$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ef6ef0be-d7e9-316c-ac17-32c51d629568.roa File: ef6ef0be-d7e9-316c-ac17-32c51d629568.roa (raw, json) Hash identifier: GordunvYBfWxcVklg4txwH9Gt4lBEneaRByCQ0cB92E= Subject key identifier: AB:15:B5:44:93:DF:99:14:98:30:46:CA:D2:10:2E:29:17:D6:21:75 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584AF0F14324F22FCF90F0002C80 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ef6ef0be-d7e9-316c-ac17-32c51d629568.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 25843 IP address blocks: 68.168.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:43:24:f2:2f:cf:90:f0:00:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=bf2911b7-16f4-4163-a032-c83879581492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:fc:7e:51:b4:06:5c:13:4b:dd:95:2b:30: 51:ab:c5:21:f3:cf:47:92:22:a4:fd:bb:76:db:d9: 68:8c:90:72:22:d8:e7:6c:67:49:b8:4f:a3:b9:94: 72:48:61:03:be:0e:d9:d9:11:ae:f3:6e:8c:eb:45: c7:03:31:c4:2c:f2:37:b6:0d:54:47:c5:7b:87:be: 89:9f:e5:6e:0f:24:1d:2c:02:9b:42:92:1d:60:bd: 26:91:31:c3:19:7b:7d:ef:c2:b9:70:71:87:f4:9f: a1:60:19:4c:cf:fd:f6:e1:34:c8:da:3e:de:9f:86: e7:5e:e4:53:30:3c:95:90:d7:7c:08:50:19:db:1f: 8d:e9:9b:80:51:92:de:10:9c:79:1b:1b:a8:e2:ed: fa:a4:3f:0a:ea:2f:bb:ba:0e:50:11:04:96:76:bd: 85:c9:2f:d6:86:1b:b8:68:65:5b:de:52:f1:cc:72: 3e:b2:71:10:a8:a0:f2:52:45:36:67:f9:d9:07:41: de:4a:24:3f:ee:c9:e0:2d:7e:48:b1:f8:ff:c9:45: 0d:c6:1c:7f:71:65:d0:9c:6e:65:08:36:b1:6c:e2: 5c:65:7c:8c:d5:28:27:9b:57:23:dd:6b:12:4e:94: 6f:76:c0:b5:dd:d6:6e:dc:db:de:6a:11:f2:8c:59: 73:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:15:B5:44:93:DF:99:14:98:30:46:CA:D2:10:2E:29:17:D6:21:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ef6ef0be-d7e9-316c-ac17-32c51d629568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 68.168.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d8:75:4e:bf:2d:33:ec:62:9e:ff:6c:95:fa:0a:ba:f4:9a: dc:4c:81:2d:ca:96:28:49:4e:29:62:c2:6e:3f:95:dc:cf:27: d1:d2:59:85:ab:d9:f2:d0:5c:21:07:82:ce:2b:a2:3e:15:0f: f9:20:75:21:dd:fa:7d:a6:82:6c:2d:c6:68:61:15:72:3d:4e: 1f:78:94:54:93:25:40:62:60:3a:2c:49:62:c0:02:1a:8d:c2: c7:a3:ac:80:bb:f6:df:38:34:09:6b:e5:15:09:66:82:38:ff: ef:59:0c:2e:64:b6:fe:36:07:ad:c2:3a:44:26:30:29:aa:bd: 3d:a2:00:2b:dc:2e:d1:ad:3a:9d:ee:7b:a1:7f:74:df:7c:6a: 64:40:37:bb:26:17:6e:c1:d9:1c:74:ba:d9:92:3a:31:5e:0e: 8f:e1:2d:ac:2b:5e:13:2b:d2:50:4f:f4:8c:5c:64:cc:6f:79: b4:fa:a2:46:f4:e3:e9:ab:29:67:0f:79:16:29:1f:27:b9:85: 7e:d5:57:32:ec:39:cb:60:61:82:01:eb:97:e1:7d:ef:d5:73: 83:9e:e9:ec:c3:93:b5:64:55:14:cf:04:9a:66:78:39:c2:d8: 3a:3f:2c:e9:cd:c7:b0:b6:78:a2:f2:ac:52:a4:d0:2d:c3:b8: 65:c4:14:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UMk8i/PkPAALIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YmYyOTExYjctMTZmNC00MTYzLWEwMzItYzgzODc5NTgxNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIX8flG0BlwTS92VKzBRq8Uh889HkiKk/bt2 29lojJByItjnbGdJuE+juZRySGEDvg7Z2RGu826M60XHAzHELPI3tg1UR8V7h76J n+VuDyQdLAKbQpIdYL0mkTHDGXt978K5cHGH9J+hYBlMz/324TTI2j7en4bnXuRT MDyVkNd8CFAZ2x+N6ZuAUZLeEJx5Gxuo4u36pD8K6i+7ug5QEQSWdr2FyS/Whhu4 aGVb3lLxzHI+snEQqKDyUkU2Z/nZB0HeSiQ/7sngLX5Isfj/yUUNxhx/cWXQnG5l CDaxbOJcZXyM1Sgnm1cj3WsSTpRvdsC13dZu3NveahHyjFlzFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsVtUST35kUmDBGytIQLikX1iF1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvZWY2ZWYwYmUtZDdlOS0z MTZjLWFjMTctMzJjNTFkNjI5NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKhdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrYdU6/LTPsYp7/bJX6Crr0mtxMgS3KlihJTiliwm4/ldzPJ9HSWYWr 2fLQXCEHgs4roj4VD/kgdSHd+n2mgmwtxmhhFXI9Th94lFSTJUBiYDosSWLAAhqN wsejrIC79t84NAlr5RUJZoI4/+9ZDC5ktv42B63COkQmMCmqvT2iACvcLtGtOp3u e6F/dN98amRAN7smF27B2Rx0utmSOjFeDo/hLawrXhMr0lBP9IxcZMxvebT6okb0 4+mrKWcPeRYpHye5hX7VVzLsOctgYYIB65fhfe/Vc4Oe6ezDk7VkVRTPBJpmeDnC 2Do/LOnNx7C2eKLyrFKk0C3DuGXEFKg= -----END CERTIFICATE-----Generated at Wed Nov 5 09:31:50 2025 by rpki-client