c:e5:a6:40:a4:07:b7:36:6a:96:03:f0:d7: 14:0f:28:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdz2m1TRzxDSADAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NzAxMGIyMTMtNDQ1Ni00OGYwLWE5MDctNjlkMTZjOTVjMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbvy+JyWV6T1wIE5T4CPqN4R3qK0FQkt40Fl HXxB830wtCtdG+0zRdfGwdqG+3sSzRgr1PXgBUZ7DVeZCP7+AOValfcaPT45lZyJ oCfFbQD5Wu363OSYacmjhpACQCGC0fBuFNsua2Tr+JmFX4PicqkJzkbI7ROhyqHA tkNvzZD0jKt4UyiLQ4uTVla3msSKWJk6/tMo6GllWqLH4TX46yo3+pcLOC2jroqK uyEslnGM4VtG84bZzrfZMnw5IDtye0KcXJNiSTYb7cAZCET5uLGVWq1PTowMR3FC MMDWplbVEwcQuWkPtxOlF4CNcGsC8TXoX0A9yteduc4jItnwrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEkMC4WTCGZyOmWrwrcXPMaqMNsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZTFmN2U2OGItMWY1MC0z M2U4LWE0NWItOWM5YjI2NjYyMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREY7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1anOy0KoQOO4b4gnOjbAYOY/moql39ge5sPZ4BkpHT8p3PxXXKsAAy hY4O2wduAAaNhmZNSdMxiBkuFOgfQ5lS51jwrsGMuhGftzWoJDw6+PZONKVHf/9h K6Z8lXtbin90c/2UcX0o0xMky6YxclyE1Hb7geycuVstg97kLaoV1s/zTNkxFcNe lF6aurlidQBH31BwhPR3jTgJsSybbCLHgnwsKtuFED+hHyT2RCVTfKb6fpEkP/vR xV7Z6mfUgDvV+D8UxjytSe26vtun5p1I/LmlWhOgpeOqVHhmg5+p2GqpwrBDqXc8 GcQwD1d+XOWmQKQHtzZqlgPw1xQPKAQ= -----END CERTIFICATE-----Generated at Wed Nov 5 13:09:52 2025 by rpki-client