$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/36234625-4a26-3605-90a3-4b465a3b61b7.roa File: 36234625-4a26-3605-90a3-4b465a3b61b7.roa (raw, json) Hash identifier: /n8Xoiro/V/3wRqsnqo1mYEshEd7+dg+ES0w2D97zyA= Subject key identifier: 24:E8:87:79:6D:40:6C:5E:26:42:88:A2:89:C4:6F:8D:3D:83:E2:B0 Certificate issuer: /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963 Certificate serial: 010D0C9F4328584B7C875D272551B1594E93D500 Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/36234625-4a26-3605-90a3-4b465a3b61b7.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 4476 IP address blocks: 192.68.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:5d:27:25:51:b1:59:4e:93:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=8ffd4a52-402e-43fe-8df0-126799c007a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6e:43:74:cd:c5:52:f7:4e:b1:35:ce:c7:d2: 22:5c:92:aa:ba:a8:fa:be:7b:85:1d:b2:a7:21:92: 13:eb:e1:32:26:25:d3:b8:fc:92:74:01:4d:66:42: 0e:57:f3:30:53:5c:51:a7:9b:18:2c:21:83:e1:f1: 75:a1:70:b8:78:dd:d1:87:91:7d:04:d0:ca:d4:0c: 76:23:56:58:38:bc:b4:9a:37:53:29:23:44:ee:ec: bb:73:91:9b:d1:f8:35:a9:35:89:5f:2c:5a:cd:24: 08:0a:8a:82:82:ad:48:be:c4:50:c6:b1:e6:46:77: 05:39:4a:43:fb:05:fd:2b:aa:98:88:c6:56:c3:6d: 1f:51:29:d8:e7:37:ad:ce:c7:cf:8a:f4:69:02:67: bb:97:fe:35:90:a6:6e:d1:9b:85:b2:be:25:39:91: 85:7f:4f:5f:cc:1c:24:ed:de:b5:bf:65:07:9e:39: 96:85:e1:11:0f:ad:41:53:10:fc:40:62:2e:a1:11: 22:f4:a4:cd:65:6c:1e:d7:c5:cf:24:2c:d5:41:e6: a0:c7:1e:97:27:2d:cc:b0:de:2c:09:56:b8:55:ce: 17:75:46:ae:7b:3f:57:4a:ab:66:b1:4f:8a:56:d3: 53:96:18:06:55:77:6e:c5:57:13:25:e0:bf:db:be: 8a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E8:87:79:6D:40:6C:5E:26:42:88:A2:89:C4:6F:8D:3D:83:E2:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/36234625-4a26-3605-90a3-4b465a3b61b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl X509v3 Authority Key Identifier: keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer sbgp-ipAddrBlock: critical IPv4: 192.68.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:04:19:5f:e2:20:d3:b6:93:5a:56:e3:61:c0:a0:a1:c9:29: 9b:d9:93:b0:17:72:46:4c:62:88:39:63:74:3b:21:e9:b0:20: 7b:7c:3f:94:10:31:33:80:5b:da:f1:2a:ac:08:5b:7e:3a:82: b5:d7:79:93:4c:f7:0b:c6:1e:26:69:54:fa:62:65:1e:f5:15: 92:df:a8:bd:37:48:53:f8:a7:a0:f5:ed:2f:94:39:cb:12:64: 35:9a:f9:47:f2:1f:3a:20:b2:10:1c:7e:75:e7:f5:23:47:44: 8e:3d:41:5b:ba:23:12:cc:a9:4c:52:cf:ff:5d:a6:ac:f4:84: 67:7c:de:fc:4a:85:9c:c2:37:57:66:65:59:31:90:76:d1:4e: ac:51:3c:dd:5a:44:28:86:78:1e:c8:39:b2:a3:fe:79:89:b4: 75:49:c0:1c:6b:12:38:82:e0:24:97:b2:b9:96:c7:31:b7:dc: ba:0b:cf:6f:be:41:18:49:34:9e:1f:d6:26:dd:32:0e:3a:d7: 57:79:71:d3:e3:e0:d3:fe:7c:39:d9:15:67:80:73:cf:ec:15: 92:6c:71:9a:5b:ee:1b:a0:a8:94:a5:68:ea:4a:5e:3d:25:b7: c7:42:09:74:94:dc:20:67:9a:68:54:3e:22:03:5b:57:f6:98: 1e:06:b0:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h10nJVGxWU6T1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzOWE5NzMtY2YyZS00NGIxLTk4NGEtNjU5NmRjMGI2 OTYzMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk OGZmZDRhNTItNDAyZS00M2ZlLThkZjAtMTI2Nzk5YzAwN2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg25DdM3FUvdOsTXOx9IiXJKquqj6vnuFHbKn IZIT6+EyJiXTuPySdAFNZkIOV/MwU1xRp5sYLCGD4fF1oXC4eN3Rh5F9BNDK1Ax2 I1ZYOLy0mjdTKSNE7uy7c5Gb0fg1qTWJXyxazSQICoqCgq1IvsRQxrHmRncFOUpD +wX9K6qYiMZWw20fUSnY5zetzsfPivRpAme7l/41kKZu0ZuFsr4lOZGFf09fzBwk 7d61v2UHnjmWheERD61BUxD8QGIuoREi9KTNZWwe18XPJCzVQeagxx6XJy3MsN4s CVa4Vc4XdUauez9XSqtmsU+KVtNTlhgGVXduxVcTJeC/276KOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCToh3ltQGxeJkKIoonEb409g+KwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5 YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2ZGMwYjY5NjMvMzYyMzQ2MjUtNGEyNi0z NjA1LTkwYTMtNGI0NjVhM2I2MWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2MzOWE5NzMtY2YyZS00NGIxLTk4 NGEtNjU5NmRjMGI2OTYzL2NjMzlhOTczLWNmMmUtNDRiMS05ODRhLTY1OTZkYzBi Njk2My5jcmwwHwYDVR0jBBgwFoAURaGd2u0urqKIyrHJ+roNx0DS2I8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2 ZGMwYjY5NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwEGV/iINO2k1pW42HAoKHJKZvZk7AXckZMYog5Y3Q7IemwIHt8P5QQ MTOAW9rxKqwIW346grXXeZNM9wvGHiZpVPpiZR71FZLfqL03SFP4p6D17S+UOcsS ZDWa+UfyHzogshAcfnXn9SNHRI49QVu6IxLMqUxSz/9dpqz0hGd83vxKhZzCN1dm ZVkxkHbRTqxRPN1aRCiGeB7IObKj/nmJtHVJwBxrEjiC4CSXsrmWxzG33LoLz2++ QRhJNJ4f1ibdMg4611d5cdPj4NP+fDnZFWeAc8/sFZJscZpb7hugqJSlaOpKXj0l t8dCCXSU3CBnmmhUPiIDW1f2mB4GsC4= -----END CERTIFICATE-----Generated at Wed Nov 5 06:24:25 2025 by rpki-client