$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/be16b908-c69f-36f8-8c52-c9e3f7f36d03.roa File: be16b908-c69f-36f8-8c52-c9e3f7f36d03.roa (raw, json) Hash identifier: O6+58J0HQHkLxlGPvz5Ie4Xks/OsZI7bsuR0zBCfJG8= Subject key identifier: 0C:24:1D:59:A5:0C:0C:9B:83:C0:AB:CE:66:B1:FD:51:3A:28:83:3E Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584B5B4AC7CAC023BA063FC95900 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/be16b908-c69f-36f8-8c52-c9e3f7f36d03.roa Signing time: Mon 29 Sep 2025 15:16:56 +0000 ROA not before: Mon 29 Sep 2025 15:16:56 +0000 ROA not after: Sun 28 Dec 2025 16:16:56 +0000 asID: 174 IP address blocks: 68.233.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:4a:c7:ca:c0:23:ba:06:3f:c9:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 29 15:16:56 2025 GMT Not After : Dec 28 16:16:56 2025 GMT Subject: CN=e0b08e4a-fbfd-4d67-ad13-815f7531263c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:87:a0:be:5e:c9:b9:bf:b7:40:00:a9:29:2d: 71:cf:76:13:5e:0c:63:35:65:e9:26:da:da:60:7b: 9f:66:48:d2:e4:b6:16:18:f1:f6:6b:f8:7f:57:c4: 5c:22:0c:99:83:43:96:06:93:fe:68:4a:83:08:50: e2:7c:72:17:2e:aa:74:2f:9f:ad:0c:aa:1e:5f:47: 0a:7f:7c:5f:a5:63:2a:66:ca:7e:8d:dd:a3:ca:48: 1b:44:be:34:2c:64:86:72:8f:f5:89:16:7b:3b:3f: 85:1c:d1:e9:dc:86:24:ca:46:d1:14:32:a4:66:59: 73:d2:7d:7c:bc:46:c2:49:00:55:f3:8f:20:15:e4: d4:dc:df:28:18:3f:8c:ba:1d:19:9d:21:cf:71:2e: 3a:40:90:8b:8b:46:19:0f:40:32:34:79:f2:b6:5d: 19:91:21:e1:0f:b4:30:55:7c:53:77:98:d2:84:87: ce:69:d4:b8:eb:79:a2:d2:d5:dc:cd:87:4a:23:95: db:f5:18:57:ca:16:4b:31:d4:3b:0c:d9:0c:42:1a: d7:8c:b7:8b:06:7b:ac:1f:29:62:95:b9:6e:8e:5a: 04:a1:aa:3a:d0:17:9c:a5:cc:fa:aa:39:2c:e4:01: 3d:f6:e1:d6:0c:cf:58:4a:ce:d3:a2:6a:3e:45:2d: 97:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:24:1D:59:A5:0C:0C:9B:83:C0:AB:CE:66:B1:FD:51:3A:28:83:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/be16b908-c69f-36f8-8c52-c9e3f7f36d03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:59:f2:4a:b9:75:c8:6c:f2:56:21:10:c0:38:7f:15:67:df: 5b:d1:2f:cf:eb:70:3b:00:bf:ae:e1:cb:89:ee:a1:1b:17:95: fd:d4:18:2c:41:0e:d9:bc:7e:c6:88:55:ec:ad:54:cd:41:84: 92:86:7f:15:19:39:9c:c9:44:36:ea:f2:1a:22:9c:00:16:29: 2a:7b:5d:59:90:64:e0:c3:1d:64:83:cf:b8:fc:36:18:08:3f: 7e:b4:51:ab:04:08:c6:5e:eb:93:29:f2:c1:36:5f:2e:e0:58: 14:4f:8c:1f:88:60:d7:3c:dc:a3:63:16:ef:a9:82:8c:ad:02: 12:fb:81:56:92:e0:c7:8b:c0:b3:be:c2:51:83:a9:18:94:cd: 7d:f5:65:64:bc:da:0a:1a:0c:f2:18:76:79:e2:0f:46:c0:5d: 49:31:8e:fb:46:31:0b:96:ad:0f:ae:aa:99:41:a9:bf:b8:32: 80:33:34:3d:50:20:d6:ab:c9:b3:90:b0:ac:e1:11:99:5a:35: 9c:df:fc:ae:12:3a:72:8c:0e:44:60:37:28:f7:5c:fd:72:98: f4:98:e6:05:cd:e1:c0:3a:38:b5:0d:82:b2:b1:9b:62:98:48: 2d:31:f7:1f:f7:2c:1f:90:b3:23:84:9b:10:d2:41:24:f8:c2: 3d:02:b6:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbSsfKwCO6Bj/JWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDkyOTE1MTY1NloXDTI1MTIyODE2MTY1NlowLzEtMCsGA1UEAxMk ZTBiMDhlNGEtZmJmZC00ZDY3LWFkMTMtODE1Zjc1MzEyNjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYegvl7Jub+3QACpKS1xz3YTXgxjNWXpJtra YHufZkjS5LYWGPH2a/h/V8RcIgyZg0OWBpP+aEqDCFDifHIXLqp0L5+tDKoeX0cK f3xfpWMqZsp+jd2jykgbRL40LGSGco/1iRZ7Oz+FHNHp3IYkykbRFDKkZllz0n18 vEbCSQBV848gFeTU3N8oGD+Muh0ZnSHPcS46QJCLi0YZD0AyNHnytl0ZkSHhD7Qw VXxTd5jShIfOadS463mi0tXczYdKI5Xb9RhXyhZLMdQ7DNkMQhrXjLeLBnusHyli lblujloEoao60Becpcz6qjks5AE99uHWDM9YSs7Tomo+RS2X0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwkHVmlDAybg8Crzmax/VE6KIM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYmUxNmI5MDgtYzY5Zi0z NmY4LThjNTItYzllM2Y3ZjM2ZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5Z8kq5dchs8lYhEMA4fxVn31vRL8/rcDsAv67hy4nuoRsXlf3UGCxB Dtm8fsaIVeytVM1BhJKGfxUZOZzJRDbq8hoinAAWKSp7XVmQZODDHWSDz7j8NhgI P360UasECMZe65Mp8sE2Xy7gWBRPjB+IYNc83KNjFu+pgoytAhL7gVaS4MeLwLO+ wlGDqRiUzX31ZWS82goaDPIYdnniD0bAXUkxjvtGMQuWrQ+uqplBqb+4MoAzND1Q INarybOQsKzhEZlaNZzf/K4SOnKMDkRgNyj3XP1ymPSY5gXN4cA6OLUNgrKxm2KY SC0x9x/3LB+QsyOEmxDSQST4wj0CtiY= -----END CERTIFICATE-----Generated at Wed Nov 5 00:35:10 2025 by rpki-client