$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa File: f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa (raw, json) Hash identifier: 7mvIZPQUFXBTfUHnq7PFfGS68TB7bWF4uVs7/bFbc5s= Subject key identifier: 9F:6C:78:1F:C7:D4:16:E6:0E:49:59:24:EA:B2:00:37:E0:E2:FA:EB Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584AECC13356A351723240DAC400 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 68.71.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:33:56:a3:51:72:32:40:da:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=6c544760-c650-43ce-9420-ab408fe8e0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3f:23:a3:93:95:05:6a:69:0a:f2:88:12:8e: 34:dc:a9:58:bb:f3:ff:f4:4d:93:5b:1e:e2:9f:27: 81:1f:70:90:11:94:99:c0:68:f0:7a:76:8a:5e:76: e9:c0:79:48:0e:ec:9d:57:a0:94:4d:c6:5a:22:84: 92:08:fb:0a:bb:9e:ec:43:29:b1:49:41:06:9e:04: 46:11:e1:7d:0c:8b:df:5e:d9:6b:20:6c:ae:c3:d2: b3:d9:a0:e8:da:be:25:92:4b:6c:4c:ad:95:37:8c: ef:25:74:12:25:71:72:91:c1:a6:7f:0b:92:3a:46: 6f:d3:eb:c2:63:ca:b2:ce:da:50:4b:4a:bf:d9:b0: e5:58:e0:72:5f:ee:d7:c5:1e:f0:ed:03:4e:03:9e: 41:3c:30:c7:38:49:e0:5a:52:28:1b:a8:d8:dc:58: 68:06:51:69:a1:2c:33:6b:ee:8a:e5:24:28:e0:48: 73:f5:33:29:63:c4:35:14:d7:51:97:23:ab:e5:cf: 62:01:b8:30:c7:05:d3:1a:2b:7a:9e:66:4a:7f:5a: df:45:4a:8f:98:7c:e6:85:75:ea:a4:c6:88:05:f2: d8:ab:44:1d:5d:34:c2:d8:18:67:10:76:67:15:ab: 6b:fd:9c:2e:be:b0:0f:cb:91:50:27:97:5a:d2:90: 2d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6C:78:1F:C7:D4:16:E6:0E:49:59:24:EA:B2:00:37:E0:E2:FA:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:42:5c:bc:2f:69:18:f7:24:eb:d9:35:75:44:db:20:e3:3e: d8:32:79:29:4d:b0:33:29:07:7d:bc:36:aa:47:fd:f8:fd:fa: e4:5f:7f:69:de:b5:0a:66:7d:0c:96:29:8e:3a:03:2b:e3:33: 55:94:47:bd:6a:89:ef:ca:98:31:7b:f4:2e:c1:c8:4c:fa:27: f7:b6:c8:89:4d:10:54:d6:39:b3:ac:61:f5:db:4a:c7:dd:00: 63:7f:3f:ef:a0:87:18:ff:cb:3f:ed:fa:69:b2:88:5b:d2:44: 07:1d:8a:ed:6d:04:03:32:5a:3d:c5:83:68:f7:be:ee:f5:eb: fd:be:5a:00:2a:5e:99:10:10:c5:09:70:91:df:79:f5:95:dc: 73:a7:97:b6:18:04:94:90:a9:d8:34:14:5f:9f:67:10:d7:55: e2:ac:58:72:ff:a4:5c:7e:d1:93:61:5a:c2:36:ab:e8:cc:c0: 21:7c:8c:63:01:e3:47:41:e5:c1:bf:a4:f9:73:32:2d:ab:b9: db:2e:83:ea:b6:23:b2:c5:56:7f:e9:c8:92:52:78:4a:c1:9c: 4e:15:44:79:f0:d2:4a:b6:b3:19:6d:38:db:cf:20:fa:b7:f0: 71:1c:72:cf:06:3a:65:14:a0:85:ce:9d:28:b3:25:dd:03:21: b3:4a:ee:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTNWo1FyMkDaxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NmM1NDQ3NjAtYzY1MC00M2NlLTk0MjAtYWI0MDhmZThlMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD8jo5OVBWppCvKIEo403KlYu/P/9E2TWx7i nyeBH3CQEZSZwGjwenaKXnbpwHlIDuydV6CUTcZaIoSSCPsKu57sQymxSUEGngRG EeF9DIvfXtlrIGyuw9Kz2aDo2r4lkktsTK2VN4zvJXQSJXFykcGmfwuSOkZv0+vC Y8qyztpQS0q/2bDlWOByX+7XxR7w7QNOA55BPDDHOEngWlIoG6jY3FhoBlFpoSwz a+6K5SQo4Ehz9TMpY8Q1FNdRlyOr5c9iAbgwxwXTGit6nmZKf1rfRUqPmHzmhXXq pMaIBfLYq0QdXTTC2BhnEHZnFatr/ZwuvrAPy5FQJ5da0pAtfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9seB/H1BbmDklZJOqyADfg4vrrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvZjRiMzA1NWYtZTAxYi0z MjEyLWFmNzgtYjFhOWMyYTFmYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARCXLwvaRj3JOvZNXVE2yDjPtgyeSlNsDMpB328NqpH/fj9+uRff2ne tQpmfQyWKY46AyvjM1WUR71qie/KmDF79C7ByEz6J/e2yIlNEFTWObOsYfXbSsfd AGN/P++ghxj/yz/t+mmyiFvSRAcdiu1tBAMyWj3Fg2j3vu716/2+WgAqXpkQEMUJ cJHfefWV3HOnl7YYBJSQqdg0FF+fZxDXVeKsWHL/pFx+0ZNhWsI2q+jMwCF8jGMB 40dB5cG/pPlzMi2rudsug+q2I7LFVn/pyJJSeErBnE4VRHnw0kq2sxltONvPIPq3 8HEccs8GOmUUoIXOnSizJd0DIbNK7rg= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:03 2025 by rpki-client