$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa File: 00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa (raw, json) Hash identifier: HuK8/jKnTQhgNPmLNoeisr0ERfp6AEbru4cd7m5An04= Subject key identifier: 77:9C:7C:EE:D6:05:7B:BA:18:B4:40:81:4B:4A:79:29:DF:88:DA:F1 Certificate issuer: /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Certificate serial: 010D0C9F4328584A9FFB87D00801ECCE9DFF05A0 Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 40183 IP address blocks: 68.68.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:87:d0:08:01:ec:ce:9d:ff:05:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=412b33a7-34c8-4ac0-942c-24f9721f0618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:b8:f2:0f:3a:a1:69:c7:61:8d:43:dd:48: 41:03:3d:96:2b:4a:62:bf:69:eb:d1:35:c3:3c:a1: 71:c3:27:1a:0a:16:66:74:c5:39:68:24:33:2f:a3: 68:77:aa:02:0f:dc:5b:1d:02:96:11:10:20:d1:c1: 4a:f1:9b:5d:73:5b:7b:5c:e9:cd:b1:5d:ec:94:ab: 69:ff:7b:cf:fe:78:fe:b8:59:1e:e0:f5:2b:c5:93: dc:00:93:ed:94:cd:47:b5:7e:2f:75:86:e5:ee:ed: f4:98:16:f9:1e:0a:90:68:51:a2:17:f8:68:d9:f8: 60:f1:64:a9:2a:bf:7e:c5:8a:f7:7e:dc:bc:ee:8c: 94:83:61:c2:c5:d3:cb:5c:a4:10:d1:8b:85:f1:c5: 5f:db:44:56:c5:23:39:e3:d1:31:bb:e1:a9:25:c0: f7:26:7a:28:58:71:f4:f5:45:99:33:f4:47:f7:be: 5b:27:c6:d7:4b:a8:3b:f8:38:51:c1:d5:09:77:04: 8d:49:9b:ce:10:40:e2:f4:a1:64:45:3d:b5:06:b1: 04:e3:d3:da:af:09:28:da:8d:67:b4:e2:54:c2:d7: b3:e8:5a:e3:b7:a4:db:7f:7c:fe:e8:33:2c:e1:bb: 2f:c3:f7:4e:8f:0e:7b:c6:af:e5:17:85:98:f7:9f: d6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9C:7C:EE:D6:05:7B:BA:18:B4:40:81:4B:4A:79:29:DF:88:DA:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl X509v3 Authority Key Identifier: keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer sbgp-ipAddrBlock: critical IPv4: 68.68.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f2:5a:7c:b1:a6:fe:25:19:74:a5:64:5a:2b:ed:ab:fe:96: 07:8b:8b:c4:66:9d:c4:fc:69:e1:6e:21:e2:ef:c3:60:1c:25: 25:5c:51:0d:38:bf:3d:a2:73:55:19:2b:12:da:2d:6e:be:fc: f7:b9:6a:14:ee:3c:d4:1e:7c:89:e5:54:59:c7:13:11:97:c4: f7:57:ec:da:3a:71:7a:aa:5b:d8:71:c9:ae:13:3a:8b:1a:98: ea:52:44:c6:13:15:f2:b2:66:24:c7:8e:94:39:3d:85:1d:75: 2f:a1:ed:95:77:4c:b3:4f:af:ae:a5:31:9e:0f:cf:61:20:b9: 55:01:2b:e8:60:46:b5:bb:b1:69:50:29:73:a1:db:ea:85:2a: b6:0d:51:1d:75:e3:f5:58:b6:ef:61:cb:d8:42:32:48:0c:08: a9:00:60:12:91:85:4d:5d:a2:33:ed:30:29:0f:c6:3d:1e:dc: b7:7b:c1:dd:ce:79:44:a7:94:d6:bb:c1:8a:ca:3c:ee:ed:e6: 69:fb:e5:49:24:8f:d1:01:7d:61:a9:7c:fe:fd:05:ea:6c:c1: b7:43:02:eb:c5:ad:3c:78:28:42:b8:bf:28:38:d7:73:3a:36: 06:2b:27:2a:97:6e:80:9a:d7:e8:1c:3d:5d:d5:2f:65:41:a6: 83:6a:8d:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+4fQCAHszp3/BaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VhYmE4MzAtMGYxNS00YzM2LTk5YjAtMGMxNGJmN2Vi ZjllMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk NDEyYjMzYTctMzRjOC00YWMwLTk0MmMtMjRmOTcyMWYwNjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoy48g86oWnHYY1D3UhBAz2WK0piv2nr0TXD PKFxwycaChZmdMU5aCQzL6Nod6oCD9xbHQKWERAg0cFK8Ztdc1t7XOnNsV3slKtp /3vP/nj+uFke4PUrxZPcAJPtlM1HtX4vdYbl7u30mBb5HgqQaFGiF/ho2fhg8WSp Kr9+xYr3fty87oyUg2HCxdPLXKQQ0YuF8cVf20RWxSM549Exu+GpJcD3JnooWHH0 9UWZM/RH975bJ8bXS6g7+DhRwdUJdwSNSZvOEEDi9KFkRT21BrEE49Parwko2o1n tOJUwtez6Frjt6Tbf3z+6DMs4bsvw/dOjw57xq/lF4WY95/WfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHecfO7WBXu6GLRAgUtKeSnfiNrxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFi YTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0YmY3ZWJmOWUvMDBiMzZiNGYtYjkyZS0z ZmI2LTg0NzktMWIxNjZiMWY1ZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2VhYmE4MzAtMGYxNS00YzM2LTk5 YjAtMGMxNGJmN2ViZjllLzNlYWJhODMwLTBmMTUtNGMzNi05OWIwLTBjMTRiZjdl YmY5ZS5jcmwwHwYDVR0jBBgwFoAUtkIn1zQmnRVMSxbhUm+PwQP6MTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFiYTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0 YmY3ZWJmOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARERZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnyWnyxpv4lGXSlZFor7av+lgeLi8RmncT8aeFuIeLvw2AcJSVcUQ04 vz2ic1UZKxLaLW6+/Pe5ahTuPNQefInlVFnHExGXxPdX7No6cXqqW9hxya4TOosa mOpSRMYTFfKyZiTHjpQ5PYUddS+h7ZV3TLNPr66lMZ4Pz2EguVUBK+hgRrW7sWlQ KXOh2+qFKrYNUR114/VYtu9hy9hCMkgMCKkAYBKRhU1dojPtMCkPxj0e3Ld7wd3O eUSnlNa7wYrKPO7t5mn75Ukkj9EBfWGpfP79BepswbdDAuvFrTx4KEK4vyg413M6 NgYrJyqXboCa1+gcPV3VL2VBpoNqjdQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:54:55 2025 by rpki-client